We help online companies with content monitoring, penetration testing and brand protection. We aim to make the internet a much safer place for everyone.
United Kingdom
Joined September 2013
- Tweets7.4K
- Following624
- Followers11K
- Likes11.4K
Fake beta webpage impersonating @TheSandboxGame, dropping malware via @Dropbox
Domain: sandboxbeta[.]cloud
Registrar: @Namecheap
Host: @eserver_eu (2.56.91.19)
Spammed via email, likely sourced from recently disclosed @OpenSea data breach.
@urlscanio: urlscan.io/result/c0ce8b4f-3…
Fake NFT webpage impersonating @BoredApeYC, dropping malware via @Dropbox.
Domain: apesnoop[.]com
Registrar: @Namecheap
Hosting: @DDoSGUARD (217.114.42.175)
Spamvertised via ETH ERC-20 token airdrops: etherscan.io/token/0x695d4e4…
@urlscanio: urlscan.io/result/2078de40-e…
Fake NFT mint webpage impersonating @OthersideMeta/@BoredApeYC in attempt to steal cryptocurrency.
Domain: bayc-otherside[.]art
Registrar: @Namecheap
Hosting: @Namecheap (198.54.116.96)
@urlscanio: urlscan.io/result/24b79d46-9…
First seen: Jun 28th, 2022
Fake NFT mint webpage impersonating @rollbitcom in attempt to steal cryptocurrency.
Domain: rollbit[.]mintnow[.]net
Registrar: @Namecheap
Hosting: @Cloudflare (104.21.85.9)
@urlscanio: urlscan.io/result/bfd212fe-6…
CC: @CryptoPhishing @CryptoScamDB
Fake NFT mint webpage impersonating @metacard in attempt to steal cryptocurrency.
Domain: minting-metacard[.]io
Registrar: @Namecheap
Hosting: @Namecheap (162.213.255.42)
@urlscanio: urlscan.io/result/5e608e29-4…
First seen: Feb 12th, 2022
CC: @CryptoPhishing @CryptoScamDB
Fake NFT minting webpages impersonating @opensea in attempt to steal cryptocurrency.
Domain 1: mint-sea[.]art
Domain 2: opensa[.]casa
Registrar & Host: @Namecheap
@urlscanio scans:
urlscan.io/result/d548952c-d…
urlscan.io/result/495cb355-e…
Spread via @Discord. Kit first seen 12 days ago.
Fake NFT minting webpage impersonating @HAPEBEASTGANG in attempt to steal cryptocurrency.
Domain: hapebeast[.]io
Registrar: @Namecheap
Hosting: @ContaboCom (167.86.72.233)
@urlscanio: urlscan.io/result/28290f43-2…
First seen 29 days ago.
CC: @CryptoPhishing @CryptoScamDB
COVID-19 phishing masquerading as @GOVUK in attempt to steal personal information including banking details. Don't fall for it!
Domain: ukgov-covid19relieve[.]com
Hosting: @GoDaddy (160.153.133.152)
@urlscanio: urlscan.io/result/7f86b45a-f…
CC: @malwrhunterteam @JayTHL
Scammers are now taking advantage of #coronavirus situation with fake "COVID-19 kit" giveaways.
Domains:
covid-19kit[.]store
appannie[.]club
covid19kit[.]online[.]globalhacks[.]info
Hosted @Hostwinds
Monetisation @OG_Ads
CC: @malwrhunterteam
Bad actors leveraging #coronavirus situation with fake donation webpages. Card phishing, PayPal integration and BTC addresses. Info: otx.alienvault.com/pulse/5e7…
Domains:
covid-19donor[.]com
covid19grantor[.]com
covid-19donator[.]com
Hosted @Namecheap
CC: @malwrhunterteam @JayTHL
Spam404 retweeted
Android Coronavirus SMS Worm is probably connected to developer from India 🇮🇳 #OSINT (1/8)
Coronavirus Android Worm
The app promises to get a Corona Safety Mask but instead it sends SMS to all your contacts with link to spread itself
zscaler.com/blogs/research/n… via @5h1vang
If the copyright complaint was bogus, @Dustin_Farrell can file a counter notification which will reinstate the video. More info here: support.google.com/youtube/a…
As this appears to be an extortion attempt I also escalated directly to YouTube in the hopes they can resolve this sooner. Thanks @malwrhunterteam for following up with that info!
Anytime @JeffTutorials, glad your issue was resolved! :)
This quoted post is unavailable.
No problem. Always happy to help @JeffTutorials!
This quoted post is unavailable.
Great news @JimboCasino! Glad we could help :)
Good news! Huge thanks to @Spam404Online fighting my corner. Youtube strike was removed & all videos will be reinstated, thanks again!
No problem @craigslots! We're glad we could help :)
Massive thank you to @chipmonkz for having the back of other gambling-related creators and being an all round great guy!
And a huge fist bump to @Spam404Online for pushing my content up for review and confirming that i'm within Youtube's policies.
Really chuffed.
Interesting domain; blobspot[.]com. Imitates real @Blogger blogs and injects coin mining script before taking user to real blog. Credit: @jcmanuel_13
Acknowledged by @facebook for responsibly disclosing a security issue! - facebook.com/whitehat/thanks…
Spam404 retweeted
Over 15725+ websites secured thanks to research and coordinated disclosure by @Spam404Online at OBB.
