Be Careful to Write | Bitcointalksearch.org

tbct_mt2

hero member

Activity: 2366

Merit: 838

Quote from: Zionatin on December 22, 2019, 01:54:23 PM

That is very very scary at how easy it is to make a mistake

Simply said:

Being careful with any links you click on to open, from emails, from messages, from bookmark pages, from any drafts you saved.
Always double check with sites you registered accounts on.
Keeps screens of your computers (laptop or desktop) as clean from dust as possible. Because if you feel familiar with dusts, you will probably not recognise phishing sites that use Punny codes. Sometimes they look like dusts on the screen.

Chikito

legendary

Activity: 2366

Merit: 2054

Quote from: Oasisman on December 22, 2019, 07:02:32 AM

I've had a few things to avoid a phishing attack.
*Do spelling check everytime I write in the address bar (during the first input, specially to a new device)
*Never click any link that directs you to a crypto related websites no matter how legit it looks (usually found in your email)
*Always bookmark the important websites that is frequently used (although there were certain attacks that will compromise your saved data in the bookmark, but I always double checked the address and the spelling)

Plenty much how to avoid phishing
* Install an Anti-Phishing Toolbar
* Use Firewalls
* and most important is Keep Informed About Phishing Techniques
.. etc.

Quote from: Zionatin on December 22, 2019, 01:54:23 PM

These are all methods of SEO designed to help you such as buying the old domain of a previously popular website. This is a great way to get traffic but the scammer will abuse this and collect traffic to scam.

Yes, buying new domain similar popular website can get high traffic, cause that a lot of people out there selling similar domain like electrum and 90% who bought that domain will abuse for scamming people.

Quote from: alani123 on December 22, 2019, 01:59:44 PM

Phishing is very common still with BTC related websites. Thanks for pointing it out op...

You have search here for more

alani123

legendary

Activity: 2422

Merit: 1451

Leading Crypto Sports Betting & Casino Platform

Phishing is very common still with BTC related websites. Thanks for pointing it out op...

Zionatin

sr. member

Activity: 906

Merit: 263

That is very very scary at how easy it is to make a mistake and juts how much damage such a mistake can cont you. Thank you for bringing this to our attention. It will help other users.
I am recently learning about websites and CEO and it is really disgusting that these scammer use CEO to make and redirect mistakes to lead to their website. I was learning how you can add common mistakes so if someone enters the common mistake it redirects them to the right site anyway. They are using this to redirect to their scam site. These are all methods of SEO designed to help you such as buying the old domain of a previously popular website. This is a great way to get traffic but the scammer will abuse this and collect traffic to scam.

Oasisman

hero member

Activity: 2716

Merit: 552

I haven't become a victim to phishing site yet and I hope I will never be.
I've had a few things to avoid a phishing attack.
*Do spelling check everytime I write in the address bar (during the first input, specially to a new device)
*Never click any link that directs you to a crypto related websites no matter how legit it looks (usually found in your email)
*Always bookmark the important websites that is frequently used (although there were certain attacks that will compromise your saved data in the bookmark, but I always double checked the address and the spelling)

Nevertheless, only ourselves can protect from such fraudulent activity.

Chikito

legendary

Activity: 2366

Merit: 2054

when searching on https://dnstwister.report/search?ed=656c65637472756d2e6f7267 we can fund about 50 domain similar.

Code:

eklectrum.org
elkectrum.org
eleectrum.org
elektrum.org
elexctrum.org
elecctrum.org
eletrum.org
elecrtrum.org
electrrum.org
elecyrum.org
electrtum.org
electeum.org
electrúm.org (xn--electrm-c2a.org)
electryum.org
electruym.org
electrym.org
electrumn.org
electrumm.org
electrumg.org
electrom.org
electram.org
electrmu.org
electrim.org
electrm.org
electruim.org
electrium.org
electruk.org
electru.org
electrun.org
electrumx.org
electurm.org
electreum.org
electerum.org
elecrtum.org
elecrrum.org
electtrum.org
electyrum.org
elecytrum.org
eletcrum.org
elevctrum.org
elevtrum.org
elecvtrum.org
elwctrum.org
elwectrum.org
elewctrum.org
elrctrum.org
elerctrum.org
elrectrum.org
e.lectrum.org
eelctrum.org
ekectrum.org
eectrum.org
wlectrum.org
rlectrum.org
lectrum.org

Like this one

Code:

http://elewctrum.org/

It can potential to be phishing electrum when someone buys that domain.

noormcs5

hero member

Activity: 2814

Merit: 618

Leading Crypto Sports Betting & Casino Platform

Quote from: fortunecrypto on December 22, 2019, 06:21:29 AM

Quote from: hd49728 on December 20, 2019, 11:03:41 AM

Quote from: o_e_l_e_o on December 20, 2019, 04:06:13 AM

Using bookmarks is better, but still not 100% foolproof. There was a post I read a while ago about a mixing service which had shutdown, and a scammer then purchased the expired URL. Anyone who followed their previous bookmark would now land on a scam site and lose their coins.

Bookmarking is convenient but it is not totally safe because it can be tampered, not only as a result of expired-URLs change hands.
I use bookmark on browsers for unimportant sites, but for important ones, I bookmark them in my head, instead. No one can tamper my memory if there is nothing wrong with my health conditions, seriously.

If you don't want bookmarking, then you can draft it in your email sites and exchanges that you always visit, so you don't have to type all you have to do is to click the link and it will open in a new browser, I don't think it can be tampered unless they sold the domain to hackers.

In both the cases, whether you bookmark the important sites or list them down anywhere, it is still advisable not to trust blindly and still check the url to see if there is any abnormality. There are only handful of sites on which our funds are stored, so we should be little extra careful when visiting these sites.

fortunecrypto

legendary

Activity: 2450

Merit: 1047

Quote from: hd49728 on December 20, 2019, 11:03:41 AM

Quote from: o_e_l_e_o on December 20, 2019, 04:06:13 AM

Using bookmarks is better, but still not 100% foolproof. There was a post I read a while ago about a mixing service which had shutdown, and a scammer then purchased the expired URL. Anyone who followed their previous bookmark would now land on a scam site and lose their coins.

Bookmarking is convenient but it is not totally safe because it can be tampered, not only as a result of expired-URLs change hands.
I use bookmark on browsers for unimportant sites, but for important ones, I bookmark them in my head, instead. No one can tamper my memory if there is nothing wrong with my health conditions, seriously.

If you don't want bookmarking, then you can draft it in your email sites and exchanges that you always visit, so you don't have to type all you have to do is to click the link and it will open in a new browser, I don't think it can be tampered unless they sold the domain to hackers.

virasog

legendary

Activity: 3136

Merit: 1172

Leading Crypto Sports Betting & Casino Platform

Quote from: LTU_btc on December 20, 2019, 06:32:53 PM

Quote from: o_e_l_e_o on December 19, 2019, 04:07:24 PM

They will get taken down rapidly, but it makes little difference as new ones will have popped up within the hour. It's an endless game of cat-and-mouse. We will never win by chasing them around scam page after scam page. Better just to end the game altogether by teaching everyone to verify their downloads.

We will not win this war, but it's better than doing nothing. And same thing can be said about educating people. We can it as much as we can, but there always will be people who aren't aware about these things, especially newbies in crypto. It's same thing like people who are falling into most obvious scams.

No matter how much we educate people and warn people, there are many people who will still face the scam and get trapped in it. Some people do not pay attention to details and they have to pay for it. The only thing we can do it is to warn our near and dear ones if we see any such phishing sites and hope no one get affected by them.

Kemarit

legendary

Activity: 3080

Merit: 1353

Quote from: LTU_btc on December 20, 2019, 06:32:53 PM

Quote from: o_e_l_e_o on December 19, 2019, 04:07:24 PM

They will get taken down rapidly, but it makes little difference as new ones will have popped up within the hour. It's an endless game of cat-and-mouse. We will never win by chasing them around scam page after scam page. Better just to end the game altogether by teaching everyone to verify their downloads.

We will not win this war, but it's better than doing nothing. And same thing can be said about educating people. We can it as much as we can, but there always will be people who aren't aware about these things, especially newbies in crypto. It's same thing like people who are falling into most obvious scams.

And the good thing is that lately, there are a lot of members exposing them, so it's getting some traction around the community and we do hope that newbies won't fall or at least think twice when they see members exposing the true color of this supposedly fake websites. It's a big mountain to climb, but collaboratively, we might turn the tide in the coming years.

LTU_btc

legendary

Activity: 3234

Merit: 1375

Slava Ukraini!

Quote from: o_e_l_e_o on December 19, 2019, 04:07:24 PM

They will get taken down rapidly, but it makes little difference as new ones will have popped up within the hour. It's an endless game of cat-and-mouse. We will never win by chasing them around scam page after scam page. Better just to end the game altogether by teaching everyone to verify their downloads.

We will not win this war, but it's better than doing nothing. And same thing can be said about educating people. We can it as much as we can, but there always will be people who aren't aware about these things, especially newbies in crypto. It's same thing like people who are falling into most obvious scams.

Goodvalony

member

Activity: 616

Merit: 16

thank you for this wonderful opinion. i used electrum wallet and discovered that i can't sync my wallet. i tried downloading the new wallet but it failed. it was hard to find the correct website but i managed to get over it. my wallet is up to date as we speak. Good job.

hd49728

legendary

Activity: 2044

Merit: 1018

Not your keys, not your coins!

Quote from: o_e_l_e_o on December 20, 2019, 04:06:13 AM

Using bookmarks is better, but still not 100% foolproof. There was a post I read a while ago about a mixing service which had shutdown, and a scammer then purchased the expired URL. Anyone who followed their previous bookmark would now land on a scam site and lose their coins.

Bookmarking is convenient but it is not totally safe because it can be tampered, not only as a result of expired-URLs change hands.
I use bookmark on browsers for unimportant sites, but for important ones, I bookmark them in my head, instead. No one can tamper my memory if there is nothing wrong with my health conditions, seriously.

BitcoinsGreat

sr. member

Activity: 1022

Merit: 280

Quote from: bitmover on December 19, 2019, 05:28:46 AM

Any website related to cryptocurrency or any kind of money should be double checked. Try to find their social media pages (Twitter, Facebook, Reddit, Medium, etc) to confirm you are on the official website. You can find press releases on famous news websites with links to their official websites also.

eklectrum is so obvious phising and your friend was careless...

Someone if we get scam by phishing sites, it is our own fault, rather than anyone else. As in this case eklectrum and electrum has a visual difference and should be noted. If someone just does not look at the url after typing, then whose fault it is ? Scammers are always waiting for these mistake to get hold of the funds of these users.

Pmalek

legendary

Activity: 2730

Merit: 7065

All this could have been prevented by verifying the signature of the downloaded file before installing and using the software. Too bad.

Electrum-related phishing threads are actually not that common on the Electrum sub-forum recently. I was thinking about that the other day. Have users started to follow the advice of the creators or is is something else? I believe it is something else. Probably in the price of Bitcoin in recent months which hasn't been that favorable.

As soon as Bitcoin starts a new upward rally I expect more of the Electrum 4.0 related phishing incidents.

o_e_l_e_o

legendary

Activity: 2268

Merit: 18748

Quote from: robelneo on December 19, 2019, 09:26:20 PM

never type the address in the address bar always use Google.

This is terrible advice, and the exact opposite of what you should do.

Google frequently links to phishing, malicious, or otherwise fake sites. Scammers often purchase ads and so their fake links appear at the top of search results. One of the most common ways to be scammed is by using a search engine to find the site. The best way to be sure you are landing on the correct page is to type it in the address bar, and double check your spelling.

Using bookmarks is better, but still not 100% foolproof. There was a post I read a while ago about a mixing service which had shutdown, and a scammer then purchased the expired URL. Anyone who followed their previous bookmark would now land on a scam site and lose their coins.

jossiel

hero member

Activity: 3150

Merit: 636

DGbet.fun - Crypto Sportsbook

Quote from: Chikito on December 19, 2019, 08:59:49 PM

Quote from: jossiel on December 19, 2019, 05:27:02 PM

he was bookmarked and sign up firefox account for synchronicity when changing new device

But on this case, he just typed it and got the wrong letters typed together which were "K" and "L". Although phishing links are very popular now, thank you for bringing this up for additional awareness of everyone.

Quote from: Baofeng on December 19, 2019, 11:13:52 PM

The good thing is that it was reported and taken down already.

Yes!

The landing page indicates now the website is unsafe. Good job guys.

Baofeng

legendary

Activity: 2576

Merit: 1655

You can also call the attention of @socks435 to update his list: ⚠⚠️⚠~Beware on active phishing Electrum websites~⚠⚠️⚠ (Collection list updated) .

Actually another one surfaces about a month ago:

Code:

PHISHING LINK - eleckctrum.org

The good thing is that it was reported and taken down already.

robelneo

legendary

Activity: 3416

Merit: 1225

Make a habit of always bookmarking trusted sites that you frequently used or use the search engine like Google so you can be sure that you are landing on the right site, or get an anti-virus with website detection if the site you are landing is a phishing site, and never type the address in the address bar always use Google.

Chikito

legendary

Activity: 2366

Merit: 2054

Quote from: hd49728 on December 18, 2019, 08:26:45 PM

What to do to avoid phising sites
Host-file to deal with phishing sites
[LEARN] Phishing Quizzes - Beginners & Experts

Thanks for those liink.
I have Tool For Catch Phishing , purpose hunting and reporting to https://safebrowsing.google.com/safebrowsing/report_phish/?hl=en when funding phishing

Quote from: mk4 on December 18, 2019, 10:45:34 PM

Not sure how your friend mistyped "electrum" for "eklectrum",

because letter K and L are close together on keyboard

Quote from: bitmover on December 19, 2019, 05:28:46 AM

Try to find their social media pages (Twitter, Facebook, Reddit, Medium, etc) to confirm you are on the official website.

I am suggested my friend join Bitcointalk forum

Quote from: o_e_l_e_o on December 19, 2019, 03:09:58 PM

On a standard English QWERTY keyboard, a simple slip when pressing the "L" button could quite easily type "KL" instead.

Thanks,
He was bookmarked all related cryptocurrency website on his browser for avoid typo

Quote from: LTU_btc on December 19, 2019, 03:49:07 PM

Quote from: o_e_l_e_o on December 19, 2019, 04:07:24 PM

I search related IP : https://www.virustotal.com/gui/ip-address/167.114.220.88/relations
we can find another phishing web like trezor related IP

Quote from: jossiel on December 19, 2019, 05:27:02 PM

he was bookmarked and sign up firefox account for synchronicity when changing new device

jossiel

hero member

Activity: 3150

Merit: 636

DGbet.fun - Crypto Sportsbook

Quote from: mk4 on December 18, 2019, 10:45:34 PM

Not sure how your friend mistyped "electrum" for "eklectrum"

I usually have the same experience by typing the wrong letter before and after the correct letter because letter 'k' and 'l' were just close to each other. And his friend probably got it wrong for typing quickly and was confident that he typed the right website.

It might be a simple practice to bookmark the legit websites that you visit but it will save you from any future trouble of landing to the wrong one which is a phishing site.

o_e_l_e_o

legendary

Activity: 2268

Merit: 18748

Quote from: LTU_btc on December 19, 2019, 03:49:07 PM

Does anyone knows where this website is hosted? I'm on mobile now, so it would be difficult to find this information for me. But it would be good to find it and report this website to hosting provider for abuse to shutdown it.

The "eklectrum" redirection site also shares the same registrar and was also created 3 days ago. You can report them both to the email address above, and you can also report them to Google's Safe Browsing feature. They will get taken down rapidly, but it makes little difference as new ones will have popped up within the hour. It's an endless game of cat-and-mouse. We will never win by chasing them around scam page after scam page. Better just to end the game altogether by teaching everyone to verify their downloads.

LTU_btc

legendary

Activity: 3234

Merit: 1375

Slava Ukraini!

Does anyone knows where this website is hosted? I'm on mobile now, so it would be difficult to find this information for me. But it would be good to find it and report this website to hosting provider for abuse to shutdown it.

Quote from: mk4 on December 18, 2019, 10:45:34 PM

Not sure how your friend mistyped "electrum" for "eklectrum", as he would probably need to be really drunk to mistype it that bad, but yea. Doublecheck what you're typing and copy-pasting people. Especially when were talking about freakin bitcoin, that's hugely hugely targeted by scammers and hackers.

You don't have to be drunk, because it's very easy to make duch mistype. Maybe OP's friend didn't knew how to write name of wallet and intentionally wanted to write Elektrum and he made typing mistake when doing it.

o_e_l_e_o

legendary

Activity: 2268

Merit: 18748

Quote from: mk4 on December 18, 2019, 10:45:34 PM

Not sure how your friend mistyped "electrum" for "eklectrum", as he would probably need to be really drunk to mistype it that bad, but yea.

On a standard English QWERTY keyboard, a simple slip when pressing the "L" button could quite easily type "KL" instead.

In addition to the advice above about host files and double checking URLs (which is obviously good advice), this is why the Electrum website tells you to verify your downloads, we all go on and on about verifying your downloads, and multiple guides have been created to show you how to verify your downloads. 30 seconds spent to verify your download prior to installing completely negates the risk of visiting fake sites or downloading a malicious copy of Electrum.

Editing your host file is useful for sites like the fake bitcointalk forum which doesn't change its URL, but for sites like fake Electrum sites it is next to useless. By the time you've added one URL to your hosts file, the scammers have already moved on to another URL. You can add these sites to your hosts file for the rest of time and never be completely safe.

Verify your downloads!

bitmover

legendary

Activity: 2352

Merit: 6089

bitcoindata.science

Any website related to cryptocurrency or any kind of money should be double checked. Try to find their social media pages (Twitter, Facebook, Reddit, Medium, etc) to confirm you are on the official website. You can find press releases on famous news websites with links to their official websites also.

eklectrum is so obvious phising and your friend was careless...

mk4

legendary

Activity: 2870

Merit: 3873

Paldo.io 🤖

Not sure how your friend mistyped "electrum" for "eklectrum", as he would probably need to be really drunk to mistype it that bad, but yea. Doublecheck what you're typing and copy-pasting people. Especially when were talking about freakin bitcoin, that's hugely hugely targeted by scammers and hackers.

hd49728

legendary

Activity: 2044

Merit: 1018

Not your keys, not your coins!

It is a phishing site tries to fake Electrum.org. The kinda phishing site is very common but there are always lots of people fall into traps of phishing sites and lose money.

What to do to avoid phising sites
Host-file to deal with phishing sites
I have some for phishing sites and some external topics in these topics. Hope these ones can help you guys.

The phishing site brought by OP added in the list (at the bottom line).

Code:

0.0.0.0 bitcointalk.to
0.0.0.0 fonstavka.com
0.0.0.0 thebitcointalk.net
0.0.0.0 fonstavka.com
0.0.0.0 lawcommonentrance.com
0.0.0.0 electrum.org.uk
0.0.0.0 electrumclient.org
0.0.0.0 downloadelectrum.org
0.0.0.0 electrumsite.com
0.0.0.0 electrumweb.net
0.0.0.0 electrumupdate.com
0.0.0.0 electrumproject.org
0.0.0.0 mercatox.org
0.0.0.0 bitplace.org
0.0.0.0 coinpalace.org
0.0.0.0 exmo.space
0.0.0.0 poficrypt.com
0.0.0.0 coinsweet.org
0.0.0.0 cryptexcurrency.com
0.0.0.0 crypton-bnb.com
0.0.0.0 cryptexplatform.com
0.0.0.0 crypto-trader24.com
0.0.0.0 24xfast.com
0.0.0.0 24xtransfer.com
0.0.0.0 24xtrade.com
0.0.0.0 24burntrade.com
0.0.0.0 bitusual.com
0.0.0.0 24fastcoin.com
0.0.0.0 social-info.ru
0.0.0.0 margo-event.com
0.0.0.0 www.social-analysis.ru
0.0.0.0 24spacetrade.com
0.0.0.0 24xholding.com
0.0.0.0 ancebit.com
0.0.0.0 24xcointrade.com
0.0.0.0 24bestchanger.com
0.0.0.0 24xhold.com
0.0.0.0 cryptextrade.com
0.0.0.0 tradexblue.com
0.0.0.0 bitmate24.com
0.0.0.0 poficrypt.com
0.0.0.0 evrostyle.net
0.0.0.0 24excoin.com
0.0.0.0 fastchange24.com
0.0.0.0 cryptonplatform.io
0.0.0.0 best-xtrades.com
0.0.0.0 tradexmate.com
0.0.0.0 fixtradecorp.com
0.0.0.0 bitbeaxy.com
0.0.0.0 24bitstamp.com
0.0.0.0 mercatox.org
0.0.0.0 crypto-change24.com
0.0.0.0 bitspace24.com
0.0.0.0 bitbns.org
0.0.0.0 24coindesk.com
0.0.0.0 coinsbank.store
0.0.0.0 xcryptoplatform.com
0.0.0.0 bitshumb.com
0.0.0.0 https://brave-browser.info
0.0.0.0 https://bitblender.eu/
0.0.0.0 https://bounty-brave.info/
0.0.0.0 https://litecoln.org/
0.0.0.0 https://biockcheln.info/
0.0.0.0 http://iocaibitcoins.com/
0.0.0.0 https://iocaibitcoins.com/
0.0.0.0 https://lolibitcoins.net/
0.0.0.0 http://privatemgrgg.pw/vcruntime140.dll
0.0.0.0 https://localbicolns.org/
0.0.0.0 http://localbicolns.org/
0.0.0.0 http://mgsocl.su/api/check.get
0.0.0.0 http://mgsocl.su/api/gate.get
0.0.0.0 http://dress-x.ru/freebl3.dll
0.0.0.0 https://brave-drop.info
0.0.0.0 https://electrum.cash/#home

Let's check your knowledge on phishing by doing those phishing quizzes.
[LEARN] Phishing Quizzes - Beginners & Experts

Chikito

legendary

Activity: 2366

Merit: 2054

We should careful when to write on a box address.

Like my friend, He was bought a new device and wants to download electrum wallet, then prepare to write electrum.org but made 1 mistake wroten eklectrum.org, and what happened next?
perfectly direct to phishing electrum

Code:

https://electrum.cash/#home

Look cash camouflage into Bitcoin wallet and should be fake and scam.

How to avoid it:

1. Always double-check before entering a keyboard button.
2. Bookmark electrum.org
3. Sign up or log in, then Sync. When you have change device, just log in your firefox account and all bookmark will appear.

Topic: Be Careful to Write (Read 368 times)