Editorial mirrorBrand mentions redacted to public IDs. Hover to inspect. Everything else is theatre.How it works
THE ENABLERS REGISTRYRegistrar accountability archive
Archive LiveRead-only public record · No ads · No tracking
Case file folder with redacted documents and confidential investigation report.
CASE / DE / DOMAIN

Fake Token-Vorverkauf Threats: THE ENABLERS REGISTRY Insights

The Enablers Registry·Editorial mirror·/de/domain/

Public record copy. Brand names withheld, public accreditation numbers preserved. If the body below says “we”, that means the original publisher, not this mirror. TER only preserves, redacts, and re-contextualizes.

Fake Token-Vorverkauf
HOCH THREAT

Understanding and Mitigating Fake Token-Vorverkauf Threats

Fake Token-Vorverkauf scams are a prevalent threat with 33 domains detected by THE ENABLERS REGISTRY, 13 of which are currently active. Top TLDs include .com, .xyz, and .co.

226
Domains Detected
HOCH
Threat Level

How This Attack Works

Fake Token-Vorverkauf scams trick victims into believing they are investing in legitimate cryptocurrency projects. Here's how the scam typically unfolds:

STEP 1
Create Fake Websites
Scammers set up realistic-looking websites mimicking legitimate token presale portals.
STEP 2
Promote Presale on Social Media
Using social media and fake endorsements, scammers attract potential investors.
STEP 3
Collect Cryptocurrency
Victims are prompted to send cryptocurrency to a specified address under the guise of buying tokens.
STEP 4
Disappear with Funds
Once funds are collected, scammers shut down the site and disappear, leaving victims without recourse.

Technical Analysis

Fake Token-Vorverkauf scams often leverage possibly phishing tactics combined with cryptocurrency-specific techniques. Attackers use homograph attacks to create URLs that closely resemble legitimate sites, often registered through top registrars like [REDACTED] and [REDACTED] d/b/a IANA #303. They exploit the decentralized nature of blockchain networks, utilizing smart contracts that mimic legitimate presale contracts but are programmed to divert funds to the attacker’s wallet. The infrastructure often involves cloud-based hosting services to quickly deploy and dismantle sites, minimizing the chance of detection. HTML and JavaScript are commonly used to create dynamic, convincing interfaces that reassure potential victims of the site’s legitimacy. Additionally, attackers might deploy SEO techniques to improve the visibility of their fraudulent sites in search engine results, further increasing their reach.

Real Cases

CryptoX Presale Scam (2024)
$2 million stolen
A fake presale for a non-existent token, CryptoX, duped investors into contributing significant sums.
TokenLaunch Fraud (2023)
$1.5 million stolen
Victims were lured into a fake token launch with promises of high returns, only for the site to vanish post-collection.
QuickCoin Deception (2024)
$3 million stolen
Scammers created a sophisticated site mimicking a known exchange, leading to substantial financial losses.

How to Detect

Check for slight misspellings in domain names.
Look for inconsistent branding or layout compared to legitimate sites.
Be wary of unsolicited investment opportunities via social media.
Verify presale details on official project channels.
Beware of high-pressure tactics urging immediate investment.

How to Protect Yourself

1 Always verify URLs before entering personal information.
2 Use browser extensions to detect possibly phishing attempts.
3 Consult official project websites or channels for presale information.
4 Enable two-factor authentication on cryptocurrency exchanges.
5 Report suspicious sites to authorities and platforms like THE ENABLERS REGISTRY.

Frequently Asked Questions

What is Fake Token-Vorverkauf?
Fake Token-Vorverkauf is a scam where attackers create fraudulent cryptocurrency presale websites to deceive investors into sending funds for non-existent tokens.
How much money has been stolen through Fake Token-Vorverkauf?
Millions have been lost to Fake Token-Vorverkauf scams, with documented cases like CryptoX and QuickCoin resulting in over $6 million in damages.
How do I protect myself from Fake Token-Vorverkauf?
Verify presale details on official channels, scrutinize website URLs for discrepancies, and use security tools to detect possibly phishing attempts.
What should I do if I'm a victim of Fake Token-Vorverkauf?
Report the scam to law enforcement, notify your cryptocurrency exchange, and share information with platforms like THE ENABLERS REGISTRY to help prevent further incidents.
Data sourced from THE ENABLERS REGISTRY threat intelligence database — 226 domains tracked for this threat type
Token-Vorverkauf — Threat Intelligence Kit High Threat
226
Domains
101
Alive
125
Taken Down
6.6
Avg VT
44.7%
Alive Rate
91.2%
Detected
Since Jul 2025 111 domains with VT ≥ 5
Fake Token-Vorverkauf 226 domains
Screenshot of [REDACTED]
[REDACTED]
6 VTUnknownAngel Draineracross
Screenshot of [REDACTED]
[REDACTED]
Screenshot of octra.run
octra.run
6 VTUnknownAngel Drainer[REDACTED]
Screenshot of octra.run
octra.run
Screenshot of [REDACTED]
[REDACTED]
6 VTUnknownEthereum
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
6 VTLive
Screenshot of [REDACTED]
[REDACTED]
Screenshot of basetoken.sale
basetoken.sale
5 VTLivebase
Screenshot of basetoken.sale
basetoken.sale
Screenshot of bitcoinhyper.us
bitcoinhyper.us
5 VTUnknownAngel Drainer[REDACTED]
Screenshot of bitcoinhyper.us
bitcoinhyper.us
Screenshot of [REDACTED]
[REDACTED]
5 VTLive
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
5 VTLiveacross
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
5 VTUnknownAngel Draineracross
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
5 VTUnknownAngel Draineracross
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
5 VTLivebnb chain
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
4 VTLive[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
4 VTUnknownAngel Drainer
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
4 VTUnknown[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
4 VTUnknownAngel Drainerethereum
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
4 VTUnknownAngel Draineracross
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
4 VTLiveacross
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
4 VTLiveacross
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
4 VTLive
Screenshot of [REDACTED]
[REDACTED]
[REDACTED]
4 VTLiveLEI:5493004F7TI6QBM4WX72
[REDACTED]
3 VTLive
Screenshot of [REDACTED]
[REDACTED]
3 VTLiveMissbrauch von Wallet Connectacross
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
3 VTUnknownMissbrauch von Wallet Connectblast
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
3 VTLiveEthereum
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
3 VTLiveBlast
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
3 VTUnknownBlockDAG
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
3 VTLive[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
3 VTUnknownAngel Drainer
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
3 VTLiveacross
Screenshot of [REDACTED]
[REDACTED]
[REDACTED]
3 VTUnknownEthereum
Screenshot of [REDACTED]
[REDACTED]
3 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
3 VTLiveacross
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
3 VTLiveLEI:5493004F7TI6QBM4WX72
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
3 VTUnknownAngel Drainerethereum
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
3 VTLiveApple
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
3 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
3 VTUnknownAngel Draineracross
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
3 VTUnknownbnb chain
Screenshot of [REDACTED]
[REDACTED]
[REDACTED]
3 VTLive
[REDACTED]
3 VTLive
Screenshot of subbdtoken.wiki
subbdtoken.wiki
3 VTLiveAngel Drainer
Screenshot of subbdtoken.wiki
subbdtoken.wiki
Screenshot of [REDACTED]
[REDACTED]
3 VTLiveMissbrauch von Wallet ConnectEthereum
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
3 VTLiveMissbrauch von Wallet ConnectLEI:5493004F7TI6QBM4WX72
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
3 VTLive
Screenshot of [REDACTED]
[REDACTED]
[REDACTED]
3 VTLive
Screenshot of [REDACTED]
[REDACTED]
2 VTUnknownAngel Drainer
Screenshot of [REDACTED]
[REDACTED]
Screenshot of bitcoinhyper.de
bitcoinhyper.de
2 VTUnknownAngel Drainer[REDACTED]
Screenshot of bitcoinhyper.de
bitcoinhyper.de
Screenshot of [REDACTED]
[REDACTED]
2 VTLiveacross
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
2 VTUnknownMissbrauch von Wallet Connectacross
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
2 VTUnknownLEI:5493004F7TI6QBM4WX72
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
2 VTLiveAngel Drainerbase
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
2 VTUnknownAngel Drainerbase
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
2 VTUnknownavalanche
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
2 VTLive
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
2 VTUnknownEthereum
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
2 VTUnknownEthereum
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
2 VTUnknownEthereum
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
2 VTUnknownEthereum
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
2 VTUnknownEthereum
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
2 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
2 VTUnknownEthereum
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
2 VTUnknownAngel Draineraave
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
2 VTUnknownAngel Drainerethereum
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
2 VTUnknownSolana Drainercurve
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
2 VTLiveMissbrauch von Wallet Connect
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
2 VTUnknownMissbrauch von Wallet Connectethereum
Screenshot of [REDACTED]
[REDACTED]
Screenshot of pexebel.us
pexebel.us
2 VTLiveAngel Draineracross
Screenshot of pexebel.us
pexebel.us
Screenshot of [REDACTED]
[REDACTED]
2 VTUnknownLEI:5493004F7TI6QBM4WX72
Screenshot of [REDACTED]
[REDACTED]
Screenshot of rainbows.bet
rainbows.bet
2 VTLiveAngel Draineracross
Screenshot of rainbows.bet
rainbows.bet
Screenshot of [REDACTED]
[REDACTED]
2 VTLiveMissbrauch von Wallet Connectacross
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
2 VTUnknownMissbrauch von Wallet Connectrevolut
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
2 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
2 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
2 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
2 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
[REDACTED]
1 VTLive
Screenshot of [REDACTED]
[REDACTED]
1 VTUnknownAngel Draineracross
Screenshot of [REDACTED]
[REDACTED]
[REDACTED]
1 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
1 VTLiveMissbrauch von Wallet ConnectEthereum
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
1 VTUnknownethereum
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
1 VTLiveacross
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
1 VTUnknownEthereum
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
1 VTLiveAngel Drainer
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
1 VTUnknownAngel DrainerEthereum
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
1 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
1 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
Screenshot of ionixchain.co
ionixchain.co
1 VTLiveAngel Draineraave
Screenshot of ionixchain.co
ionixchain.co
Screenshot of [REDACTED]
[REDACTED]
1 VTUnknownAngel Draineraave
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
1 VTLiveAngel Draineraave
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
1 VTUnknownAngel Drainer
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
1 VTUnknownAngel Drainer
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
1 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
1 VTUnknowncelestia
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
1 VTUnknowncurve
Screenshot of [REDACTED]
[REDACTED]
[REDACTED]
1 VTLive
[REDACTED]
1 VTLive
Screenshot of [REDACTED]
[REDACTED]
1 VTUnknownMissbrauch von Wallet Connectacross
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
1 VTUnknownMissbrauch von Wallet Connectacross
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
1 VTLiveacross
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
1 VTUnknownAngel Drainerethereum
Screenshot of [REDACTED]
[REDACTED]
« Prev 1 2 3 Next » Page 2 of 3

Continue browsing the ledger

This page is the editorial mirror. Brand names are redacted to public IANA / business identifiers. Use the index to navigate other case files.

Open registrar ledger → All briefings