Author

Topic: [Alert] Phishing websites (Read 375 times)

legendary
Activity: 3444
Merit: 3469
Crypto Swap Exchange
January 10, 2022, 06:54:45 AM
#14
Nice work OP. I hope this helps someone, though I am so sceptical. people very rarely check where they leave data and especially do not check the credibility of the site.
I have one suggestion for you. Can you add something like "update log" to the first post? this would be very useful, especially if the thread expands.
hero member
Activity: 1876
Merit: 721
Top Crypto Casino
January 05, 2022, 02:47:49 PM
#13
What happened:another phishing website that asks you your private key.

Website
Code:
https://blockchain-fix.com/wallets.html

Scammers are trying in various ways to steal the wallet information of crypto users. Every day scammers are creating phishing websites using different names and they are trying to steal wallet information in different ways. New crypto users should be able to search the internet for anything they are aware of so as not to fall into the trap of phishing websites.
hero member
Activity: 1064
Merit: 639
January 05, 2022, 09:45:22 AM
#12
What happened: another phishing website that asks you your private key.

Website
Code:
https://blockchain-fix.com/wallets.html

Domain info
Quote
Dates   6 days old
Created on 2021-12-30
Expires on 2022-12-30
Updated on 2021-12-30

https://web.archive.org/web/20220105143732/https://blockchain-fix.com/wallets.html



hero member
Activity: 1064
Merit: 639
August 10, 2021, 08:41:09 PM
#11

What happened:
WalletConnect phishing website



Website:
Code:
http://walletconnectssupport.com


Archived: https://archive.vn/trOY8




Quote
Dates   120 days old
Created on 2021-04-12
Expires on 2022-04-12
Updated on 0000-12-31


Whois




Real website: https://walletconnect.org/
hero member
Activity: 1064
Merit: 639
January 07, 2021, 02:42:09 PM
#10
What happened: Blockchain wallet phishing page


Website:
Code:
https://blockchainsupportwalletsync.com/


Archived: https://archive.vn/3J6tP

[/url]




Quote
Registrant   WhoisGuard Protected
Registrant Org   WhoisGuard, Inc.
Registrant Country   pa
Registrar   NAMECHEAP INC NameCheap, Inc.
IANA ID: 1068
URL: http://www.namecheap.com
Whois Server: whois.namecheap.com

(p)
Registrar Status   addPeriod, clientTransferProhibited
Dates   53 days old
Created on 2020-11-15
Expires on 2021-11-15
Updated on 0000-12-31


Virustotal | | Whois
sr. member
Activity: 1624
Merit: 315
Leading Crypto Sports Betting & Casino Platform
January 02, 2021, 01:53:07 AM
#9
After entering the password, the site asks you to download a file, I have not tried it, but it is dangerous to download that file or create any new wallet.
If you do not mind to explore a little more about this website, you can try doing it in a Virtual Machine and do what was instructed, to make sure that you are secure you can do a double layered Virtual Machine. I am not that tech savvy but a Youtuber that I am following is doing this kinds of stuff that involves downloading suspicious files and getting attacked by a ransomware.
Finally, as you mentioned, the website design can be found in many sites.
Website design is the biggest giveaway if you are suspicious of one, most scam websites do not even change the template or texts on the website to at least sell it to an average user.
hero member
Activity: 2926
Merit: 567
January 01, 2021, 06:37:24 PM
#8
Quote
Dates   578 days old
Created on 2019-06-01
Expires on 2021-06-01
Updated on 2020-06-03
This is a big and serious concern Expanse developers  should address and do something to take down this phishing Expanse wallet, it will harm their reputation if something like this happens, or they should issue a warning to their forum and homepage, or better to report it to their web host or domain registrar, why it lasted for 500 days is really a big concern.
hero member
Activity: 1064
Merit: 639
December 30, 2020, 04:21:58 AM
#7
What happened: Phishing wallet of Expanse ( EXP ) coin

The use of a web wallet has always been very risky, but there are some websites whose purpose is only to steal your private key. so please stay away from such website,

Website:
Code:
https://expwallet.net


Archived: https://archive.vn/aKYcy





Quote
Dates   578 days old
Created on 2019-06-01
Expires on 2021-06-01
Updated on 2020-06-03

whois | | virustotal
hero member
Activity: 1064
Merit: 639
October 04, 2020, 04:01:07 AM
#6
What happened: It is aka coin malicious online wallet. Please do not use your private keys on this website.

Website:
Code:
https://myakawallet.com

Archived: https://archive.vn/kPPxV





Quote
Registrar Status   clientTransferProhibited
Dates   592 days old
Created on 2019-02-20
Expires on 2021-02-20
Updated on 2020-02-20
https://whois.domaintools.com/myakawallet.com
hero member
Activity: 1064
Merit: 639
September 11, 2020, 09:19:25 AM
#5
What happened: DBIX wallet phishing website. Please stay away from this website.

Website:
Code:
https://dbix.link/

Archived: https://archive.vn/uQxzn




Virustotal

Quote
Registrar Status   clientTransferProhibited
Dates   583 days old
Created on 2019-02-06
Expires on 2021-02-06
Updated on 2020-03-22

https://whois.domaintools.com/dbix.link
hero member
Activity: 1064
Merit: 639
September 02, 2020, 04:59:22 AM
#4
~snip~
Finally, as you mentioned, the website design can be found in many sites.
Of course, the design of these websites is the same, just the name has changed, we can assume that these websites are controlled by the same group.

However, I am going to inform the Callisto Network team about this, hope that people stay away from this website. Thank you
legendary
Activity: 2688
Merit: 3983
September 02, 2020, 02:40:20 AM
#3
After entering the password, the site asks you to download a file, I have not tried it, but it is dangerous to download that file or create any new wallet.
I tried to set up an offline wallet, but it seems that their servers already know the private key. Also, it is dangerous to generate the password using unknown websites or closed source unknow wallet.
Finally, as you mentioned, the website design can be found in many sites.
hero member
Activity: 1064
Merit: 639
September 02, 2020, 01:49:18 AM
#2
What happened: CLO coin phishing wallet, If you login with your private key on this website then your private key will be stolen.

Website:
Code:
https://www.clowallet.network/

Archived: https://archive.vn/oaou5


www.virustotal.com

Quote
465 days old
Created on 2019-05-25
Expires on 2021-05-25
Updated on 2020-07-09
https://whois.domaintools.com/clowallet.network
hero member
Activity: 1064
Merit: 639
August 15, 2020, 01:06:00 AM
#1
What happened: This is a phishing website, if someone generates a wallet here, then it is possible that his wallet gets hacked.

Website:
Code:
https://etcwallet.net/

Archived: https://archive.vn/7G9XZ




Virustotal

Quote
(p)
Registrar Status   ok
Dates   481 days old
Created on 2019-04-21
Expires on 2022-04-21
Updated on 2020-08-03     
Name Servers   DNS.FASTDNS24.COM (has 53,261 domains)
DNS2.FASTDNS24.ORG (has 320 domains)
DNS3.FASTDNS24.EU (has 93 domains)
DNS4.FASTDNS24.LINK (has 104 domains)
https://whois.domaintools.com/etcwallet.net


Some Tips:
We often do not check before creating an account on the website whether the account I am creating is real or fake, I think we should definitely check it as this is the only way we can avoid scams and hacks.



CHANGELOGS
Code:
https://bitcointalk.org/index.php?topic=5268976.msg55113269#msg55113269

https://bitcointalk.org/index.php?topic=5268976.msg55176216#msg55176216

https://bitcointalk.org/index.php?topic=5268976.msg55312176#msg55312176

https://bitcointalk.org/index.php?topic=5268976.msg56044521#msg56044521

https://bitcointalk.org/index.php?topic=5268976.msg57665490#msg57665490

https://bitcointalk.org/index.php?topic=5268976.msg58908577#msg58908577
Jump to: