[List] Phishing Cryptocurrency Site

[$crypto$]

Wilder World Fake Public Sale

Website:

Code:

1. https://wilderworld.polkastarter.com.es/Sale.html#
2. https://wilderworld-sale.com/

% NOTE: The registry for this domain name does not publish ownership
%       records (whois records) in the standard format.  This data
%       represents the most likely status of the domain based on
%       information provided by the Internet's domain name servers (DNS).

domain: polkastarter.com.es
status: taken
nameserver: ns1.dns-parking.com
nameserver: ns2.dns-parking.com

% For more information, please visit http://www.nic.es/

Scammers Address: 0xA397076BA3464E6Fb5fde4cBF996fE5492680726



Scammers Address: 0xFD43FDb66e121fc6A587eD6FF9E3AbCC48c79564

All Wilder World Public sales are bogus and their official ones start on May 11th

🚨 Our Initial DEX Offering is just around the corner. May 11th is the day we launch Wilder World on Polkastarter! 🎉

Real Website: https://www.wilderworld.com/


Polkastarter Fake

Website:

Code:

http://polkastarter.com.es/

Fake:


Real:

[$crypto$]

FAKE Giveaway 1 000 000 ETH

Website:

Code:

https://eth-ceo.org/

Archived: https://archive.is/PdVme

1 days old
Created on 2021-05-07
Expires on 2022-05-07
Updated on 2021-05-07

Scammers wallet

Code:

0x95f0badc4e2db83fa4327f057e1a06ad2e6c867c

Be careful with this fake giveaway because it is promoted on popular channels that have a lot of followers so it's better to avoid it and leave telegrams that promote this fake.

Fortunately, I saw that no one had deposited it in the wallet yet.

[Baofeng]

The never ending Elon Musk fake bitcoin giveaways:

Code:

http://snlmusk.com/

Dates    2 days old
Created on 2021-05-06
Expires on 2022-05-06
Updated on 2021-05-06    
 
Name Servers    DELL.NS.CLOUDFLARE.COM (has 19,076,155 domains)
ED.NS.CLOUDFLARE.COM (has 19,076,155 domains)
   
 
Tech Contact    REDACTED FOR PRIVACY (DT)
REDACTED FOR PRIVACY (DT),
REDACTED FOR PRIVACY (DT), California, REDACTED FOR PRIVACY (DT), us
(p)
IP Address    178.175.148.167 is hosted on a dedicated server

[Chikito]

Phishing uniswap-meta Wallet

Code:

http://uniswap-meta.org

IP Address: 45.141.159.64
Domain Name: UNISWAP-META.ORG
Registry Domain ID: D402200000016532905-LROR
Registrar WHOIS Server: whois.registrar.eu
Registrar URL: http://www.openprovider.com
Updated Date: 2021-04-28T13:47:55Z
Creation Date: 2021-04-14T06:14:00Z
Registry Expiry Date: 2022-04-14T06:14:00Z
Registrar Registration Expiration Date:
Registrar: Hosting Concepts B.V. d/b/a Registrar.eu

the relationship IP > https://www.virustotal.com/gui/ip-address/45.141.159.64/relations

The scammer still using the same server (IP address) to create another phishing. better to report that IP than domain.



I still to warning people to do not to write your detail (mnemonic seed) into phishing or another website.

[$crypto$]

FAKE Public Sale Polkarare and QoinIQ

Website:

Code:

https://prare-sale.com/
https://qoiniq-sale.com/

Archived: 1 - 2

Created on 2021-05-09
Expires on 2022-05-09
Updated on 2021-05-09

2 days old
Created on 2021-05-07
Expires on 2022-05-07
Updated on 2021-05-07

Scammers wallet

Code:

0xc1f258f090a080097041f0b6BC4DDd510339725F

QoinIQ IEO Start 17 may on Probit
Polkarare IEO Start 10 May on Gate.io

Now that more IDO will be cloned in their fake sales I see the scammers wallets look the same and are controlled by a group of people.
Be careful.

[$crypto$]

FAKE Public Sale Solanium

Website:

Code:

https://solanium-sale.com/

Scammers wallet

Code:

0xc1f258f090a080097041f0b6BC4DDd510339725F

Solanium has not made a public sale yet and is currently on a whitelist so you should look closely that solanium has not announced a public sale yet.

It must be differentiated and don't let the case come back because I see in the contents of the scamers wallet there are many assets in it and I am sure that it is the money they make with the fake sale.


Fake Public Sale Wilder World

Webiste:

Code:

https://polkastarter.ltd/WilderWorld

Tokens (WILD) have been traded, you can see here https://www.coingecko.com/en/coins/wilder-world#markets

[Baofeng]

Another of the Polka fake site

Code:

https://polkastarter.art/

Archived: https://archive.is/cFS9p

Dates    1 days old
Created on 2021-05-11
Expires on 2022-05-11
Updated on 2021-05-11    
 
Name Servers    DNS1.NAMECHEAPHOSTING.COM (has 1,083,830 domains)
DNS2.NAMECHEAPHOSTING.COM (has 1,083,830 domains)
   
 
Tech Contact    —
IP Address    66.29.132.84 - 13 other sites hosted on this server

[$crypto$]

FAKE Giveaway Dogecoin

Website:

Code:

https://dogecoin.claims/

Archived: https://archive.is/iWRrk

6 days old
Created on 2021-05-08
Expires on 2022-05-08
Updated on 2021-05-13

https://whois.domaintools.com/dogecoin.claims



Scammers wallet

Code:

DHQSTXYAezWzZUci5ibnhk2G6t8rY21XCv

Before Ethereum and now Doge that appeared in a fake giveaway with the same appearance, there will definitely be more fake giveaway appearing.
I will continue to monitor and report it here.

[Chikito]

Phishing Walletconnection.org

Code:

https://walletsconection.org/

IP Address: 104.219.248.87
Domain Name: WALLETSCONECTION.ORG
Registry Domain ID: D402200000016757164-LROR
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: http://www.namecheap.com
Updated Date: 2021-05-08T17:46:48Z
Creation Date: 2021-05-08T17:46:27Z
Registry Expiry Date: 2022-05-08T17:46:27Z
Registrar Registration Expiration Date:
Registrar: NameCheap, Inc.

Be careful do not to write the mnemonic seed into a phishing site.

The real website of walletconnect is https://walletconnect.org/ we don't need to write the mnemonic seed if use the real website

[Chikito]

Fake Give Away 1inch.gift

Code:

https://www.1inch.gift/

There is a fake doubling 1inch token.

more phishing found with the IP; https://www.virustotal.com/gui/ip-address/185.178.208.137/relations



Domain Information;

IP Address: 185.178.208.137
Domain Name: 1inch.gift
Registry Domain ID: DO_5b65b02f31c7b22fb5b613cd33a130c5-UR
Registrar WHOIS Server: whois.tucows.com
Registrar URL: www.tucowsdomains.com
Updated Date: 2021-05-21T17:01:09.944Z
Creation Date: 2021-05-21T16:55:16.111Z
Registry Expiry Date: 2022-05-21T16:55:16.111Z
Registrar: Tucows Domains Inc.
Registrar IANA ID: 69

Be careful don't get the trap.

[$crypto$]

Fake Giveaway Dogecoin

Website:

Code:

https://dogecoingive.org/

Archived: https://archive.is/wip/Mksd2

38 days old
Created on 2021-04-20
Expires on 2022-04-20
Updated on 2021-04-20

https://whois.domaintools.com/dogecoingive.org





More and more evil in the big multiplier when sending doges so be careful.
All ways are scammers, but it's all impossible.

Take care of your assets.

[Chikito]

I just found the link phishing chipmixer Clearnet and onion link on the review website

Code:

https://onion.best/chipmixer/

Code:

http://chipmixqiuseiw76.onion/
https://chippmixer.com/

I'm pretty sure all the link inside the review is fake https://onion.best/reviews/bitcoin-mixers/
So, if you please report that blog to the authority.


About Fake and Phishing chipmixer, I found A lot when searching it using DuckDuckGo and Ahmia machines.

Code:

https://chipmixerr.com/
https://chipmixerz.com/
https://chippmixer.com/
https://chipmixer.co.uk/
http://chipmixbvyyrylfmrwjdcdcxtxvrbmdyfpsm4456fnku2ajo2obva6yd.onion/
https://chipmixer.xyz/
https://chipmixerr.com/
http://chipmixer7vrgjzh.onion/

https://archive.is/gJ6VP
https://archive.is/sdn3s
https://archive.is/CGNoH
https://archive.is/DgmEo
https://archive.is/555lk
https://archive.is/gJ6VP
https://archive.is/hX2Ys
https://archive.is/Hq0Ha

Those all still active and some of them aren't new and were reported a few years ago.

[ChipMixer]

I just found the link phishing chipmixer Clearnet and onion link on the review website

Code:

https://onion.best/chipmixer/

I'm pretty sure all the link inside the review is fake

Code:

https://onion.best/reviews/bitcoin-mixers/

There is no need to give fake review website clickable link.

[Chikito]

I just found the link phishing chipmixer Clearnet and onion link on the review website

Code:

https://onion.best/chipmixer/

I'm pretty sure all the link inside the review is fake

Code:

https://onion.best/reviews/bitcoin-mixers/

There is no need to give fake review website clickable link.

thanks for reminding me,

*Link was edited

[$crypto$]

Trezor Phishing Site

Website:

Code:

https://xn--trezr-79a.io/

Archived: https://web.archive.org/web/20210607175149/https://xn--trezr-79a.io/

Domain Name: XN--TREZR-79A.IO
Registry Domain ID: D503300001198758855-LRMS
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: www.namecheap.com
Updated Date: 2021-06-06T19:30:25Z
Creation Date: 2021-06-06T19:30:22Z
Registry Expiry Date: 2022-06-06T19:30:22Z
Registrar Registration Expiration Date:
Registrar: NameCheap, Inc
Registrar IANA ID: 1068

The problem of doing a search on Google still cannot be prevented from having ads on the first page, so if you are still in the habit of typing on Google, it is necessary to pay attention to which site is the official one.
It's better to visit the site by typing into the official site, I think this is easy to memorize.

[$crypto$]

Walletconnect Phishing Site:

Website:

Code:

https://wallets-sync.com/?v

Archived: https://web.archive.org/web/20210610123109/https://wallets-sync.com/?v

Domain name: wallets-sync.com
Registry Domain ID: 2614307331_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: http://www.namecheap.com
Updated Date: 0001-01-01T00:00:00.00Z
Creation Date: 2021-05-23T16:20:51.00Z
Registrar Registration Expiration Date: 2022-05-23T16:20:51.00Z
Registrar: NAMECHEAP INC
Registrar IANA ID: 1068

The original website will not display several other altcoin logos but this is just an engineering for those who don't know to enter the seed of the phrase, therefore avoid this kind of thing and be careful again in seeing the original URL.

I'm here showing the original Walletconnect site: https://walletconnect.org/

[$crypto$]

Fake Giveaway Safemooncash

Website:

Code:

https://safemooncash-giveaway.org/

Archived: https://web.archive.org/web/20210611152034/https://safemooncash-giveaway.org/

Domain Name: SAFEMOONCASH-GIVEAWAY.ORG
Registry Domain ID: D402200000017031766-LROR
Registrar WHOIS Server: whois.reg.com
Registrar URL: http://www.reg.com
Updated Date: 2021-06-09T15:17:26Z
Creation Date: 2021-06-09T15:12:22Z
Registry Expiry Date: 2022-06-09T15:12:22Z
Registrar Registration Expiration Date:
Registrar: Registrar of Domain Names REG.RU LLC
Registrar IANA ID: 1606

Safemooncash has never held a giveaway like this, and those who do this are certainly scammers who want to trap you, if someone of you asks about this then we need to say this is a scam under the guise of a safemooncash giveaway and be careful, if there is a slight loophole it can harm others.

Official site: https://safemooncash.org/

[Chikito]

Phishing pancakeswap.cheap

Code:

https://docs.pancakeswap.cheap/

IP Address: 62.210.177.59
Domain Name: docs.pancakeswap.cheap
Top Level Domain: CHEAP
Malformed request.
inetnum: 62.210.128.0 - 62.210.255.255
org: ORG-ONLI1-RIPE
netname: IE-POOL-BUSINESS-HOSTING
descr: IP Pool for Iliad-Entreprises Business Hosting Customers
country: FR
admin-c: IENT-RIPE
tech-c: IENT-RIPE
status: LIR-PARTITIONED PA
mnt-by: MNT-TISCALIFR-B2B
created: 2012-11-02T11:40:24Z
last-modified: 2016-02-22T16:26:23Z

This IP Relationship > https://www.virustotal.com/gui/ip-address/62.210.177.59/relations



Usually the scammer IP's always connected to another phishing site, like the post above.

[$crypto$]

Trezor Phishing Site: {Pay attention to the domain name again}

Website:

Code:

http://wwwtrezar.io/start/

Archived: https://archive.is/wip/slz35

Domain Name: WWWTREZAR.IO
Registry Domain ID: D503300001198700345-LRMS
Registrar WHOIS Server: whois.eranet.com
Registrar URL: http://www.eranet.com
Updated Date: 2021-06-04T19:12:13Z
Creation Date: 2021-06-04T19:02:01Z
Registry Expiry Date: 2022-06-04T19:02:01Z
Registrar Registration Expiration Date:
Registrar: Eranet International Limited
Registrar IANA ID: 1868

When we click on one of the images above, we will be directed to enter a 24-word phrase.



Well I hope you never follow the instructions from this phishing site if you don't want to lose your money.
Scams are constantly trying to trick you with new scripts you may not even be aware of.

[$crypto$]

Exodus Phishing Site

Website:

Code:

https://exocdus.ws

Archived: https://web.archive.org/web/20210616163628/https://exocdus.ws/

Domain Name: EXOCDUS.WS
Domain ID: 6D243EFB0DCBE2B0E050010AAC0133D7
WHOIS Server: whois.rrpproxy.net
Registrar URL: http://rrpproxy.com
Updated Date: 2021-06-02T11:59:36Z
Creation Date: 2021-06-02T11:59:36Z
Registrar Registration Expiration Date: 2022-06-02T11:59:36Z
Registrar: Key-Systems GmbH
Registrar IANA ID: 1345

Pay attention again to the domain carefully because now phishing sites are rife everywhere including inserting in social media and also google searches, therefore there is no need to type carelessly on google, just go with the original site and the correct URL, it is far safe.

Official site: https://www.exodus.com/