Topic: Fake coingecko site please beware! (Read 284 times)

@Agbe it all depends on what device you are viewing with, like previously when i posted it was from my smartphone not my pc, i noticed such popup and i was like when did Coingecko started connecting wallet so was little bit confused also was fast to click the connect button before realizing it a fake site that was when i decided to share here.
Probably if you search coingecko on google series of fake website about coingecko would like came up.

These three links are showing different things. The OP link and royalfestus link are the same but why the ads didn't pop up from royalfestus site and pop up in the OP site. That means, one thing I will presume is that, royalfestus link is the original site of the company while the OP link is the fake like. Even the domain name from the OP is not genuine but when you click the link then you see the OP link logo and royalfestus logo are the same. So probably the ads pop up from site. Or a scammer is creating a similar site and trying to link his own to the main site as ads so that anyone mistakenly click on the ads will be directly connect to the scammers site.

What I know as home page is https://www.coingecko.com/ not the one you mentioned.
Google Play Store also has a Coingecko app with more features than the website; https://play.google.com/store/apps/details?id=com.coingecko.coingeckoapp&hl=en&gl=US

Thank you very y for this notice and information. It is very good to detect the techniques, approaches and the methods of the fraudsters and scammers very fast and expose them so that people will not fall victim. Every day and night these fraudsters are using different methods to scam people, mostly in the social media.  Cryptocurrency exchange platforms are another area these scammers are using. So be careful with the exchange platforms you used.

You really know how to secure your coins and implement security if you are very particular about the URL of every site you're visiting and check the platform you're linking your wallet, these two are basic and how scammers work, all phishing sites used these two popular methods and the hardest thing is you got scammed before you discover these tricks.
It is really important to read a lot about security, not only about how to make a profit but how to secure your coin and private key as well.

You did well by alerting this forum of that. Anyone visiting for the first time who isn't careful will easily get deceived. This is why I always insist on getting direct links from whoever that's asking me to check up any site. I don't just listen to them dictating it without writing the words out. After that I make sure to bookmark or save it on homepage if it's a site I'm likely going to revisit. In this crypto industry, don't leave anything to chances.

It used to be Blockfolio for me before the SBF dude bought it and changed its name to FTX and then messed the whole thing up. What a shame.

But of course, the phishing would be to steal wallet information and then hack it.

Most newbie without prior knowledge of the scheme scammer use this day to get access to their wallets will still fall for this as many time as possible, this is because they failed to apply caution to always check the website link in utr to see if it secured or not.

Hackers have a way of creating similar website links to that of already know crypto platforms such as coin gecko and cmc and if one is not csrefuyou can be lured into exposing your personal detail like wallet keys without realizing you are giving them to scammers. So the advice is to use the right link away and never click on any random link sent to you via pm.

If any website just like what posted OP posted should ask for your recovery phrase then its 100% scam close the site right away or report it here just like what OP did, asking for a recovery phrase is such a big no-no, we are always reminded with this phrase Not your Key Not Your Coins no legit website will ask for a recovery phrase just to create an account or log in in a third party site.

First time I see this CoinGecko phishing scam, and it's interesting that you can't do anything on website until you connect shitcoin wallets like metamask or walletconnect .
Even clicking on X in right corner is not doing anything, so my ultimate suggestion would be to stop using shitcoins and their wallets to avoid scams like this.
Even normal metamask is tracking your IP address and everything you do, and who knows where all this information is going.

There is obvious spelling mistake in domain name and it was created yesterday so everything is clear:


Similar domains are used and probably owned by same scammers, as website structure is the same:

Post related to fake cmc have posted before, these scammer went to a length to even want to coingecko to scam people as well?
Wonder shall never end, scammers looking for all means to pipe people out of their hard time earn money. Please anyone visiting all these sites should be very mindful and watchful to avoid being scammed or hacked.

Actually this is what I mean, so being in a hurry is very bad thing to do and I believe their target is to those who are very faster in clicking their key or cell phone personally I would have been a victim if not that was careful enough to code is a wrong site before I exited it and even as that the exit is not working and this shows that is very possible to hack into people's wallet.
I wonder why google keep promoting such scam site as ads.

Thing is, their targets are not experienced Metamask/Coingecko users, but newbies who don't really know what they are doing so they might connect MM to Coingecko and approve transaction which will result in money gone. Hell, its pretty common to hear newbies even entering seed phrase in similar scam attempt.

But in reality, even veteran crypto users can make a mistake, all that you need is not paying attention for a few seconds and that's it. I know a guy who lost ~100k by connecting Metamask to a phishing site, and this guy has been in crypto since like 2014, so he was far from a newbie. But, he was in a hurry and wanted to do something quick before going out and ended up losing big chunk of his portfolio.

I am also curious about how would the abuser stole our token or anything else through this procedure. Ages ago I fell into the similar situation --namely, accidentally connecting a dApp to our TW or MM-- and I'm actually curious what'll the scammer do. Far as I know, TW --can't say for MM, hadn't use them for a while-- still needs us to approve transactions, so I don't think they can do anything even when they're connected to our wallet through walletconnect.

Best I can think of is the user who fell into this situation --just like I did-- immediately realized their mistake and reached their TG for support. And we all know how many way-too-helpful hand will reach us back through PM once we asked for help there. So, maybe a little tip for anyone fell --or currently falling-- into this kind of scam, their "official" representative --because there's no official staff there, all who helped you there are the honest and kind community-- will not reach through PM. Even if you reached them first, they'll urge you to write on the channel so everyone can read and help and give insight. So, the basic rule of thumb applies: if anyone reached you through PM claiming they'll help with your issue, just ignore them.

Another thing, just to be safe, is to revoke the connection, instruction here

For the original coingecko, yes, there's nothing other than the emails and accounts.

For this phishing site, it's the connecting of wallets which is weird why they ^{(scammer/hacker)} designed it like that lol, coz most regular users of coingecko will probably notice why there is a connecting of wallet ^{(metamask or something)}.

Yes, as per the OP. 

I'm not a very passionate user of Coingecko (as well as CMC) and I still use them exclusively to see the current price of a coin and possibly its market.
what kind of services do they offer if they are so interested in phishing?
in what way is abuse possible here besides collecting email addresses?

The website is meant to scam people, the main home page
https://couingecko.click/ has nothing on it
  what they are promoting is the connect page this is the entry they use to scam people.

If you have an account on the real Coingecko there is no option there to connect or sign up or log in using a wallet, only two you have to sign up using Google or Apple.

The x button on the website doesn't work lol it forces its visitors to log in using thier browsers, Damn scammers.
CMC and Coingecko are just lists of coin ranking but these days they seem to be used by developers to distribute airdrops which I guess the phishers are also trying to find ways to get the money of its users.

OP should just make the link above to be "not clickable"

Searching on Google is always misleading if we are not careful because there we will see phishing site advertisements on the first page of Google instead of the original ones below, so it's better not to type in Google search and just write directly with the URL that we for example Coingecko.com

Look at this picture I also tried to search for Coingecko on Google with the results of lots of fake advertisements which are phishing that have to be connected to our wallets.
I'm sure in a few days they can disappear after being reported and after that will appear again with a new domain.


In essence, stay alert to beginners so they don't become victims in this case.

Sad, but true. Thats called malvertising, well who knows its all done by a google employee itself?
These scammers did this type of sponsored ad for a fake coinmarketcap site as well last month. Despite of having strict policies for crypto based ads, its unfortunate to see these type of things happening on google.
Done!

I've search "coingecko" in google and it shows as sponsored in the top, which really unfortunate that google don't have quality control to avoid accepting such ads.

I suggest you to avoid clicking sponsored ads in google search page just like you did because scam ads is inevitable in google search page.

Also, kindly report it, it only takes seconds to do that.