Closed 409H closed 4 years ago
saitodai.app Fake Sai2dai app phishing for funds https://urlscan.io/result/09a8a0eb-1a57-4fda-9425-0a9971fc88b9/ https://urlscan.io/result/85d4ef33-c83c-4806-a911-a0c470b0715f/ https://urlscan.io/result/5318ee34-b3cc-4069-be1d-5c3b54ab71fe/ address: 0xdE0F9880faF963c57aAbCF92128eb1640dBaaE18 (eth)
cryptocloudx.com Fake exchange phishing for deposits - also linking users to a cookiestealer browser extension id bhihlepfeofebhiafmidfeipambijdgl https://urlscan.io/result/8adf1f1e-5ebf-4516-893d-4d39962eeabc/ https://urlscan.io/result/3e96ea5d-9576-47f9-81d4-030d45bf072b/ address: 3Ng3yuS3uNtVyLt9YVLxpL5MCJisZNwoyH (btc) address: 0xEe18e156a020F2b2B2DcdEC3A9476E61fBDE1e48 (eth)
coinxback.com Pushing a malware browser extension to users to steal cookies (id: bhihlepfeofebhiafmidfeipambijdgl) - see mega thread: https://twitter.com/sniko_/status/1199366050783072257 https://urlscan.io/result/afb61416-5989-49db-aa05-3f677a74dc69/ https://urlscan.io/result/ab71e0cf-41c6-4d71-ac18-63efdb27a53d/
myetherwallet-getfreetoken.000webhostapp.com Fake MyEtherWallet phishing for secrets with POST //next.get-extra.ml/ether/claim.php https://urlscan.io/result/8ba6faca-e612-4856-bc02-fb9ee63e22e8/
vintage-myetherwallet.telegram-airdrop.com Fake MyEtherWallet https://urlscan.io/result/8692c38b-6782-4ccf-8bff-de5aa9e68bfe/
telegram-airdrop.com Fake Telegram crowdsale site pushing malware downloads https://urlscan.io/result/bbe642f7-999f-432b-9892-bc0e26a2acaa/
margineth.online Trust trading scam site https://urlscan.io/result/a3cf1e64-3d54-471f-9a5f-5c5f05acd0a2 https://urlscan.io/result/03d4a348-567b-4138-805f-ecbac5d21639/ https://urlscan.io/result/71cd7f12-53e7-4a22-ab78-b5617f5631d6/ address: 0x41dd52240cf1A3a250aC57b112cd61D90f185cF1 (eth) address: 1M3RG8Vh2C6SC9XfwwyzTmi1hcL1JA9KM4 (btc)
exchange.bnbdex.top Trust trading scam site - reported address: 35BEWENmjyXPL1K1SEf2hDgNcHS4R8yUN7 https://urlscan.io/result/8911bd84-1167-4407-ae21-8c847aa7bc8a https://urlscan.io/result/323de4d9-b347-4cd4-983d-71b3b5085994
bloom.reward-programs.erc20-tokens.com Fake bloom airdrop phishing for secrets with POST /error.php https://urlscan.io/result/36c6a307-f2c5-4f82-802c-c62a81e21137 https://urlscan.io/result/33ad3119-5a78-49dc-9a47-2e8519b0b7ae
wallet-thetatoken-extrabonuses.000webhostapp.com Fake web wallet phishing for secrets with POST //next.get-extra.tk/theta/app.php?cryptocurrency https://urlscan.io/result/b3aa22a2-16f0-46ac-9212-64ff1c39f3fe
wallet-thetatoken-claim-extra-bonuses.000webhostapp.com Fake web wallet phishing for secrets with POST //next.get-extra.tk/theta/app.php?cryptocurrency https://urlscan.io/result/3b7947d5-752e-487f-bc41-7818a4f89cbb
wallet-thetatoken-bonuses.000webhostapp.com Fake web wallet phishing for secrets with POST //next.get-extra.tk/theta/app.php?cryptocurrency https://urlscan.io/result/4eb69ead-50d3-4425-9203-1e0b8625ea8c
wallet-thetatoken-extrabonuses-erc20.000webhostapp.com Fake web wallet phishing for secrets with POST //next.get-extra.tk/theta/apps.php?cryptocurrency https://urlscan.io/result/dd7bb05a-4fb3-4894-8592-93b838d16a7c/
--
cryptoback.org Extension id: bhihlepfeofebhiafmidfeipambijdgl https://urlscan.io/result/8c68a2d4-0344-4750-84e0-9a6623a32fee/
saitodai.app Fake Sai2dai app phishing for funds https://urlscan.io/result/09a8a0eb-1a57-4fda-9425-0a9971fc88b9/ https://urlscan.io/result/85d4ef33-c83c-4806-a911-a0c470b0715f/ https://urlscan.io/result/5318ee34-b3cc-4069-be1d-5c3b54ab71fe/ address: 0xdE0F9880faF963c57aAbCF92128eb1640dBaaE18 (eth)
cryptocloudx.com Fake exchange phishing for deposits - also linking users to a cookiestealer browser extension id bhihlepfeofebhiafmidfeipambijdgl https://urlscan.io/result/8adf1f1e-5ebf-4516-893d-4d39962eeabc/ https://urlscan.io/result/3e96ea5d-9576-47f9-81d4-030d45bf072b/ address: 3Ng3yuS3uNtVyLt9YVLxpL5MCJisZNwoyH (btc) address: 0xEe18e156a020F2b2B2DcdEC3A9476E61fBDE1e48 (eth)
coinxback.com Pushing a malware browser extension to users to steal cookies (id: bhihlepfeofebhiafmidfeipambijdgl) - see mega thread: https://twitter.com/sniko_/status/1199366050783072257 https://urlscan.io/result/afb61416-5989-49db-aa05-3f677a74dc69/ https://urlscan.io/result/ab71e0cf-41c6-4d71-ac18-63efdb27a53d/
myetherwallet-getfreetoken.000webhostapp.com Fake MyEtherWallet phishing for secrets with POST //next.get-extra.ml/ether/claim.php https://urlscan.io/result/8ba6faca-e612-4856-bc02-fb9ee63e22e8/
vintage-myetherwallet.telegram-airdrop.com Fake MyEtherWallet https://urlscan.io/result/8692c38b-6782-4ccf-8bff-de5aa9e68bfe/
telegram-airdrop.com Fake Telegram crowdsale site pushing malware downloads https://urlscan.io/result/bbe642f7-999f-432b-9892-bc0e26a2acaa/
margineth.online Trust trading scam site https://urlscan.io/result/a3cf1e64-3d54-471f-9a5f-5c5f05acd0a2 https://urlscan.io/result/03d4a348-567b-4138-805f-ecbac5d21639/ https://urlscan.io/result/71cd7f12-53e7-4a22-ab78-b5617f5631d6/ address: 0x41dd52240cf1A3a250aC57b112cd61D90f185cF1 (eth) address: 1M3RG8Vh2C6SC9XfwwyzTmi1hcL1JA9KM4 (btc)
exchange.bnbdex.top Trust trading scam site - reported address: 35BEWENmjyXPL1K1SEf2hDgNcHS4R8yUN7 https://urlscan.io/result/8911bd84-1167-4407-ae21-8c847aa7bc8a https://urlscan.io/result/323de4d9-b347-4cd4-983d-71b3b5085994
bloom.reward-programs.erc20-tokens.com Fake bloom airdrop phishing for secrets with POST /error.php https://urlscan.io/result/36c6a307-f2c5-4f82-802c-c62a81e21137 https://urlscan.io/result/33ad3119-5a78-49dc-9a47-2e8519b0b7ae
wallet-thetatoken-extrabonuses.000webhostapp.com Fake web wallet phishing for secrets with POST //next.get-extra.tk/theta/app.php?cryptocurrency https://urlscan.io/result/b3aa22a2-16f0-46ac-9212-64ff1c39f3fe
wallet-thetatoken-claim-extra-bonuses.000webhostapp.com Fake web wallet phishing for secrets with POST //next.get-extra.tk/theta/app.php?cryptocurrency https://urlscan.io/result/3b7947d5-752e-487f-bc41-7818a4f89cbb
wallet-thetatoken-bonuses.000webhostapp.com Fake web wallet phishing for secrets with POST //next.get-extra.tk/theta/app.php?cryptocurrency https://urlscan.io/result/4eb69ead-50d3-4425-9203-1e0b8625ea8c
wallet-thetatoken-extrabonuses-erc20.000webhostapp.com Fake web wallet phishing for secrets with POST //next.get-extra.tk/theta/apps.php?cryptocurrency https://urlscan.io/result/dd7bb05a-4fb3-4894-8592-93b838d16a7c/
--
cryptoback.org Extension id: bhihlepfeofebhiafmidfeipambijdgl https://urlscan.io/result/8c68a2d4-0344-4750-84e0-9a6623a32fee/