Spam404
@Spam404
We help online companies with content monitoring, penetration testing and brand protection. We aim to make the internet a much safer place for everyone.
ID:1915381586
http://www.spam404.com/ 28-09-2013 21:24:37
7,3K Tweets
12,1K Followers
648 Following
Fake beta webpage impersonating The Sandbox, dropping malware via Dropbox
Domain: sandboxbeta[.]cloud
Registrar: Namecheap.com
Host: eServer s.r.o. (EN) (2.56.91.19)
Spammed via email, likely sourced from recently disclosed @OpenSea data breach.
urlscan.io: urlscan.io/result/c0ce8b4โฆ
Fake NFT webpage impersonating Bored Ape Yacht Club ๐, dropping malware via Dropbox.
Domain: apesnoop[.]com
Registrar: Namecheap.com
Hosting: DDoS-Guard Ltd. (217.114.42.175)
Spamvertised via ETH ERC-20 token airdrops: etherscan.io/token/0x695d4eโฆ
urlscan.io: urlscan.io/result/2078de4โฆ
Fake NFT mint webpage impersonating Othersidemeta/Bored Ape Yacht Club ๐ in attempt to steal cryptocurrency.
Domain: bayc-otherside[.]art
Registrar: Namecheap.com
Hosting: Namecheap.com (198.54.116.96)
urlscan.io: urlscan.io/result/24b79d4โฆ
First seen: Jun 28th, 2022
Fake NFT mint webpage impersonating Rollbit in attempt to steal cryptocurrency.
Domain: rollbit[.]mintnow[.]net
Registrar: Namecheap.com
Hosting: Cloudflare (104.21.85.9)
urlscan.io: urlscan.io/result/bfd212fโฆ
CC: Crypto Phishing ๐ฃ CryptoScamDB ๐ค
Fake NFT mint webpage impersonating FULL SEND METACARD in attempt to steal cryptocurrency.
Domain: minting-metacard[.]io
Registrar: Namecheap.com
Hosting: Namecheap.com (162.213.255.42)
urlscan.io: urlscan.io/result/5e608e2โฆ
First seen: Feb 12th, 2022
CC: Crypto Phishing ๐ฃ CryptoScamDB ๐ค
Fake NFT minting webpages impersonating OpenSea in attempt to steal cryptocurrency.
Domain 1: mint-sea[.]art
Domain 2: opensa[.]casa
Registrar & Host: Namecheap.com
urlscan.io scans:
urlscan.io/result/d548952โฆ
urlscan.io/result/495cb35โฆ
Spread via @Discord. Kit first seen 12 days ago.
Fake NFT minting webpage impersonating @HAPEBEASTGANG in attempt to steal cryptocurrency.
Domain: hapebeast[.]io
Registrar: Namecheap.com
Hosting: Contabo (167.86.72.233)
urlscan.io: urlscan.io/result/28290f4โฆ
First seen 29 days ago.
CC: Crypto Phishing ๐ฃ CryptoScamDB ๐ค
Scammers are now taking advantage of #coronavirus situation with fake 'COVID-19 kit' giveaways.
Domains:
covid-19kit[.]store
appannie[.]club
covid19kit[.]online[.]globalhacks[.]info
Hosted Hostwinds
Monetisation OGAds
CC: MalwareHunterTeam
![Scammers are now taking advantage of #coronavirus situation with fake 'COVID-19 kit' giveaways. Domains: covid-19kit[.]store appannie[.]club covid19kit[.]online[.]globalhacks[.]info Hosted @Hostwinds Monetisation @OG_Ads CC: @malwrhunterteam](https://pbs.twimg.com/media/EUaj_KCXkAAgcST.jpg "Spam404 (@Spam404) on Twitter photo 2020-03-31 05:45:53 Scammers are now taking advantage of #coronavirus situation with fake 'COVID-19 kit' giveaways. Domains: covid-19kit[.]store appannie[.]club covid19kit[.]online[.]globalhacks[.]info Hosted @Hostwinds Monetisation @OG_Ads CC: @malwrhunterteam")
Bad actors leveraging #coronavirus situation with fake donation webpages. Card phishing, PayPal integration and BTC addresses. Info: otx.alienvault.com/pulse/5e7f99a0โฆ
Domains:
covid-19donor[.]com
covid19grantor[.]com
covid-19donator[.]com
Hosted Namecheap.com
CC: MalwareHunterTeam JayTHL
![Bad actors leveraging #coronavirus situation with fake donation webpages. Card phishing, PayPal integration and BTC addresses. Info: otx.alienvault.com/pulse/5e7f99a0โฆ Domains: covid-19donor[.]com covid19grantor[.]com covid-19donator[.]com Hosted @Namecheap CC: @malwrhunterteam @JayTHL](https://pbs.twimg.com/media/EUN_f0xXQAEbVdL.jpg "Spam404 (@Spam404) on Twitter photo 2020-03-28 19:20:45 Bad actors leveraging #coronavirus situation with fake donation webpages. Card phishing, PayPal integration and BTC addresses. Info: otx.alienvault.com/pulse/5e7f99a0โฆ Domains: covid-19donor[.]com covid19grantor[.]com covid-19donator[.]com Hosted @Namecheap CC: @malwrhunterteam @JayTHL")
![Interesting domain; blobspot[.]com. Imitates real @Blogger blogs and injects coin mining script before taking user to real blog. Credit: @jcmanuel_13](https://pbs.twimg.com/media/Dumh9nNW4AAZoWp.jpg "Spam404 (@Spam404) on Twitter photo 2018-12-17 07:36:38 Interesting domain; blobspot[.]com. Imitates real @Blogger blogs and injects coin mining script before taking user to real blog. Credit: @jcmanuel_13")
Over 15725+ websites secured thanks to research and coordinated disclosure by We're now @spam404 at OBB.
