Fake coingecko site please beware!

[Adbitco]

Hello mates
I don't know if actually this post has been already shared but please pardon me if already shared.
Just some minutes ago I said of checking some token on coingecko since those token was delisted from CMC and I decided to enter coingecko site with my phone browser and immediately searched and clicked what I saw was a request to connect my wallet.

Please beware of such site and also please do not rush to click on anything you seems too familiar with without proper check of the site you want to visit.
Below image show it all.




Fake site link here
https://couingecko.click/connect/

Please do note feel too familiar with the sites you often visit because it's the easiest way to hack into you since they knows you often visit the site and you won't care to check it out before hitting the enter key.

[1714676161]

1714676161

[1714676161]

1714676161

[1714676161]

1714676161

[Bitcoin_Arena]

It should be in scam accusations, not reputation board. Please move the topic there.

[Pandu Geddon]

I think this is the same as what happened to CMC. Previously there was also a thread discussing fake CMC Beware of fake Coinmarketcap! . we can report it. and the ad will be removed by google. but it will still make the site's fake ads appear again and keep creating new ones.
because this has happened before, I hope no more people get stuck with fake sites like this.

[Ultegra134]

Great find. As the above poster already mentioned, a few weeks ago there were similar instances with Coinmarketcap clones. How did you stumble across this website though? The last time, the fake CMC websites used to pop up in the paid advertising section of Google. Is it a similar case with Coingecko? I can't recreate it, no matter how many times I try. Fortunately, it seems easy enough to spot: the domain is invalid, and there aren't many reasons why you would possibly want to connect your wallet to a website such as Coinmarketcap or Coingecko.

[PX-Z]

I've search "coingecko" in google and it shows as sponsored in the top, which really unfortunate that google don't have quality control to avoid accepting such ads.

I suggest you to avoid clicking sponsored ads in google search page just like you did because scam ads is inevitable in google search page.

Also, kindly report it, it only takes seconds to do that.

[Edwardard]

I've search "coingecko" in google and it shows as sponsored in the top, which really unfortunate that google don't have quality control to avoid accepting such ads.

Sad, but true. Thats called malvertising, well who knows its all done by a google employee itself?
These scammers did this type of sponsored ad for a fake coinmarketcap site as well last month. Despite of having strict policies for crypto based ads, its unfortunate to see these type of things happening on google.

Also, kindly report it, it only takes seconds to do that.

Done!

[salad daging]

Searching on Google is always misleading if we are not careful because there we will see phishing site advertisements on the first page of Google instead of the original ones below, so it's better not to type in Google search and just write directly with the URL that we for example Coingecko.com

Look at this picture I also tried to search for Coingecko on Google with the results of lots of fake advertisements which are phishing that have to be connected to our wallets.
I'm sure in a few days they can disappear after being reported and after that will appear again with a new domain.


In essence, stay alert to beginners so they don't become victims in this case.

[bittraffic]

The x button on the website doesn't work lol it forces its visitors to log in using thier browsers, Damn scammers.
CMC and Coingecko are just lists of coin ranking but these days they seem to be used by developers to distribute airdrops which I guess the phishers are also trying to find ways to get the money of its users.

OP should just make the link above to be "not clickable"

[aioc]

The website is meant to scam people, the main home page
https://couingecko.click/ has nothing on it
 

Greetings! Website couingecko.click is ready. The content is to be added.

what they are promoting is the connect page this is the entry they use to scam people.

If you have an account on the real Coingecko there is no option there to connect or sign up or log in using a wallet, only two you have to sign up using Google or Apple.

[examplens]

I'm not a very passionate user of Coingecko (as well as CMC) and I still use them exclusively to see the current price of a coin and possibly its market.
what kind of services do they offer if they are so interested in phishing?
in what way is abuse possible here besides collecting email addresses?

[PX-Z]

what kind of services do they offer if they are so interested in phishing?
in what way is abuse possible here besides collecting email addresses?

For the original coingecko, yes, there's nothing other than the emails and accounts.

For this phishing site, it's the connecting of wallets which is weird why they ^{(scammer/hacker)} designed it like that lol, coz most regular users of coingecko will probably notice why there is a connecting of wallet ^{(metamask or something)}.

what they are promoting is the connect page this is the entry they use to scam people.

Yes, as per the OP. 

[holydarkness]

I'm not a very passionate user of Coingecko (as well as CMC) and I still use them exclusively to see the current price of a coin and possibly its market.
what kind of services do they offer if they are so interested in phishing?
in what way is abuse possible here besides collecting email addresses?

I am also curious about how would the abuser stole our token or anything else through this procedure. Ages ago I fell into the similar situation --namely, accidentally connecting a dApp to our TW or MM-- and I'm actually curious what'll the scammer do. Far as I know, TW --can't say for MM, hadn't use them for a while-- still needs us to approve transactions, so I don't think they can do anything even when they're connected to our wallet through walletconnect.

Best I can think of is the user who fell into this situation --just like I did-- immediately realized their mistake and reached their TG for support. And we all know how many way-too-helpful hand will reach us back through PM once we asked for help there. So, maybe a little tip for anyone fell --or currently falling-- into this kind of scam, their "official" representative --because there's no official staff there, all who helped you there are the honest and kind community-- will not reach through PM. Even if you reached them first, they'll urge you to write on the channel so everyone can read and help and give insight. So, the basic rule of thumb applies: if anyone reached you through PM claiming they'll help with your issue, just ignore them.

Another thing, just to be safe, is to revoke the connection, instruction here

[Rikafip]

For this phishing site, it's the connecting of wallets which is weird why they ^{(scammer/hacker)} designed it like that lol, coz most regular users of coingecko will probably notice why there is a connecting of wallet ^{(metamask or something)}.

Thing is, their targets are not experienced Metamask/Coingecko users, but newbies who don't really know what they are doing so they might connect MM to Coingecko and approve transaction which will result in money gone. Hell, its pretty common to hear newbies even entering seed phrase in similar scam attempt.

But in reality, even veteran crypto users can make a mistake, all that you need is not paying attention for a few seconds and that's it. I know a guy who lost ~100k by connecting Metamask to a phishing site, and this guy has been in crypto since like 2014, so he was far from a newbie. But, he was in a hurry and wanted to do something quick before going out and ended up losing big chunk of his portfolio.

[Adbitco]

Actually this is what I mean, so being in a hurry is very bad thing to do and I believe their target is to those who are very faster in clicking their key or cell phone personally I would have been a victim if not that was careful enough to code is a wrong site before I exited it and even as that the exit is not working and this shows that is very possible to hack into people's wallet.
I wonder why google keep promoting such scam site as ads.

[MainIbem]

Post related to fake cmc have posted before, these scammer went to a length to even want to coingecko to scam people as well?
Wonder shall never end, scammers looking for all means to pipe people out of their hard time earn money. Please anyone visiting all these sites should be very mindful and watchful to avoid being scammed or hacked.

[dkbit98]

First time I see this CoinGecko phishing scam, and it's interesting that you can't do anything on website until you connect shitcoin wallets like metamask or walletconnect .
Even clicking on X in right corner is not doing anything, so my ultimate suggestion would be to stop using shitcoins and their wallets to avoid scams like this.
Even normal metamask is tracking your IP address and everything you do, and who knows where all this information is going.

There is obvious spelling mistake in domain name and it was created yesterday so everything is clear:

Domain Name: couingecko.click
Registry Domain ID: DO_288685375a0ea59fbdd94c6f027f2075-UR
Registrar WHOIS Server: whois.epik.com
Registrar URL: www.epik.com
Updated Date: 2022-12-02T12:40:09.261Z
Creation Date: 2022-12-02T12:01:56.471Z
Registry Expiry Date: 2023-12-02T12:01:56.471Z
Registrar: Epik Inc.
Registrar IANA ID: 617
Registrar Abuse Contact Email: email@epik.com

Similar domains are used and probably owned by same scammers, as website structure is the same:

Code:

coingeckgo.click
cooingecko.click		
boggedfiniance.click	

[coin-investor]

If any website just like what posted OP posted should ask for your recovery phrase then its 100% scam close the site right away or report it here just like what OP did, asking for a recovery phrase is such a big no-no, we are always reminded with this phrase Not your Key Not Your Coins no legit website will ask for a recovery phrase just to create an account or log in in a third party site.

[Ojima-ojo]

Most newbie without prior knowledge of the scheme scammer use this day to get access to their wallets will still fall for this as many time as possible, this is because they failed to apply caution to always check the website link in utr to see if it secured or not.

Hackers have a way of creating similar website links to that of already know crypto platforms such as coin gecko and cmc and if one is not csrefuyou can be lured into exposing your personal detail like wallet keys without realizing you are giving them to scammers. So the advice is to use the right link away and never click on any random link sent to you via pm.

[Mpamaegbu]

Fake site link here
https:// couingecko.click/connect/

Please do note feel too familiar with the sites you often visit because it's the easiest way to hack into you since they knows you often visit the site and you won't care to check it out before hitting the enter key.

You did well by alerting this forum of that. Anyone visiting for the first time who isn't careful will easily get deceived. This is why I always insist on getting direct links from whoever that's asking me to check up any site. I don't just listen to them dictating it without writing the words out. After that I make sure to bookmark or save it on homepage if it's a site I'm likely going to revisit. In this crypto industry, don't leave anything to chances.

I'm not a very passionate user of Coingecko (as well as CMC) and I still use them exclusively to see the current price of a coin and possibly its market.

It used to be Blockfolio for me before the SBF dude bought it and changed its name to FTX and then messed the whole thing up. What a shame.

what kind of services do they offer if they are so interested in phishing?
in what way is abuse possible here besides collecting email addresses?

But of course, the phishing would be to steal wallet information and then hack it.

[Saisher]

You really know how to secure your coins and implement security if you are very particular about the URL of every site you're visiting and check the platform you're linking your wallet, these two are basic and how scammers work, all phishing sites used these two popular methods and the hardest thing is you got scammed before you discover these tricks.
It is really important to read a lot about security, not only about how to make a profit but how to secure your coin and private key as well.