Website phishing report VR-B11FE031
Investigator report
Filed by a vetted PublicAML investigator rather than by an anonymous reader. The account itself has not been independently re-checked.
The addresses below carry a risk label from this report.
- Type
- Phishing
- Reported as
- Website phishing
- Chain
- ethereum
- Reported by
- DenysInvestigator
- Incident date
- Sep 1, 2026
- Published
- Sep 8, 2026
What happened
Cash-out wallet holding the proceeds of an Inferno Drainer approval-phishing theft. Traced by PublicAML from the victim address published by Scam Sniffer on 1 September 2026. Chain of events: 1. Victim 0x686618abb3730079601a5abead6ec24549c5ce34 signed a phishing approval in February 2024 and never revoked it. SYN arrived 30 August 2026 and was drained 25 hours later. 2. The drain transaction 0x1c000ae7bf83d24c79ebae962561e253ed26fc7d9a908e188dc721d33597b4bb is an execTransaction signed by 0x0000db5c8B030ae20308ac975898E09741e70000 — Inferno Drainer, already scored 100 (hacker) in our base. 3. 1,311,357 SYN moved to the victim's Gnosis Safe 0x9EC9ca0c7846E8726D5d734EFd291f855ea03447, then out in 14 transfers to CoW Protocol settlement 0x9008D19f58AAbD9eD0D60971565AA8510560ab41 between 00:48 and 01:01 UTC on 1 September. 4. The swap proceeds landed here: 14 internal ETH transfers from the CoW settlement contract to this address, 00:54-01:01 UTC on 1 September, totalling 45.0957 ETH. This address is an externally owned account, not a contract. As of 8 September 2026 it holds 45.0957 ETH and has made zero outgoing transactions — the funds have not moved since they arrived. Attribution basis: PublicAML /v1/trace swap-through followed the CoW batch settlements to the actual payee (attribution: same-payee-as-attributable-settlement), cross-checked against on-chain internal transfers. Filed by PublicAML from public sources and our own tracing, not by a victim of the incident.
Addresses named in this report
Named here and believe it is wrong? Open the address page above and use the flag on the assessment. Every dispute is read.