Telegram Channels:
- https://web.afrontendhhkk.com/#/register/c82328Mad2 https://t.me/hkpay https://t.me/HkAnna123 - +852 51062870
- https://apkmanage.in/app/hkwallet?v=202409130006
- https://web.hkppweb.com/#/register/c82328Mad2 https://t.me/HKpay1688 https://t.me/HKpay01 https://t.me/hkpaytrader https://t.me/NkEarningTrick
- https://m.lcweitowinlking.com/recharge
- https://cash.cashbsd.com/2025042715584068985725
- https://api.hhpayapi.com/ (found in http.js in payment page ‘baseUrl’)
- https://t.me/Upayjiangbao
- [85255252481](https://api.whatsapp.com/send/?phone=85255252481&text=Please tell customer service to support your needs&type=phone_number&app_absent=0)
- yguan137@gmail.com
Template they are using - https://preview.uideck.com/items/cryptoland/
Similar Money mule sites
Dork used: “2023 CryptoLand - All Rights Reserved”
- https://cocopay.cc/
- https://api.hhpayapi.com/
- https://mcapi.ppapii.com/
- https://t.me/pppppaycustomerserviceofficial
- [917453911111](https://api.whatsapp.com/send/?phone=917453911111&text=Please tell customer service to support your needs&type=phone_number&app_absent=0)
- pppppppppppp@gmail.com
- https://cwmanage.apmerchant.in/home
- chuhaivvip
- [917453920689](https://api.whatsapp.com/send/?phone=917453920689&text=Please tell customer service to support your needs&type=phone_number&app_absent=0)
- Kevin2825728257@gmail.com URLScan Findings
- https://ttpayvip.com/
- https://gmsosm.com/
- https://cwapi.inpapi.com/
- https://cwapi.u9api.com/ FOFA Findings
- http://8.219.65.222/
- http://47.236.240.76/
- http://8.219.40.242/
- http://8.222.178.246/
- http://8.219.43.24/
- http://47.237.1.141/
- http://47.245.80.107/
- http://8.222.231.213/
- https://cwapi.inpapi.com
- https://47.236.18.253
- https://45.141.101.186
- https://146.190.254.192
- https://47.237.71.154
- http://47.236.130.103
- http://47.237.22.57
- http://47.236.237.121
- http://47.236.133.70
- http://47.237.25.161
- http://47.236.15.19
- http://47.236.109.35
- http://47.236.166.82
- http://47.236.240.76
- http://47.245.80.107
- http://47.237.1.141
- http://47.245.103.41
- http://47.237.30.76
- http://47.245.85.95
- http://8-222-247-215.cprapid.com
- http://8.219.113.111
- http://8.219.158.172
- http://8.219.169.87
- http://8.219.178.16
- https://8.222.202.99
- http://8.219.193.121
- http://8.219.194.199
- http://8.219.199.35
- http://8.219.210.241
- http://8.219.40.242
- http://8.219.251.23
- http://8.219.43.24
- http://8.222.178.246
- http://8.219.52.255
- http://8.219.93.150
- http://8.219.86.200
- http://8.222.194.28
- http://8.222.200.226
- http://8.222.201.228
- http://8.222.202.143
- http://8.222.201.206
- http://8.222.202.46
- https://api.k2inr.com
- http://8.222.209.253
- http://8.222.211.243
- https://api.lfpayafter.com
- http://8.222.213.65
- http://8.222.218.193
- http://8.222.227.168
- https://gmsosm.com
- https://cw.sunlightcw.com
- https://helcoin.net
- https://api.lfshopapi.com
- https://qrcoin.world
- https://dev-page.helcoin.net
- https://coin-hunter.org
- https://mc.xpaymage.com
- https://manage.incashvvip.com
- http://8.222.228.169
- https://manage.ppmerchants.com
- https://mc.upay9.com
- https://secretwealth.site
- https://discomines.com
- https://mail.vo2.ai
- https://piltradex.com
- https://taftelecoms.com.ng
- https://tryvium.company
- https://web3km.online
- https://www.ilivepay.com
- https://www.qrcoin.world
- https://vo2.ai
- https://www.discomines.com
- https://www.piltradex.com
- https://www.vo2.ai
- https://www.xcrypto.monster.stellarix.lol
- https://www.yetisol.com
- https://xcrypto.monster.stellarix.lol
- https://crypto-land.ru
- https://www.yixinyuan.com
- https://yixinyuan.com
- https://www.crypto-land.ru
- http://8.222.230.209
- http://8.222.231.213
- http://8.222.247.187
- http://8.222.247.215
- http://littledevil.sh 1. https://apkmanage.in/app/ttwallet320 2. https://t.me/ttwalletchannel 3. 916009125299 4. zhengguang502@gmail.com