This morning I received a private message on Discord claiming I had won some bitcoin on a site I've never heard of,
http://www.nexus-wallets.com so I decided to check it out. The site itself looks pretty rubbish, which is the first giveaway. The message as shown in this picture claimed I was awarded 0.2 BTC and that I could withdraw it.
https://www.dropbox.com/s/y5rlkrby7jwa38s/scam.png?dl=0So naturally, I made an account and the promocode appeared to work. Until I went to withdraw the free winning. The site gives a warning message, echoed by the support chat. "Now on our platform is a fight against bots and money laundering. You need to activate your new account with a Deposit of 0.015 BTC. After automatic activation, you will have access to: Instant Withdrawal / Transfer Coins / Online Trading / Roulette Room / Roulette Chat. For any questions, write to us in support."
https://www.dropbox.com/s/27pdso2p9r7tpg9/scam2.png?dl=0After inquiring about this, I then found that I was banned from the instant chat on the website. I decided to look into things a bit and found that the website has no association to
http://Nexus.IO and whois data shows that the website was registered today, which contradicts the footer of the website claiming to be around since 2013.
Whois Record for Nexus-Wallets.com
Domain Profile
Registrant George Marshall
Registrant Org CryptoX Platform
Registrant Country gb
Registrar NAMECHEAP INC NameCheap, Inc.
IANA ID: 1068
URL:
http://www.namecheap.comWhois Server: whois.namecheap.com
(p)
Registrar Status clientTransferProhibited
Dates Created on 2020-02-15
Expires on 2021-02-15
Updated on 0000-12-31
Name Servers YAHIR.NS.CLOUDFLARE.COM (has 22,439,106 domains)
ZOE.NS.CLOUDFLARE.COM (has 22,439,106 domains)
Tech Contact George Marshall
CryptoX Platform
89 Chapel Lane,
ARSCAIG, ARSCAIG, IV27 0AX, gb
(p)
IP Address 104.27.141.35 - 3 other sites hosted on this server
IP Location United States Of America - California - San Francisco - Cloudflare Inc.
ASN United States Of America AS13335 CLOUDFLARENET, US (registered Jul 14, 2010)
Domain Status Never Registered Before
Website
Website Title None given.
Whois Record ( last updated on 2020-02-15 )
Noticing the link to CryptoX I looked further and found a possible relation to
http://cryptox.pl which has a similar theme. There is also
http://cryptox.com which is an empty website. I'd also like to note that the whois data and link to CryptoX has been mentioned on this forum before,
https://bitcointalk.org/index.php?topic=5167125.0 As far as I can tell, this is a classic 419. Something we've all seen far too many times in our years as avid bitcoiners.
