date
20 February 2024 Tuesday. 17:05:35 UTC
scammer/abuser
cryptofbi007 - Olgareva - icryptofbi
description
The operator of this crypto QR code phishing network (https://bitcointalk.org/index.php?topic=5475430.0) is also involved in fake cryptocurrency mixer phishing scam websites. The phishing website "eth-mixer.to" uses the same nameservers that I researched for his other crypto QR code phishing domains, "btc-qr.to" and "coin-qr.to", which are "grace.ns.cloudflare.com" and "hans.ns.cloudflare.com" as of 2/20/2024. The fake ETH mixer phishing website "eth-mixer.to" (Archive: https://archive.is/I9Bnq) shows the same nameserver names and another fraudster's Ethereum address as "0x1C0537db2BAcDB6B9f17aad6bb7356A6700e9FF1".
The same goes for "btc-mixer.to" (Archive: https://archive.is/TaqxC) where he uses his deposit Bitcoin address "1AHkDZ1Ls6vjuME6XToP4wRqd3kmrYeQcp" to receive stolen Bitcoin money, and "ltc-mixer.to" (Archive: https://archive.is/zszEY) where he uses his deposit Litecoin address "LTdsbCtVridM36DTR2KrPLAwRtnDansD2Y" to receive stolen Litecoin money.
He has also now created a full cryptocurrency mixer phishing network next to his QR code crypto phishing network.
