Fake Kraken site http://146a1.casmex.at/kraken/ Current DNS A record: 31.59.121.53 (AS56971 - AS569 ...
show moreFake Kraken site http://146a1.casmex.at/kraken/ Current DNS A record: 31.59.121.53 (AS56971 - AS56971 CGI GLOBAL LIMITED, HK)
The main domain is 146a1.casmex.at. 1mo old
This website attempts to impersonate Kraken, a legitimate cryptocurrency exchange, but it is hosted on a suspicious domain (casmex.at) that has been flagged by multiple security vendors. The site claims you have a large balance and pressures you to withdraw funds within 7 days to avoid account blocking, a common tactic used in phishing scams to create urgency and bypass critical thinking. The official Kraken website is kraken.com, not casmex.at.
show less
phishing spam from osnlsmtp01-01-t2.prod.phx3.secureserver.net (osnlsmtp01-01-t2.prod.phx3.secureser ...
show morephishing spam from osnlsmtp01-01-t2.prod.phx3.secureserver.net (osnlsmtp01-01-t2.prod.phx3.secureserver.net. [50.63.9.52])
Tue, 13 Oct 2026 18:56:49 -0700 (PDT)
Dear +1.81919273236 ΠitΡΠΎin Sign In π₯βΆ https://www.google.com/share.google?q=SzL3SlPdreLuSNjS2
show less
phishing spam from sv12231.xserver.jp (sv12231.xserver.jp. [103.3.1.72])
Tue, 13 Oct 2026 18:27:56 ...
show morephishing spam from sv12231.xserver.jp (sv12231.xserver.jp. [103.3.1.72])
Tue, 13 Oct 2026 18:27:56 -0700 (PDT)
Transfer of 2 BITCOIN. RECEIVE => https://www.google.com/share.google?q=BBao6n8l0YmlZC
show less
scam spam from dsl-195-160-245-79.avtlg.ru ([195.160.245.79])
Tue, 13 Oct 2026 16:01:34 -0700 (PDT) ...
show morescam spam from dsl-195-160-245-79.avtlg.ru ([195.160.245.79])
Tue, 13 Oct 2026 16:01:34 -0700 (PDT)
$5,000 instantly added to your balance Take it here https://telegra.ph/Super-promo-code-for-5000-from-KANYE-WEST-Payment-308572-08559-10-06#
show less
phishing spam from client.hidden.invalid by smtp.web.de (mrweb106 [213.165.67.124])
Tue, 13 Oct 202 ...
show morephishing spam from client.hidden.invalid by smtp.web.de (mrweb106 [213.165.67.124])
Tue, 13 Oct 2026 15:25:51 -0700 (PDT)
Flag Anomaly #FND-444444-44-444 building up β help critical LOG INTO YOUR PERSONAL DASHBOARD
show less
phishing spam from mout.web.de (mout.web.de. [217.72.192.78])
Tue, 13 Oct 2026 15:25:52 -0700 (PDT) ...
show morephishing spam from mout.web.de (mout.web.de. [217.72.192.78])
Tue, 13 Oct 2026 15:25:52 -0700 (PDT)
Flag Ticket #FNd66666666666 rising => help critical
Flag Anomaly #FND-444444-44-444 building up β help critical LOG INTO YOUR PERSONAL DASHBOARD
show less
phishing spam from 54-dmta.msdp1.com (54-dmta.msdp1.com. [176.110.104.54])
Tue, 13 Oct 2026 02:50:1 ...
show morephishing spam from 54-dmta.msdp1.com (54-dmta.msdp1.com. [176.110.104.54])
Tue, 13 Oct 2026 02:50:17 -0700 (PDT)
ehr geehrte Frau Message- Sending 1,521185 Btc. Go To Withdrawal => Https://www.google.com/share.google?q=5Ngaxjfg5W
show less
phishing spam from sv.naramori.com (203-137-192-20.monstera.jp-west.compute.idcfcloud.net. [203.137. ...
show morephishing spam from sv.naramori.com (203-137-192-20.monstera.jp-west.compute.idcfcloud.net. [203.137.192.20])
Tue, 13 Oct 2026 02:30:48 -0700 (PDT)
BTC withdraw. Next -> https://www.google.com/share.google?q=y9b6MrA6k3bxxKQcS
show less
phishing spam from [45.172.177.253] (port=45662 helo=45.172.177.253)
Tue, 13 Oct 2026 01:57:56 -050 ...
show morephishing spam from [45.172.177.253] (port=45662 helo=45.172.177.253)
Tue, 13 Oct 2026 01:57:56 -0500
Your $5,000 bonus is ready β enter promo code & cash out https://telegra.ph/Super-promo-code-for-5000-from-KANYE-WEST-Payment-60260818880-10-06#
show less
phishing spam from omta36.uswest2.a.cloudfilter.net (omta36.uswest2.a.cloudfilter.net. [35.89.44.35] ...
show morephishing spam from omta36.uswest2.a.cloudfilter.net (omta36.uswest2.a.cloudfilter.net. [35.89.44.35])
Tue, 13 Oct 2026 01:31:22 -0700 (PDT)
$5000 arcade tokens! Play classics
Your $5,000 bonus is ready β enter promo code & cash out https://telegra.ph/Super-promo-code-for-5000-from-KANYE-WEST-Payment-60260818880-10-06#
show less
phishing spam from sv8676.xserver.jp (sv8676.xserver.jp. [183.181.85.37])
Mon, 12 Oct 2026 22:27:05 ...
show morephishing spam from sv8676.xserver.jp (sv8676.xserver.jp. [183.181.85.37])
Mon, 12 Oct 2026 22:27:05 -0700 (PDT)
+ 112,356.44 USD ππΎ https://www.google.com/share.google?q=Wno5bek61MpA3LdHW
show less
phishing spam from 195.19.50.79 ([195.19.50.79])
From: Blockchain portal
Subject: Weekend $5000 ...
show morephishing spam from 195.19.50.79 ([195.19.50.79])
From: Blockchain portal
Subject: Weekend $5000 madness! Play now
Your account just got $5,000 Find out how here https://telegra.ph/Super-promo-code-for-5000-from-KANYE-WEST-Payment-924327-11-082-10-06
show less
https://142ce2.ralind.at/referal/? The domain 'ralind.at' has been flagged as suspicious by multip ...
show morehttps://142ce2.ralind.at/referal/? The domain 'ralind.at' has been flagged as suspicious by multiple scam detection services, including IPQS, which specifically identified it for phishing. The site has a very low trust score and is noted to host many other suspicious websites on the same server, a common tactic for scammers.
show less
phishing spam from o1276.shared.klaviyomail.com (o1276.shared.klaviyomail.com. [167.89.17.229])
Mon ...
show morephishing spam from o1276.shared.klaviyomail.com (o1276.shared.klaviyomail.com. [167.89.17.229])
Mon, 12 Oct 2026 06:05:34 -0700 (PDT)
Hi You have received 1 email # 949917. Go >> https://search.app/bJKMs,
show less
phishing spam from wfbtrttw.outbound-mail.sendgrid.net (wfbtrttw.outbound-mail.sendgrid.net. [159.18 ...
show morephishing spam from wfbtrttw.outbound-mail.sendgrid.net (wfbtrttw.outbound-mail.sendgrid.net. [159.183.87.121])
Mon, 12 Oct 2026 01:38:44 -0700 (PDT)
Thanks Binance Notification - https://rss2.sayler.at/go/y2c4y254/y2a4w2
You're almost there!
show less
phishing spam from mgb-mta01.mms.t-systems-service.com (mgb-mta01.mms.t-systems-service.com. [94.100 ...
show morephishing spam from mgb-mta01.mms.t-systems-service.com (mgb-mta01.mms.t-systems-service.com. [94.100.245.97])
Sun, 11 Oct 2026 23:49:18 -0700 (PDT)
Guten Tag Transaction 236,538 $. GET -> https://www.google.com/share.google?q=lXfqnVMMBfedwkCGO
show less
phishing spam from mout-xforward.kundenserver.de (mout-xforward.kundenserver.de. [82.165.159.39])
S ...
show morephishing spam from mout-xforward.kundenserver.de (mout-xforward.kundenserver.de. [82.165.159.39])
Sun, 11 Oct 2026 20:52:36 -0700 (PDT)
Submitted to your action +5.053333 BTC coin FINANCIAL REMITTANCE needs approval ACCESS YOUR OWN PAGE
show less
phishing spam from client.hidden.invalid by mrelayeu.kundenserver.de (mreue106 [212.227.15.183])
Su ...
show morephishing spam from client.hidden.invalid by mrelayeu.kundenserver.de (mreue106 [212.227.15.183])
Sun, 11 Oct 2026 20:30:06 -0700 (PDT)
Submitted as you +8.282222 _BTC WIRE PAYMENT needs your OK GO TO YOUR ACCOUNT
show less
phishing spam from mout-xforward.kundenserver.de (mout-xforward.kundenserver.de. [82.165.159.37])
S ...
show morephishing spam from mout-xforward.kundenserver.de (mout-xforward.kundenserver.de. [82.165.159.37])
Sun, 11 Oct 2026 20:30:06 -0700 (PDT)
Submitted as you +8.282222 _BTC WIRE PAYMENT needs your OK GO TO YOUR ACCOUNT
show less
phishing spam from v5196.v54c35a42.usw1.send.mailgun.net (v5196.v54c35a42.usw1.send.mailgun.net. [69 ...
show morephishing spam from v5196.v54c35a42.usw1.send.mailgun.net (v5196.v54c35a42.usw1.send.mailgun.net. [69.72.45.196])
Sun, 11 Oct 2026 19:05:59 -0700 (PDT)
New message from Binance β O9669. SIGN IN ->> https://www.google.com/share.google?q=X3g1RlrumTyNX9pan
show less
phishing spam from sv14571.xserver.jp (sv14571.xserver.jp. [162.43.122.172])
Sun, 11 Oct 2026 17:46 ...
show morephishing spam from sv14571.xserver.jp (sv14571.xserver.jp. [162.43.122.172])
Sun, 11 Oct 2026 17:46:42 -0700 (PDT)
You have a notification # 598439. Read >>> https://www.google.com/share.google?q=u3FGtUatqqoLyAjqG
show less
phishing spam from client.hidden.invalid by mrelayeu.kundenserver.de (mreue011 [212.227.15.167])
Su ...
show morephishing spam from client.hidden.invalid by mrelayeu.kundenserver.de (mreue011 [212.227.15.167])
Sun, 11 Oct 2026 15:57:59 -0700 (PDT)
Message-ID: <[email protected]>
+25.8244.33 USD β‘ GO TO THE ACCOUNT
show less
phishing spam from mout-xforward.kundenserver.de (mout-xforward.kundenserver.de. [82.165.159.5])
Su ...
show morephishing spam from mout-xforward.kundenserver.de (mout-xforward.kundenserver.de. [82.165.159.5])
Sun, 11 Oct 2026 15:58:00 -0700 (PDT)
+25.8244.33 USD β‘ GO TO THE ACCOUNT
show less
phishing spam from o35.p12.mailjet.com (o35.p12.mailjet.com. [87.253.237.35])
Sun, 11 Oct 2026 14:3 ...
show morephishing spam from o35.p12.mailjet.com (o35.p12.mailjet.com. [87.253.237.35])
Sun, 11 Oct 2026 14:30:19 -0700 (PDT)
Hallo +1.81919233198 BTC Sign In π https://www.google.com/share.google?q=HH7ofogoXzaWj5kAy
show less
phishing spam from kl-203-24-8.kmta.shared.klaviyomail.com (kl-203-24-8.kmta.shared.klaviyomail.com. ...
show morephishing spam from kl-203-24-8.kmta.shared.klaviyomail.com (kl-203-24-8.kmta.shared.klaviyomail.com. [170.203.24.8])
Sun, 11 Oct 2026 13:29:18 -0700 (PDT)
New Message from Coinbase. READ ππΎ graph.org/YOU-HAVE-A-NEW-BITCOIN-TRANSFER-FROM-COINBASE-08-27?
show less
Fraud OrdersEmail SpamPhishing
By clicking βAccept allβ, you agree to the storing of cookies on your device to remember preferences and
analyze site usage.
Read more
- Required to log into your AbuseIPDB account, and store these cookie preferences.