Bitcoin Forum
May 06, 2024, 08:43:46 PM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: [Scam]: Phishing Ripple website then redirecting to fake giveaway  (Read 77 times)
TravelMug (OP)
Hero Member
*****
Offline Offline

Activity: 2632
Merit: 833



View Profile
November 03, 2020, 01:02:54 AM
Last edit: October 19, 2023, 04:06:29 AM by TravelMug
 #1

What happened: Fake Ripple website and giveaway

Website:
Code:
xn--riple-vo1b.com
https://riṗple.com/



Archive: https://archive.is/FzQNu

What makes this dangerous is that it's taking a the ripple.com domain and turn it into homograph attack, so very dangerous.

Quote
Whois Record for Riṗple.com
Domain Profile
Registrant    WhoisGuard Protected
Registrant Org    WhoisGuard, Inc.
Registrant Country    pa
Registrar    NAMECHEAP INC NameCheap, Inc.
IANA ID: 1068
URL: http://www.namecheap.com
Whois Server: whois.namecheap.com

(p)
Registrar Status    clientTransferProhibited
Dates    Created on 2020-11-02
Expires on 2021-11-02
Updated on 0000-12-31    
 
Name Servers    DNS1.NAMECHEAPHOSTING.COM (has 953,454 domains)
DNS2.NAMECHEAPHOSTING.COM (has 953,454 domains)

R


▀▀▀▀▀▀▀██████▄▄
████████████████
▀▀▀▀█████▀▀▀█████
████████▌███▐████
▄▄▄▄█████▄▄▄█████
████████████████
▄▄▄▄▄▄▄██████▀▀
LLBIT
  CRYPTO   
FUTURES
 1,000x 
LEVERAGE
COMPETITIVE
    FEES    
 INSTANT 
EXECUTION
.
   TRADE NOW   
1715028226
Hero Member
*
Offline Offline

Posts: 1715028226

View Profile Personal Message (Offline)

Ignore
1715028226
Reply with quote  #2

1715028226
Report to moderator
1715028226
Hero Member
*
Offline Offline

Posts: 1715028226

View Profile Personal Message (Offline)

Ignore
1715028226
Reply with quote  #2

1715028226
Report to moderator
Be very wary of relying on JavaScript for security on crypto sites. The site can change the JavaScript at any time unless you take unusual precautions, and browsers are not generally known for their airtight security.
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
1715028226
Hero Member
*
Offline Offline

Posts: 1715028226

View Profile Personal Message (Offline)

Ignore
1715028226
Reply with quote  #2

1715028226
Report to moderator
1715028226
Hero Member
*
Offline Offline

Posts: 1715028226

View Profile Personal Message (Offline)

Ignore
1715028226
Reply with quote  #2

1715028226
Report to moderator
1715028226
Hero Member
*
Offline Offline

Posts: 1715028226

View Profile Personal Message (Offline)

Ignore
1715028226
Reply with quote  #2

1715028226
Report to moderator
btc_angela
Hero Member
*****
Offline Offline

Activity: 2604
Merit: 542



View Profile
November 03, 2020, 07:45:49 AM
 #2

Ok so criminals just got another method here, they replicate a ripple.com domain through cryllic attack, but then will present themselves with this kind of fake giveaway and there could be some that will think that this is legit enough and deposit some in hope that they will double their money. Clever trick, and thanks for the fair warning and we also wish that no one will be a victim here.

███████████████████████
████████████████████
██████████████████
████████████████████
███▀▀▀█████████████████
███▄▄▄█████████████████
██████████████████████
██████████████████████
███████████████████████
█████████████████████
███████████████████
███████████████
████████████████████████
███████████████████████████
███████████████████████████
███████████████████████████
█████████▀▀██▀██▀▀█████████
█████████████▄█████████████
███████████████████████
████████████████████████
████████████▄█▄█████████
████████▀▀███████████
██████████████████
▀███████████████████▀
▀███████████████▀
█████████████████████████
O F F I C I A L   P A R T N E R S
▬▬▬▬▬▬▬▬▬▬
ASTON VILLA FC
BURNLEY FC
BK8?.
..PLAY NOW..
Lorence.xD
Sr. Member
****
Offline Offline

Activity: 1624
Merit: 315


Leading Crypto Sports Betting & Casino Platform


View Profile
November 03, 2020, 09:31:53 AM
 #3

Ok so criminals just got another method here, they replicate a ripple.com domain through cryllic attack, but then will present themselves with this kind of fake giveaway and there could be some that will think that this is legit enough and deposit some in hope that they will double their money. Clever trick, and thanks for the fair warning and we also wish that no one will be a victim here.
Each day they are getting more crafty and cunning in finding ways to swindle people of their funds, hopefully on the other side of the spectrum, people fighting this problem is getting equally crafty and cunning too. The only problem left for us is to inform the masses about the rise of this schemes and hopefully it will reach the right person that might become the victim of this kind of schemes. Nice catch OP, I want to start looking for this kinds of website too but the problem is I am still saving to buy a better phone, I am still using a shitty relic.

█▀▀▀▀▀











█▄▄▄▄▄
.
Stake.com
▀▀▀▀▀█











▄▄▄▄▄█
   ▄████████████████████████████████████▄
   ██ ▄▄▄▄▄▄▄▄▄▄            ▄▄▄▄▄▄▄▄▄▄ ██  ▄████▄
   ██ ▀▀▀▀▀▀▀▀▀▀ ██████████ ▀▀▀▀▀▀▀▀▀▀ ██  ██████
   ██ ██████████ ██      ██ ██████████ ██   ▀██▀
   ██ ██      ██ ██████  ██ ██      ██ ██    ██
   ██ ██████  ██ █████  ███ ██████  ██ ████▄ ██
   ██ █████  ███ ████  ████ █████  ███ ████████
   ██ ████  ████ ██████████ ████  ████ ████▀
   ██ ██████████ ▄▄▄▄▄▄▄▄▄▄ ██████████ ██
   ██            ▀▀▀▀▀▀▀▀▀▀            ██ 
   ▀█████████▀ ▄████████████▄ ▀█████████▀
  ▄▄▄▄▄▄▄▄▄▄▄▄███  ██  ██  ███▄▄▄▄▄▄▄▄▄▄▄▄
 ██████████████████████████████████████████
▄▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▄
█  ▄▀▄             █▀▀█▀▄▄
█  █▀█             █  ▐  ▐▌
█       ▄██▄       █  ▌  █
█     ▄██████▄     █  ▌ ▐▌
█    ██████████    █ ▐  █
█   ▐██████████▌   █ ▐ ▐▌
█    ▀▀██████▀▀    █ ▌ █
█     ▄▄▄██▄▄▄     █ ▌▐▌
█                  █▐ █
█                  █▐▐▌
█                  █▐█
▀▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▀█
▄▄█████████▄▄
▄██▀▀▀▀█████▀▀▀▀██▄
▄█▀       ▐█▌       ▀█▄
██         ▐█▌         ██
████▄     ▄█████▄     ▄████
████████▄███████████▄████████
███▀    █████████████    ▀███
██       ███████████       ██
▀█▄       █████████       ▄█▀
▀█▄    ▄██▀▀▀▀▀▀▀██▄  ▄▄▄█▀
▀███████         ███████▀
▀█████▄       ▄█████▀
▀▀▀███▄▄▄███▀▀▀
█▀▀▀▀▀











█▄▄▄▄▄
.
PLAY NOW
▀▀▀▀▀█











▄▄▄▄▄█
TalkStar
Copper Member
Hero Member
*****
Offline Offline

Activity: 1204
Merit: 737


✅ Need Campaign Manager? TG > @TalkStar675


View Profile WWW
November 03, 2020, 06:52:08 PM
 #4

Ok so criminals just got another method here, they replicate a ripple.com domain through cryllic attack, but then will present themselves with this kind of fake giveaway and there could be some that will think that this is legit enough and deposit some in hope that they will double their money. Clever trick, and thanks for the fair warning and we also wish that no one will be a victim here.

Its nothing new and they are running multiple websites like this. Even they are using the same frontend for most of their websites. Few month earlier XRP authority have requested youtube to remove all fake XRP giveaway related content from their platform and after that this scammers are changing their domain on a regular and keeping the trap active for cryoto users.

Here is more details about fake Ripple giveaways, https://eng.ambcrypto.com/another-xrp-giveaway-scam-goes-live-youtube-where-art-thou/


.

▄██████████████████████████▄
████████████████████████████
████████████████████████████
████████████████████████████
███████████████████████████
████████████████████████████
████████████████████████████
████████████████████████████
███████████████████████████
████████████████████████████
████████████████████████████
████████████████████████████
▀██████████████████████████▀
.

.

.

.

████░█▄
████░███▄
████▄▄▄▄▄
█████████
█████████
█████████


████░█▄
████░███▄
████▄▄▄▄▄
█████████
█████████
█████████












.KUCOIN LISTING WORKFLOW.
.
.KUCOIN COMPANY PROFILE..

.

TravelMug (OP)
Hero Member
*****
Offline Offline

Activity: 2632
Merit: 833



View Profile
November 23, 2020, 11:42:22 PM
Last edit: October 19, 2023, 04:04:18 AM by TravelMug
 #5

What happened: Ripple Fake Giveaway

Website:
Code:
https://xrp-reward.org/



Archived: https://archive.is/QX0Oc

Quote
Registrant Org    Maslov Anatoliy Zaharovich
Registrant Country    ru
Registrar    Regional Network Information Center, JSC dba RU-CENTER
IANA ID: 463
URL: https://www.nic.ru/whois
Whois Server: https://www.nic.ru/whois

(p)
Registrar Status    clientTransferProhibited, serverTransferProhibited
Dates    29 days old
Created on 2020-10-25
Expires on 2021-10-25
Updated on 2020-11-10    
 
Name Servers    NS3.NIC.RU (has 552,530 domains)
NS4.NIC.RU (has 552,530 domains)
NS8.NIC.RU (has 552,530 domains)
   
 
Tech Contact    —
IP Address    195.24.68.9 - 2,369 other sites hosted on this server

https://whois.domaintools.com/xrp-reward.org

R


▀▀▀▀▀▀▀██████▄▄
████████████████
▀▀▀▀█████▀▀▀█████
████████▌███▐████
▄▄▄▄█████▄▄▄█████
████████████████
▄▄▄▄▄▄▄██████▀▀
LLBIT
  CRYPTO   
FUTURES
 1,000x 
LEVERAGE
COMPETITIVE
    FEES    
 INSTANT 
EXECUTION
.
   TRADE NOW   
tippytoes
Sr. Member
****
Offline Offline

Activity: 1988
Merit: 275


View Profile
November 23, 2020, 11:48:55 PM
 #6

That's fast. When I checked the site it says now -




Also, that kind of giveaway I believe is an old scheme. I've seen that with btc and eth. And now, with XRP. Because XRP is really doing great in the market, we will see more of these phishing sites. I hope users will validate the legitimacy of the site before making any action from their end.
TravelMug (OP)
Hero Member
*****
Offline Offline

Activity: 2632
Merit: 833



View Profile
November 26, 2020, 10:00:42 PM
Last edit: October 19, 2023, 04:04:01 AM by TravelMug
 #7

What happened: Another one of this fake XRP giveaway

Website:
Code:
https://ripple-xrp.me/

Archived: https://archive.is/onEM2



Quote
Registrant Org    WhoisGuard, Inc.
Registrant Country    pa
Registrar    NameCheap, Inc.
IANA ID: 1068
URL: www.namecheap.com
Whois Server: whois.namecheap.com

(p)
Registrar Status    clientTransferProhibited, serverTransferProhibited
Dates    4 days old
Created on 2020-11-22
Expires on 2021-11-22
Updated on 2020-11-22    
 
Name Servers    DNS1.NAMECHEAPHOSTING.COM (has 971,665 domains)
DNS2.NAMECHEAPHOSTING.COM (has 971,665 domains)
   
 
Tech Contact    —
IP Address    68.65.122.169 - 331 other sites hosted on this server

Again, be careful, XRP is making significant gains because of a news of a fork this coming December 12. So criminals are having a field day and taking advantage of this to trap noobs again to this scheme.

R


▀▀▀▀▀▀▀██████▄▄
████████████████
▀▀▀▀█████▀▀▀█████
████████▌███▐████
▄▄▄▄█████▄▄▄█████
████████████████
▄▄▄▄▄▄▄██████▀▀
LLBIT
  CRYPTO   
FUTURES
 1,000x 
LEVERAGE
COMPETITIVE
    FEES    
 INSTANT 
EXECUTION
.
   TRADE NOW   
Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!