Menu
Login
Hi there,
there is a fraudulent phishing domain hosted by a serbian person which seems to use Ucom as internet provider which pretend to be a crypto money exchange but is a phishing site. They try to trick people and scam their money in form of cryptocurrency.
They promote this fraud site through social media such as Youtube and search engine SEO.
The site "coin-changer.net" is static and have a .php script on it which generates always the same crypto addresses which belong to the domain holders of "coin-changer.net", formerly "coin-changer.com" (old domain got from them suspended), so if people send crypto money there it is gone forever in their pockets.
The Phishing Domain is:
coin-changer.net
Their end-order page is also static, showing everybody the same fraudsters crypto address and can be visited through direct URL, Proof::
https://coin-changer.net/order/7771s
https://coin-changer.net/order/8441d
Everybody can visit the order page because everybody gets redirected to the same pages, which show the crypto address of the fraudsters.
They had a domain before under "coin-changer.net.com" which was already suspended for fraudulent activities, Proof:
https://www.whois.com/whois/coin-changer.net
https://web.archive.org/web/20220701070044/https://coin-changer.net/ (Backup in the Internet archive from 2022, before it was suspended).
There are also some other reports on the internet about this fraudulent website hosted by a serbian, they did changed their static crypto addresses sometimes on their phishing site, online reports against "coin-changer.net" can be found in the internet from victims around the world.
The suspect lives in Belgrad, Serbia.
This are his email addresses:
[protected]@gmail.com
[protected]@coin-changer.net
[protected]@proton.me
