[List] Phishing Cryptocurrency Site - page 8.

CryptoYar

hero member

Activity: 1064

Merit: 639

This is another fake giveaway website. But this time the dogecoin has also been included for their dirty scam.

What happened:: Fake Giveaways.

Website Link:

Code:

https://musk.help/btc
https://musk.help/eth
https://musk.help/doge

Archive Link: https://archive.vn/0NMUT

Quote

1 days old
Created on 2021-02-15
Expires on 2022-02-15
Updated on 2021-02-15

https://whois.domaintools.com/musk.help

Baofeng

legendary

Activity: 2576

Merit: 1655

Interesting to see a .ir (Iran) ccTLD now. Seems that Elon Musk face is all over the world now specially with his company and the recent news of the $1.5 billion crypto investment.

Website:

Code:

https://dropmuskx.ir/

Quote

Dates    Expires on 2022-01-25
Updated on 2021-01-27

Name Servers    COREY.NS.CLOUDFLARE.COM (has 17,663,523 domains)
LUCIANA.NS.CLOUDFLARE.COM (has 17,663,523 domains)


Tech Contact    —
IP Address    104.21.73.63 - 423 other sites hosted on this server

Baofeng

legendary

Activity: 2576

Merit: 1655

another of these fake UNI giveaways. Stay away, there's no more airdrop or UNI giveaways

Website:

Code:

 https://uni2021.org/
https://2021uni.org/

archived: https://archive.is/q0vxN

Quote

Registrar    Tucows Inc.
IANA ID: 69
URL: http://www.tucows.com
Whois Server: whois.tucows.com

(p)
Registrar Status    clientTransferProhibited, clientUpdateProhibited, serverTransferProhibited
Dates    19 days old
Created on 2021-01-23
Expires on 2022-01-23
Updated on 2021-01-23

Name Servers    NS101.CLOUDNS.NET (has 206,922 domains)
NS102.CLOUDNS.NET (has 206,922 domains)
NS103.CLOUDNS.NET (has 206,922 domains)
NS104.CLOUDNS.NET (has 206,922 domains)


Tech Contact    —
IP Address    185.178.208.165 - 68 other sites hosted on this server

Chikito

legendary

Activity: 2366

Merit: 2054

Phishing walletsconnect.org

Code:

http://walletsconnect.org

IP Address: 169.255.59.11

Quote

Domain Name: WALLETSCONNECT.ORG
Registry Domain ID: D402200000015870070-LROR
Registrar WHOIS Server: whois.web4africa.net
Registrar URL: https://www.web4africa.net
Updated Date: 2021-01-31T01:29:14Z
Creation Date: 2021-01-31T01:29:13Z
Registry Expiry Date: 2022-01-31T01:29:13Z
Registrar Registration Expiration Date:
Registrar: Web4Africa Inc.
Registrar IANA ID: 664
Registrar Abuse Contact Email: [email protected]

A website needs your mnemonic seed. just write it carefully if you want to be lost at all

Baofeng

legendary

Activity: 2576

Merit: 1655

There favourite fake of Crypto scam, Elon Musk:

Code:

https://elon-bonus.org/

Archive: https://archive.is/xYkzi

Quote

Registrar    NameCheap, Inc.
IANA ID: 1068
URL: http://www.namecheap.com
Whois Server: whois.namecheap.com

(p)
Registrar Status    addPeriod, serverTransferProhibited
Dates    4 days old
Created on 2021-01-30
Expires on 2022-01-30
Updated on 2021-01-30

Name Servers    DNS1.NAMECHEAPHOSTING.COM (has 1,025,457 domains)
DNS2.NAMECHEAPHOSTING.COM (has 1,025,457 domains)


Tech Contact    —
IP Address    198.54.120.190 - 101 other sites hosted on this server

Chikito

legendary

Activity: 2366

Merit: 2054

Phishing 1lnch.com and eosuniswap.org

Code:

http://eosuniswap.org/

Quote

IP Address: 80.78.22.45
Domain Name: EOSUNISWAP.ORG
Registry Domain ID: D402200000015649763-LROR
Registrar WHOIS Server: whois.tucows.com
Registrar URL: http://www.tucows.com
Updated Date: 2021-01-29T17:59:10Z
Creation Date: 2021-01-07T13:52:43Z
Registry Expiry Date: 2022-01-07T13:52:43Z
Registrar Registration Expiration Date:
Registrar: Tucows Inc.
Registrar IANA ID: 69
Registrar Abuse Contact Email: [email protected]

Code:

https://1lnch.com

Quote

IP Address: 185.178.208.154
Domain Name: 1LNCH.COM
Registry Domain ID: 2585842188_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: http://www.namecheap.com
Updated Date: 2021-01-21T18:09:35Z
Creation Date: 2021-01-19T19:54:12Z
Registry Expiry Date: 2022-01-19T19:54:12Z
Registrar: NameCheap, Inc.
Registrar IANA ID: 1068
Registrar Abuse Contact Email: [email protected]

Again, don't searching in the google searching box, both are appear in there. don't get in a trap by typing mnemonic seed into a phishing website.

$crypto$

legendary

Activity: 2394

Merit: 1049

Smart is not enough, there must be skills

Fake Giveaway Elon Musk

Again, fake Twitter with the name Elon Musk is familiar to me to find something like this, it will still be if the domain is new then I need to publish it here so that many people know and understand that this is a real scam.

Website:

Code:

https://twitterspacex.com/
https://getspacexdrop.com/

Archive

Chikito

legendary

Activity: 2366

Merit: 2054

Scam/Phishing validatewebwallets.online

Code:

https://validatewebwallets.online/

The website is a collective scam wallet where the user must put the mnemonic seed

Quote

IP Address: 198.54.115.144
Domain Name: VALIDATEWEBWALLETS.ONLINE
Registry Domain ID: D219626518-CNIC
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: https://namecheap.com
Updated Date: 2021-01-29T18:56:17.0Z
Creation Date: 2021-01-29T18:56:02.0Z
Registry Expiry Date: 2022-01-29T23:59:59.0Z
Registrar: Namecheap
Registrar IANA ID: 1068

Don't get in a trap.

Chikito

legendary

Activity: 2366

Merit: 2054

Be Aware Phishing Bestchange (bestchainge.club)

Code:

https://bestchainge.club/

Quote

IP Address: 8.208.95.37
Domain Name: bestchainge.club
Registry Domain ID: D02C5C92724764F4BB77C25B75041590D-NSR
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: http://www.namecheap.com
Updated Date: 2021-01-24T20:19:12Z
Creation Date: 2021-01-24T20:17:58Z
Registry Expiry Date: 2022-01-24T20:17:58Z
Registrar: NameCheap, Inc.
Registrar IANA ID: 1068
Registrar Abuse Contact Email: [email protected]
Registrar Abuse Contact Phone: +1.6613102107

the IP relationship; https://www.virustotal.com/gui/ip-address/8.208.95.37/relations

be careful, always double-check the website url before actions.

Chikito

legendary

Activity: 2366

Merit: 2054

Fake Exodus wallet

Code:

https://exodus-wallet.net

Quote

IP Address: 5.252.177.28
Domain Name: EXODUS-WALLET.NET
Registry Domain ID: 2586397948_DOMAIN_NET-VRSN
Registrar WHOIS Server: whois.PublicDomainRegistry.com
Registrar URL: http://www.publicdomainregistry.com
Updated Date: 2021-01-22T16:29:33Z
Creation Date: 2021-01-22T15:50:27Z
Registry Expiry Date: 2022-01-22T15:50:27Z
Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com
Registrar IANA ID: 303

be careful, I fund this on google searching. Don't search exodus on the search box, always put the exact URL into the box https://www.exodus.io/

Baofeng

legendary

Activity: 2576

Merit: 1655

Gemini fake 5000 BTC Giveaway

Code:

https://airdrop-gemini.blogspot.com/

Archived: https://archive.is/hQZwM

They are using blogspot platform to create this fake giveaway, so be very careful.

$crypto$

legendary

Activity: 2394

Merit: 1049

Smart is not enough, there must be skills

List of Fake Giveaways added.

Surprisingly I was added to the fake giveaway group and there were lots of people getting it. I'm sure it was a bot that the owner had planned.

Keep careful guys because various scamers have now been done.

Website:

Code:

https://uni2021.com/

Archived: https://archive.is/iC7jG

Quote

Domain Name: UNI2021.COM
Registry Domain ID: 2581870611_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.tucows.com
Registrar URL: http://tucowsdomains.com
Updated Date: 2020-12-31T18:37:10
Creation Date: 2020-12-31T18:22:43
Registrar Registration Expiration Date: 2021-12-31T18:22:43
Registrar: TUCOWS, INC.
Registrar IANA ID: 69

Baofeng

legendary

Activity: 2576

Merit: 1655

Added one of the list:

Code:

https://givemusk.space/

Archived: https://archive.is/NJgIH

Quote

Whois Record for GiveMusk.space

Registrant Country    ua
Registrar    PDR Ltd. d/b/a PublicDomainRegistry.com
IANA ID: 303
URL: https://publicdomainregistry.com
Whois Server: whois.PublicDomainRegistry.com

(p)
Registrar Status    addPeriod, clientTransferProhibited, serverTransferProhibited
Dates    4 days old
Created on 2021-01-14
Expires on 2022-01-14
Updated on 2021-01-14

Name Servers    IGOR.NS.CLOUDFLARE.COM (has 17,823,023 domains)
NOVA.NS.CLOUDFLARE.COM (has 17,823,023 domains)


Tech Contact    —
IP Address    172.67.194.18 - 4 other sites hosted on this server

Chikito

legendary

Activity: 2366

Merit: 2054

Fake walletconnect.org

Code:

www.wallétconnect.org/
Wallelconnect.org

when you click Metamask wallet, will direct you to insert a private key and mnemonic phrase into a website where this will trap you to lose your balance.

Quote

IP Address: 198.54.115.177
Domain Name: WALLELCONNECT.ORG
Registry Domain ID: D402200000015707341-LROR
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: http://www.namecheap.com
Updated Date: 2021-01-13T19:40:02Z
Creation Date: 2021-01-13T19:39:48Z
Registry Expiry Date: 2022-01-13T19:39:48Z
Registrar Registration Expiration Date:
Registrar: NameCheap, Inc.

Please help me to report this fake into https://safebrowsing.google.com/safebrowsing/report_phish/?hl=en and also the namecheap company.

Baofeng

legendary

Activity: 2576

Merit: 1655

Ah, the scammers are still having Elon face on their mouth, hehehe

Code:

https://elon-free.fund/

Archive: https://archive.is/V2Wko

Quote

Whois Record for Elon-Free.fund
How does this work?
Domain Profile
IP Address    172.64.80.222 - 8 other sites hosted on this server


IP Location    United States Of America - California - San Francisco - Cloudflare Inc.
ASN    United States Of America AS13335 CLOUDFLARENET, US (registered Jul 14, 2010)
IP History    1 change on 1 unique IP addresses over 0 years

Hosting History    1 change on 2 unique name servers over 0 year

Chikito

legendary

Activity: 2366

Merit: 2054

Fake Uniswap (uinswop)

Code:

https://app.uinswop.org/#/swap

Quote

IP Address: 47.91.72.87
created: 2019-01-07T10:48:20Z
last-modified: 2019-01-07T10:48:20Z
etname: NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK
descr: IPv4 address block not managed by the RIPE NCC

Be careful, don't searching uniswap on google box.

Chikito

legendary

Activity: 2366

Merit: 2054

Fake and Phishing 1inch.cc

Code:

http://1inch.cc/

the related IP address: https://www.virustotal.com/gui/ip-address/103.253.140.164/relations

here all fake using IP address:

Quote

IP Address: 103.253.140.164
Domain Name: 1INCH.CC
Registry Domain ID: 153469856_DOMAIN_CC-VRSN
Registrar WHOIS Server: whois.namesilo.com
Registrar URL: http://www.namesilo.com
Updated Date: 2020-12-29T00:47:50Z
Creation Date: 2020-12-29T00:46:50Z
Registry Expiry Date: 2021-12-29T00:46:50Z
Registrar: NameSilo, LLC
Registrar IANA ID: 1479

Be careful everyone!.

Baofeng

legendary

Activity: 2576

Merit: 1655

Another of Elon Musk Fake Giveaway:

Code:

https://elon-crypto.fund/

Archived: https://archive.is/YD5vs

Quote

Whois Record for Elon-Crypto.fund
How does this work?
Domain Profile
Registrant    REDACTED FOR PRIVACY
Registrant Org    WhoisGuard, Inc.
Registrant Country    pa
Registrar    NameCheap, Inc.
IANA ID: 1068
URL: https://www.namecheap.com/
Whois Server: whois.namecheap.com

(p)
Registrar Status    clientTransferProhibited
Dates    33 days old
Created on 2020-11-29
Expires on 2021-11-29
Updated on 2020-12-04

Name Servers    AGUSTIN.NS.CLOUDFLARE.COM (has 17,893,112 domains)
LAILA.NS.CLOUDFLARE.COM (has 17,893,112 domains)


Tech Contact    REDACTED FOR PRIVACY
REDACTED FOR PRIVACY,
REDACTED FOR PRIVACY, REDACTED FOR PRIVACY, REDACTED FOR PRIVACY, REDACTED FOR PRIVACY
(p) (f)
IP Address    104.27.146.61 - 482 other sites hosted on this server

Chikito

legendary

Activity: 2366

Merit: 2054

Phishing Paxful Exchange

Code:

http://pioxul.com

Quote

IP Address: 162.0.215.125
Domain Name: PIOXUL.COM
Registry Domain ID: 2580599991_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: http://www.namecheap.com
Updated Date: 2020-12-24T12:28:37Z
Creation Date: 2020-12-24T12:28:27Z
Registry Expiry Date: 2021-12-24T12:28:27Z
Registrar: NameCheap, Inc.
Registrar IANA ID: 1068
Registrar Abuse Contact Email: [email protected]

Be aware, don't use google searching. the correct website is paxful.com. please reporting also into https://safebrowsing.google.com/safebrowsing/report_phish/?hl=en and Namecheap domain.

Baofeng

legendary

Activity: 2576

Merit: 1655

Another one of the Elon Musk fake giveaway:

Website:

Code:

https://epaymentbtc.tumblr.com/
https://epaymenteth.tumblr.com/
https://christmasbit.tumblr.com/

Archived: https://archive.is/1BM88

Criminals uses tumblr now, if someone will help me report, it will be taken down very quickly.

Topic: [List] Phishing Cryptocurrency Site - page 8. (Read 11581 times)