Eth-phishing-detect: Unable to submit scam domain(s) - HoxBit, BenriBit, PleinBit, StrainBit, SeriosBit, BeldexTrade, VazeBit, QuakeBit, Nexus-Crypto, RivBit, MaticBit, SliBit

Created on 21 Jan 2020 · 13Comments · Source: MetaMask/eth-phishing-detect

Tracking a fake exchange scam

I am unable to submit scam domains related to "HoxBit" using Brave Browser on Debian 10 with all ad/cookie/script blocking disabled.

Once filled all the forms and captcha the circle just kept spinning forever:

Domains:
HoxBit.com - Fake pump and dump group
BenriBit.com - Fake giveaway requiring 0.02 BTC deposit as "bot protection"
PleinBit.com - Fake giveaway requiring 0.02 BTC deposit as "bot protection"
StrainBit.com - Fake giveaway requiring 0.02 BTC deposit as "bot protection"
SeriosBit.com - Fake giveaway requiring 0.02 BTC deposit as "bot protection"
BeldexTrade.com - Fake giveaway requiring 0.02 BTC deposit as "bot protection"
VazeBit.com - Fake giveaway requiring 0.02 BTC deposit as "bot protection"
QuakeBit.com - Fake giveaway requiring 0.02 BTC deposit as "bot protection"
Nexus-Crypto.com - Fake giveaway, scam casino (seen it before)
RivBit.com - Fake giveaway requiring 0.02 BTC deposit as "bot protection" - pretends to be BitMex on Discord
SLIBit.com - Fake crypto exchange / giveaway

more to come I am sure.

Images:

denylist request discussion

Source

leshacat

👀1 🎉1

Most helpful comment

Thanks @409H I will start submitting the domains there.

If you have been affected by this scam

_You may want to change all your passwords_ (or at least the ones that are the same as the one you used for the scam exchange) If you've submitted your ID documents, you can assume your ID was stolen but the only thing you really can do is watch your accounts, credit report and score.

I've also been using the following reporting websites and addons:

Report Scams

Google Suspicious Site Reporter https://safebrowsing.google.com/safebrowsing/report_phish/
Crypto Scam Report https://cryptoscamdb.org/report

Browser Addons

Google Suspicious Site Reporter https://chrome.google.com/webstore/detail/suspicious-site-reporter/jknemblkbdhdcpllfgbfekkdciegfboi
PhishFort https://chrome.google.com/webstore/detail/phishfort-protect/bdiohckpogchppdldbckcdjlklanhkfc

You can also install and use Brave Browser. It will speed up your browsing and protect you from malware, tracking and advertising. It even blocks YouTube ads. These addons pair great with Brave. Get it here: https://brave.com/les666

I'll keep updating this ticket as long as you keep it open.

Thanks for noticing :)

leshacat on 23 Jan 2020

👍2 🚀1

All 13 comments

The scammers have added a new scam exchange:

StrainBit.com - Fake giveaway requiring 0.02 BTC deposit as "bot protection"

This scam moves fast, they have plenty of names. I seem to be doing enough damage to them they have no choice but to move to a new name...

Unfortunately for them I have more time than they do :D

I will keep updating the main post every time so everything can be found in one post...

leshacat on 22 Jan 2020

These things have to stop! How can we make discord better! I got two messages that I won and that I should sign up. Being in the space long enough, that you have to earn crypto and not get it for free, look at the amounts, I found it suspicious from the beginning!

But they can make quite a lot of damage!
Most user will use the same PW for multiple Online Logins. So they got this.
Also the functionalities KYC / Interest Earning and so on, seem to work just fine.

Of course, if you compare the "Fee Schedule" -> New Account: "Newly created accounts have a 100 USD (or equivalent) withdrawal limit." and so on, things don't match up.

Nevertheless, a not experienced user will not be able to tell the difference.
What can be done?

AAlex1980 on 23 Jan 2020

👍1

I have added:
SeriosBit.com

Some of these domains you already are detecting and blocking... SeriosBit is one of them... These are all related to each other.

@AAlex1980 nothing really can be done other than awareness, tracking and reporting the scams.

leshacat on 23 Jan 2020

Hi leshacat, thank you so much for the information!

The new way to report is via https://cryptoscamdb.org/report - though I have added some of these already. I'll address the others you have highlighted today!

409H on 23 Jan 2020

👍1

Thanks @409H I will start submitting the domains there.

If you have been affected by this scam

I've also been using the following reporting websites and addons:

Report Scams

Google Suspicious Site Reporter https://safebrowsing.google.com/safebrowsing/report_phish/
Crypto Scam Report https://cryptoscamdb.org/report

Browser Addons

Google Suspicious Site Reporter https://chrome.google.com/webstore/detail/suspicious-site-reporter/jknemblkbdhdcpllfgbfekkdciegfboi
PhishFort https://chrome.google.com/webstore/detail/phishfort-protect/bdiohckpogchppdldbckcdjlklanhkfc

I'll keep updating this ticket as long as you keep it open.

Thanks for noticing :)

leshacat on 23 Jan 2020

👍2 🚀1

They have got a new web design so I've updated the main posting.

All of these domains have been reported using the above methods.

leshacat on 27 Jan 2020

👍1

VazeBit is the newest scam domain, but it is back to the old design.

One thing to note, I looked up strainbit here:
https://urlscan.io/result/59117c94-7bba-4b2b-bcfa-91f8e863bc90/related/

it shows other domains that have similar design and you can see this scam is probably automated to register domains and set up the scam exchange and they usually just keep the same design

leshacat on 31 Jan 2020

👀1

Added QuakeBit...

leshacat on 6 Feb 2020

Added a scam casino to the pile :)

leshacat on 21 Feb 2020