Pages:
Author

Topic: [List] Phishing Cryptocurrency Site - page 7. (Read 11494 times)

legendary
Activity: 2352
Merit: 2049
April 20, 2021, 12:41:51 AM
Phishing Myetherwallet

Code:
https://myeteherewalete.com/



the website will ask the user to input mnemonic phrase or Ethereum private key.

website created on 17 April 2021.

Quote
Domain Name: MYETEHEREWALETE.COM
Registry Domain ID: 2605814689_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.namesilo.com
Registrar URL: http://www.namesilo.com
Updated Date: 2021-04-17T18:12:20Z
Creation Date: 2021-04-17T18:12:19Z
Registry Expiry Date: 2022-04-17T18:12:19Z
Registrar: NameSilo, LLC
Registrar IANA ID: 1479

Be careful to do not to get into the trap.
legendary
Activity: 2352
Merit: 2049
April 11, 2021, 02:23:04 AM
How do you have to be a fool to fall for this link? Not a bit like the official link
people with carelessness and who don't care to double-check the website will fall into this trap. people who engage in google searching would be the scammer target also. people who always perform the advice will be safe.
legendary
Activity: 2338
Merit: 1041
Smart is not enough, there must be skills
April 10, 2021, 12:49:49 PM
FAKE Trezor Wallert

Code:
https://wallet.xn--trer-dbb4416b.com/
Archived: https://archive.is/wip/ofumJ



The more phishing like this, I think the things scammers can do on this site, the most important thing for many people is to make them aware of this, especially beginners.

The Trezor and Nano Ledger hardware wallets are typically targeted by scammers with phishing sites.
jr. member
Activity: 40
Merit: 6
April 09, 2021, 07:48:25 AM
How do you have to be a fool to fall for this link? Not a bit like the official link
legendary
Activity: 2576
Merit: 1655
April 08, 2021, 06:52:41 PM
Another fake Elon Musk giveaway

Code:
https://embitcoins.org/



Archived: https://archive.is/Jy5Jq

Quote
Registrant Org    Privacy service provided by Withheld for Privacy ehf
Registrant Country    is
Registrar    NameCheap, Inc.
IANA ID: 1068
URL: http://www.namecheap.com
Whois Server: whois.namecheap.com

(p)
Registrar Status    serverTransferProhibited
Dates    9 days old
Created on 2021-03-30
Expires on 2022-03-30
Updated on 2021-03-30    
 
Name Servers    DNS1.NAMECHEAPHOSTING.COM (has 1,067,851 domains)
DNS2.NAMECHEAPHOSTING.COM (has 1,067,851 domains)
   
 
Tech Contact    —
IP Address    198.187.31.229 - 544 other sites hosted on this server
legendary
Activity: 2352
Merit: 2049
April 05, 2021, 07:33:21 AM
Another Fake Electrum Wallet

Code:
https://electrum-i.com/



That's IP's had a lot of relation of fake wallet; https://www.virustotal.com/gui/ip-address/47.91.72.40/relations

Code:
jaxx-w.com
exodus-i.com
electrum-i.com
myetherwalletj.net
myetherwalletl.com
blockchain-i.at
colnbose.com
myeteherwalete.com
myeterwallet.at



Who is IP/domain;

Quote
Domain Name: electrum-i.com
IP Address: 47.91.72.40
Domain Name: ELECTRUM-I.COM
Registry Domain ID: 2602721319_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.webnic.cc
Registrar URL: http://www.webnic.cc
Updated Date: 2021-04-04T19:30:30Z
Creation Date: 2021-04-04T09:33:05Z
Registry Expiry Date: 2022-04-04T09:33:05Z
Registrar: Web Commerce Communications Limited dba WebNic.cc
Registrar IANA ID: 460

Be careful to double-check and verify the download.
legendary
Activity: 2576
Merit: 1655
April 02, 2021, 07:03:53 PM
Time to update another Elon Musk fake giveway:

Code:
https://teslatw.org/



Archive: https://archive.is/d40mm

Quote
Registrar    NameCheap, Inc.
IANA ID: 1068
URL: http://www.namecheap.com
Whois Server: whois.namecheap.com

(p)
Registrar Status    addPeriod, serverTransferProhibited
Dates    2 days old
Created on 2021-03-31
Expires on 2022-03-31
Updated on 2021-03-31    
  
Name Servers    LARS.NS.CLOUDFLARE.COM (has 18,240,762 domains)
MAGDALENA.NS.CLOUDFLARE.COM (has 18,240,762 domains)
   
  
Tech Contact    —
IP Address    172.67.192.94 - 6 other sites hosted on this server
legendary
Activity: 2352
Merit: 2049
March 23, 2021, 08:01:29 PM
Scam walletinterlink.com

Code:
https://walletinterlink.com/

Code:
https://walletinterlink.com/wallet/

the user must write 12/24 mnemonic seed to connect the hardware/software wallet.

.

Quote
IP Address: 68.65.122.141
Domain Name: WALLETINTERLINK.COM
Registry Domain ID: 2599482937_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: http://www.namecheap.com
Updated Date: 2021-03-21T17:10:07Z
Creation Date: 2021-03-21T17:09:44Z
.
legendary
Activity: 2338
Merit: 1041
Smart is not enough, there must be skills
March 15, 2021, 01:19:16 PM
I found a phishing site with the name Trezor again. I think it's not only that there will definitely be more wallet phishing sites that want to drain your wallet, so I think we need as much as possible to catch it.

Web Phishing Trezor
Code:
https://xn--trezr-xob.com/

Quote
6 days old
Created on 2021-03-09
Expires on 2022-03-09
Updated on 0000-12-31

legendary
Activity: 2576
Merit: 1655
March 14, 2021, 05:14:32 PM
Another Elon Musk fake giveaway:

Code:
teslab.us
https://elonmusk-gives.s3.amazonaws.com/index.html



archive: https://archive.is/6CZJP

Quote
Dates    2 days old
Created on 2021-03-12
Expires on 2022-03-12
Updated on 2021-03-12    
  
Name Servers    NS1.DNSOWL.COM (has 1,553,479 domains)
NS2.DNSOWL.COM (has 1,553,479 domains)
NS3.DNSOWL.COM (has 1,553,479 domains)
   
  
Tech Contact    REDACTED FOR PRIVACY (DT)
REDACTED FOR PRIVACY (DT),
REDACTED FOR PRIVACY (DT), CA, REDACTED FOR PRIVACY (DT), us
(p)
IP Address    107.161.23.204 - 159 other sites hosted on this server
legendary
Activity: 2352
Merit: 2049
March 14, 2021, 09:09:35 AM
Fake Myetherwallet and Uniswap.

Code:
https://www.myetherwallet.love

Code:
https://app.uniswap.sg





Quote
Domain Name: MYETHERWALLET.LOVE
Registry Domain ID: D225757403-CNIC
Registrar WHOIS Server: whois.west.cn
Registrar URL: http://www.west.cn
Updated Date: 2021-03-13T11:16:12.0Z
Creation Date: 2021-03-13T11:05:48.0Z
Registry Expiry Date: 2022-03-13T23:59:59.0Z

Quote
IP Address: 162.213.251.198
Domain Name: app.uniswap.sg

IP Relationship > https://www.virustotal.com/gui/ip-address/162.213.251.198/relations



The IP's Connected a lot of phishing, be aware, the scammer will continue using the same server to create one.
legendary
Activity: 2352
Merit: 2049
March 10, 2021, 08:01:25 PM
Fake aave give away

Code:
https://aave.fund/



the user must send aave first to fake doubled balance.

scammer address still 0; https://etherscan.io/address/0x949D0054aD1f5aBc69EA8bFd0436132a11A4ab34 even the website proof has a lot of fake transaction.

Quote
IP Address: 186.2.161.142
Domain Name: aave.fund
Registry Domain ID: ee84de63484045f181f1277a5fe7ffc0-DONUTS
Registrar WHOIS Server: whois.tucows.com
Registrar URL: http://www.tucows.com
Updated Date: 2021-03-10T16:48:57Z
Creation Date: 2021-03-10T16:48:55Z
Registry Expiry Date: 2022-03-10T16:48:55Z
Registrar: Tucows Domains Inc.
Registrar IANA ID: 69
Registrar Abuse Contact Email: [email protected]
Registrar Abuse Contact Phone: 416.535.0123x1283

That IP's address has Flagged as Malicious by many anti-virus providers: https://www.virustotal.com/gui/ip-address/186.2.161.142/detection

just be careful.
 
legendary
Activity: 2576
Merit: 1655
March 07, 2021, 07:12:54 PM
More of Elon Musk fake giveaways:

Code:
https://musk-e-giveaway.live/
https://elon-m-giveaway.live/
https://musk-elon-giveaway.me/
https://tesla3.team/
https://tesla3.space/
https://musk-airdrop.org/
legendary
Activity: 2576
Merit: 1655
March 03, 2021, 06:27:00 PM
Another of this Elon Musk 5,000 BTC & 100,000 ETH & 100,000,000 DOGE Airdrop

Code:
http://musk-ch.com/



Archived: https://archive.is/gxFWc

Quote
Registrar    Epik Holdings Inc Epik Inc.
IANA ID: 617
URL: http://www.epik.com
Whois Server: whois.epik.com

(p)
Registrar Status    clientTransferProhibited
Dates    4 days old
Created on 2021-02-27
Expires on 2022-02-27
Updated on 2021-02-27    
 
Name Servers    NS1.20MB.NL (has 96 domains)
NS2.20MB.NL (has 96 domains)
   
 
Tech Contact    Privacy Administrator
Anonymize, Inc.
1100 Bellevue Way NE, Ste 8A-601,
Bellevue, WA, 98004, us

(p)
IP Address    185.239.243.112 - 75 other sites hosted on this server
hero member
Activity: 1064
Merit: 635
March 01, 2021, 12:46:58 AM
Another BNB fake giveaway

Website:
Code:
https://bnbbinance.com/

Archived: https://web.archive.org/web/20210301042039/https://bnbbinance.com/




Quote
Domain name: bnbbinance.com
Registry Domain ID: 2593376216_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: http://www.namecheap.com
Updated Date: 0001-01-01T00:00:00.00Z
Creation Date: 2021-02-23T09:30:45.00Z
Registrar Registration Expiration Date: 2022-02-23T09:30:45.00Z
Registrar: NAMECHEAP INC
who is data
legendary
Activity: 2576
Merit: 1655
February 27, 2021, 07:35:36 PM
Fake Elon Musk 5,000 BTC & 100,000 ETH & 100,000,000 DOGE Airdrop

Website:
Code:
https://muskteam.ml/?i=1



Archived: https://archive.is/D4g4U

Whois not available when I post this.
legendary
Activity: 2352
Merit: 2049
February 26, 2021, 11:38:04 PM
Fake Ads Bitcoin.org (bitciioin.org)



Quote
NAMECHEAP INC
Whois Serverwhois.namecheap.com
Referral URLhttp://www.namecheap.com
StatusaddPeriod https://icann.org/epp#addPeriod
serverTransferProhibited https://icann.org/epp#serverTransferProhibited
Important Dates
Expires On ; 2022-02-05
Registered On ; 2021-02-05

scammer use fake ads bitcoin.org to get a new user to download the wallet from the phishing, be a careful noob.
legendary
Activity: 2576
Merit: 1655
February 24, 2021, 07:18:05 PM
Scammers won' stop with the Tesla and Elon Musk fake giveaways:

Code:
https://elontesla.me/



Archived: https://archive.is/rRjhu

Quote
Dates    2 days old
Created on 2021-02-22
Expires on 2022-02-22
Updated on 2021-02-22    
  
Name Servers    ALBERT.NS.CLOUDFLARE.COM (has 17,670,101 domains)
DESI.NS.CLOUDFLARE.COM (has 17,670,101 domains)
   
  
Tech Contact    —
IP Address    104.21.82.154 - 428 other sites hosted on this server
legendary
Activity: 2576
Merit: 1655
February 20, 2021, 07:05:32 PM
Zilliq coin fake giveaway:

Code:
http://zilmerits.com/



Archive: https://archive.is/kTrKs

Quote
Registrar    OwnRegistrar, Inc.
IANA ID: 1250
URL: http://www.ownregistrar.com
Whois Server: whois.ownregistrar.com

(p)
Registrar Status    clientTransferProhibited, ok
Dates    2 days old
Created on 2021-02-18
Expires on 2022-02-18
Updated on 2021-02-18    
 
Name Servers    NSA.WHOGOHOST.COM (has 63,013 domains)
NSB.WHOGOHOST.COM (has 63,013 domains)
   
 
Tech Contact    REDACTED FOR PRIVACY (DT)
WhoisSecure
18 San Carlos Street,
Los Angeles, California, 94110, us

(p)
IP Address    198.12.126.210 - 201 other sites hosted on this server
legendary
Activity: 2576
Merit: 1655
February 18, 2021, 06:05:30 PM
Another one of the fake Elon Musk giveaway:

Code:
https://elon-musk.life/



Archived: https://archive.is/GQdVi

Quote
Dates    4 days old
Created on 2021-02-14
Expires on 2022-02-14
Updated on 2021-02-14    
 
Name Servers    COCO.NS.CLOUDFLARE.COM (has 17,646,005 domains)
FELIPE.NS.CLOUDFLARE.COM (has 17,646,005 domains)
   
 
Tech Contact    REDACTED FOR PRIVACY (DT)
REDACTED FOR PRIVACY
REDACTED FOR PRIVACY (DT),
REDACTED FOR PRIVACY (DT), REDACTED FOR PRIVACY, REDACTED FOR PRIVACY (DT), REDACTED FOR PRIVACY
(p) (f)
IP Address    172.67.207.146 - 6 other sites hosted on this server
Pages:
Jump to: