Who is U2E-Free?

The scam DApp that phished and stole over $50K from me, u2e-free.com (and its clone u2e-free.net), runs in crypto wallets has a public promotional website with the address u2e-free.vip. We can learn more about them by visiting that website.

u2e-free.vip - promotional website for a scam DApp

The website is really simple with only one webpage, a video, and only 2 out links: White paper and Audit.

I don't know how original are their video and White Paper, but their Audit document is a stolen Audit of the Uniswap project. They stole the document and added the U2E-Free text in, find-and-replace Uniswap with U2E-Free.

Stolen document vs. Original document

 

Code file references in the Audit document: Uniswap is replaced with U2E

At the bottom, there is a list of people and their profiles listed as Team.

Real people, real profiles, but fake association

I was able to find Linkedin profiles for some of the people in the list such as Tyler Fallon and Ian Arden, but none of them listed their relation with U2E-Free on their profiles.

The domain name u2e-free.vip has an IP Address hosted in Hong Kong. ICANN lookup shows that the domain is registered on Goddady to individual(s) in Ho Chi Minh City, Vietnam.

Registrant information of u2e-free.vip

The 2 DApp domain names u2e-free.com and u2e-free.net are hosted by Cloudflare, registered with GoDaddy, but the registrant are individual(s) from Hong Kong.

Registrant information of u2e-free.com and u2e-free.net

This means that we can get their identities if the authority/law enforcement request GoDaddy to release their information.

You might thought scamming on the Internet is anonymous and no one may know who you are, think again.

Location: United States

Comments

  1. John MasehiDecember 17, 2021 at 10:16 AM

    Great information and hopefully authorities can help get our money back including my 44000 USDT stolen from Coinbase Wallet from those thieves/scammers

    ReplyDelete

Post a Comment

Popular posts from this blog

DApp Phishing in Coinbase Wallet - I Lost Over $50,000

Image
A few days ago, all my money, $58,797, in my Coinbase Wallet drained from my wallet without me knowing about it until I opened my wallet. I believe there is a major security issue in Coinbase Wallet where users can easily get phished to give a DApp (Decentralized Application) to take control and grant spending permission to an external entity. My empty wallet 😢 Contacting Coinbase/Wallet Support , which is the only way I know of to reach out to them, was not helpful. All they said is that I may have leaked the recovery phrase, without looking into the details I provided . I found a recent review on Google that describes the situation really well. A recent user review on Google Play Store. I am going to describe what happened in details. My brother-in-law showed me his Coinbase Wallet a few weeks ...
Read more

Inside The Scammer's DApp

Image
With Chrome Dev Tools , I was able to look inside the client code of https://u2e-free.com. This site is the scam dapp that drained all my USDT after my Coinbase Wallet granted them unlimited spending of my USDT. The site is a single-page web application written in Vue.js v2.6.12 and web3.js . Below is the tree view of the site. The application supports two different languages in its UI — English and Chinese, with English as the primary language. I concluded that English is the primary language because there are untranslated texts for the Chinese version as shown below. Next I will focus on the code that implements the Receive button. This is the most important action because it is what obtained the permission to spend unlimited USDT from victims' wallets. Below is the receive function that implements the action. The function above does the following: Obtain the USDT Contract Get the estim...
Read more