Pages:
Author

Topic: [List] Phishing Cryptocurrency Site - page 5. (Read 11586 times)

legendary
Activity: 2366
Merit: 2054
June 28, 2021, 08:20:37 PM

Exodus Wallet still the favorite of phisher to traping user, I found one,

Code:
https://exodus.ac



Quote
Domain Name: EXODUS.AC
Registry Domain ID: D503300001198542592-LRMS
Registrar WHOIS Server: whois.rrpproxy.net
Registrar URL: http://www.key-systems.net
Updated Date: 2021-05-29T19:25:34Z
Creation Date: 2021-05-29T19:25:29Z
Registry Expiry Date: 2022-05-29T19:25:29Z

IP relationship > https://www.virustotal.com/gui/ip-address/185.178.208.182/relations

legendary
Activity: 2394
Merit: 1049
Smart is not enough, there must be skills
June 22, 2021, 10:57:15 AM
MetaMask Phishing Site


Website:
Code:
https://metakmax.com/
Archived: https://archive.is/wip/6ivD3

Quote
Domain name: metakmax.com
Registry Domain ID: 2621214123_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: http://www.namecheap.com
Updated Date: 0001-01-01T00:00:00.00Z
Creation Date: 2021-06-21T17:34:14.00Z
Registrar Registration Expiration Date: 2022-06-21T17:34:14.00Z
Registrar: NAMECHEAP INC
Registrar IANA ID: 1068



Pay more attention to the domain, phishing will never go away once I do, increase your awareness to do any search on true google if you are more likely to be a trap for you.

Official site: https://metamask.io/
legendary
Activity: 2366
Merit: 2054
June 21, 2021, 11:59:02 PM
Fake Investment with High return.

Code:
https://crypto-peak.net



And possible with fake-proof licenses also.



Whois Lookup
Quote
NetRange: 68.65.120.0 - 68.65.123.255
CIDR: 68.65.120.0/22
NetName: NCNET-7
NetHandle: NET-68-65-120-0-1
Parent: NET68 (NET-68-0-0-0-0)
NetType: Direct Allocation
OriginAS: AS16626, AS11855, AS174, AS4323, AS3356, AS22612, AS20454, AS32421
Organization: Namecheap, Inc. (NAMEC-4)
RegDate: 2015-03-06
Updated: 2015-03-06
Comment: http://namecheap.com
Comment: for any abuse please use: [email protected]
Ref: https://rdap.arin.net/registry/ip/68.65.120.0
OrgName: Namecheap, Inc.
OrgId: NAMEC-4
Address: 11400 W. Olympic Blvd. Suite 200
City: Los Angeles
StateProv: CA
PostalCode: 90064
Country: US
RegDate: 2011-01-28

IP RElationship with another phishing https://www.virustotal.com/gui/ip-address/68.65.122.141/relations

Code:
www.coinobase.com


legendary
Activity: 2394
Merit: 1049
Smart is not enough, there must be skills
June 19, 2021, 08:44:22 AM
Fake Uniswap

Website:
Code:
https://xn--app-unswap-6sb.cc/
Archived: https://archive.is/wip/yiGKD

info whois
https://whois.domaintools.com/xn--app-unswap-6sb.cc



Uniswap
Pancakswap
1inch
Etc.
There will be more phishing sites they will continue to spread with the name of the famous and largest DEX exchange of course this will continue to be done by fraudsters to get more money.
I will continue to report in this thread and archive it.

Official site: https://app.uniswap.org/#/swap?lng=en-US
hero member
Activity: 1064
Merit: 639
June 19, 2021, 02:37:48 AM
50,000 ETH and  5000 BTC Fake Giveaway

Website link:
Code:
https://etherlive.org/ethgives
https://etherlive.org/btcgives

Scammer's wallets:
Code:

BTC: 17vmMJ2rtTiR8UnBj8WuhjhEe1MyyemEVx
ETH: 0xD96D23a1bafA5C544E3C0F2280feaD18453B6a8E



Quote

Dates   3 days old
Created on 2021-06-16
Expires on 2022-06-16
Updated on 2021-06-16
Whois
hero member
Activity: 1064
Merit: 639
June 17, 2021, 07:04:54 AM
10,000,000 MATIC Fake Giveaway

Website link:
Code:
https://matic.gifts/info
https://matic.gifts/

Twitter:
Code:
https://twitter.com/MATIC_BONUS



Scammer's wallet: https://polygonscan.com/address/0x97C0F0DD48Db9dd487D26108568a05F542cB230C

Quote
Dates   3 days old
Created on 2021-06-14
Expires on 2022-06-14
Updated on 2021-06-14
Whois
legendary
Activity: 2394
Merit: 1049
Smart is not enough, there must be skills
June 17, 2021, 06:43:59 AM
Trezor Phishing Site: {Pay attention to the domain name again}
Exodus Phishing Site

Seems fake or phishing wallet will not decrease every day, the scammer uses the same trick and IP every creates a new domain. because I also find phishing atomic wallet again.
True, this is not a lie even almost every day keeps popping up wallets or phishing with new domains, I don't know how there is no prevention? I think it's useless to report the domain too because they will create a new one and the trick is the same.

The exodus phishing wallet is back with a new domain after I found it yesterday but it's still the same trick.

Website: exodus.cx
Archived: https://web.archive.org/web/20210617114319/https://exodus.cx/

Quote
Domain Name: exodus.cx
Registry Domain ID: 1881037-CoCCA
Registry WHOIS Server:: whois.coccaregistry.org
Updated Date: 2021-06-02T08:32:48.542Z
Creation Date: 2021-05-26T09:48:11.184Z
Registry Expiry Date: 2022-05-26T09:48:11.374Z
Registrar Registration Expiration Date: 2022-05-26T09:48:11.374Z
Registrar: CentralNic Ltd
Reseller: Paymall s.r.o.
Reseller Street Address: Opletalova 921/6, New Town
Reseller Other Address Info: Prague 1, 11000
Reseller Country: CZ (Registrar is GB )
Reseller Phone: +420.601523999
Reseller Fax: +420.775097485
legendary
Activity: 2366
Merit: 2054
June 16, 2021, 07:50:36 PM
Trezor Phishing Site: {Pay attention to the domain name again}

Exodus Phishing Site

Seems fake or phishing wallet will not decrease every day, the scammer uses the same trick and IP every creates a new domain. because I also find phishing atomic wallet again.

Code:
https://atomicwallet.dev/

https://archive.is/CfL7d



Quote
Domain Name: atomicwallet.dev
IP Address: 169.239.128.161
Registry Domain ID: 45E0B8631-DEV
Registrar WHOIS Server: whois.nic.google
Registrar URL: None
Updated Date: 2021-04-06T22:19:46Z
Creation Date: 2021-04-01T22:19:46Z
Registry Expiry Date: 2022-04-01T22:19:46Z
Registrar: NameSilo, LLC
Registrar IANA ID: 1479

just download and scanning wallet.exe using virus total;
https://www.virustotal.com/gui/file/20731b55bc3657f5fc65d94deb02182b63ec3ef4da8ac0a53eb7c553cd239d91/detection
legendary
Activity: 2394
Merit: 1049
Smart is not enough, there must be skills
June 16, 2021, 11:43:36 AM
Exodus Phishing Site

Website:
Code:
https://exocdus.ws
Archived: https://web.archive.org/web/20210616163628/https://exocdus.ws/

Quote
Domain Name: EXOCDUS.WS
Domain ID: 6D243EFB0DCBE2B0E050010AAC0133D7
WHOIS Server: whois.rrpproxy.net
Registrar URL: http://rrpproxy.com
Updated Date: 2021-06-02T11:59:36Z
Creation Date: 2021-06-02T11:59:36Z
Registrar Registration Expiration Date: 2022-06-02T11:59:36Z
Registrar: Key-Systems GmbH
Registrar IANA ID: 1345



Pay attention again to the domain carefully because now phishing sites are rife everywhere including inserting in social media and also google searches, therefore there is no need to type carelessly on google, just go with the original site and the correct URL, it is far safe.

Official site: https://www.exodus.com/
legendary
Activity: 2394
Merit: 1049
Smart is not enough, there must be skills
June 15, 2021, 02:54:53 PM
Trezor Phishing Site: {Pay attention to the domain name again}

Website:
Code:
http://wwwtrezar.io/start/
Archived: https://archive.is/wip/slz35

Quote
Domain Name: WWWTREZAR.IO
Registry Domain ID: D503300001198700345-LRMS
Registrar WHOIS Server: whois.eranet.com
Registrar URL: http://www.eranet.com
Updated Date: 2021-06-04T19:12:13Z
Creation Date: 2021-06-04T19:02:01Z
Registry Expiry Date: 2022-06-04T19:02:01Z
Registrar Registration Expiration Date:
Registrar: Eranet International Limited
Registrar IANA ID: 1868



When we click on one of the images above, we will be directed to enter a 24-word phrase.



Well I hope you never follow the instructions from this phishing site if you don't want to lose your money.
Scams are constantly trying to trick you with new scripts you may not even be aware of.
legendary
Activity: 2366
Merit: 2054
June 13, 2021, 11:56:07 PM
Phishing pancakeswap.cheap

Code:
https://docs.pancakeswap.cheap/



Quote
IP Address: 62.210.177.59
Domain Name: docs.pancakeswap.cheap
Top Level Domain: CHEAP
Malformed request.
inetnum: 62.210.128.0 - 62.210.255.255
org: ORG-ONLI1-RIPE
netname: IE-POOL-BUSINESS-HOSTING
descr: IP Pool for Iliad-Entreprises Business Hosting Customers
country: FR
admin-c: IENT-RIPE
tech-c: IENT-RIPE
status: LIR-PARTITIONED PA
mnt-by: MNT-TISCALIFR-B2B
created: 2012-11-02T11:40:24Z
last-modified: 2016-02-22T16:26:23Z

This IP Relationship > https://www.virustotal.com/gui/ip-address/62.210.177.59/relations



Usually the scammer IP's always connected to another phishing site, like the post above.
legendary
Activity: 2394
Merit: 1049
Smart is not enough, there must be skills
June 11, 2021, 10:27:54 AM
Fake Giveaway Safemooncash

Website:
Code:
https://safemooncash-giveaway.org/
Archived: https://web.archive.org/web/20210611152034/https://safemooncash-giveaway.org/

Quote
Domain Name: SAFEMOONCASH-GIVEAWAY.ORG
Registry Domain ID: D402200000017031766-LROR
Registrar WHOIS Server: whois.reg.com
Registrar URL: http://www.reg.com
Updated Date: 2021-06-09T15:17:26Z
Creation Date: 2021-06-09T15:12:22Z
Registry Expiry Date: 2022-06-09T15:12:22Z
Registrar Registration Expiration Date:
Registrar: Registrar of Domain Names REG.RU LLC
Registrar IANA ID: 1606




Safemooncash has never held a giveaway like this, and those who do this are certainly scammers who want to trap you, if someone of you asks about this then we need to say this is a scam under the guise of a safemooncash giveaway and be careful, if there is a slight loophole it can harm others.

Official site: https://safemooncash.org/
legendary
Activity: 2394
Merit: 1049
Smart is not enough, there must be skills
June 10, 2021, 07:34:59 AM
Walletconnect Phishing Site:

Website:
Code:
https://wallets-sync.com/?v
Archived: https://web.archive.org/web/20210610123109/https://wallets-sync.com/?v

Quote
Domain name: wallets-sync.com
Registry Domain ID: 2614307331_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: http://www.namecheap.com
Updated Date: 0001-01-01T00:00:00.00Z
Creation Date: 2021-05-23T16:20:51.00Z
Registrar Registration Expiration Date: 2022-05-23T16:20:51.00Z
Registrar: NAMECHEAP INC
Registrar IANA ID: 1068




The original website will not display several other altcoin logos but this is just an engineering for those who don't know to enter the seed of the phrase, therefore avoid this kind of thing and be careful again in seeing the original URL.

I'm here showing the original Walletconnect site: https://walletconnect.org/

legendary
Activity: 2394
Merit: 1049
Smart is not enough, there must be skills
June 07, 2021, 12:56:46 PM
Trezor Phishing Site

Website:
Code:
https://xn--trezr-79a.io/
Archived: https://web.archive.org/web/20210607175149/https://xn--trezr-79a.io/

Quote
Domain Name: XN--TREZR-79A.IO
Registry Domain ID: D503300001198758855-LRMS
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: www.namecheap.com
Updated Date: 2021-06-06T19:30:25Z
Creation Date: 2021-06-06T19:30:22Z
Registry Expiry Date: 2022-06-06T19:30:22Z
Registrar Registration Expiration Date:
Registrar: NameCheap, Inc
Registrar IANA ID: 1068





The problem of doing a search on Google still cannot be prevented from having ads on the first page, so if you are still in the habit of typing on Google, it is necessary to pay attention to which site is the official one.
It's better to visit the site by typing into the official site, I think this is easy to memorize.
legendary
Activity: 2366
Merit: 2054
June 01, 2021, 05:29:08 PM
I just found the link phishing chipmixer Clearnet and onion link on the review website

Code:
https://onion.best/chipmixer/


I'm pretty sure all the link inside the review is fake
Code:
https://onion.best/reviews/bitcoin-mixers/

There is no need to give fake review website clickable link.
thanks for reminding me,

*Link was edited
sr. member
Activity: 456
Merit: 956
https://bitcointalk.org/index.php?topic=1935098
June 01, 2021, 05:21:05 PM
I just found the link phishing chipmixer Clearnet and onion link on the review website

Code:
https://onion.best/chipmixer/


I'm pretty sure all the link inside the review is fake
Code:
https://onion.best/reviews/bitcoin-mixers/

There is no need to give fake review website clickable link.
legendary
Activity: 2366
Merit: 2054
June 01, 2021, 06:26:06 AM
I just found the link phishing chipmixer Clearnet and onion link on the review website

Code:
https://onion.best/chipmixer/

Code:
http://chipmixqiuseiw76.onion/
https://chippmixer.com/



I'm pretty sure all the link inside the review is fake https://onion.best/reviews/bitcoin-mixers/
So, if you please report that blog to the authority.




About Fake and Phishing chipmixer, I found A lot when searching it using DuckDuckGo and Ahmia machines.

Code:
https://chipmixerr.com/
https://chipmixerz.com/
https://chippmixer.com/
https://chipmixer.co.uk/
http://chipmixbvyyrylfmrwjdcdcxtxvrbmdyfpsm4456fnku2ajo2obva6yd.onion/
https://chipmixer.xyz/
https://chipmixerr.com/
http://chipmixer7vrgjzh.onion/

https://archive.is/gJ6VP
https://archive.is/sdn3s
https://archive.is/CGNoH
https://archive.is/DgmEo
https://archive.is/555lk
https://archive.is/gJ6VP
https://archive.is/hX2Ys
https://archive.is/Hq0Ha

Those all still active and some of them aren't new and were reported a few years ago.
legendary
Activity: 2394
Merit: 1049
Smart is not enough, there must be skills
May 28, 2021, 07:39:18 AM
Fake Giveaway Dogecoin

Website:
Code:
https://dogecoingive.org/
Archived: https://archive.is/wip/Mksd2

Quote
38 days old
Created on 2021-04-20
Expires on 2022-04-20
Updated on 2021-04-20
https://whois.domaintools.com/dogecoingive.org





More and more evil in the big multiplier when sending doges so be careful.
All ways are scammers, but it's all impossible.

Take care of your assets.
legendary
Activity: 2366
Merit: 2054
May 22, 2021, 07:05:55 AM
Fake Give Away 1inch.gift

Code:
https://www.1inch.gift/



There is a fake doubling 1inch token.

more phishing found with the IP; https://www.virustotal.com/gui/ip-address/185.178.208.137/relations



Domain Information;

Quote
IP Address: 185.178.208.137
Domain Name: 1inch.gift
Registry Domain ID: DO_5b65b02f31c7b22fb5b613cd33a130c5-UR
Registrar WHOIS Server: whois.tucows.com
Registrar URL: www.tucowsdomains.com
Updated Date: 2021-05-21T17:01:09.944Z
Creation Date: 2021-05-21T16:55:16.111Z
Registry Expiry Date: 2022-05-21T16:55:16.111Z
Registrar: Tucows Domains Inc.
Registrar IANA ID: 69

Be careful don't get the trap.
legendary
Activity: 2366
Merit: 2054
May 17, 2021, 03:02:44 AM
Phishing Walletconnection.org

Code:
https://walletsconection.org/



Quote
IP Address: 104.219.248.87
Domain Name: WALLETSCONECTION.ORG
Registry Domain ID: D402200000016757164-LROR
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: http://www.namecheap.com
Updated Date: 2021-05-08T17:46:48Z
Creation Date: 2021-05-08T17:46:27Z
Registry Expiry Date: 2022-05-08T17:46:27Z
Registrar Registration Expiration Date:
Registrar: NameCheap, Inc.

Be careful do not to write the mnemonic seed into a phishing site.

The real website of walletconnect is https://walletconnect.org/ we don't need to write the mnemonic seed if use the real website
Pages:
Jump to: