Great, I'll be reporting this site as soon as you suggest. This will useful everyone.
The fact is that scammers will never stop scamming cryptocurrency users. Everyone should be very careful with the efforts made by scammers, they are getting smarter and have many ways to get your money. They come up with new ideas that may be based on current trend. The bull market has excited them to get more free money from its victims.
Topic: Be careful with this so called Integration Wallet website (Read 288 times)
Found yet another fake "wallet management app" specifically designed to collect seed phrases and deprive us of our hard-earned coins. It looks like scammers have come up with a new way to deceive unaware newcomers that works far better than the old phishing tricks. Please, help me to report these scammers and get them out of existence. Here are all the necessary details:
https://archive.is/h28hJ
Report: https://safebrowsing.google.com/safebrowsing/report_general/
I just want to reminder newbies and higher ranks that the most important information you should never share with anyone is your seed phrase/private keys. In the cryptocurrency space, these private keys are an essential thing because they unlock your funds stored on a blockchain. By sharing your sensitive keys, you essentially throw away your money. Do not do that! Do not share your money with criminals.
Code:
https://coinlivewallet.com
https://archive.is/h28hJ
Code:
Domain Name: COINLIVEWALLET.COM
Registry Domain ID: 2582193491_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: http://www.namecheap.com
Updated Date: 2021-01-02T16:49:20Z
Creation Date: 2021-01-02T16:49:18Z
Registry Expiry Date: 2022-01-02T16:49:18Z
Registry Domain ID: 2582193491_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: http://www.namecheap.com
Updated Date: 2021-01-02T16:49:20Z
Creation Date: 2021-01-02T16:49:18Z
Registry Expiry Date: 2022-01-02T16:49:18Z
Report: https://safebrowsing.google.com/safebrowsing/report_general/
I just want to reminder newbies and higher ranks that the most important information you should never share with anyone is your seed phrase/private keys. In the cryptocurrency space, these private keys are an essential thing because they unlock your funds stored on a blockchain. By sharing your sensitive keys, you essentially throw away your money. Do not do that! Do not share your money with criminals.
Apart from services like this, web3 integration services should also be considered. Never get influenced by staking or LP offers. Because, I once encountered a case where a user lost assets after integrating a wallet on Web3. The DeFi hype isn't over yet, with the current bullish trend, they will try to find as many victims as possible. Do a research, re-check any search results you get, re-check the domain and thinking twice before connecting wallet to web3 will make your asset safe.
It is a pretty aggressive move trying to lure us and enter our seed phrase, etc. Even if it is legit no one will surely like this, what if their wallet will be compromised? all your wallets will be affected which is not really good. It is better to use different wallets on their own app for safety purposes.
Not gonna lie, this is clever, this literally allows them to fish for every wallet available.
True, and definitely what the OP discovered is a very clever trick by cyber actors to phish everything in just once sweep. It's good that it was broadcast here in our community to at least warn others about the dangers of using this website. 
Not gonna lie, this is clever, this literally allows them to fish for every wallet available.
This is pure fraud, no doubt. This website is no different from phishing hardware wallet websites asking for your seed. Just try to input any fake data (not your real seed phrase, please) into the "recovery phrase" field. You will see an error message as if you did something wrong. In reality, however, all the data you inserted was collected and sent to scammers. Different wallets use different standards, that is why besides your seed words, scammers need to know the wallet you use. By "integrating" your wallet, you actually expose all sensitive information required for stealing your funds without any problems.
That is my take on this site also. Why would they ask for your seed phrase if they have no ill intentions in the first place? Just be careful on this kind of site. Better trust the official websites and don't disclose your seed phrase or recovery phrase to any one. If you will do, that is the start of losing your coins or tokens without you knowing.
I never mind to use multiple coin wallets. Even when I have interests to use such wallets I will only use them to store my altcoins (if I have altcoins).
My bitcoin will be stored in a different wallet. It does not mean I am readily and feel comfortable to leave them open gates to steal my altcoins. Money is money even they are altcoins but bitcoin is precious and I will never give them any touch to my altcoins. Electrum does not have a multiple-coin wallet. They only create a wallet for bitcoin but for few types of address and few types of wallets: 2FA, single signature, multi-/co-signed signature walelts.
Convenience and laziness are most terrible human instinct and bitcoiners would avoid traps from convenient-wallets.
My bitcoin will be stored in a different wallet. It does not mean I am readily and feel comfortable to leave them open gates to steal my altcoins. Money is money even they are altcoins but bitcoin is precious and I will never give them any touch to my altcoins. Electrum does not have a multiple-coin wallet. They only create a wallet for bitcoin but for few types of address and few types of wallets: 2FA, single signature, multi-/co-signed signature walelts.
Convenience and laziness are most terrible human instinct and bitcoiners would avoid traps from convenient-wallets.
This is a sure short scam, I have no doubt about it. Many newbies will surely fall for it as what they are offering is very lucrative for those who want all their wallets in one screen. As we all use multiple wallets to store cryptocurrencies and entering the Private key and going through different screens sometimes become a pain. They took this pain of ours for their benefits decided to create a scam website. Anyways it has been told here on BTT a lot of times to avoid web wallets and websites that ask for private keys or seed phrases. Thanks for updating the community with this post.
It seems to be true and legit if you're not thinking it is a phishing wallet website. But if you have a wallet that has the option on this they called, integration wallet, why you use them instead of directly open your app or web wallet. I don't know if how many people here use different crypto wallets, for sure they are the focus on one or two different wallets, and visiting the official one is the smartest move to avoid this kind of fraud.
Anyway, thanks for sharing this informative thread.
For now, that site was marked a phishing link by Meta mask and has a warning sign and it says, "Ethereum Phishing Detection", it is now added to their warning list.
Anyway, thanks for sharing this informative thread.
For now, that site was marked a phishing link by Meta mask and has a warning sign and it says, "Ethereum Phishing Detection", it is now added to their warning list.
Anything that really ask for your seed or mnemonic phrase should not be trusted at any cost and this is the first sign that indeed it is a phishing site that are going to steal your credentials. Of course, for us crypto users it will make our lives much easier if we have this kind of wallet integration. But this is not safe, so I would say avoid it at all cost.
Any crypto wallets that works online can't be trusted, right now that all eye are on crypto money makes things even more worse, do not trust any platform easily unless members on here can talk good about the platform, if you are a newbie try bringing any crypto related findings on here first before making any decisions, there will be more hunts for people's Private keys and recovery seeds, be cautious
Very similar crap to this other site:
As usual, the interesting think to know is how each of these cases are spread, since awareness is better created when you know both the means of propagation, and the nature of the site itself (the one I found was simply by searching for the phrase that is displayed on the site on Google, but that did not lead to reports on the source of propagation of either site).
Code:
connectionlivewallet[dot]com
Pretty lame attempts at phishing for your mnemonic, but again, someone is prone to fall for it at some point.As usual, the interesting think to know is how each of these cases are spread, since awareness is better created when you know both the means of propagation, and the nature of the site itself (the one I found was simply by searching for the phrase that is displayed on the site on Google, but that did not lead to reports on the source of propagation of either site).
This is pure fraud, no doubt. This website is no different from phishing hardware wallet websites asking for your seed. Just try to input any fake data (not your real seed phrase, please) into the "recovery phrase" field. You will see an error message as if you did something wrong. In reality, however, all the data you inserted was collected and sent to scammers. Different wallets use different standards, that is why besides your seed words, scammers need to know the wallet you use. By "integrating" your wallet, you actually expose all sensitive information required for stealing your funds without any problems.
According to OP, it's not certain if the app or site is a legit one neither has OP been able to gather facts that points to the contrary hence, it remains a work in progress for the site and a continual investigation on the part of prospective users.
The question remains that, must you use it or is there really a need to have all your app in one spot or site? If this becomes a thing of importance to any user, why not download the individual wallets from official sites of which, your sure it's legit and perhaps group them in a folder on your device! I'm sure phones do that and it's better than uploading your privacy details on what ever site or platform you see on the web. The more limited info you supply a third party you don't really know whom, the more secure you become.
Let's learn from what happened on ledger hack and grow wise.
The question remains that, must you use it or is there really a need to have all your app in one spot or site? If this becomes a thing of importance to any user, why not download the individual wallets from official sites of which, your sure it's legit and perhaps group them in a folder on your device! I'm sure phones do that and it's better than uploading your privacy details on what ever site or platform you see on the web. The more limited info you supply a third party you don't really know whom, the more secure you become.
Let's learn from what happened on ledger hack and grow wise.
These type of integration wallet site will only be dubious, before you will be able to integrate wallets, you will need to supply seed, master private key or seed phrase. These can be used to steal the whole bitcoin and altcoins that someone is having. This will only be a phishing site that will require for any of these (seed, master private and seed phrase). Once given it can be used to steal your whole wallets at ones and all coins stored on them will be lost, it is better to use our wallet alone without any third party involved.
Be careful with this so called integration wallet around, I'm seriously doubt that it is work as design as you have to enter your seed or recovery phrase. I'm trying to find out if there is such real application out there, but so far I can't find any deducing that this is a malicious site who's intention to steal our crypto. Or if there is a legit site, this is obviously a clone and fake.
Archive: https://archive.is/bLFE7
Not just bitcoin wallet, but almost all popular altcoins wallet like MEW and MetaMask. So be careful with this, if you have encounter it, kindly report it to Google or to the registrar themselves
And that IP address and its relations has a lot of flags.
https://www.virustotal.com/gui/ip-address/165.227.12.111/relations
Code:
https://www.integrationwallet.com/
Archive: https://archive.is/bLFE7
Not just bitcoin wallet, but almost all popular altcoins wallet like MEW and MetaMask. So be careful with this, if you have encounter it, kindly report it to Google or to the registrar themselves
Quote
Whois Record for IntegrationWallet.com
How does this work?
Domain Profile
Registrant Registration Private
Registrant Org Domains By Proxy, LLC
Registrant Country us
Registrar GoDaddy.com, LLC
IANA ID: 146
URL: http://www.godaddy.com
Whois Server: whois.godaddy.com
Registrar Status clientDeleteProhibited, clientRenewProhibited, clientTransferProhibited, clientUpdateProhibited
Dates 16 days old
Created on 2020-12-25
Expires on 2021-12-25
Updated on 2020-12-25
IP Address 165.227.12.111 - 8,962 other sites hosted on this server
How does this work?
Domain Profile
Registrant Registration Private
Registrant Org Domains By Proxy, LLC
Registrant Country us
Registrar GoDaddy.com, LLC
IANA ID: 146
URL: http://www.godaddy.com
Whois Server: whois.godaddy.com
Registrar Status clientDeleteProhibited, clientRenewProhibited, clientTransferProhibited, clientUpdateProhibited
Dates 16 days old
Created on 2020-12-25
Expires on 2021-12-25
Updated on 2020-12-25
IP Address 165.227.12.111 - 8,962 other sites hosted on this server
And that IP address and its relations has a lot of flags.
https://www.virustotal.com/gui/ip-address/165.227.12.111/relations
Jump to: