"Can you try out a game for me" Discord SCAM (Includes server to FLOOD)

Scams
, ,
1

Popup - Home - DimensionLands

A WhoIs lookup reveals the domain was registered in the Cayman Islands on June 2, 2021 - Whois dimensionlands.com

image

VirusTotal - VirusTotal

Associated Discord Server - Dimension Lands LLC (discord.com)

Associated Email Address - [email protected]

According to one of the victims, “Not Kotori,” the program is secretly designed to steal your Google and Discord login information.

3 Likes
2

Someone was actually just talking about this to me. I’m in the middle of looking into this.

3

best thing to do is to report the domain to google safebrowsing

1 Like
4

Looked into the web dev, pretty sure the same guy who did the phishing (proof)

  • Discord: Levi.#1337 (ID: 754224088490311800) a moderator for the server with a lot of linked accounts and bad privacy
    picture


    • Youtube channel Dizory - literally advertising a malware and other shady stuff
    • [email protected] - Levi Batkin, Dizory, levifromdiscord, ukphotography (plus the site ukphotography dot club - a previous photo gig, photos from it on Google Business )
    • +44 7542 505576 - has a Whatsapp account
    • A page proving that they are the devs of the original thing
    • Also from the Github (possibly linked to a school or sth): East Sussex, United Kingdom
    • An Instagram account with the name Levi Batkin - Age 16, matches with the linked YT account from Discord
    • Possibly faked address from WHOIS: 38 Courter Rd 38329, USA
    • an owner of levitech.xyz (his phone and mail match)
    • store at levitech.xyz/store selling WMWare Workstation licenses and “lxcid is sexy”
      Will immediately send a report to [email protected] with all this proof. Will also report Levi.#1337 on Discord for distribution of malware and propagating said malware.

Additional info: WHOIS available at Hostinger’s WHOIS service (I don’t want to be sued by Hostinger), the mail matches with the YT mail which matches with the Discord

P.S.: All links are archived ar archive.org, gg wp

5

“Possibly faked address from WHOIS: 38 Courter Rd 38329, USA”

The address is fake, he lives in East Sussex United Kingdom

2 Likes
6

China.#1337 DarkNight#6543 Innocent#9999 should be checked out

7

there is innocent#9999 id:142114690703556608
Screenshot_20210620_191953
she/he has a spotify Scars on Spotify
If u look at the attachment discord roles there is a clear indication that he/she is involved greatly

8

wtf? the server has been hacked random channels and more are addedd

9

Levi also owns https://lbdev.tech/ and https://dl.lbdev.tech/ goes to Dimension Lands.

10

Might as well move this to “name and shame”

1 Like
11

it’s done

12

his current discord: @Disabled Account 7dhsi2sh7e#2710

Screenshot_20210622-173851_Discord
Screenshot_20210622-173851_Discord1080×2400 117 KB

discord id: 754224088490311800
his personal discord server: Discord

13

they seem to have deleted all their websites and their Github account.

2 Likes
14

The server has been nuked by its owner (still functional tho), Discord switched to Rixels#1337 (ID 241911082078306304) and YT renamed to Rixels with the only video being a stolen lo-fi track. Well, it had some nice content over there but what can a scammer do.
IDK and pure speculation but we should check up the admins of the server as well. The Steam profile of the one seems very suspicious indeed, it has only 2 friends and one from them is from the UK and the other is privated.

15

Levi on the same account (Rixels#1337)
Innocient → Disease#5555 (ID 858828965321768970 )
new guy fxith#0999 (ID 245935702267789312 )

new server, low verification, an active VC and text channels, feel free to please yourself:

advertised as a marketplace but sells nothing, what a scum.

16

Rixels · GitHub is online, renamed to “Bill Markley”, leads to a computer repair company
Location fake, location possibly at Bexhill, likely a bait
Cashapp: levbat2004

New domains: sehotgame.xyz Hosting Nitro Phishing scripts ( github: rixels/nitrogen/blob/main/index.html )
mortalsplus.xyz - Discord advertising bot
springservices.xyz - “A Nitro Generator”

New phish: https://get-clouds.com/ (file deleted)
Malware leads to a Windows user “batkin” compiling it

17

This guy is relentless, I recommend we move this over to the wall of shame.

18

oh no i accidentally made an email spam bot… oops