#scam

Fraud infrastructure: fake stores, crypto and romance scams, fake giveaways.

Subscribe (RSS)


#scam

Fake stores, crypto, romance, giveaways.

Subscribe (RSS)


IOCs by window

Today

0

IOCs tagged #scam

Week

8

IOCs tagged #scam

Month

48

IOCs tagged #scam

Year

3,443

IOCs tagged #scam

Counts as of 2026-10-28. Regenerated daily.

About #scam

  • What: Fraud infrastructure. It does not always steal credentials.
  • Types: Fake stores, crypto-investment sites, romance scams, fake giveaways.
  • Also: Fake support hotlines and fake tech-support pop-ups.
  • Variants: Fake Trezor/Ledger pages, fake DEX dApps, deepfake giveaways, fake tax-refund sites.
  • Detection: Domain age, WHOIS, certificate transparency, image matching.
  • References: MITRE ATT&CK T1656 (Impersonation) · FTC scam advisories.

Recent IOCs tagged #scam

Latest 10 IOCs from the past 30 days. Live JSON: api.tweetfeed.live/v1/month/scam.

Date Type Value Source
Oct 27, 14:17 domain rn-a-g-a-z-i-n-promocoes.com @Coolcarlos17
Oct 27, 14:17 url http://rn-a-g-a-z-i-n-promocoes.com @Coolcarlos17
Oct 27, 07:09 url http://43.157.146.70 @RakeshKrish12
Oct 27, 07:09 domain kakisafedecrypt.com @RakeshKrish12
Oct 27, 07:09 url http://kakisafedecrypt.com @RakeshKrish12
Oct 27, 07:09 ip 43.157.146.70 @RakeshKrish12
Oct 24, 20:59 domain ccloudbeds.com @scanmalware
Oct 24, 20:59 url http://ccloudbeds.com @scanmalware
Oct 19, 14:14 domain pagina-clientes-havan.com @Coolcarlos17
Oct 19, 14:14 url https://pagina-clientes-havan.com/produto/33051 @Coolcarlos17

Related tags

Often seen with #scam.

See all tags on the Dashboard or browse the full IOC feed.

Frequently asked questions

What counts as a scam vs phishing?

Phishing usually steals credentials to take over an account. A scam gets the victim to give money, crypto or data, and the two tags often appear on the same IOC.

What kinds of scams are most common in the feed?

Crypto-investment sites, fake stores, romance scams, fake X/Twitter giveaways and fake tax-refund sites. Also fake Binance and Coinbase pages that ask for wallet seeds.

How is this list updated?

The feed and the API update every 15 minutes from researcher posts on X. This page refreshes once a day.

What is the license? Can I use this commercially?

Yes. All IOC data, including this Scam subset, is CC0 1.0 Universal. No attribution needed. No warranty. The website code and branding are not CC0.

License

Scam IOC data: CC0 1.0 Public Domain. No attribution required, no warranty.