Editorial mirrorBrand mentions redacted to public IDs. Hover to inspect. Everything else is theatre.How it works
THE ENABLERS REGISTRYRegistrar accountability archive
Archive LiveRead-only public record · No ads · No tracking
Case file folder with redacted documents and confidential investigation report.
CASE / ES / DOMAIN

Fake Preventa de tokens Threats: THE ENABLERS REGISTRY Insights

The Enablers Registry·Editorial mirror·/es/domain/

Public record copy. Brand names withheld, public accreditation numbers preserved. If the body below says “we”, that means the original publisher, not this mirror. TER only preserves, redacts, and re-contextualizes.

Fake Preventa de tokens
ALTO THREAT

Understanding and Mitigating Fake Preventa de tokens Threats

Fake Preventa de tokens scams are a prevalent threat with 33 domains detected by THE ENABLERS REGISTRY, 13 of which are currently active. Top TLDs include .com, .xyz, and .co.

226
Domains Detected
ALTO
Threat Level

How This Attack Works

Fake Preventa de tokens scams trick victims into believing they are investing in legitimate cryptocurrency projects. Here's how the scam typically unfolds:

STEP 1
Create Fake Websites
Scammers set up realistic-looking websites mimicking legitimate token presale portals.
STEP 2
Promote Presale on Social Media
Using social media and fake endorsements, scammers attract potential investors.
STEP 3
Collect Cryptocurrency
Victims are prompted to send cryptocurrency to a specified address under the guise of buying tokens.
STEP 4
Disappear with Funds
Once funds are collected, scammers shut down the site and disappear, leaving victims without recourse.

Technical Analysis

Fake Preventa de tokens scams often leverage possibly phishing tactics combined with cryptocurrency-specific techniques. Attackers use homograph attacks to create URLs that closely resemble legitimate sites, often registered through top registrars like [REDACTED] and [REDACTED] d/b/a IANA #303. They exploit the decentralized nature of blockchain networks, utilizing smart contracts that mimic legitimate presale contracts but are programmed to divert funds to the attacker’s wallet. The infrastructure often involves cloud-based hosting services to quickly deploy and dismantle sites, minimizing the chance of detection. HTML and JavaScript are commonly used to create dynamic, convincing interfaces that reassure potential victims of the site’s legitimacy. Additionally, attackers might deploy SEO techniques to improve the visibility of their fraudulent sites in search engine results, further increasing their reach.

Real Cases

CryptoX Presale Scam (2024)
$2 million stolen
A fake presale for a non-existent token, CryptoX, duped investors into contributing significant sums.
TokenLaunch Fraud (2023)
$1.5 million stolen
Victims were lured into a fake token launch with promises of high returns, only for the site to vanish post-collection.
QuickCoin Deception (2024)
$3 million stolen
Scammers created a sophisticated site mimicking a known exchange, leading to substantial financial losses.

How to Detect

Check for slight misspellings in domain names.
Look for inconsistent branding or layout compared to legitimate sites.
Be wary of unsolicited investment opportunities via social media.
Verify presale details on official project channels.
Beware of high-pressure tactics urging immediate investment.

How to Protect Yourself

1 Always verify URLs before entering personal information.
2 Use browser extensions to detect possibly phishing attempts.
3 Consult official project websites or channels for presale information.
4 Enable two-factor authentication on cryptocurrency exchanges.
5 Report suspicious sites to authorities and platforms like THE ENABLERS REGISTRY.

Frequently Asked Questions

What is Fake Preventa de tokens?
Fake Preventa de tokens is a scam where attackers create fraudulent cryptocurrency presale websites to deceive investors into sending funds for non-existent tokens.
How much money has been stolen through Fake Preventa de tokens?
Millions have been lost to Fake Preventa de tokens scams, with documented cases like CryptoX and QuickCoin resulting in over $6 million in damages.
How do I protect myself from Fake Preventa de tokens?
Verify presale details on official channels, scrutinize website URLs for discrepancies, and use security tools to detect possibly phishing attempts.
What should I do if I'm a victim of Fake Preventa de tokens?
Report the scam to law enforcement, notify your cryptocurrency exchange, and share information with platforms like THE ENABLERS REGISTRY to help prevent further incidents.
Data sourced from THE ENABLERS REGISTRY threat intelligence database — 226 domains tracked for this threat type
Preventa de tokens — Threat Intelligence Kit High Threat
226
Domains
101
Alive
125
Taken Down
6.6
Avg VT
44.7%
Alive Rate
91.2%
Detected
Since Jul 2025 111 domains with VT ≥ 5
Fake Preventa de tokens 226 domains
Screenshot of LEI:[REDACTED]
LEI:5493004F7TI6QBM4WX72-dep30h.com
23 VTUnknownLEI:5493004F7TI6QBM4WX72
Screenshot of LEI:[REDACTED]
LEI:5493004F7TI6QBM4WX72-dep30h.com
Screenshot of mbato.guru
mbato.guru
21 VTEn directoAngel Drainer
Screenshot of mbato.guru
mbato.guru
Screenshot of othersko.guru
othersko.guru
19 VTEn directoAngel Drainer
Screenshot of othersko.guru
othersko.guru
Screenshot of [REDACTED]
[REDACTED]
19 VTUnknownXRP
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
18 VTEn directoApple
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
17 VTEn directoApple
Screenshot of [REDACTED]
[REDACTED]
Screenshot of dreamsmart.pl
dreamsmart.pl
17 VTUnknownAngel Drainer
Screenshot of dreamsmart.pl
dreamsmart.pl
Screenshot of hotoj.guru
hotoj.guru
17 VTEn directoAngel Drainer
Screenshot of hotoj.guru
hotoj.guru
Screenshot of [REDACTED]
[REDACTED]
17 VTUnknownAngel Draineracross
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
17 VTEn directoAngel Draineracross
Screenshot of [REDACTED]
[REDACTED]
Screenshot of unisara.guru
unisara.guru
17 VTEn directoAngel Drainer
Screenshot of unisara.guru
unisara.guru
Screenshot of baforth.guru
baforth.guru
16 VTEn directoAngel Drainer
Screenshot of baforth.guru
baforth.guru
Screenshot of [REDACTED]
[REDACTED]
16 VTUnknownAngel DrainerEthereum
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
16 VTUnknownAngel Draineracross
Screenshot of [REDACTED]
[REDACTED]
Screenshot of mostgretoko.guru
mostgretoko.guru
16 VTEn directoAngel Drainer
Screenshot of mostgretoko.guru
mostgretoko.guru
Screenshot of thecrito.guru
thecrito.guru
16 VTEn directoAngel Drainer
Screenshot of thecrito.guru
thecrito.guru
Screenshot of [REDACTED]
[REDACTED]
15 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
15 VTUnknownUso indebido de Wallet Connectdextools
Screenshot of [REDACTED]
[REDACTED]
Screenshot of one.link
one.link
15 VTEn directoApple
Screenshot of one.link
one.link
Screenshot of [REDACTED]
[REDACTED]
15 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
15 VTEn directoEthereum
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
14 VTUnknownAngel Drainer
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
14 VTUnknownLEI:5493004F7TI6QBM4WX72
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
14 VTUnknownSolana Drainer1inch
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
14 VTUnknownAngel Drainersolana
Screenshot of [REDACTED]
[REDACTED]
Screenshot of zama.sale
zama.sale
14 VTUnknownLEI:5493004F7TI6QBM4WX72
Screenshot of zama.sale
zama.sale
Screenshot of [REDACTED]
[REDACTED]
13 VTUnknownAngel DrainerApple
Screenshot of [REDACTED]
[REDACTED]
Screenshot of blazpay.co
blazpay.co
13 VTEn directoAngel Draineracross
Screenshot of blazpay.co
blazpay.co
Screenshot of colnilst.co
colnilst.co
13 VTEn directo
Screenshot of colnilst.co
colnilst.co
Screenshot of [REDACTED]
[REDACTED]
13 VTUnknownLEI:5493004F7TI6QBM4WX72
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
13 VTEn directo
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
13 VTUnknownAngel Drainer
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
13 VTUnknownacross
Screenshot of [REDACTED]
[REDACTED]
Screenshot of rainbows.run
rainbows.run
13 VTEn directoAngel Draineracross
Screenshot of rainbows.run
rainbows.run
Screenshot of [REDACTED]
[REDACTED]
13 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
[REDACTED]
12 VTUnknownVARA Provisional License
Screenshot of [REDACTED]
[REDACTED]
12 VTUnknownUso indebido de Wallet Connectacross
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
12 VTUnknown[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
Screenshot of conilst.co
conilst.co
12 VTEn directoacross
Screenshot of conilst.co
conilst.co
Screenshot of [REDACTED]
[REDACTED]
12 VTUnknownLEI:5493004F7TI6QBM4WX72
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
12 VTUnknownUso indebido de Wallet Connect
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
12 VTEn directoUso indebido de Wallet ConnectApple
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
12 VTEn directoAngel Drainer
Screenshot of [REDACTED]
[REDACTED]
[REDACTED]
11 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
11 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
11 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
[REDACTED]
11 VTEn directoGoogle
Screenshot of [REDACTED]
[REDACTED]
11 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
Screenshot of rnbw-coiniist.co
rnbw-coiniist.co
11 VTUnknownacross
Screenshot of rnbw-coiniist.co
rnbw-coiniist.co
[REDACTED]
10 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
10 VTUnknownAngel Draineracross
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
10 VTUnknownAngel Drainer
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
10 VTEn directoEthereum
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
10 VTUnknownAngel Drainerethereum
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
10 VTEn directoAngel Drainer
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
10 VTEn directoUso indebido de Wallet Connectacross
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
10 VTUnknownUso indebido de Wallet Connectdextools
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
10 VTUnknown[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
9 VTUnknownacross
Screenshot of [REDACTED]
[REDACTED]
[REDACTED]
9 VTUnknownAngel Drainer
Screenshot of [REDACTED]
[REDACTED]
9 VTEn directoUso indebido de Wallet Connectacross
Screenshot of [REDACTED]
[REDACTED]
[REDACTED]
9 VTUnknownVARA Provisional License
Screenshot of [REDACTED]
[REDACTED]
9 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
9 VTEn directo
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
9 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
8 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
8 VTEn directoEthereum
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
8 VTEn directoEthereum
Screenshot of [REDACTED]
[REDACTED]
[REDACTED]
8 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
8 VTEn directo
Screenshot of [REDACTED]
[REDACTED]
[REDACTED]
8 VTEn directo
Screenshot of [REDACTED]
[REDACTED]
8 VTUnknownAngel Draineracross
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
8 VTUnknownAngel DrainerNASDAQ:COIN
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
8 VTUnknownacross
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
7 VTUnknownAngel DrainerBlockDAG
Screenshot of [REDACTED]
[REDACTED]
[REDACTED]
7 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
7 VTEn directo
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
7 VTEn directoEthereum
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
7 VTEn directo
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
7 VTEn directoEthereum
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
7 VTEn directoEthereum
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
7 VTEn directoEthereum
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
7 VTEn directoEthereum
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
7 VTEn directo
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
7 VTEn directoEthereum
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
7 VTEn directoNASDAQ:COIN
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
7 VTUnknownUso indebido de Wallet Connect
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
7 VTUnknownAngel Draineraave
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
7 VTUnknownAngel Drainer
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
7 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
6 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
6 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
6 VTEn directo
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
6 VTUnknownEthereum
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
6 VTUnknownEthereum
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
6 VTEn directo
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
6 VTUnknownEthereum
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
6 VTUnknownEthereum
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
6 VTUnknownEthereum
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
6 VTEn directoEthereum
Screenshot of [REDACTED]
[REDACTED]
1 2 3 Next » Page 1 of 3

Continue browsing the ledger

This page is the editorial mirror. Brand names are redacted to public IANA / business identifiers. Use the index to navigate other case files.

Open registrar ledger → All briefings