[List] Phishing Cryptocurrency Site

[Chikito]

Fake or clone Callisto wallet:

Code:

https://clowallet.network/

Same like before, usually scammer using same IP address to make new phishing and scam domain,

https://www.virustotal.com/gui/ip-address/5.45.114.95/relations



see

Code:

etzwallet.net
www.oldetherwallet.com

[1713465551]

1713465551

[1713465551]

1713465551

[1713465551]

1713465551

[Baofeng]

Fake https://guarda.co/app/. Look at the spelling and the closeness of the website interface.

Code:

PHISHING SITE: https://guadra.com/app/create

This is the original: https://guarda.co/app/

Fake site domain info:

Whois Record for GuaDra.com
 Domain Profile
Registrant   WhoisGuard Protected
Registrant Org   WhoisGuard, Inc.
Registrant Country   pa
Registrar   NAMECHEAP INC NameCheap, Inc.
IANA ID: 1068
URL: http://www.namecheap.com
Whois Server: whois.namecheap.com

(p)
Registrar Status   addPeriod, clientTransferProhibited
Dates   41 days old
Created on 2020-05-21
Expires on 2021-05-21
Updated on 0000-12-31    
Name Servers   DNS1.NAMECHEAPHOSTING.COM (has 870,791 domains)
DNS2.NAMECHEAPHOSTING.COM (has 870,791 domains)
 
Tech Contact   WhoisGuard Protected
WhoisGuard, Inc.
P.O. Box 0823-03411,
Panama, Panama, pa

(p) (f)
IP Address   198.187.29.150 - 635 other sites hosted on this server
 
IP Location   United States Of America - Georgia - Atlanta - Namecheap Inc.
ASN   United States Of America AS22612 NAMECHEAP-NET, US (registered Jun 21, 2011)
Domain Status   Registered And Active Website

https://whois.domaintools.com/guadra.com

[Chikito]

Code:

PHISHING SITE: https://guadra.com/app/create

I found new one, checked using https://dnstwister.report/search?ed=6775617264612e636f

Code:

http://wwwguarda.co/

the relationship of https://www.virustotal.com/gui/ip-address/104.203.20.6/relations

Code:

wwwthetatoken.org

and more...

IP Information

Code:

NetRange: 104.202.0.0 - 104.203.255.255
CIDR: 104.202.0.0/15
NetName: ENZUINC-US-BLK16
NetHandle: NET-104-202-0-0-1
Parent: NET104 (NET-104-0-0-0-0)
NetType: Direct Allocation
OriginAS: AS18978
Organization: Enzu Inc (ENZUI)
RegDate: 2014-09-09
Updated: 2016-05-24
Comment: --------------------------------
Comment: Enzu Inc.
Comment: 10120 S Eastern Ave
Comment: Suite #248
Comment: Henderson, NV 89052
Comment: https://www.enzu.com
Comment: --------------------------------
Comment: Please send all Abuse, Trademark,
Comment: Legal Compliance, and Law Enforcement
Comment: requests to abuse@scalabledns.com
Ref: https://rdap.arin.net/registry/ip/104.202.0.0

[Baofeng]

Bitcoin doubler:

Please stay away from this site, and don't deposit anything.

Code:

https://bit-airdrop.club/

[Chikito]

Fake ADA Cordano giveaway

Code:

https://event-ada.info
http://ada-cardano.info/

Domain:

IP Address: 172.67.131.47

Geolocation: US (United States), CA, California, 94107 San Francisco - Google Maps

Reverse DNS entry: not found

Domain Check

Domain Name: event-ada.info

Top Level Domain: INFO (Information)

Domain Name: EVENT-ADA.INFO
Registry Domain ID: D503300001185956611-LRMS
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: www.namecheap.com
Updated Date: 2020-07-13T00:45:31Z
Creation Date: 2020-07-13T00:41:40Z
Registry Expiry Date: 2021-07-13T00:41:40Z
Registrar Registration Expiration Date:
Registrar: NameCheap, Inc

Fake Kanyewest US President Giveaway

Code:

http://kanyebtc.org/

IP Address: 195.24.68.4

Geolocation: RU (Russian Federation), 48, Moscow City, 101752 Moscow - Google Maps

Reverse DNS: wcarp.hosting.nic.ru

Domain Check

Domain Name: kanyebtc.org

Top Level Domain: ORG (Organization)

Domain Name: KANYEBTC.ORG
Registry Domain ID: D402200000014076562-LROR
Registrar WHOIS Server: https://www.nic.ru/whois
Registrar URL: https://www.nic.ru/whois
Updated Date: 2020-07-09T22:50:25Z
Creation Date: 2020-07-09T22:50:25Z
Registry Expiry Date: 2021-07-09T22:50:25Z
Registrar Registration Expiration Date:
Registrar: Regional Network Information Center, JSC dba RU-CENTER
Registrar IANA ID: 463

Be Aware!

[Baofeng]

Another one of Fake Elon Musk giveaway:

Code:

https://muskpromotion.com/

Bitcoin address:

Code:

1MuskJozYFQ56EVxHzg2rcZjPV91QNBH3H

And has scammed a total of 0.00453667 BTC already.

Registrant   Protection of Private Person
Registrant Country   ru
Registrar   Registrar of domain names REG.RU LLC REGISTRAR OF DOMAIN NAMES REG.RU LLC
IANA ID: 1606
URL: https://www.reg.com,https://www.reg.ru,http://www.reg.ru
Whois Server: whois.reg.com

(p)
Registrar Status   clientTransferProhibited
Dates   57 days old
Created on 2020-05-22
Expires on 2021-05-22
Updated on 2020-05-22

[Chikito]

Fake giveaway cardano and gemini

Code:

https://www.cardano-event.com/

IP Address: 104.27.128.135
Domain Name: CARDANO-EVENT.COM
Registry Domain ID: 2545876763_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: http://www.namecheap.com
Updated Date: 2020-07-15T23:05:43Z
Creation Date: 2020-07-13T21:13:24Z

Code:

https://geminibtc.net/

IP Address: 190.115.30.224
Domain Name: GEMINIBTC.NET
Registry Domain ID: 2541998136_DOMAIN_NET-VRSN
Registrar WHOIS Server: whois.PublicDomainRegistry.com
Registrar URL: http://www.publicdomainregistry.com
Updated Date: 2020-06-27T00:27:59Z
Creation Date: 2020-06-27T00:27:33Z

[Baofeng]

Fake ETH Airdrop:



ETH address

Code:

0xCE07e6D4aDCb3924011fc247C42eB51084207acA

Whois Record for VitalIk.top
 Domain Profile
Registrant   REDACTED FOR PRIVACY
Registrant Org   Tye Dye Eye
Registrant Country   us
Registrar   Eranet International Limited
IANA ID: 1868
URL: http://www.eranet.com
Whois Server: whois.eranet.com

(p)
Registrar Status   clientTransferProhibited
Dates   5 days old
Created on 2020-07-16
Expires on 2021-07-16
Updated on 2020-07-16   

https://whois.domaintools.com/vitalik.top

[Baofeng]

And it keeps on coming guys. This Elon Musk giveaways won't stop, Lol.

Code:

https://elonpromo.org/

Registrant Org   Privacy Protection
Registrant Country   ru
Registrar   Registrar of Domain Names REG.RU LLC
IANA ID: 1606
URL: http://www.reg.com
Whois Server: whois.reg.com

(p)
Registrar Status   clientTransferProhibited, serverTransferProhibited
Dates   8 days old
Created on 2020-07-23
Expires on 2021-07-23
Updated on 2020-07-23     
Name Servers   NS1.REG.RU (has 1,568,097 domains)
NS2.REG.RU (has 1,568,097 domains)
  
Tech Contact   —
IP Address   190.115.21.141 is hosted on a dedicated server
  
IP Location   Belize - Belize - Belize City - Ddos-guard Corp.
ASN   Belize AS262254 DDOS-GUARD CORP., BZ (registered Dec 05, 2012)
Domain Status   Registered And No Website
Hosting History   1 change on 2 unique name servers over 0 year

https://elonpromo.org/

[Chikito]

And it keeps on coming guys. This Elon Musk giveaways won't stop, Lol.

Code:

https://elonpromo.org/

find same elon musk like your picture too,

Fake Elon Musk still running give away right now;

Code:

https://muskx.co/

IP Address: 45.87.80.145
Domain Name: muskx.co
Registry Domain ID: D093EDEC5DF604FF790F5CC3C10F2E12C-NSR
Registrar WHOIS Server: whois.registrar.eu
Registrar URL: www.openprovider.com
Updated Date: 2020-07-09T10:49:53Z
Creation Date: 2020-07-04T10:49:47Z

Linked to twitter promo https://www.virustotal.com/gui/url/41aa22a7aded71b4d1192265bea003eff3945ef59e9d030c8a2c842d0d7bbae7/details





Keep your mind and be careful Fake giveaway from fake famous people

[Chikito]

Scam fake Elon musk Official Giveaway 5000 BTC

Code:

http://Giveaway.is

IP Address: 162.255.119.70
domain: giveaway.is
nserver: dns1.registrar-servers.com
nserver: dns2.registrar-servers.com
dnssec: unsigned delegation
created: August 2 2020
expires: August 2 2021

https://www.blockchain.com/btc/address/1D4ZoJ7MLhija5iaSjhnwiAdATNLdVfdVk
Hope no body sending fund into scammer address

[Chikito]

Fake ethereum 2.0 project website (doubling ethereum by sending fund into scammer address)

Code:

https://2ethereum.org/

IP Address: 190.115.21.113
Domain Name: 2ethereum.org
Top Level Domain: ORG (Organization)
Registry Domain ID: D402200000014234500-LROR
Registrar WHOIS Server: whois.reg.com
Registrar URL: http://www.reg.com
Updated Date: 2020-07-27T21:13:36Z
Creation Date: 2020-07-27T20:18:40Z
Registry Expiry Date: 2021-07-27T20:18:40Z
Registrar Registration Expiration Date:
Registrar: Registrar of Domain Names REG.RU LLC

someone already got scammed https://etherscan.io/address/0x3ad072778446db654dee3ff5f80ac1e5ac12dd56#comments

Be careful

[$crypto$]

And it keeps on coming guys. This Elon Musk giveaways won't stop, Lol.

Elon Musk's giveaway is coming again and like that it will continue to appear with new domains.

Fake Giveaway

Website;

Code:

https://tslahelp.me/

Archived; http://archive.is/0ACsz

Domain Name: TSLAHELP.ME
Registry Domain ID: D425500000334572980-AGRS
Registrar WHOIS Server: whois.registrar.eu
Registrar URL: www.openprovider.com
Updated Date:
Creation Date: 2020-08-07T04:52:23Z
Registry Expiry Date: 2021-08-07T04:52:23Z
Registrar Registration Expiration Date:
Registrar: Hosting Concepts B.V. d/b/a Openprovider Registrar
Registrar IANA ID: 1647
Registrar Abuse Contact Email:
Registrar Abuse Contact Phone: +31.104482297

[Chikito]

be aware fake or phishing myethereum wallet

Code:

https://myetherwallet.com-to-the-access.com/index.php?

https://www.virustotal.com/gui/url/f6eef9a60ff436e51d729b5978d57c62bddaed38386c5781f883ec7b34304604/detection

Domain Name: myetherwallet.com-to-the-access.com

Top Level Domain: COM (Commercial TLD)

IP Address: 104.31.85.13

I found it by searching myetherwallet on google.

be careful don't use google search.

[Chikito]

"elon Musk" come back again

Code:

https://spacex-btc.biz/

Domain Name: spacex-btc.biz
IP Address: 104.28.13.46
Registry Domain ID: D2E1DCB3B1B0248D0B04EE759ED3AED23-NSR
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: http://www.namecheap.com
Updated Date: 2020-08-11T10:47:22Z
Creation Date: 2020-08-06T10:47:17Z

scammer address https://www.blockchain.com/btc/address/13Q4QoEK6uACXGDTGHmyLNoRNaBiAXgho4

[$crypto$]

Elon Musk is back again and they create a community on telegram with the name "Bitrue Community" and they will automatically enroll you in the scamer group.
Beware the newbie who does not know about this.

Website: https://autopoolcrypto.com/
http://archive.is/hcd78



A fake community on behalf of the Bitrue Community

[Baofeng]

Another Ethereum fake giveaway:

Website:

Code:

https://vitalikbb.top/

ETH address:

Code:

0xCE0aA8921eF80242F03aE1824E31ccF912bA1EB1

[$crypto$]

Fake Binance is back in action on behalf of Airdrop SXP with currently Binance officially launching it so scamers take advantage of it with this kind of situation I hope a lot is avoided and I found it on the telegram channel with a fake telegram account.

Medium Website; https://bin-us.org
Archived; https://archive.is/UcG29

Domain Name: BIN-US.ORG
Registry Domain ID: D402200000014487063-LROR
Registrar WHOIS Server: whois.tucows.com
Registrar URL: http://www.tucows.com
Updated Date: 2020-08-26T13:03:59Z
Creation Date: 2020-08-26T13:01:43Z
Registry Expiry Date: 2021-08-26T13:01:43Z
Registrar Registration Expiration Date:
Registrar: Tucows Inc.
Registrar IANA ID: 69

I don't know why I can't access it via PC, but using a cellphone can be accessed.

[cryptomaniac_xxx]

^^ It can't be accessed because it has been blocked by Google already. Maybe someone has reported this site as a fake site resulting to Google giving us a "Deceptive Site" ahead message. But still a good catch.

[Chikito]

I don't know why I can't access it via PC, but using a cellphone can be accessed.

Like what cryptomaniac said a website has been reported

bin-us.org has been reported as a deceptive site. You can report a detection problem or ignore the risk and go to this unsafe site.
Learn more about deceptive sites and phishing at www.antiphishing.org. Learn more about Firefox’s Phishing and Malware Protection at support.mozilla.org

I think this for a clear browser only, when I try Tor, a website still live.