[List] Phishing Cryptocurrency Site

[Chikito]

Find more Phishing like this

be carefull do not click this link

Code:

http://newcryptogift.com/
http://finalgiveaway.com

Don't deposit anything. this is 100% scam, will steal your money.

and same like this

Code:

https://elongive.net
http://musk.blog
http://musk.group/

Elon musk never gives away cryptocurrency.

When you find like those phishing, please report into: https://safebrowsing.google.com/safebrowsing/report_phish/?hl=en

[1714815015]

1714815015

[1714815015]

1714815015

[1714815015]

1714815015

[1714815015]

1714815015

[Baofeng]

Criminals are not resting, and so are we:

Code:

 https://muskgiveaway.com/ 

Code:

 https://elongive.live/ 

Kindly help me report this sites, thanks again.

[Baofeng]

Very clever, 

Code:

 FAKE PHISHING SITE: https://lrezor.io/ 

If you mistype or didn't see the mis spelling, I'm sure you will fall for the trap.



Archive: http://web.archive.org/save/https://lrezor.io/

[Chikito]

Code:

 FAKE PHISHING SITE: https://lrezor.io/ 

Thanks for added.
look like this domain has connected malicius keylogger too.
https://www.virustotal.com/gui/ip-address/104.31.68.49/relations



We should be careful that's Ip address and domain to not download file from untrusted source.


Also, Official trezor has an announcement about "the fake Trezor Wallet beta-testing application form circulating in Telegram being spread by accounts pretending to be Trezor team members."
https://twitter.com/Trezor/status/1218179757847797760

[Chikito]

Warning phishing mixing service

Fake:

Code:

smatmixer.io

Code:

https://smatmixer.io/en/start-mixing.html

Picture



Domain Information:

Code:

IP Address: 104.27.149.87
Domain Name: SMATMIXER.IO
Registry Domain ID: D503300001182847933-LRMS
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: www.namecheap.com
Updated Date: 2020-01-16T14:38:51Z
Creation Date: 2020-01-15T02:06:07Z
Registry Expiry Date: 2021-01-15T02:06:07Z
Registrar Registration Expiration Date:
Registrar: NameCheap, Inc
Registrar IANA ID: 1068

We should careful, double-check your written before action.

Real Website: https://smartmixer.io

[Baofeng]

Eventhough Elon Musk has shown his true colors about bitcoin, cyber criminals are still using his name:

Code:

https://musk.bet/

Code:

https://teslagive.vip/

Edit: Another LBC Phished site:

Code:

https://localbitcoins.name/

Registrant    REDACTED FOR PRIVACY
Registrant Org    REDACTED FOR PRIVACY
Registrant Country    ru
Registrar    1API GmbH
IANA ID: 1387
URL: http://www.1api.net
Whois Server: whois.1api.net

(p)
Registrar Status    clientTransferProhibited
Dates    7 days old
Created on 2020-01-26
Expires on 2021-01-26
Updated on 2020-01-26
Name Servers    NS3.CNMSN.COM (has 7,009 domains)
NS4.CNMSN.COM (has 7,009 domains)
   
Reverse NS   
Tech Contact    REDACTED FOR PRIVACY
REDACTED FOR PRIVACY,
REDACTED FOR PRIVACY, REDACTED FOR PRIVACY, REDACTED FOR PRIVACY, REDACTED FOR PRIVACY
IP Address    185.178.208.178 - 20 other sites hosted on this server     

http://whois.domaintools.com/localbitcoins.name

[Baofeng]

Kindly add:

Code:

 https://earn2xethnow.com/ 

[Chikito]

Code:

 https://earn2xethnow.com/ 

Seems that's IP have flagged, all domain as fake ethereum giveaway

https://www.virustotal.com/gui/ip-address/81.16.29.111/relations

Code:

real2xeth.com
www.real2xeth.com
earn2xethnow.com
www.earn2xethnow.com
earn2xeth.com
www.earn2xeth.com
www.get2xeth.com
get2xeth.com
www.2xeth.com
2xeth.com
www.tokenieonow.com
tokenieonow.com
ethdoublerplus.com
my2xcrypto.com
www.freexrpnow.com
freexrpnow.com
instant2xeth.com
www.instant2xeth.com
eth2x.me
www.eth2x.me
ethdoublernow.com
www.2xeth.me
2xeth.me
www.ethdoublernow.com
ethdoublernow.me
www.ethdoublerplus.com
www.ethdoublernow.me
ethdoubler.me
www.ethdoubler.me
programaemnuvem.com

Domain and IP's Information

Code:

IP Address: 81.16.29.111
Domain Name: EARN2XETHNOW.COM
Registry Domain ID: 2484433653_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.hostinger.com
Registrar URL: http://www.hostinger.com
Updated Date: 2020-01-25T12:14:45Z
Creation Date: 2020-01-25T12:14:44Z
Registry Expiry Date: 2021-01-25T12:14:44Z

[masulum]

FAKE ETHEREUM GIVEAWAY

ETH Address: 0x69898205539f2556dfdfc202c711646638eb9626

Code:

https://www.free-ether.com/

https://www.virustotal.com/gui/ip-address/198.54.120.214/relations

Code:

Domain name: free-ether.com
Registry Domain ID: 2484823191_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: http://www.namecheap.com
Updated Date: 0001-01-01T00:00:00.00Z
Creation Date: 2020-01-26T16:28:05.00Z
Registrar Registration Expiration Date: 2021-01-26T16:28:05.00Z

Page screenshot:

FAKE ELON MUSK/TESLA CRYPTO GIVEAWAY

Code:

https://elonxgifts.com
https://muskbonus.info
https://muskpromo.com
elonxgive.com
https://muskfun.info/eth/
https://get-mytesla.com
https://muskgift.com
https://musksecret.com/eth
https://mdl3t.com
https://elonxprize.com/eth
https://cyberelon.com
https://teslaxdrop.com/eth
https://www.tesla.click

FAKE BINANCE GIVEAWAY

Code:

binancefutures-eth.com
binancebtcgiveawaybonanza.simplesite.com

[Baofeng]

I already posted it here. But I think it's worth to mentioned him in this board as well.

Code:

 https://craigsecret.com/ 

Archived: http://web.archive.org/save/https://craigsecret.com/

Code:

Domain Name: CRAIGSECRET.COM
Registry Domain ID: 2483231969_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.reg.com
Registrar URL: http://www.reg.ru
Updated Date: 2020-01-21T23:28:44Z
Creation Date: 2020-01-21T23:28:40Z
Registry Expiry Date: 2021-01-21T23:28:40Z
Registrar: REGISTRAR OF DOMAIN NAMES REG.RU LLC
Registrar IANA ID: 1606
Registrar Abuse Contact Email: abuse@reg.ru
Registrar Abuse Contact Phone: +74955801111
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Name Server: NS1.REG.RU
Name Server: NS2.REG.RU

https://www.whois.net/

[Baofeng]

I found another "crypto gold", 

Code:

 https://donaldcrypto.com/
https://donaldcrypto.com/btc/
https://donaldcrypto.com/eth/

BTC wallet:

Code:

1PEqxR9JmWMUFB4J1Qb6RzGLGSx4ru5emc

ETH wallet:

Code:

0x8f263aD0FfD2aEAaF33aEEB6e689f1D7E6bB4dcd

[Chikito]

Be Careful, someone has lost his money by sent to fake mixing service

I leave an alert here, there is a fake website called smantmixer.io
Unfortunately I ended up losing one of my transactions by sending my balance to this fake site.   

Fake:

Code:

smantmixer.io

Warning for us to double checking before do anything else.

Real Website: https://smartmixer.io

[Baofeng]

Code:

https://elonxspace.com/

BTC Wallet:

Code:

14aDScg4SeF4GDNLTpXezGPsfKkhoENweV

Code:

0xbe4F201CA79AD8961a35D0B96BE2fF42445a7d8a

[Baofeng]

Brad Garlinghouse (Ripple CEO) Fake Giveaway

Code:

https://xrp2020.net/

XRP Wallet:

Code:

rw65sa4wHeGVUxaEVWWc6CUKP92qP46vnr

[Chikito]

Code:

https://elonxspace.com/

Link has alot of virus detected https://www.virustotal.com/gui/url/326f63444b3aabd904e57234288ac9c6e78b479bf796e21a91ff2982a70da4cb/detection



IP relations
https://www.virustotal.com/gui/ip-address/190.115.21.130/relations

Code:

www.muskgift.net
www.cn.defio.io
www.test.elonxpromo.com
www.rapidlyvanilla.com
www.defio.io
www.bitcoin.issfinance.com
ww1.info-prav-centr.com
www.ww1.info-prav-centr.com
www.wp.elonxpromo.com
www.blog.elonxpromo.com
www.store.test.auction-today.com
shop.crm.reducehunger.net
www.shop.crm.reducehunger.net
old.test.andijanpetro.com
www.old.test.andijanpetro.com
test.dev.overworld.pro
www.test.dev.overworld.pro

All has has similar and fake giveaway

Code:

https://xrp2020.net/

IP relations
https://www.virustotal.com/gui/ip-address/77.83.173.172/relations

Code:

xrpx10.org
xrpreceive.net
awayxrp.net
www.2020xrp.net
www.getxrp.org
www.claimxrp.net
www.2020xrp.com
www.xrpclaim.org
www.receivexrp.com
www.claimxrp.org
www.2020xrp.org
www.ripple.re
www.xrp2020.net
www.myxrp.org
www.xrp2020.org
www.xrpaway.org
www.giveawayseptember.com

Be careful scammer always make new site and similiar fake giveaway/phising, don't click any link to avoid malware injection into your PC.

[Chikito]

Be aware fake giveaway and phishing

1.

Code:

https://telegra.ph/Official-Competition-rules-02-17-2 

Don't sent anything, this is fake competition




2.

Code:

https://fiddle.jshell.net/ug9L52of/4/show/

Fake Ethereum Giveaway



Scammer will dissapear after you send your ethereum


3.

Code:

https://telegra.ph/Binance-New-Fiat-Listings-02-19  

Fake Bitcoin giveaway by fake CZ Binance




4.

Code:

https://telegra.ph/Bitcoin-Halving-and-New-Fiat-Listings-to-Binance-02-18

CZ Binance never giveaway cryptocurrency



Be Careful

[Chikito]

[Scam] Fake Vitalic butterin Give away using medium blog

Code:

https://medium.com/@vitalikbuterinceo/ethereum-eth-2-0-news-67094a3f4331

To participate you just need to send between 5 ETH to 500+ ETH to the contribution address and we will immediately send you back between 10 ETH to 5000 ETH the address you sent it from. Every person can participate only one time; the minimum contribution is 5 ETH and the maximum contribution is 500 ETH.
- For example If you send 10–50+ ETH , you will be airdropped 100 ETH back.

[Chikito]

Be aware cloning and phishing blender.io

Code:

blendér.io

Code:

http://xn--blendr-fva.io

You can see different domain and address service

And more clonning and phishing fund by @logfiles

Code:

https://blender.work

Please help to report it all to https://safebrowsing.google.com/safebrowsing/report_phish/?hl=en


Real Website: https://blender.io

Service address: 1Fd1zWsLCP8okiExCrhzvU4TD8zKYfgbZ1

[dragonvslinux]

Nice topic. It's very useful to remember that phishing websites work due to human error, not just that of clicking the wrong link, but in this case typing the wrong link.
For anyone concerned about this remember to check the SSL certificate of the website. I also strongly recommend using a chromium-based browser to warn you of scams.

For example, by typing electrum wrong and entering the phishing link url takes me here, instead of taking you directly to the scam:



If a big red flag doesn't warn you not to proceed, then you probably can't be helped  

[Chikito]

For example, by typing electrum wrong and entering the phishing link URL takes me here, instead of taking you directly to the scam:

a warning will appear if website have been reported.


More fake/phishing Elon musk give away available every day, we must be careful, Elon musk or any relevant never give away Bitcoin and altcoin, those sites will scamming you by sending malware and never sending back what you sent.

here, I was found today:

Code:

https://teslafree.info/
https://teslagoods.info
https://muskgive.net/
https://muskbtc.com/

when we Look at the picture, scammer use fake medium for scamming purpose

domain information:

Code:

Domain Name: teslagoods.info
Registry Domain ID: D503300001183427476-LRMS
Registrar WHOIS Server: whois.namesilo.com
Registrar URL: http://www.namesilo.com
Updated Date: 2020-03-03T07:45:18Z
Creation Date: 2020-03-03T07:31:51Z
Registry Expiry Date: 2021-03-03T07:31:51Z
Registrar Registration Expiration Date:
Registrar: Namesilo, LLC
Registrar IANA ID: 1479

Be careful.