OmegaStarScream
Staff
Legendary
Offline
Activity: 3598
Merit: 6324
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
May 16, 2020, 03:18:49 PM |
|
exodusupdate.com (Found by UnDerDoG81). Domain information: Registrar NAMECHEAP INC NameCheap, Inc. IANA ID: 1068 URL: http://www.namecheap.com Whois Server: whois.namecheap.com
Registrar Status addPeriod, clientTransferProhibited Dates 44 days old Created on 2020-04-02 Expires on 2021-04-02 Updated on 0000-12-31
In addition to reaching out to Exodus support (as mentioned in the ilnk above)... I scanned the .exe and no malware were found, but once I ran the .exe (using Sandboxie), it started downloading other files .vbs and .bat files (which most likely contain malicious code).
|
|
|
|
Chikito (OP)
Legendary
Offline
Activity: 2506
Merit: 2072
Exchange 250+ Coins With 0% Fees
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
May 17, 2020, 01:11:08 AM |
|
Thanks for Information. Look like that site has linking to some other. when I try searching the relationship, I find fake Bitcoin giveaway site. https://www.virustotal.com/gui/ip-address/199.188.200.50/relations![](https://ip.bitcointalk.org/?u=https%3A%2F%2Fi.postimg.cc%2FpVYkXbxd%2F1a.png&t=665&c=XYbot2R6R1bIwg) Another relationship, Maybe Ponzi scheme https://crypto-hub.net/ https://www.trade-coins.co/ ![](https://ip.bitcointalk.org/?u=https%3A%2F%2Fi.postimg.cc%2Fy8w0yvB5%2F2a.png&t=665&c=i4xtCOhtsKwcYw) ![](https://ip.bitcointalk.org/?u=https%3A%2F%2Fi.postimg.cc%2FY984Z3Kt%2F3a.png&t=665&c=FoMTsliRnJG_6g) All related to exodusupdate.com with a same IP address.
|
| | TheChange | | | | |
░░░░░░░░░░██▄ ▄▄▄▄▄▄▄▄▄▄▄███▄ ▀▀▀▀▀▀▀▀▀▀▀███▀ ░░░░░░░░░░██▀ ░░░▄▄ ▄██▀ ███████████████ ▀██▄ ░░░▀▀ | | | | +250 COINS | | ..Crypto Exchange.. | │ | ▄▄▄▄ ▄▄▄███▀▀███▄▄▄ ▄█████▀▀░▄▄▄▄░▀▀█████▄ ██▀░▄▄▄████████▄▄▄░▀██ ██░████████████████░██ ██░████████████████░██ ██░▀██████████████▀░██ ██░▀████████████▀░██ ▀██░▀██████████▀░██▀ ▀██▄░▀██████▀░▄██▀ ▀██▄▄░▀▀░▄▄██▀ ▀▀██▄▄██▀▀ ▀▀▀▀ | | | │ | |
|
|
|
Baofeng
Legendary
Offline
Activity: 2702
Merit: 1672
DGbet.fun - Crypto Sportsbook
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
May 17, 2020, 01:18:14 AM |
|
It's already been blocked by EAL. And this is the official link: https://www.exodus.io![](https://ip.bitcointalk.org/?u=https%3A%2F%2Fi.ibb.co%2F1vsNK6B%2FScreen-Shot-2020-05-17-at-9-15-34-AM.png&t=665&c=_nr4lTV9G5vqiA)
|
|
|
|
Baofeng
Legendary
Offline
Activity: 2702
Merit: 1672
DGbet.fun - Crypto Sportsbook
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
May 17, 2020, 10:09:12 PM |
|
First time that the scammers are using Xiaomi name to create a fake bitcoin giveaway. Website: Bitcoin address of the scammers: 37KPhFEL1uZqoJBpYq22ZGahaBc23ActpF ![](https://ip.bitcointalk.org/?u=https%3A%2F%2Fi.ibb.co%2FBK0hLgs%2FScreen-Shot-2020-05-18-at-6-06-12-AM.png&t=665&c=p_cWiU8rUwcrHw)
|
|
|
|
Chikito (OP)
Legendary
Offline
Activity: 2506
Merit: 2072
Exchange 250+ Coins With 0% Fees
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
May 18, 2020, 12:00:51 AM |
|
|
| | TheChange | | | | |
░░░░░░░░░░██▄ ▄▄▄▄▄▄▄▄▄▄▄███▄ ▀▀▀▀▀▀▀▀▀▀▀███▀ ░░░░░░░░░░██▀ ░░░▄▄ ▄██▀ ███████████████ ▀██▄ ░░░▀▀ | | | | +250 COINS | | ..Crypto Exchange.. | │ | ▄▄▄▄ ▄▄▄███▀▀███▄▄▄ ▄█████▀▀░▄▄▄▄░▀▀█████▄ ██▀░▄▄▄████████▄▄▄░▀██ ██░████████████████░██ ██░████████████████░██ ██░▀██████████████▀░██ ██░▀████████████▀░██ ▀██░▀██████████▀░██▀ ▀██▄░▀██████▀░▄██▀ ▀██▄▄░▀▀░▄▄██▀ ▀▀██▄▄██▀▀ ▀▀▀▀ | | | │ | |
|
|
|
Chikito (OP)
Legendary
Offline
Activity: 2506
Merit: 2072
Exchange 250+ Coins With 0% Fees
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
May 19, 2020, 12:37:35 PM |
|
This IP address has Alot of fake and Phishing Giveaway https://www.virustotal.com/gui/ip-address/77.83.173.172/relationshttps://www.virustotal.com/gui/ip-address/178.159.42.11/relationsWebsite:www.chambtc.us www.chambtc.org www.shrembtc.com www.steveb.group www.stevebtc.org www.brinbtc.net www.brinbtc.org www.winkbtc.com www.robertki.org www.jackmabtc.com www.gates.promo www.xrp.claims www.xrp.work www.xrp.group www.20xrp.tech www.xrptake.live www.takexrp.live www.geteth.live www.xrpdrop.me www.xrp20.com www.20xrp.org 20xrp.org xrp20.com xrptop.com www.20xrp.com www.topxrp.com xrpx10.org xrpreceive.net awayxrp.net www.2020xrp.net www.getxrp.org 2020-01-28 www.claimxrp.net www.2020xrp.com claimxrp.net xrpclaim.org www.xrpclaim.org www.receivexrp.com 2020-01-28 receivexrp.com www.claimxrp.org www.2020xrp.org www.ripple.re www.xrp2020.net www.myxrp.org www.xrp2020.org xrpaway.org www.xrpaway.org www.giveawayseptember.com giveawayseptember.com Example picture![](https://ip.bitcointalk.org/?u=https%3A%2F%2Fi.postimg.cc%2FgcBZx4xm%2Foop.png&t=665&c=4fTCbbeBEqbzqw)
|
| | TheChange | | | | |
░░░░░░░░░░██▄ ▄▄▄▄▄▄▄▄▄▄▄███▄ ▀▀▀▀▀▀▀▀▀▀▀███▀ ░░░░░░░░░░██▀ ░░░▄▄ ▄██▀ ███████████████ ▀██▄ ░░░▀▀ | | | | +250 COINS | | ..Crypto Exchange.. | │ | ▄▄▄▄ ▄▄▄███▀▀███▄▄▄ ▄█████▀▀░▄▄▄▄░▀▀█████▄ ██▀░▄▄▄████████▄▄▄░▀██ ██░████████████████░██ ██░████████████████░██ ██░▀██████████████▀░██ ██░▀████████████▀░██ ▀██░▀██████████▀░██▀ ▀██▄░▀██████▀░▄██▀ ▀██▄▄░▀▀░▄▄██▀ ▀▀██▄▄██▀▀ ▀▀▀▀ | | | │ | |
|
|
|
Chikito (OP)
Legendary
Offline
Activity: 2506
Merit: 2072
Exchange 250+ Coins With 0% Fees
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
May 26, 2020, 11:21:08 AM |
|
Seems, exodus wallet favorite name purpose phishing, be careful always double check before entering. http://exodus.com.swtest.ru/bitcoin-wallet.html Domain informationIP-Address from DNS Host Lookup: 77.222.40.109
Domain Name: exodus.com.swtest.ru
Top Level Domain: RU (Russian Federation)
Geolocation: RU (Russian Federation), N/A, N/A, N/A N/A - Google Maps
Reverse DNS: vh286.sweb.ru domain has injected virushttps://www.virustotal.com/gui/ip-address/77.222.40.109/relations
|
| | TheChange | | | | |
░░░░░░░░░░██▄ ▄▄▄▄▄▄▄▄▄▄▄███▄ ▀▀▀▀▀▀▀▀▀▀▀███▀ ░░░░░░░░░░██▀ ░░░▄▄ ▄██▀ ███████████████ ▀██▄ ░░░▀▀ | | | | +250 COINS | | ..Crypto Exchange.. | │ | ▄▄▄▄ ▄▄▄███▀▀███▄▄▄ ▄█████▀▀░▄▄▄▄░▀▀█████▄ ██▀░▄▄▄████████▄▄▄░▀██ ██░████████████████░██ ██░████████████████░██ ██░▀██████████████▀░██ ██░▀████████████▀░██ ▀██░▀██████████▀░██▀ ▀██▄░▀██████▀░▄██▀ ▀██▄▄░▀▀░▄▄██▀ ▀▀██▄▄██▀▀ ▀▀▀▀ | | | │ | |
|
|
|
Baofeng
Legendary
Offline
Activity: 2702
Merit: 1672
DGbet.fun - Crypto Sportsbook
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
May 30, 2020, 10:33:36 PM |
|
Another fake XRP giveaway: ![](https://ip.bitcointalk.org/?u=https%3A%2F%2Fi.imgur.com%2FCrwT1cR.png&t=665&c=9Rto6_lirRhhtg) And this scam cloud mining site, claiming to give exorbitant returns. https://miningbase.cloud/ ![](https://ip.bitcointalk.org/?u=https%3A%2F%2Fi.imgur.com%2F6s65EGc.png&t=665&c=0b29LFB1SJGLMw)
|
|
|
|
Baofeng
Legendary
Offline
Activity: 2702
Merit: 1672
DGbet.fun - Crypto Sportsbook
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
June 03, 2020, 11:24:05 AM |
|
Bitcoin double here. Do not send any Bitcoin or Ethereum on this site. http://getbtcx.com/btc.html http://getbtcx.com/eth.html ![](https://ip.bitcointalk.org/?u=https%3A%2F%2Fi.imgur.com%2FhiALDRI.png&t=665&c=PUmj5_VLL7IH2A) ![](https://ip.bitcointalk.org/?u=https%3A%2F%2Fi.imgur.com%2FFn3XW6M.png&t=665&c=1_Pf7iT2-VdnUA)
|
|
|
|
|
Baofeng
Legendary
Offline
Activity: 2702
Merit: 1672
DGbet.fun - Crypto Sportsbook
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
June 07, 2020, 10:44:55 AM |
|
Fake Exodus website, as usual the feel and looks are the same here, you can easily get trick by it if you are not that very careful and it is obvious a phish site, just two days old. Real website: https://www.exodus.io/ PHISHING SITE - https://exodus.vc/ ![](https://ip.bitcointalk.org/?u=https%3A%2F%2Fi.imgur.com%2FKBdXNM2.png&t=665&c=48LDiKDD-oYydg) Whois Record for Exodus.vc How does this work? Domain Profile Registrant Country br Registrar Gandi SAS IANA ID: 81 URL: http://www.gandi.netWhois Server: whois.gandi.net (p) Registrar Status addPeriod, clientTransferProhibited, serverTransferProhibited Dates 2 days old Created on 2020-06-05 Expires on 2021-06-05 Updated on 2020-06-05 https://whois.domaintools.com/exodus.vc
|
|
|
|
Baofeng
Legendary
Offline
Activity: 2702
Merit: 1672
DGbet.fun - Crypto Sportsbook
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
June 16, 2020, 11:39:33 PM |
|
Fake Jaxx.io website, if you type an extra "x" on it, you might get trap, so just be careful and bookmark as scammers are mostly using this kind of typo squatting attacks. ![](https://ip.bitcointalk.org/?u=https%3A%2F%2Fi.imgur.com%2FKFmzVZv.png&t=665&c=DY02Wlvv00UYmw)
|
|
|
|
Baofeng
Legendary
Offline
Activity: 2702
Merit: 1672
DGbet.fun - Crypto Sportsbook
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
June 19, 2020, 10:16:00 PM |
|
|
|
|
|
Baofeng
Legendary
Offline
Activity: 2702
Merit: 1672
DGbet.fun - Crypto Sportsbook
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
June 20, 2020, 11:14:56 PM |
|
Be careful with this fake Fusion wallet, don't create or accessed any using this website, they will steal your keys and your crypto. https://myfusionwallet.net/ ![](https://ip.bitcointalk.org/?u=https%3A%2F%2Fi.imgur.com%2FpevqvSv.png&t=665&c=2xev2AQntKloWw) Whois Record for MyFusionWallet.net How does this work? Domain Profile Registrant Whois Privacy Registrant Org Private by Design, LLC Registrant Country us Registrar Porkbun LLC IANA ID: 1861 URL: http://www.porkbun.com,http://porkbun.com Whois Server: whois.porkbun.com (p) Registrar Status clientDeleteProhibited, clientTransferProhibited Dates 13 days old Created on 2020-06-07 Expires on 2021-06-07 Updated on 2020-06-07 https://whois.domaintools.com/myfusionwallet.net
|
|
|
|
Chikito (OP)
Legendary
Offline
Activity: 2506
Merit: 2072
Exchange 250+ Coins With 0% Fees
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
June 21, 2020, 12:00:51 AM |
|
Be careful with this fake Fusion wallet, don't create or accessed any using this website, they will steal your keys and your crypto. https://myfusionwallet.net/ Nice catch, seems That's IP's has another fake/phishing link: https://www.virustotal.com/gui/ip-address/198.54.120.244/relations Original Link: https://www.myfusionwallet.com
|
| | TheChange | | | | |
░░░░░░░░░░██▄ ▄▄▄▄▄▄▄▄▄▄▄███▄ ▀▀▀▀▀▀▀▀▀▀▀███▀ ░░░░░░░░░░██▀ ░░░▄▄ ▄██▀ ███████████████ ▀██▄ ░░░▀▀ | | | | +250 COINS | | ..Crypto Exchange.. | │ | ▄▄▄▄ ▄▄▄███▀▀███▄▄▄ ▄█████▀▀░▄▄▄▄░▀▀█████▄ ██▀░▄▄▄████████▄▄▄░▀██ ██░████████████████░██ ██░████████████████░██ ██░▀██████████████▀░██ ██░▀████████████▀░██ ▀██░▀██████████▀░██▀ ▀██▄░▀██████▀░▄██▀ ▀██▄▄░▀▀░▄▄██▀ ▀▀██▄▄██▀▀ ▀▀▀▀ | | | │ | |
|
|
|
Baofeng
Legendary
Offline
Activity: 2702
Merit: 1672
DGbet.fun - Crypto Sportsbook
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
June 21, 2020, 11:30:30 PM |
|
^^ And it really reinforced what we have believed in the past, those scammers are really connected to each other and probably colluding with other criminals as well. Cheap domain hosting + parking it for sometime before making their move and then recycle.
|
|
|
|
Chikito (OP)
Legendary
Offline
Activity: 2506
Merit: 2072
Exchange 250+ Coins With 0% Fees
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
June 23, 2020, 04:22:47 AM |
|
^^ And it really reinforced what we have believed in the past, those scammers are really connected to each other and probably colluding with other criminals as well. Cheap domain hosting + parking it for sometime before making their move and then recycle.
Easy way to scammer use cheap provider VPS and make new domain. like today I found new "Elon musk" again with one IP. https://www.virustotal.com/gui/ip-address/68.183.101.122/relations2020-06-21 www.musk-live.com 2020-06-21 www.musk-events.com 2020-06-21 www.elon-live.com 2020-06-20 www.officialelon.com 2020-06-19 www.elonofficial.com 2020-06-15 www.elonmk.com Scammer made all those phishing only 1 week.
|
| | TheChange | | | | |
░░░░░░░░░░██▄ ▄▄▄▄▄▄▄▄▄▄▄███▄ ▀▀▀▀▀▀▀▀▀▀▀███▀ ░░░░░░░░░░██▀ ░░░▄▄ ▄██▀ ███████████████ ▀██▄ ░░░▀▀ | | | | +250 COINS | | ..Crypto Exchange.. | │ | ▄▄▄▄ ▄▄▄███▀▀███▄▄▄ ▄█████▀▀░▄▄▄▄░▀▀█████▄ ██▀░▄▄▄████████▄▄▄░▀██ ██░████████████████░██ ██░████████████████░██ ██░▀██████████████▀░██ ██░▀████████████▀░██ ▀██░▀██████████▀░██▀ ▀██▄░▀██████▀░▄██▀ ▀██▄▄░▀▀░▄▄██▀ ▀▀██▄▄██▀▀ ▀▀▀▀ | | | │ | |
|
|
|
Baofeng
Legendary
Offline
Activity: 2702
Merit: 1672
DGbet.fun - Crypto Sportsbook
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
June 23, 2020, 11:59:09 PM |
|
New Paxful phishing site: And there's no such thing as paxful offers, do not enter your credentials here. ![](https://ip.bitcointalk.org/?u=https%3A%2F%2Fi.imgur.com%2Fg4gF78K.png&t=665&c=KLuOLQq3I92OHw) Original Site: https://paxful.com/
|
|
|
|
Baofeng
Legendary
Offline
Activity: 2702
Merit: 1672
DGbet.fun - Crypto Sportsbook
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
June 26, 2020, 11:53:33 AM |
|
Fake or clone Callisto wallet: https://clowallet.network/ ![](https://ip.bitcointalk.org/?u=https%3A%2F%2Fi.imgur.com%2FnQygVbm.png&t=665&c=wCMQSwwchGHzUg) This is the original: https://wallet.callisto.network/But as you can see, very very similar in terms of look and feel of the original site.
|
|
|
|
Baofeng
Legendary
Offline
Activity: 2702
Merit: 1672
DGbet.fun - Crypto Sportsbook
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
June 27, 2020, 11:51:53 PM |
|
Bitcoin doubler/Ponzi scheme spotted: Just look at those profits you are going to make in 24-48 hours, Lol. For those newbies, doubler is a scam don't deposit or try it for yourself, not even a small amount. https://growbitcoin.co.uk/ ![](https://ip.bitcointalk.org/?u=https%3A%2F%2Fi.imgur.com%2FIKxyX7S.png&t=665&c=0ziMOyq-wTl0Qw)
|
|
|
|
|