Author

Topic: Do not used this trading exchange (Read 103 times)

legendary
Activity: 2114
Merit: 1150
https://bitcoincleanup.com/
April 14, 2020, 03:16:55 AM
#2
I opened the website on Brave and it's already flagged.

Code:
chrome-extension://odbfpeeihdkbihmopkbjmoonfanlbfcl/phishing.html#hostname=www.neblidex.xyz&href=https%3A%2F%2Fwww.neblidex.xyz%2F

hero member
Activity: 2870
Merit: 594
April 14, 2020, 03:02:08 AM
#1
Good day to everyone, I just want to give newbies a heads-up regarding this new trading exchange.

Code:
h t t p s://www[dot]neblidex[dot]xyz/

It is being promoted as a new kind of DEX. However, before you can used this platform, if you ask you you to download their application.



And that's where the issue will arise, you see their applications is very suspicious,

Code:
neblidex_win_v10.zip

contains a malicious code. I ran on a online sandbox and I get this results.



https://www.hybrid-analysis.com/sample/bf2a952ea01bed54d2b800eaed31050ca557208c9f8bacdd4ae58b41126fa231

So I'm just giving the community a heads-up, I almost fall for this trick. I immediately deleted the files from my device already.

Edit:



https://www.virustotal.com/gui/ip-address/162.210.96.119/relations
Jump to: