Cerca i domini monitorati ed esamina le prove archiviate, i rilevamenti e gli ultimi dati relativi alla disponibilità osservata.
219,808
Totale monitorato
213,476
VT rilevato
91,913
Ultima visualizzazione: attivo
127,895
Non disponibile all'ultimo controllo
570
VT In attesa di conferma
How This Attack Works
Fake Token Presale scams trick victims into believing they are investing in legitimate cryptocurrency projects. Here's how the scam typically unfolds:
STEP 1
Create Fake Websites
Scammers set up realistic-looking websites mimicking legitimate token presale portals.
STEP 2
Promote Presale on Social Media
Using social media and fake endorsements, scammers attract potential investors.
STEP 3
Collect Cryptocurrency
Victims are prompted to send cryptocurrency to a specified address under the guise of buying tokens.
STEP 4
Disappear with Funds
Once funds are collected, scammers shut down the site and disappear, leaving victims without recourse.
Technical Analysis
Fake Token Presale scams often leverage phishing tactics combined with cryptocurrency-specific techniques. Attackers use homograph attacks to create URLs that closely resemble legitimate sites, often registered through top registrars like NICENIC INTERNATIONAL GROUP CO., LIMITED and PDR Ltd. d/b/a PublicDomainRegistry.com. They exploit the decentralized nature of blockchain networks, utilizing smart contracts that mimic legitimate presale contracts but are programmed to divert funds to the attacker’s wallet. The infrastructure often involves cloud-based hosting services to quickly deploy and dismantle sites, minimizing the chance of detection. HTML and JavaScript are commonly used to create dynamic, convincing interfaces that reassure potential victims of the site’s legitimacy. Additionally, attackers might deploy SEO techniques to improve the visibility of their fraudulent sites in search engine results, further increasing their reach.
Real Cases
CryptoX Presale Scam (2024)
$2 million stolen
A fake presale for a non-existent token, CryptoX, duped investors into contributing significant sums.
TokenLaunch Fraud (2023)
$1.5 million stolen
Victims were lured into a fake token launch with promises of high returns, only for the site to vanish post-collection.
QuickCoin Deception (2024)
$3 million stolen
Scammers created a sophisticated site mimicking a known exchange, leading to substantial financial losses.
How to Detect
Controlla for slight misspellings in domain names.
Look for inconsistent branding or layout compared to legitimate sites.
Be wary of unsolicited investment opportunities via social media.
Verify presale details on official project channels.
Beware of high-pressure tactics urging immediate investment.
How to Protect Yourself
1
Always verify URLs before entering personal information.
2
Use browser extensions to detect phishing attempts.
3
Consult official project websites or channels for presale information.
4
Enable two-factor authentication on cryptocurrency exchanges.
5
Relazione suspicious sites to authorities and platforms like PhishDestroy.
Frequently Asked Questions
Data sourced from PhishDestroy threat intelligence database — 689 domains tracked for this threat type
Fake Token Presale 689 domains

groklorum.icu

kwadin.net

litltlepepe.com

mbato.guru

moonbag-5gw.pages.dev

moonbag-claim.pages.dev

mostgretoko.guru

myxaiconnects.net

octra.run

one.link

oojusales.com

presale-mylingo.pages.dev

presale.havanaelephant.com

pump-presale.org

retikclaim.web.app

ruviai.net

sfxprotocol.online

trdnetwork.info

unilabs.finance

unisara.guru

xaionchain.com

89324902-28.com

aegisxrp.com

alphapepe.fans

baforth.guru

bullecoin.com

bullzila.com

cryptoallstars-hub.pages.dev

cryptoallstars-reward.web.app

dex-rp.live

gro38z.com

grok12ktoken.com

grok49k.org

grok54h-cointelegraph.com

grok83q.icu

lunexnetwork-in.web.app

maxidoge-app.pages.dev

maxidogetoken.vip

memerreum.pages.dev

pepeto-claiming.io

presale99bitcoin.pages.dev

qaddun.com

rainbows.run

retikmiown.pages.dev

rnbw-coiniist.co

spax40r.com

spax50b.org

strovumtoken.com

subbdtoken.app

tetreumtoken.com

w13123sadas.pages.dev

wallet-x.pro

xa20r.net

xa22k.com

xa25b.com

xa70b.info

xa90b.net

xa90p.net

allpresales.live

alphapepetokenpresale.online

bitcoinhyper.org

blazpay.co

block-dag.live

blockdagwork.pages.dev

btcbull-coin.pages.dev

claim-retik-com.pages.dev

claim.snortertokn.live

conilst.co

crudoprotocol-io.web.app

cryptoallstars-sales.pages.dev

deepsnitchal.com

eloneln.xyz

galaxyfox-in.pages.dev

gro15k.icu

gro37k.com

gro39k.info

gro47k.info

gro89k-cointelegraph.com

gro89k-fxempire.com

grok49k-cointelegraph.com

grok76k-fxempire.com

inqubetai-node.pages.dev

kiranexusreward.pro

litellpepe.com

littleppepe.com

littllepepe.com

mpeppe-dashboard.pages.dev

neexoraa.com

othersko.guru

portalbridge.app

resolvetics.web.app

reward-snortertoken.com

sale-maxidoge.com
Pipeline di risposta alle minacce
Come vengono verificati tutti i domini presenti in questo hub e come vengono neutralizzate le minacce confermate. Visualizzazione completa della pipeline →
Controlli relativi alle informazioni sulle minacce— ogni dominio viene analizzato e sottoposto a verifica incrociata rispetto a:
urlscan.ioScreenshot · DOM · HTTPVirusTotal90+ AV enginesGoogle Safe BrowsingTransparency RelazioneCloudflare RadarDNS · certs · categoriesAlienVault OTXThreat-intel pulsesWayback MachineHistorical evidenceabuse.ch ThreatFoxIOC correlationcrt.shCertificate TransparencyDNS Sicurezza FiltersQuad9 · AdGuard · CleanBrowsingWeb-ControllaFull surface scan
Sincronizzazione globale dei fornitori— i rilevamenti confermati vengono trasmessi a 29 partner:
GoogleSafe BrowsingGoogleWeb Risk APIMicrosoftSmartScreenVirusTotalDetection feedCloudflareRadar / 1.1.1.1YandexSafe BrowsingURLScan.ioPublic scanESETWebGuardBitdefenderThreat exchangeNortonSafe WebSymantecRecensione del sitoAviraCloud detectionAvast / AVGWeb ShieldKasperskyOpenTIPDr.WebOnline scannerNetcraftRimozione APIPhishTankVerified voteAPWG eCXBulk feedPhishStatsOpen feedPhish.RelazioneHosting abuseSpamhausDBL feedPolySwarmMarketplaceCheckPhishBolster scanQutteraMalware scanURLquerySandboxCriminal IPAsset intelCRDFThreat CenterScamadviserTrust scoreMyWOTWeb of Trust