[List] Phishing Cryptocurrency Site - page 3.

$crypto$

legendary

Activity: 2394

Merit: 1049

Smart is not enough, there must be skills

Solana Fake Giveaway

Website:

Code:

https://get-sol.net/sol/

Archived: https://archive.ph/wip/Xcdok

Quote

Domain Name: GET-SOL.NET
Registry Domain ID: 2636323475_DOMAIN_NET-VRSN
Registrar WHOIS Server: whois.regtime.net
Registrar URL: http://www.webnames.ru
Updated Date: 2021-08-25T15:55:08Z
Creation Date: 2021-08-25T00:00:00Z
Registrar Registration Expiration Date: 2022-08-25T04:00:00Z
Registrar: REGTIME LTD.
Registrar IANA ID: 1362

This trick is still the same as other fake giveaways, but this time it is Solana who is indeed a trending topic, whichever is the increase, the scamers have created this scheme, I emphasize for beginners you have to be careful with this unreasonable offer.

Keep your money much safer.

Chikito

legendary

Activity: 2366

Merit: 2054

Quote from: $crypto$ on September 17, 2021, 03:26:46 PM

Chipminxer Phishing

Website:

Code:

https://chipminxer.com/

Archived: https://archive.md/wip/Xr0kT

I'm not surprised when comes from that popular site. when I checked, phishing sites using that name are increasing every day. A year ago, when I checked using a domain similar tool only about 100's, but now increased to be 250 with a similar Chipmixer name.

https://dnstwister.report/search?ed=636869706d697865722e636f6d

Some of the domains are still alive with the same interface as real a Chipmixer.

Code:

https://chipmlxer.com/

that impossible to stoping the scammer create a new one. but the owner can get an alert (by sign up), so when the scammer creates a similar domain, the owner can report quickly too; https://safebrowsing.google.com/safebrowsing/report_general/

$crypto$

legendary

Activity: 2394

Merit: 1049

Smart is not enough, there must be skills

Chipminxer Phishing

Website:

Code:

https://chipminxer.com/

Archived: https://archive.md/wip/Xr0kT

Quote from: https://whois.domaintools.com/chipminxer.com

37 days old
Created on 2021-08-11
Expires on 2022-08-11
Updated on 2021-08-12

REAL

FAKE

Chikito

legendary

Activity: 2366

Merit: 2054

Quote from: $crypto$ on September 14, 2021, 01:50:56 PM

Maybe this phishing site is still related to what you found, I'm not surprised anymore when I continue to be on Facebook I always find things like this, I think everyone needs to be careful.
Even I now see so many streams from facebook about Axie Infinity game, please pay attention about this phishing site.

maybe yes, but with a different server and IPs. Facebook and Twitter or Any social media are beautiful places for scammers to get into the trap because in those places too many people don't know how to distinguish real and fake.

like this one, I found it on Twitter

Code:

http://axieinfinity.tel

Same as above, that link directing to put the mnemonic seed.

Quote

IP Address: 104.21.90.27
Domain Name: axieinfinity.tel
Registry Domain ID: DE17E66F501AA4B2181E6A4632F423070-GDREG
Registrar WHOIS Server: whois.opensrs.net
Registrar URL: www.opensrs.com
Updated Date: 2021-09-10T22:00:10Z
Creation Date: 2021-09-10T21:52:07Z
Registry Expiry Date: 2022-09-10T21:52:07Z
Registrar: Tucows Domains Inc.

the relationship: https://www.virustotal.com/gui/ip-address/104.21.90.27/relations

$crypto$

legendary

Activity: 2394

Merit: 1049

Smart is not enough, there must be skills

Quote from: Chikito on September 12, 2021, 07:02:57 PM

Phishing axie infinity website

Code:

https://axieinfinity.monster/

Phishing Axie Infinity Site

Website:

Code:

https://marketplaceaxiesinfinity.com/

Archived: https://archive.md/wip/TUoo9

Quote

Domain Name: MARKETPLACEAXIESINFINITY.COM
Registry Domain ID: 2638995766_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.publicdomainregistry.com
Registrar URL: www.publicdomainregistry.com
Updated Date: 2021-09-06T00:55:27Z
Creation Date: 2021-09-05T23:37:59Z
Registrar Registration Expiration Date: 2022-09-05T23:37:59Z
Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com
Registrar IANA ID: 303

FAKE: https://www.facebook.com/100961772285091/posts/129622502752351/

Maybe this phishing site is still related to what you found, I'm not surprised anymore when I continue to be on Facebook I always find things like this, I think everyone needs to be careful.
Even I now see so many streams from facebook about Axie Infinity game, please pay attention about this phishing site.

$crypto$

legendary

Activity: 2394

Merit: 1049

Smart is not enough, there must be skills

Pancakeswap Phishing Site

Website

Code:

https://pancake-swap.co/

Archived: https://archive.md/C4q9X

Quote

Domain Name: pancake-swap.co
Registry Domain ID: D2431850C211A4DD187AE420AF4DB121C-GDREG
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: http://www.namecheap.com
Updated Date: 2021-09-03T18:48:23Z
Creation Date: 2021-08-29T18:48:22Z
Registry Expiry Date: 2022-08-29T18:48:22Z
Registrar: NameCheap, Inc.
Registrar IANA ID: 1068

FAKE: https://www.facebook.com/103144675449101/posts/103151822115053/

Don't ever click in this fake Facebook page, they are trying to create more phishing sites and spread on facebook and of course they should check the URL.

Chikito

legendary

Activity: 2366

Merit: 2054

Phishing axie infinity website

Code:

https://axieinfinity.monster/

Quote

IP Address: 172.67.194.217
Domain Name: AXIEINFINITY.MONSTER
Registry Domain ID: D247748994-CNIC
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: https://namecheap.com
Updated Date: 2021-08-29T13:13:53.0Z
Creation Date: 2021-08-29T12:16:57.0Z
Registry Expiry Date: 2022-08-29T23:59:59.0Z
Registrar: Namecheap

the IP relationship: https://www.virustotal.com/gui/ip-address/172.67.194.217/relations

the domain has created a month ago, that possible person who don't know the real game site can possible get the trap and write the detailed seed into phishing, they put the trap with a fool the broken metamask. Be carefull.

Chikito

legendary

Activity: 2366

Merit: 2054

Quote from: $crypto$ on September 04, 2021, 12:45:53 PM

Quote

Domain Name: KYC-METAMASK.IO
Registry Domain ID: D503300001201715023-LRMS
Registrar WHOIS Server: whois.godaddy.com
Registrar URL: http://www.godaddy.com
Updated Date: 2021-08-30T06:33:28Z
Creation Date: 2021-08-30T06:21:11Z
Registry Expiry Date: 2022-08-30T06:21:11Z
Registrar Registration Expiration Date:
Registrar: GoDaddy.com, LLC
Registrar IANA ID: 146

The domain from IP address : 34.102.136.180 which marked bad by every community on virus total, see this: https://www.virustotal.com/gui/ip-address/34.102.136.180/community called: Phishing distribution server, the scammer creates, Phishing, malicious, malware and etc. masquerade on Amazon and another crypto site.

and, SSH bruteforce attack, also

let's report it to godday > [email protected]

$crypto$

legendary

Activity: 2394

Merit: 1049

Smart is not enough, there must be skills

Metamask Site Phishing

Website:

Code:

https://www.kyc-metamask.io/

Archived: https://archive.ph/wip/LOnzv

Quote

Domain Name: KYC-METAMASK.IO
Registry Domain ID: D503300001201715023-LRMS
Registrar WHOIS Server: whois.godaddy.com
Registrar URL: http://www.godaddy.com
Updated Date: 2021-08-30T06:33:28Z
Creation Date: 2021-08-30T06:21:11Z
Registry Expiry Date: 2022-08-30T06:21:11Z
Registrar Registration Expiration Date:
Registrar: GoDaddy.com, LLC
Registrar IANA ID: 146

FAKE: https://www.facebook.com/permalink.php?story_fbid=111449014596773&id=108198504921824

Like my post a few hours ago, when I surf on Facebook I always find fake pages like this that are always worrying about other people who don't know anything, so don't ever click on a page on Facebook if you don't know anything.

$crypto$

legendary

Activity: 2394

Merit: 1049

Smart is not enough, there must be skills

Exodus Site Phishing

Website:

Code:

https://crypto-bonus.top/

Archived: https://archive.ph/wip/aFYPB

Quote

Domain Name: crypto-bonus.top
Registry Domain ID: D20210904G10001G_68339676-top
Registrar WHOIS Server: whois.namesilo.com
Registrar URL: https://www.namesilo.com
Updated Date: 2021-09-03T18:47:03Z
Creation Date: 2021-09-03T18:43:40Z
Registry Expiry Date: 2022-09-03T18:43:40Z
Registrar: NameSilo,LLC
Registrar IANA ID: 1479

FAKE: https://www.facebook.com/permalink.php?story_fbid=108800091537768&id=108797548204689

There have been many fake sites with ads on Facebook, so if you don't know, especially beginners, don't click on anything because the promotion always offers a bonus that is supposed to include a phrase/seed.

The point is to avoid this.

Ultegra134

hero member

Activity: 1778

Merit: 907

Quote from: Chikito on September 01, 2021, 06:46:10 AM

Quote from: Ultegra134 on August 31, 2021, 12:56:10 PM

I put my private key there, because it wouldn't automatically "authorize". What a dumbass I am. Fortunately, my gut instinct kicked in and the very next second I did that stupid move, I moved all my funds to another wallet.

Be safe, do not trust anyone and never input any confidential information EVER!

You have to edit that link to unclickable to avoid another user access it

Code:

https://multibridge-dapps.com/

that could be a lesson for you and everyone to recheck and always learning in the next time.

the website was created 14 days ago which purposes for the scam.

Quote

IP: 198.187.31.167
Domain Name: MULTIBRIDGE-DAPPS.COM
Registry Domain ID: 2633753046_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: http://www.namecheap.com
Updated Date: 2021-08-14T17:47:29Z
Creation Date: 2021-08-14T17:33:13Z

the scammer usually uses the same server and IP address to create another one.

See the related IP: https://www.virustotal.com/gui/ip-address/198.187.31.167/relations

Code:

https://www.safemoonmaxsfax.com/
www.coinlitefx.com
https://www.coin-star.net/

...etc

the scammer creates another way when failed on the first step, just to look at what they create, token, exchange, cloud mining and etc.

Alright, changed it. It was definitely a lesson learned, I'm not responding to any messages I receive from unknown people nor am I going to give out such information ever again.

I was one of the lucky ones, that at least immediately realized what a stupid thing I've done.

Chikito

legendary

Activity: 2366

Merit: 2054

Quote from: Ultegra134 on August 31, 2021, 12:56:10 PM

I put my private key there, because it wouldn't automatically "authorize". What a dumbass I am. Fortunately, my gut instinct kicked in and the very next second I did that stupid move, I moved all my funds to another wallet.

Be safe, do not trust anyone and never input any confidential information EVER!

You have to edit that link to unclickable to avoid another user access it

Code:

https://multibridge-dapps.com/

that could be a lesson for you and everyone to recheck and always learning in the next time.

the website was created 14 days ago which purposes for the scam.

Quote

IP: 198.187.31.167
Domain Name: MULTIBRIDGE-DAPPS.COM
Registry Domain ID: 2633753046_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: http://www.namecheap.com
Updated Date: 2021-08-14T17:47:29Z
Creation Date: 2021-08-14T17:33:13Z

the scammer usually uses the same server and IP address to create another one.

See the related IP: https://www.virustotal.com/gui/ip-address/198.187.31.167/relations

Code:

https://www.safemoonmaxsfax.com/
www.coinlitefx.com
https://www.coin-star.net/

...etc

the scammer creates another way when failed on the first step, just to look at what they create, token, exchange, cloud mining and etc.

Ultegra134

hero member

Activity: 1778

Merit: 907

I don't get how I fell for such a scam, when there's even a thread about it right here. (I was just informed by another user about this thread). I don't get why I didn't look it up earlier before conducting such a stupid move. Anyway, do not trust anyone on Discord, and keep in mind that project officials/admins will NEVER DM you.

This was a lesson for me, I almost lost all the money I was talking about in my Bitcointalk appreciation thread (https://bitcointalksearch.org/topic/how-bitcointalk-assisted-in-my-financial-stability-5356169). It would suck big time if now I made a thread "How I lost all my money".

The website I'm referring to is the following:

Code:

Website: https://multibridge-dapps.com/

Archive: http://web.archive.org/web/20210831175418/https://multibridge-dapps.com/

I put my private key there, because it wouldn't automatically "authorize". What a dumbass I am. Fortunately, my gut instinct kicked in and the very next second I did that stupid move, I moved all my funds to another wallet.

Be safe, do not trust anyone and never input any confidential information EVER!

$crypto$

legendary

Activity: 2394

Merit: 1049

Smart is not enough, there must be skills

Two TrustWallet phishing sites

Website:

Code:

https://titrustwallat.com/
https://trustlivewallet.com/

Archived:
https://archive.ph/LdcJi
https://archive.ph/wip/5afJ6

Quote

Created on 2021-08-27
Expires on 2022-08-27
Updated on 2021-08-27

Quote

92 days old
Created on 2021-05-27
Expires on 2022-05-27
Updated on 2021-06-15

Phishing sites always ask for your phrase to be entered into the site so, beginners should be careful and look at the URL again and distinguish it from the original, because a group of scamers now have a lot of advertising on Facebook that almost resembles the original page.

$crypto$

legendary

Activity: 2394

Merit: 1049

Smart is not enough, there must be skills

Walletconnet Phishing Site:

Website:

Code:

https://waletconnector.com/

Archived: https://archive.ph/wip/29wgA

Quote

Domain Name: waletconnector.com
Registry Domain ID: 2603389585_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.registrar.eu
Registrar URL: http://www.registrar.eu
Updated Date: 2021-04-07T07:44:12Z
Creation Date: 2021-04-07T05:42:13Z
Registrar Registration Expiration Date: 2022-04-07T05:42:13Z
Registrar: Hosting Concepts B.V. d/b/a Registrar.eu
Registrar IANA ID: 1647

There is no difference the script remains the same and it seems like scamers continue to use this script but they only change in terms of the spelling of the domain, and this is the most important thing to pay attention to.

stay alert.

CryptoYar

hero member

Activity: 1064

Merit: 639

Fake BTC and Eth Giveaway

Website:

Code:

https://elon-musk2021.com/

Archived: https://archive.vn/Ue4ac

Domain info:

Quote

1 days old
Created on 2021-08-17
Expires on 2022-08-17
Updated on 2021-08-17

Scammers promoting this website on YouTube along with a video clip of the bitcoinword conference.

Video link: https://youtu.be/KYdm5mzd2Mk

Scammers wallets:

Code:

Btc: 0xE09Ac45DE32feD3489e8891d22dD6EA9FdEFCA64
Eth: 0xE09Ac45DE32feD3489e8891d22dD6EA9FdEFCA64

$crypto$

legendary

Activity: 2394

Merit: 1049

Smart is not enough, there must be skills

Binance Giveaway Fake

Website:

Code:

https://bince-x2x3bonus.com/

Archived: https://web.archive.org/web/20210816132421/https://bince-x2x3bonus.com/

Quote

Domain Name: bince-x2x3bonus.com
Registry Domain ID: 2633563772_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.registrar.eu
Registrar URL: http://www.registrar.eu
Updated Date: 2021-08-13T12:52:57Z
Creation Date: 2021-08-13T10:52:45Z
Registrar Registration Expiration Date: 2022-08-13T10:52:45Z
Registrar: Hosting Concepts B.V. d/b/a Registrar.eu
Registrar IANA ID: 1647

Fake giveaways have appeared again and they have added a lot of members on the telegram channel, so for beginners who just know please be careful never to send any funds offered by them on telegram.

$crypto$

legendary

Activity: 2394

Merit: 1049

Smart is not enough, there must be skills

Pancakeswap Phishing Site

Website:

Code:

https://pancakeaps.finance/

Archived: https://archive.is/wip/akO2W

Quote

Domain Name: pancakeaps.finance
Registry Domain ID: e61813cd5d2c4d949111211b9a7d81f5-DONUTS
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: https://www.namecheap.com/
Updated Date: 2021-08-09T09:25:50Z
Creation Date: 2021-08-09T09:23:54Z
Registry Expiry Date: 2022-08-09T09:23:54Z
Registrar: NameCheap, Inc.
Registrar IANA ID: 1068

I see almost every day phishing is always there, and this afternoon I found the Pancakeswap phishing site with a different name now and the one that was not accessible anymore, so it's true these scamers have changed the name a lot to fool beginners who don't even know the script no difference at all.

It's much better to bookmark the original URL than having to type it if you can't tell the difference.

But I'm sure there must be people trapped outside the forum.

Chikito

legendary

Activity: 2366

Merit: 2054

Phishing Metamask Wallet

Code:

connectmetamaks.com

Quote

IP Address: 198.54.126.105
omain Name: connectmetamaks.com

Top Level Domain: COM (Commercial TLD)

Domain Name: CONNECTMETAMAKS.COM
Registry Domain ID: 2631666767_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: http://www.namecheap.com
Updated Date: 2021-08-05T10:41:54Z
Creation Date: 2021-08-05T10:41:29Z
Registry Expiry Date: 2022-08-05T10:41:29Z

Be careful that IP address and domain has correlated with another scam and phishing, you can check it here > https://www.virustotal.com/gui/ip-address/198.54.126.105/relations

that habit can't be erased, once he scammer will be forever, he just changes the domain with the same trick. just be careful, they are around us.

$crypto$

legendary

Activity: 2394

Merit: 1049

Smart is not enough, there must be skills

Pancakeswap Phishing Site

Website:

Code:

https://pancakeios.com/

Archived: https://web.archive.org/web/20210803160334/https://pancakeios.com/

Quote from: https://whois.domaintools.com/pancakeios.com

1 days old
Created on 2021-08-02
Expires on 2022-08-02
Updated on 0000-12-31

This phishing site ad is being promoted on the sponsor's Facebook page and I think there will be more to it than that.
So we never click from unknown pages and try to pay attention to the URL when visiting it.

Topic: [List] Phishing Cryptocurrency Site - page 3. (Read 11586 times)