[List] Phishing Cryptocurrency Site - page 5.

Chikito

legendary

Activity: 2366

Merit: 2054

Quote from: $crypto$ on June 17, 2021, 06:43:59 AM

Website: exodus.cx
Archived: https://web.archive.org/web/20210617114319/https://exodus.cx/

Exodus Wallet still the favorite of phisher to traping user, I found one,

Code:

https://exodus.ac

Quote

Domain Name: EXODUS.AC
Registry Domain ID: D503300001198542592-LRMS
Registrar WHOIS Server: whois.rrpproxy.net
Registrar URL: http://www.key-systems.net
Updated Date: 2021-05-29T19:25:34Z
Creation Date: 2021-05-29T19:25:29Z
Registry Expiry Date: 2022-05-29T19:25:29Z

IP relationship > https://www.virustotal.com/gui/ip-address/185.178.208.182/relations

$crypto$

legendary

Activity: 2394

Merit: 1049

Smart is not enough, there must be skills

MetaMask Phishing Site

Website:

Code:

https://metakmax.com/

Archived: https://archive.is/wip/6ivD3

Quote

Domain name: metakmax.com
Registry Domain ID: 2621214123_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: http://www.namecheap.com
Updated Date: 0001-01-01T00:00:00.00Z
Creation Date: 2021-06-21T17:34:14.00Z
Registrar Registration Expiration Date: 2022-06-21T17:34:14.00Z
Registrar: NAMECHEAP INC
Registrar IANA ID: 1068

Pay more attention to the domain, phishing will never go away once I do, increase your awareness to do any search on true google if you are more likely to be a trap for you.

Official site: https://metamask.io/

Chikito

legendary

Activity: 2366

Merit: 2054

Fake Investment with High return.

Code:

https://crypto-peak.net

And possible with fake-proof licenses also.

Whois Lookup

Quote

NetRange: 68.65.120.0 - 68.65.123.255
CIDR: 68.65.120.0/22
NetName: NCNET-7
NetHandle: NET-68-65-120-0-1
Parent: NET68 (NET-68-0-0-0-0)
NetType: Direct Allocation
OriginAS: AS16626, AS11855, AS174, AS4323, AS3356, AS22612, AS20454, AS32421
Organization: Namecheap, Inc. (NAMEC-4)
RegDate: 2015-03-06
Updated: 2015-03-06
Comment: http://namecheap.com
Comment: for any abuse please use: [email protected]
Ref: https://rdap.arin.net/registry/ip/68.65.120.0
OrgName: Namecheap, Inc.
OrgId: NAMEC-4
Address: 11400 W. Olympic Blvd. Suite 200
City: Los Angeles
StateProv: CA
PostalCode: 90064
Country: US
RegDate: 2011-01-28

IP RElationship with another phishing https://www.virustotal.com/gui/ip-address/68.65.122.141/relations

Code:

www.coinobase.com

$crypto$

legendary

Activity: 2394

Merit: 1049

Smart is not enough, there must be skills

Fake Uniswap

Website:

Code:

https://xn--app-unswap-6sb.cc/

Archived: https://archive.is/wip/yiGKD

info whois
https://whois.domaintools.com/xn--app-unswap-6sb.cc

Uniswap
Pancakswap
1inch
Etc.
There will be more phishing sites they will continue to spread with the name of the famous and largest DEX exchange of course this will continue to be done by fraudsters to get more money.
I will continue to report in this thread and archive it.

Official site: https://app.uniswap.org/#/swap?lng=en-US

CryptoYar

hero member

Activity: 1064

Merit: 639

50,000 ETH and 5000 BTC Fake Giveaway

Website link:

Code:

https://etherlive.org/ethgives
https://etherlive.org/btcgives

Scammer's wallets:

Code:

BTC: 17vmMJ2rtTiR8UnBj8WuhjhEe1MyyemEVx
ETH: 0xD96D23a1bafA5C544E3C0F2280feaD18453B6a8E

Quote

Dates 3 days old
Created on 2021-06-16
Expires on 2022-06-16
Updated on 2021-06-16

Whois

CryptoYar

hero member

Activity: 1064

Merit: 639

10,000,000 MATIC Fake Giveaway

Website link:

Code:

https://matic.gifts/info
https://matic.gifts/

Twitter:

Code:

https://twitter.com/MATIC_BONUS

Scammer's wallet: https://polygonscan.com/address/0x97C0F0DD48Db9dd487D26108568a05F542cB230C

Quote

Dates 3 days old
Created on 2021-06-14
Expires on 2022-06-14
Updated on 2021-06-14

Whois

$crypto$

legendary

Activity: 2394

Merit: 1049

Smart is not enough, there must be skills

Quote from: Chikito on June 16, 2021, 07:50:36 PM

Quote from: $crypto$ on June 15, 2021, 02:54:53 PM

Trezor Phishing Site: {Pay attention to the domain name again}

Quote from: $crypto$ on June 16, 2021, 11:43:36 AM

Exodus Phishing Site

Seems fake or phishing wallet will not decrease every day, the scammer uses the same trick and IP every creates a new domain. because I also find phishing atomic wallet again.

True, this is not a lie even almost every day keeps popping up wallets or phishing with new domains, I don't know how there is no prevention? I think it's useless to report the domain too because they will create a new one and the trick is the same.

The exodus phishing wallet is back with a new domain after I found it yesterday but it's still the same trick.

Website: exodus.cx
Archived: https://web.archive.org/web/20210617114319/https://exodus.cx/

Quote

Domain Name: exodus.cx
Registry Domain ID: 1881037-CoCCA
Registry WHOIS Server:: whois.coccaregistry.org
Updated Date: 2021-06-02T08:32:48.542Z
Creation Date: 2021-05-26T09:48:11.184Z
Registry Expiry Date: 2022-05-26T09:48:11.374Z
Registrar Registration Expiration Date: 2022-05-26T09:48:11.374Z
Registrar: CentralNic Ltd
Reseller: Paymall s.r.o.
Reseller Street Address: Opletalova 921/6, New Town
Reseller Other Address Info: Prague 1, 11000
Reseller Country: CZ (Registrar is GB )
Reseller Phone: +420.601523999
Reseller Fax: +420.775097485

Chikito

legendary

Activity: 2366

Merit: 2054

Quote from: $crypto$ on June 15, 2021, 02:54:53 PM

Trezor Phishing Site: {Pay attention to the domain name again}

Quote from: $crypto$ on June 16, 2021, 11:43:36 AM

Exodus Phishing Site

Seems fake or phishing wallet will not decrease every day, the scammer uses the same trick and IP every creates a new domain. because I also find phishing atomic wallet again.

Code:

https://atomicwallet.dev/

https://archive.is/CfL7d

Quote

Domain Name: atomicwallet.dev
IP Address: 169.239.128.161
Registry Domain ID: 45E0B8631-DEV
Registrar WHOIS Server: whois.nic.google
Registrar URL: None
Updated Date: 2021-04-06T22:19:46Z
Creation Date: 2021-04-01T22:19:46Z
Registry Expiry Date: 2022-04-01T22:19:46Z
Registrar: NameSilo, LLC
Registrar IANA ID: 1479

just download and scanning wallet.exe using virus total;
https://www.virustotal.com/gui/file/20731b55bc3657f5fc65d94deb02182b63ec3ef4da8ac0a53eb7c553cd239d91/detection

$crypto$

legendary

Activity: 2394

Merit: 1049

Smart is not enough, there must be skills

Exodus Phishing Site

Website:

Code:

https://exocdus.ws

Archived: https://web.archive.org/web/20210616163628/https://exocdus.ws/

Quote

Domain Name: EXOCDUS.WS
Domain ID: 6D243EFB0DCBE2B0E050010AAC0133D7
WHOIS Server: whois.rrpproxy.net
Registrar URL: http://rrpproxy.com
Updated Date: 2021-06-02T11:59:36Z
Creation Date: 2021-06-02T11:59:36Z
Registrar Registration Expiration Date: 2022-06-02T11:59:36Z
Registrar: Key-Systems GmbH
Registrar IANA ID: 1345

Pay attention again to the domain carefully because now phishing sites are rife everywhere including inserting in social media and also google searches, therefore there is no need to type carelessly on google, just go with the original site and the correct URL, it is far safe.

Official site: https://www.exodus.com/

$crypto$

legendary

Activity: 2394

Merit: 1049

Smart is not enough, there must be skills

Trezor Phishing Site: {Pay attention to the domain name again}

Website:

Code:

http://wwwtrezar.io/start/

Archived: https://archive.is/wip/slz35

Quote

Domain Name: WWWTREZAR.IO
Registry Domain ID: D503300001198700345-LRMS
Registrar WHOIS Server: whois.eranet.com
Registrar URL: http://www.eranet.com
Updated Date: 2021-06-04T19:12:13Z
Creation Date: 2021-06-04T19:02:01Z
Registry Expiry Date: 2022-06-04T19:02:01Z
Registrar Registration Expiration Date:
Registrar: Eranet International Limited
Registrar IANA ID: 1868

When we click on one of the images above, we will be directed to enter a 24-word phrase.

Well I hope you never follow the instructions from this phishing site if you don't want to lose your money.
Scams are constantly trying to trick you with new scripts you may not even be aware of.

Chikito

legendary

Activity: 2366

Merit: 2054

Phishing pancakeswap.cheap

Code:

https://docs.pancakeswap.cheap/

Quote

IP Address: 62.210.177.59
Domain Name: docs.pancakeswap.cheap
Top Level Domain: CHEAP
Malformed request.
inetnum: 62.210.128.0 - 62.210.255.255
org: ORG-ONLI1-RIPE
netname: IE-POOL-BUSINESS-HOSTING
descr: IP Pool for Iliad-Entreprises Business Hosting Customers
country: FR
admin-c: IENT-RIPE
tech-c: IENT-RIPE
status: LIR-PARTITIONED PA
mnt-by: MNT-TISCALIFR-B2B
created: 2012-11-02T11:40:24Z
last-modified: 2016-02-22T16:26:23Z

This IP Relationship > https://www.virustotal.com/gui/ip-address/62.210.177.59/relations

Usually the scammer IP's always connected to another phishing site, like the post above.

$crypto$

legendary

Activity: 2394

Merit: 1049

Smart is not enough, there must be skills

Fake Giveaway Safemooncash

Website:

Code:

https://safemooncash-giveaway.org/

Archived: https://web.archive.org/web/20210611152034/https://safemooncash-giveaway.org/

Quote

Domain Name: SAFEMOONCASH-GIVEAWAY.ORG
Registry Domain ID: D402200000017031766-LROR
Registrar WHOIS Server: whois.reg.com
Registrar URL: http://www.reg.com
Updated Date: 2021-06-09T15:17:26Z
Creation Date: 2021-06-09T15:12:22Z
Registry Expiry Date: 2022-06-09T15:12:22Z
Registrar Registration Expiration Date:
Registrar: Registrar of Domain Names REG.RU LLC
Registrar IANA ID: 1606

Safemooncash has never held a giveaway like this, and those who do this are certainly scammers who want to trap you, if someone of you asks about this then we need to say this is a scam under the guise of a safemooncash giveaway and be careful, if there is a slight loophole it can harm others.

Official site: https://safemooncash.org/

$crypto$

legendary

Activity: 2394

Merit: 1049

Smart is not enough, there must be skills

Walletconnect Phishing Site:

Website:

Code:

https://wallets-sync.com/?v

Archived: https://web.archive.org/web/20210610123109/https://wallets-sync.com/?v

Quote

Domain name: wallets-sync.com
Registry Domain ID: 2614307331_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: http://www.namecheap.com
Updated Date: 0001-01-01T00:00:00.00Z
Creation Date: 2021-05-23T16:20:51.00Z
Registrar Registration Expiration Date: 2022-05-23T16:20:51.00Z
Registrar: NAMECHEAP INC
Registrar IANA ID: 1068

The original website will not display several other altcoin logos but this is just an engineering for those who don't know to enter the seed of the phrase, therefore avoid this kind of thing and be careful again in seeing the original URL.

I'm here showing the original Walletconnect site: https://walletconnect.org/

$crypto$

legendary

Activity: 2394

Merit: 1049

Smart is not enough, there must be skills

Trezor Phishing Site

Website:

Code:

https://xn--trezr-79a.io/

Archived: https://web.archive.org/web/20210607175149/https://xn--trezr-79a.io/

Quote

Domain Name: XN--TREZR-79A.IO
Registry Domain ID: D503300001198758855-LRMS
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: www.namecheap.com
Updated Date: 2021-06-06T19:30:25Z
Creation Date: 2021-06-06T19:30:22Z
Registry Expiry Date: 2022-06-06T19:30:22Z
Registrar Registration Expiration Date:
Registrar: NameCheap, Inc
Registrar IANA ID: 1068

The problem of doing a search on Google still cannot be prevented from having ads on the first page, so if you are still in the habit of typing on Google, it is necessary to pay attention to which site is the official one.
It's better to visit the site by typing into the official site, I think this is easy to memorize.

Chikito

legendary

Activity: 2366

Merit: 2054

Quote from: ChipMixer on June 01, 2021, 05:21:05 PM

Quote from: Chikito on June 01, 2021, 06:26:06 AM

I just found the link phishing chipmixer Clearnet and onion link on the review website

Code:

https://onion.best/chipmixer/

I'm pretty sure all the link inside the review is fake

Code:

https://onion.best/reviews/bitcoin-mixers/

There is no need to give fake review website clickable link.

thanks for reminding me,

*Link was edited

ChipMixer

sr. member

Activity: 456

Merit: 956

https://bitcointalk.org/index.php?topic=1935098

Quote from: Chikito on June 01, 2021, 06:26:06 AM

I just found the link phishing chipmixer Clearnet and onion link on the review website

Code:

https://onion.best/chipmixer/

I'm pretty sure all the link inside the review is fake

Code:

https://onion.best/reviews/bitcoin-mixers/

There is no need to give fake review website clickable link.

Chikito

legendary

Activity: 2366

Merit: 2054

I just found the link phishing chipmixer Clearnet and onion link on the review website

Code:

https://onion.best/chipmixer/

Code:

http://chipmixqiuseiw76.onion/
https://chippmixer.com/

I'm pretty sure all the link inside the review is fake https://onion.best/reviews/bitcoin-mixers/
So, if you please report that blog to the authority.

About Fake and Phishing chipmixer, I found A lot when searching it using DuckDuckGo and Ahmia machines.

Code:

https://chipmixerr.com/
https://chipmixerz.com/
https://chippmixer.com/
https://chipmixer.co.uk/
http://chipmixbvyyrylfmrwjdcdcxtxvrbmdyfpsm4456fnku2ajo2obva6yd.onion/
https://chipmixer.xyz/
https://chipmixerr.com/
http://chipmixer7vrgjzh.onion/

https://archive.is/gJ6VP
https://archive.is/sdn3s
https://archive.is/CGNoH
https://archive.is/DgmEo
https://archive.is/555lk
https://archive.is/gJ6VP
https://archive.is/hX2Ys
https://archive.is/Hq0Ha

Those all still active and some of them aren't new and were reported a few years ago.

$crypto$

legendary

Activity: 2394

Merit: 1049

Smart is not enough, there must be skills

Fake Giveaway Dogecoin

Website:

Code:

https://dogecoingive.org/

Archived: https://archive.is/wip/Mksd2

Quote

38 days old
Created on 2021-04-20
Expires on 2022-04-20
Updated on 2021-04-20

https://whois.domaintools.com/dogecoingive.org

More and more evil in the big multiplier when sending doges so be careful.
All ways are scammers, but it's all impossible.

Take care of your assets.

Chikito

legendary

Activity: 2366

Merit: 2054

Fake Give Away 1inch.gift

Code:

https://www.1inch.gift/

There is a fake doubling 1inch token.

more phishing found with the IP; https://www.virustotal.com/gui/ip-address/185.178.208.137/relations

Domain Information;

Quote

IP Address: 185.178.208.137
Domain Name: 1inch.gift
Registry Domain ID: DO_5b65b02f31c7b22fb5b613cd33a130c5-UR
Registrar WHOIS Server: whois.tucows.com
Registrar URL: www.tucowsdomains.com
Updated Date: 2021-05-21T17:01:09.944Z
Creation Date: 2021-05-21T16:55:16.111Z
Registry Expiry Date: 2022-05-21T16:55:16.111Z
Registrar: Tucows Domains Inc.
Registrar IANA ID: 69

Be careful don't get the trap.

Chikito

legendary

Activity: 2366

Merit: 2054

Phishing Walletconnection.org

Code:

https://walletsconection.org/

Quote

IP Address: 104.219.248.87
Domain Name: WALLETSCONECTION.ORG
Registry Domain ID: D402200000016757164-LROR
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: http://www.namecheap.com
Updated Date: 2021-05-08T17:46:48Z
Creation Date: 2021-05-08T17:46:27Z
Registry Expiry Date: 2022-05-08T17:46:27Z
Registrar Registration Expiration Date:
Registrar: NameCheap, Inc.

Be careful do not to write the mnemonic seed into a phishing site.

The real website of walletconnect is https://walletconnect.org/ we don't need to write the mnemonic seed if use the real website

Topic: [List] Phishing Cryptocurrency Site - page 5. (Read 11572 times)