[List] Phishing Cryptocurrency Site - page 6.

$crypto$

legendary

Activity: 2338

Merit: 1041

Smart is not enough, there must be skills

FAKE Giveaway Dogecoin

Website:

Code:

https://dogecoin.claims/

Archived: https://archive.is/iWRrk

Quote

6 days old
Created on 2021-05-08
Expires on 2022-05-08
Updated on 2021-05-13

https://whois.domaintools.com/dogecoin.claims

Scammers wallet

Code:

DHQSTXYAezWzZUci5ibnhk2G6t8rY21XCv

Before Ethereum and now Doge that appeared in a fake giveaway with the same appearance, there will definitely be more fake giveaway appearing.
I will continue to monitor and report it here.

Baofeng

legendary

Activity: 2576

Merit: 1655

Another of the Polka fake site

Code:

https://polkastarter.art/

Archived: https://archive.is/cFS9p

Quote

Dates    1 days old
Created on 2021-05-11
Expires on 2022-05-11
Updated on 2021-05-11

Name Servers    DNS1.NAMECHEAPHOSTING.COM (has 1,083,830 domains)
DNS2.NAMECHEAPHOSTING.COM (has 1,083,830 domains)


Tech Contact    —
IP Address    66.29.132.84 - 13 other sites hosted on this server

$crypto$

legendary

Activity: 2338

Merit: 1041

Smart is not enough, there must be skills

FAKE Public Sale Solanium

Website:

Code:

https://solanium-sale.com/

Scammers wallet

Code:

0xc1f258f090a080097041f0b6BC4DDd510339725F

Solanium has not made a public sale yet and is currently on a whitelist so you should look closely that solanium has not announced a public sale yet.

It must be differentiated and don't let the case come back because I see in the contents of the scamers wallet there are many assets in it and I am sure that it is the money they make with the fake sale.

Fake Public Sale Wilder World

Webiste:

Code:

https://polkastarter.ltd/WilderWorld

Tokens (WILD) have been traded, you can see here https://www.coingecko.com/en/coins/wilder-world#markets

$crypto$

legendary

Activity: 2338

Merit: 1041

Smart is not enough, there must be skills

FAKE Public Sale Polkarare and QoinIQ

Website:

Code:

https://prare-sale.com/
https://qoiniq-sale.com/

Archived: 1 - 2

Quote

Created on 2021-05-09
Expires on 2022-05-09
Updated on 2021-05-09

Quote

2 days old
Created on 2021-05-07
Expires on 2022-05-07
Updated on 2021-05-07

Scammers wallet

Code:

0xc1f258f090a080097041f0b6BC4DDd510339725F

QoinIQ IEO Start 17 may on Probit
Polkarare IEO Start 10 May on Gate.io

Now that more IDO will be cloned in their fake sales I see the scammers wallets look the same and are controlled by a group of people.
Be careful.

Chikito

legendary

Activity: 2352

Merit: 2049

Phishing uniswap-meta Wallet

Code:

http://uniswap-meta.org

Quote

IP Address: 45.141.159.64
Domain Name: UNISWAP-META.ORG
Registry Domain ID: D402200000016532905-LROR
Registrar WHOIS Server: whois.registrar.eu
Registrar URL: http://www.openprovider.com
Updated Date: 2021-04-28T13:47:55Z
Creation Date: 2021-04-14T06:14:00Z
Registry Expiry Date: 2022-04-14T06:14:00Z
Registrar Registration Expiration Date:
Registrar: Hosting Concepts B.V. d/b/a Registrar.eu

the relationship IP > https://www.virustotal.com/gui/ip-address/45.141.159.64/relations

The scammer still using the same server (IP address) to create another phishing. better to report that IP than domain.

I still to warning people to do not to write your detail (mnemonic seed) into phishing or another website.

Baofeng

legendary

Activity: 2576

Merit: 1655

The never ending Elon Musk fake bitcoin giveaways:

Code:

http://snlmusk.com/

Quote

Dates    2 days old
Created on 2021-05-06
Expires on 2022-05-06
Updated on 2021-05-06

Name Servers    DELL.NS.CLOUDFLARE.COM (has 19,076,155 domains)
ED.NS.CLOUDFLARE.COM (has 19,076,155 domains)


Tech Contact    REDACTED FOR PRIVACY (DT)
REDACTED FOR PRIVACY (DT),
REDACTED FOR PRIVACY (DT), California, REDACTED FOR PRIVACY (DT), us
(p)
IP Address    178.175.148.167 is hosted on a dedicated server

$crypto$

legendary

Activity: 2338

Merit: 1041

Smart is not enough, there must be skills

FAKE Giveaway 1 000 000 ETH

Website:

Code:

https://eth-ceo.org/

Archived: https://archive.is/PdVme

Quote

1 days old
Created on 2021-05-07
Expires on 2022-05-07
Updated on 2021-05-07

Scammers wallet

Code:

0x95f0badc4e2db83fa4327f057e1a06ad2e6c867c

Be careful with this fake giveaway because it is promoted on popular channels that have a lot of followers so it's better to avoid it and leave telegrams that promote this fake.

Fortunately, I saw that no one had deposited it in the wallet yet.

$crypto$

legendary

Activity: 2338

Merit: 1041

Smart is not enough, there must be skills

Wilder World Fake Public Sale

Website:

Code:

1. https://wilderworld.polkastarter.com.es/Sale.html#
2. https://wilderworld-sale.com/

Quote

% NOTE: The registry for this domain name does not publish ownership
% records (whois records) in the standard format. This data
% represents the most likely status of the domain based on
% information provided by the Internet's domain name servers (DNS).

domain: polkastarter.com.es
status: taken
nameserver: ns1.dns-parking.com
nameserver: ns2.dns-parking.com

% For more information, please visit http://www.nic.es/

Scammers Address: 0xA397076BA3464E6Fb5fde4cBF996fE5492680726

Scammers Address: 0xFD43FDb66e121fc6A587eD6FF9E3AbCC48c79564

All Wilder World Public sales are bogus and their official ones start on May 11th

Quote

🚨 Our Initial DEX Offering is just around the corner. May 11th is the day we launch Wilder World on Polkastarter! 🎉

Real Website: https://www.wilderworld.com/

Polkastarter Fake

Website:

Code:

http://polkastarter.com.es/

Fake:

Real:

Chikito

legendary

Activity: 2352

Merit: 2049

Quote from: CryptoYar on May 06, 2021, 12:49:55 AM

Another fake giveaway by the same group of scammers.

Website:

Code:

http://riskmoon-giveaway.com/

It's the same relationship IP address as your post above

That IP has been flagged. when I look at the relationship > https://www.virustotal.com/gui/ip-address/185.244.36.172/relations
I find another giveaway such: holg-giveaway.

Code:

holg-giveway.com

Quote from: $crypto$ on May 05, 2021, 12:33:18 PM

Quote

4 days old
Created on 2021-05-01
Expires on 2022-05-01
Updated on 2021-05-01

https://whois.domaintools.com/trustpad-sale.com

That IP also related on this site, which providing high return investment (possible scam).

Code:

https://247smartnet.online/

Quote from: ChipMixer on May 02, 2021, 05:10:27 PM

Quote from: Chikito on May 02, 2021, 04:25:42 AM

the real chipmixer will provide an onion link as the picture below,

If website provides onion link (as pictured) - it still may not be real website.
If unsure - check ChipMixer ANN thread: https://bitcointalksearch.org/topic/ann-chipmixercom-bitcoin-mixer-bitcoin-tumbler-mixing-reinvented-1935098

Thanks to point that. I had already also reported the .onion link at the past. seems all those already baned.

CryptoYar

hero member

Activity: 1064

Merit: 635

Another fake giveaway by the same group of scammers.

Website:

Code:

http://riskmoon-giveaway.com/

https://archive.vn/Lnnvo

scammers wallet: 0x3222467cdC2Ef5799D992443869Ef6F547D0C7e3 ( previously used in riskmoon-giveaway.net)

Domain:
Registrar Status clientTransferProhibited
Dates 1 days old
Created on 2021-05-04
Expires on 2022-05-04
Updated on 2021-05-04
whois info source

$crypto$

legendary

Activity: 2338

Merit: 1041

Smart is not enough, there must be skills

Fake Trustpad (TPAD) FLASH Token-Sale is LIVE

Website Fake:

Code:

https://trustpad-sale.com/

Archived: https://archive.is/VnLUg

Quote

4 days old
Created on 2021-05-01
Expires on 2022-05-01
Updated on 2021-05-01

https://whois.domaintools.com/trustpad-sale.com

Trustpad will officially announce the white list in public sale and it will be announced in the medium.
So what is listed above is clearly a scam they are continuing to take advantage of the project situation which is going on a public sale so do not send ETH or USDT / USDC / TUSD in the wallet below.

Address Scammers

Code:

0x66987428309B05391270FD101f96083086D0d725

TrustPad Official Group: https://t.me/TrustPad

TrustPad FAKE: https://t.me/tpaadsale

CryptoYar

hero member

Activity: 1064

Merit: 635

What happened: Another Riskmoon Fake Giveaway

Website Link:

Code:

http://riskmoon-giveaway.net/

Archive Link: https://archive.vn/KBKfA

Scammer wallet: https://bscscan.com/address/0x3222467cdC2Ef5799D992443869Ef6F547D0C7e3

Domain name info

Quote

Registrar Status clientTransferProhibited, ok
Dates 2 days old
Created on 2021-05-02
Expires on 2022-05-02
Updated on 2021-05-02

https://whois.domaintools.com/riskmoon-giveaway.net

ChipMixer

sr. member

Activity: 456

Merit: 956

https://bitcointalk.org/index.php?topic=1935098

Quote from: Chikito on May 02, 2021, 04:25:42 AM

the real chipmixer will provide an onion link as the picture below,

If website provides onion link (as pictured) - it still may not be real website.
If unsure - check ChipMixer ANN thread: https://bitcointalksearch.org/topic/ann-chipmixercom-bitcoin-mixer-bitcoin-tumbler-mixing-reinvented-1935098

$crypto$

legendary

Activity: 2338

Merit: 1041

Smart is not enough, there must be skills

FAKE Giveaway QTUM

Website

Code:

https://www.qtum.claims/block.html

Archived: https://archive.is/d4hp9

Quote

11 days old
Created on 2021-04-21
Expires on 2022-04-21
Updated on 2021-04-26

https://whois.domaintools.com/qtum.claims

There is a lot of rubbish giveaway like this, I think you have to be careful whoever offers it on the telegram line should avoid it.

Real Website: https://qtum.org/en

Chikito

legendary

Activity: 2352

Merit: 2049

Fake Chipmixer.co.uk (chipmixkd2wgbqoy.onion)

Code:

https://chipmixer.co.uk/

Code:

chipmixkd2wgbqoy.onion

Domain Name: chipmixer.co.uk
IP Address: 104.21.38.201

https://www.virustotal.com/gui/ip-address/104.21.38.201/relations

No onion link available when putting that site into the TOR browser.

the real chipmixer will provide an onion link as the picture below,

CryptoYar

hero member

Activity: 1064

Merit: 635

Quote from: Chikito on April 27, 2021, 11:15:13 PM

Quote from: CryptoYar on April 27, 2021, 05:20:25 AM

No domain information available

you can check using IP/domain tools such as https://ipinfo.info/html/ip_checker.php

I was trying to get the domain name information through domaintools.com but maybe there was some issue in this tool, that's why I was failed to get domain info. However, it is working perfectly right now.

Quote

you have also checked the relationship IP using virustotal tools: https://www.virustotal.com/gui/ip-address/185.244.36.172/relations

Nice I will try. Thank you

Chikito

legendary

Activity: 2352

Merit: 2049

Quote from: CryptoYar on April 27, 2021, 05:20:25 AM

No domain information available

you can check using IP/domain tools such as https://ipinfo.info/html/ip_checker.php

Code:

http://riskmoongiveaway.com

Quote

IP Address: 185.244.36.172
Domain Name: RISKMOONGIVEAWAY.COM
Registry Domain ID: 2607346419_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: http://www.namecheap.com
Updated Date: 2021-04-24T10:34:36Z
Creation Date: 2021-04-24T10:33:35Z
Registry Expiry Date: 2022-04-24T10:33:35Z
Registrar: NameCheap, Inc.
Registrar IANA ID: 1068
Registrar Abuse Contact Email: [email protected]

that domain was created just 3 days ago. look that scam purpose only.

you have also checked the relationship IP using virustotal tools: https://www.virustotal.com/gui/ip-address/185.244.36.172/relations

then you will find that IP only creates for scams purpose.

Code:

www.moonboysgiveaway.safemoonreward.net
www.hoglgiveaway.finance
...
etc

CryptoYar

hero member

Activity: 1064

Merit: 635

What happened: Riskmoon coin Fake giveaway

Website Link:

Code:

http://riskmoongiveaway.com/

Archive Link: https://archive.vn/K5Lwm

No domain information ~~available~~

Quote from: DroomieChikito's post

IP Address: 185.244.36.172
Domain Name: RISKMOONGIVEAWAY.COM
Registry Domain ID: 2607346419_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: http://www.namecheap.com
Updated Date: 2021-04-24T10:34:36Z
Creation Date: 2021-04-24T10:33:35Z
Registry Expiry Date: 2022-04-24T10:33:35Z
Registrar: NameCheap, Inc.
Registrar IANA ID: 1068
Registrar Abuse Contact Email: [email protected]

Chikito

legendary

Activity: 2352

Merit: 2049

Phishing Exodus Wallet

Code:

https://exocdus.com

Quote

IP Address: 185.178.208.156
Domain Name: EXOCDUS.COM
Registry Domain ID: 2579208200_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.reg.com
Registrar URL: http://www.reg.ru

the website will ask you to write your secret backup code, don't trap it.

Baofeng

legendary

Activity: 2576

Merit: 1655

Fake and phishing site of https://foundation.app/, an NFT marketplace

Code:

https://foundatlon.app/

Quote

Registrant    REDACTED FOR PRIVACY
Registrant Org    Privacy service provided by Withheld for Privacy ehf
Registrant Country    is
Registrar    Namecheap Inc.
IANA ID: 1068
URL: https://www.namecheap.com/
Whois Server: whois.namecheap.com

(p)
Registrar Status    addPeriod, clientTransferProhibited
Dates    1 days old
Created on 2021-04-21
Expires on 2022-04-21
Updated on 2021-04-21

Topic: [List] Phishing Cryptocurrency Site - page 6. (Read 11494 times)