[Scam]: Fake Celsius claimant Agent Website

[Dave1]

What Happened: Cryptocurrency lender Celsius who filed of Chapter 11 bankruptcy in mid July 2022, and exposed thousands of it's investors to suffer a big lost.

But in the last couple of days, there have been emails circulating pretending to be be the from Stretto, the Claims Agent for the Celsius bankruptcy proceeding. And claims to offer creditors a 7-day exit window to claim their frozen funds.

Website:

Code:

 https://claims-stretto.com/

So do not enter your email address, because once you entered a email address, it will prompt you to connect your wallet. And you know that once your connect your wallet, a bot will swipe every crypto assets you have.



The website has just been registered:

Domain Name: claims-stretto.com
Registry Domain ID: 2815369272_DOMAIN_COM-VRSN
Registrar WHOIS Server: WHOIS.ENOM.COM
Registrar URL: WWW.ENOMDOMAINS.COM
Updated Date: 2023-09-19T21:45:26.00Z
Creation Date: 2023-09-19T21:45:00.00Z
Registrar Registration Expiration Date: 2024-09-19T21:45:00.00Z
Registrar: ENOM, INC.
Registrar IANA ID: 48
Domain Status: addPeriod https://www.icann.org/epp#addPeriod
Domain Status: clientTransferProhibited https://www.icann.org/epp#clientTransferProhibited
Registrant Name: Whois Agent (279306283)
Registrant Organization: Whois Privacy Protection Service, Inc.
Registrant Street: PO Box 639
Registrant Street: C/O claims-stretto.com
Registrant City: Kirkland
Registrant State/Province: WA
Registrant Postal Code: 98083
Registrant Country: US
Registrant Phone: +1.4252740657
Registrant Phone Ext:
Registrant Fax: +1.4259744730
Registrant Email:
Admin Name: Whois Agent
Admin Organization: Whois Privacy Protection Service, Inc.
Admin Street: PO Box 639
Admin Street: C/O claims-stretto.com
Admin City: Kirkland
Admin State/Province: WA
Admin Postal Code: 98083
Admin Country: US
Admin Phone: +1.4252740657
Admin Phone Ext:
Admin Fax: +1.4259744730
Admin Email:
Tech Name: Whois Agent
Tech Organization: Whois Privacy Protection Service, Inc.
Tech Street: PO Box 639
Tech Street: C/O claims-stretto.com
Tech City: Kirkland
Tech State/Province: WA
Tech Postal Code: 98083
Tech Country: US
Tech Phone: +1.4252740657
Tech Phone Ext:
Tech Fax: +1.4259744730
Tech Email:
Name Server: NS1.AMSTERDAM-HOSTING.TO
Name Server: NS2.AMSTERDAM-HOSTING.TO
DNSSEC: unsigned
Registrar Abuse Contact Email:
Registrar Abuse Contact Phone: +1.4259744689
URL of the ICANN WHOIS Data Problem Reporting System: http://HTTP://WDPRS.INTERNIC.NET/

The legitimate website is: https://cases.stretto.com/celsius/claims/

[1714623058]

1714623058

[1714623058]

1714623058

[1714623058]

1714623058

[1714623058]

1714623058

[1714623058]

1714623058

[1714623058]

1714623058

[hugeblack]

I fear that they may have obtained customer data from a data leak, and then they may obtain your name, email address, and account details, such as the remaining balance, which could be exploited to claim that this service is legitimate.
These scammers are looking for any possible opportunity to steal money, it is best to verify the claim website from an official link and ignore any other links.

I reported them ----> https://safebrowsing.google.com/safebrowsing/report_phish/

[Yaunfitda]

I fear that they may have obtained customer data from a data leak, and then they may obtain your name, email address, and account details, such as the remaining balance, which could be exploited to claim that this service is legitimate.
These scammers are looking for any possible opportunity to steal money, it is best to verify the claim website from an official link and ignore any other links.

I reported them ----> https://safebrowsing.google.com/safebrowsing/report_phish/

Yeah, and probably this is the case here, and I guess not that this one, but all other scam attempts from customers of this X crypto services. But still good to hear this kind of warnings from this community.

And maybe we have such victims from the Celsius bankruptcy and hopefully it can reach them and not be the next victims because it's going to be hard for them. I mean you lost already and trying to claim what is yours and suddenly to fall victim again.

[ScamViruS]

They want to take advantage of every situation to create a trick to fool people. These scammers are always busy creating strategies to scam people in the name of helping people in bad times. It's even more important to think about how the scammers got your email address and sent you the email with the phishing link.

Now sharing your personal information on any website has become risky because someone is sitting on the other side to steal your information in any way. This is really a lot to think about

[tabas]

In every claims that we're seeing, there's also those scammers that tries to take advantage of the situation. Thanks OP when you've seen this and we need to alert everyone else upon seeing such fake claimant website or a phishing link that appears to be a copy cat of the legitimate ones. It's not just for the claims of celcius but also for other websites and services that has been gone and out of service already. This isn't going to be the last one that we'll see and there will be new ones that will be made by the scammers behind these fake websites and likely, they've been doing this all of their lifetime.

[TravelMug]

In every claims that we're seeing, there's also those scammers that tries to take advantage of the situation. Thanks OP when you've seen this and we need to alert everyone else upon seeing such fake claimant website or a phishing link that appears to be a copy cat of the legitimate ones. It's not just for the claims of celcius but also for other websites and services that has been gone and out of service already. This isn't going to be the last one that we'll see and there will be new ones that will be made by the scammers behind these fake websites and likely, they've been doing this all of their lifetime.

That is so true, and if I'm not mistaken, even the claimants from the Mt. Gox who has been one of the ghost that still haunting us for many years, has been taken advantage by this scammers and made several websites as well, fake ones obviously to trap those victims because it's been years and they want to claim it right now. So just be careful guys, this scammers are really that smart to know which incoming projects have filed for bankruptcy and what is the next step for their customers like how to claim and then they created this fake websites.

[albon]

Gox who has been one of the ghost that still haunting us for many years, has been taken advantage by this scammers and made several websites as well, fake ones obviously to trap those victims because it's been years and they want to claim it right now. So just be careful guys, this scammers are really that smart to know which incoming projects have filed for bankruptcy and what is the next step for their customers like how to claim and then they created this fake websites.

Allow me to replace the word “smart” with “more informed” about the latest and old influential and prominent events in the market. They do not change and develop their fraudulent methods and schemes. They exploit the news and trending events and create phishing sites so that the victim can connect his wallet. They rush to send phishing emails to as many emails as possible that they receive in some way or through social media, especially Twitter.

Our role here is to always alert people and Keep them up-to-date with scams like the OP did and report all fraudulent things carried out by scammers, because the market is not devoid of newcomers, of course.

[hg_away]

They exploit the news and trending events and create phishing sites so that the victim can connect his wallet. They rush to send phishing emails to as many emails as possible that they receive in some way or through social media, especially Twitter.

Greed still exists, and it is one of the most important things that the fraudster is looking for, as the fear of losing money, greed, and the desire to obtain it make the person trust the first result that appears on Google or some paid articles, and here comes their role in trying to be the first to link or pay the authors of the articles, publish them. This way, it increases the likelihood that someone will search and find the fraudulent service.

[aioc]

Expect a lot of phishing sites whenever there is news of exchanges going down or filing bankruptcy, if you are updated on this scheme you'll know how to confirm it and where to confirm, these scammers know that people who lose a lot of money cannot think clearly and there is a desperation on their part to recover their money, and this is what this scammers are going after.

Scammers kept doing this because they were getting victims and as long as they were getting victims on their scheme they just waited for the news and launched their phishing site, the authorities should keep reminding and educating people on how scammers do their thing.

 

[Dunamisx]

One of the things am more sensitive on in making business is in going through an agent when making an investment, they will set their own mode of operations different from the intended organizations and many have been using this also to deceive and scam other people, let's be very careful in using some sites, we have to be very sure that they are not cloned sites these scammers uses to attack their victims, we have to verify the acceptance of any offer intended on us in other to know if they are nit set attack at us.

[tabas]

In every claims that we're seeing, there's also those scammers that tries to take advantage of the situation. Thanks OP when you've seen this and we need to alert everyone else upon seeing such fake claimant website or a phishing link that appears to be a copy cat of the legitimate ones. It's not just for the claims of celcius but also for other websites and services that has been gone and out of service already. This isn't going to be the last one that we'll see and there will be new ones that will be made by the scammers behind these fake websites and likely, they've been doing this all of their lifetime.

That is so true, and if I'm not mistaken, even the claimants from the Mt. Gox who has been one of the ghost that still haunting us for many years, has been taken advantage by this scammers and made several websites as well, fake ones obviously to trap those victims because it's been years and they want to claim it right now.

They'll flock and try to trick people when there's something like this. Poor those people that will fall for this and think that they're the legitimate ones.

So just be careful guys, this scammers are really that smart to know which incoming projects have filed for bankruptcy and what is the next step for their customers like how to claim and then they created this fake websites.

They're all updated of what's happening with claims and as well as other news in the market and community. So if someone is reading this out of nowhere and has the same story of having some claims on Celcius or any other closed service but eligible for that, it is not going to hurt you to take time and sit in your desk reading the validity and authenticity of what these websites are because if you don't, you might fall for one.

[PX-Z]

In every claims that we're seeing, there's also those scammers that tries to take advantage of the situation.

Well, i can't say more about this, almost everything that is related to money, a scam counterpart will be created earlier or later on by this scammers. And believe it or not some people will always be get victim for this, wondering how their thoughts work, then later on will blame the legit org/group for their stupidity.

[tabas]

In every claims that we're seeing, there's also those scammers that tries to take advantage of the situation.

Well, i can't say more about this, almost everything that is related to money, a scam counterpart will be created earlier or later on by this scammers.

And there's proliferation of this on the crypto market and that's why always keep an eye if you ever are into those claiming services and not just them but, in almost every transactions that we do and yes all about money as long as it's involved.

And believe it or not some people will always be get victim for this, wondering how their thoughts work

One sad truth that we can't alter and couldn't be changed in the long run. As this space is getting older and bigger, there are those newbies that are always coming in which they're targeted by these scammers.

then later on will blame the legit org/group for their stupidity.

Can't blame themselves for that and just trying to find fault to others with their mistake but they'll have to admit later on that it's on them.

[Potato Chips]

Celsius' clients information have been leaked couple of times hence I wouldn't be surprised if these people get an uptick of phishing emails compared to others.

From the infamous court filling to third party vendors leaking their emails 🥱

https://decrypt.co/111451/bankrupt-crypto-lender-celsius-reveals-thousands-of-users-transaction-histories-in-court-filing
https://decrypt.co/66688/celsius-data-breach
https://www.reddit.com/r/CelsiusNetwork/comments/waidkd/comprised_email_addresses_by_celsius/

Bleeping Computer has an interesting bit though about this case. Apparently, someone who doesn't have an account received the same email

A recipient of one of these phishing emails told BleepingComputer that they did not have an account at Celsius and never filed as a creditor, making it strange that they received this email.

The threat actors are likely using older contact lists previously stolen through hacked cryptocurrency marketing accounts.

So perps may have used a general list which came from users of different platforms.