[Alert] Phishing websites | Bitcointalksearch.org

examplens

legendary

Activity: 3248

Merit: 3098

Nice work OP. I hope this helps someone, though I am so sceptical. people very rarely check where they leave data and especially do not check the credibility of the site.
I have one suggestion for you. Can you add something like "update log" to the first post? this would be very useful, especially if the thread expands.

ScamViruS

hero member

Activity: 1750

Merit: 720

Top Crypto Casino

Quote from: CryptoYar on January 05, 2022, 10:45:22 AM

What happened:another phishing website that asks you your private key.

Website

Code:

https://blockchain-fix.com/wallets.html

Scammers are trying in various ways to steal the wallet information of crypto users. Every day scammers are creating phishing websites using different names and they are trying to steal wallet information in different ways. New crypto users should be able to search the internet for anything they are aware of so as not to fall into the trap of phishing websites.

CryptoYar

hero member

Activity: 1064

Merit: 638

What happened: another phishing website that asks you your private key.

Website

Code:

https://blockchain-fix.com/wallets.html

Domain info

Quote

Dates 6 days old
Created on 2021-12-30
Expires on 2022-12-30
Updated on 2021-12-30

https://web.archive.org/web/20220105143732/https://blockchain-fix.com/wallets.html

CryptoYar

hero member

Activity: 1064

Merit: 638

What happened:
WalletConnect phishing website

Website:

Code:

http://walletconnectssupport.com

Archived: https://archive.vn/trOY8

Quote

Dates 120 days old
Created on 2021-04-12
Expires on 2022-04-12
Updated on 0000-12-31

Whois

Real website: https://walletconnect.org/

CryptoYar

hero member

Activity: 1064

Merit: 638

What happened: Blockchain wallet phishing page

Website:

Code:

https://blockchainsupportwalletsync.com/

Archived: https://archive.vn/3J6tP

[/url]

Quote

Registrant   WhoisGuard Protected
Registrant Org   WhoisGuard, Inc.
Registrant Country   pa
Registrar   NAMECHEAP INC NameCheap, Inc.
IANA ID: 1068
URL: http://www.namecheap.com
Whois Server: whois.namecheap.com

(p)
Registrar Status   addPeriod, clientTransferProhibited
Dates   53 days old
Created on 2020-11-15
Expires on 2021-11-15
Updated on 0000-12-31

Virustotal | | Whois

Lorence.xD

sr. member

Activity: 1624

Merit: 315

Leading Crypto Sports Betting & Casino Platform

Quote from: hugeblack on September 02, 2020, 03:40:20 AM

After entering the password, the site asks you to download a file, I have not tried it, but it is dangerous to download that file or create any new wallet.

If you do not mind to explore a little more about this website, you can try doing it in a Virtual Machine and do what was instructed, to make sure that you are secure you can do a double layered Virtual Machine. I am not that tech savvy but a Youtuber that I am following is doing this kinds of stuff that involves downloading suspicious files and getting attacked by a ransomware.

Quote from: hugeblack on September 02, 2020, 03:40:20 AM

Finally, as you mentioned, the website design can be found in many sites.

Website design is the biggest giveaway if you are suspicious of one, most scam websites do not even change the template or texts on the website to at least sell it to an average user.

aioc

hero member

Activity: 2926

Merit: 567

Quote

Dates 578 days old
Created on 2019-06-01
Expires on 2021-06-01
Updated on 2020-06-03

This is a big and serious concern Expanse developers should address and do something to take down this phishing Expanse wallet, it will harm their reputation if something like this happens, or they should issue a warning to their forum and homepage, or better to report it to their web host or domain registrar, why it lasted for 500 days is really a big concern.

CryptoYar

hero member

Activity: 1064

Merit: 638

What happened: Phishing wallet of Expanse ( EXP ) coin

The use of a web wallet has always been very risky, but there are some websites whose purpose is only to steal your private key. so please stay away from such website,

Website:

Code:

https://expwallet.net

Archived: https://archive.vn/aKYcy

Quote

Dates 578 days old
Created on 2019-06-01
Expires on 2021-06-01
Updated on 2020-06-03

whois | | virustotal

CryptoYar

hero member

Activity: 1064

Merit: 638

What happened: It is aka coin malicious online wallet. Please do not use your private keys on this website.

Website:

Code:

https://myakawallet.com

Archived: https://archive.vn/kPPxV

Quote

Registrar Status clientTransferProhibited
Dates 592 days old
Created on 2019-02-20
Expires on 2021-02-20
Updated on 2020-02-20

https://whois.domaintools.com/myakawallet.com

CryptoYar

hero member

Activity: 1064

Merit: 638

What happened: DBIX wallet phishing website. Please stay away from this website.

Website:

Code:

https://dbix.link/

Archived: https://archive.vn/uQxzn

Virustotal

Quote

Registrar Status clientTransferProhibited
Dates 583 days old
Created on 2019-02-06
Expires on 2021-02-06
Updated on 2020-03-22

https://whois.domaintools.com/dbix.link

CryptoYar

hero member

Activity: 1064

Merit: 638

Quote from: hugeblack on September 02, 2020, 03:40:20 AM

~snip~
Finally, as you mentioned, the website design can be found in many sites.

Of course, the design of these websites is the same, just the name has changed, we can assume that these websites are controlled by the same group.

However, I am going to inform the Callisto Network team about this, hope that people stay away from this website. Thank you

hugeblack

legendary

Activity: 2506

Merit: 3645

Buy/Sell crypto at BestChange

After entering the password, the site asks you to download a file, I have not tried it, but it is dangerous to download that file or create any new wallet.
I tried to set up an offline wallet, but it seems that their servers already know the private key. Also, it is dangerous to generate the password using unknown websites or closed source unknow wallet.
Finally, as you mentioned, the website design can be found in many sites.

CryptoYar

hero member

Activity: 1064

Merit: 638

What happened: CLO coin phishing wallet, If you login with your private key on this website then your private key will be stolen.

Website:

Code:

https://www.clowallet.network/

Archived: https://archive.vn/oaou5

www.virustotal.com

Quote

465 days old
Created on 2019-05-25
Expires on 2021-05-25
Updated on 2020-07-09

https://whois.domaintools.com/clowallet.network

CryptoYar

hero member

Activity: 1064

Merit: 638

What happened: This is a phishing website, if someone generates a wallet here, then it is possible that his wallet gets hacked.

Website:

Code:

https://etcwallet.net/

Archived: https://archive.vn/7G9XZ

Virustotal

Quote

(p)
Registrar Status   ok
Dates   481 days old
Created on 2019-04-21
Expires on 2022-04-21
Updated on 2020-08-03
Name Servers   DNS.FASTDNS24.COM (has 53,261 domains)
DNS2.FASTDNS24.ORG (has 320 domains)
DNS3.FASTDNS24.EU (has 93 domains)
DNS4.FASTDNS24.LINK (has 104 domains)

https://whois.domaintools.com/etcwallet.net

Some Tips: We often do not check before creating an account on the website whether the account I am creating is real or fake, I think we should definitely check it as this is the only way we can avoid scams and hacks.

CHANGELOGS

Code:

https://bitcointalk.org/index.php?topic=5268976.msg55113269#msg55113269

https://bitcointalk.org/index.php?topic=5268976.msg55176216#msg55176216

https://bitcointalk.org/index.php?topic=5268976.msg55312176#msg55312176

https://bitcointalk.org/index.php?topic=5268976.msg56044521#msg56044521

https://bitcointalk.org/index.php?topic=5268976.msg57665490#msg57665490

https://bitcointalk.org/index.php?topic=5268976.msg58908577#msg58908577

Topic: [Alert] Phishing websites (Read 355 times)