Topic: Beware of fake Coinmarketcap! (Read 401 times)

That means that our reporting is helping to remove these phishing links so, if we've got little of time and it's just a spare, we can help in that little way that we can through reporting them to google. Although there won't be a full stop for them but, we're able to do some actions that might save a lot of newbies then.

If it's with the search results, always be vigilant typically with the first show results. Because those are the ads and one should take a look at that label of being an ad to have a clue together with the correct characters of the website name.

So far I haven't seen those two sites, it seems that Google has taken it down. And thanks to those who reported it. But we still need to be very vigilant with this kind of sites because it's really dangerous.

Or better yet, just bookmarked https://coinmarketcap.com/. Or if we are going to search every crypto related thing in Google, just double check everything.

Actually, this is the sad truth. Even if how we manage to report all of it and make everyone aware of them, they will keep coming and unstoppable because it's easy for them to make a new one and another one if they get reported. I guess the best thing that we can do is to educate everyone on how to figure it out and how to avoid them.

Can you explain the ones that I've bold? You're thinking of keeping your private keys or seeds on your email? Or I have understood it wrongly.

With all of the other posts on this thread about the fake coinmarketcap websites, it's sad that out of the many, there will be a few that might fall for this tactic. I just hope that most newbies will be suspicious when they're asked to connect these wallets as they may misclick these phishing and fake links.

That's really it, they pay for these ads so they will appear at the first search of whatever metrics they set but usually for related crypto keywords and searches. It's been years of problem that this has been addressed to Google but they did nothing even in their playstore, a lot of fake apps are existing there waiting for their prey to come.

True, they're doing it at a right timing whenever the market seems to be up, a lot of it are existing. And it's likely with all of the same links that they have advertised, the same people might be behind on this. They seemed to be planned very well and anticipating that if one gets reported, they'll just have to reproduce it again.

Let's keep on reporting them and keep this thread posted, I'll merge all of these cmc phishing links on this thread or prolly with a new one.

probably most people will not know this. or not affected by this fake site. the reason is that maybe more people are accessing the site from the mobile app.

but today, I tried to search on google again with the keyword "coinmarketcap" there was 2 ad from a fake website that had a scheme like the one the OP got.
site:
 

when accessing the fake site. on the display that can be accessed only for wallet connections. while the rest of the menu will not work.

Yes, saw this a couple of days ago, but forgot to remind the community, as least someone though has step up and give us a heads up.

And the timing of this scammers/cyber criminals is perfect, when we breach $20k and when everyone wanted to see the price at cmc, they created this fake coinmarketcap and you can fall for it if you are not that careful. And there are at least 2 sites that is still in front of the Big G right now, so again, just heed this warning.

I'll make the educated guess and say that Google is filled with similar phising ads, because I'm also seeing two sponsored ads regarding a fake Coinmarketcap website, different from those you and OP posted. Honestly, I don't see why you'd connect to CMC in the first place but I'm guessing that it's fairly easy to get carried away.

Here's the two websites being shown. Both already reported to Google and hoping they're taken down. It's kind of frustrating that no background check is being conducted when Google is listing such advertisements.

Edit: Photo stopped showing

Yeah, I agree but it still can help to take down that phishing site from the SERP. I know those people who make phishing sites they know that it will happen that their phishing sites will be reported right away but since all of the hacker's sites is open they are still collecting users' data like IPs and what device visitors used those data they can use it to improve their new phishing site to avoid people who reported them and exclude them on AdWords so that people like me won't be able to see the new phishing site they've created in Google SERP.

This is a known strategy from CPA/affiliate marketing and they also apply it to phishing.

I don't know what Google's advertising algorithm looks like so that sites like this continue to grow. Maybe because they pay and google gives priority without first seeing the website is phishing or not. Obviously this would be dangerous if ordinary people found it. They will think every one that is on top with google ads is a trusted website. Need to get some feedback for google to eradicate phishing websites like this.

What a hell 

This purely bad to those with little experience about CMC and they might thought is the right site.
Well my advice to newbies is to bookmark the original website on their mobile browser or web browser, maybe whenever they want to visit the site they could get the knowledge of fake and original site.
Scammer are active devising a means to hack and steal people's funds, i wonder how many people that have fall prey into this false site.

I don't store password on my email because that is very risky to do. I may deciding keep private keys or seed there but password is not going down there. You need both seed and password to completely access a wallet so I keep one away from reach incase the email is hacked. We need to be smart and play save to our asset because once you lose it, hackers don't return stolen coins.

You can try, but those reports are no longer as effective as before - and is the reason that Google has significantly reduced the number of people who were involved in this, or has the number of people who report such sites decreased.

I just know that of all the phishing sites I've personally reported, not one has been blocked in the last 6+ months. Even if you manage to block everything mentioned in this thread, new phishing sites will appear at such a speed that you won't even be able to detect them all.

Yes, they're doing the same scam and could be the same people behind these phishing links. Let's just report them so that Google will remove them with our help.

I'll use that but for the meantime, I think that I'll stay on the typical usage without them so that I can report those phishing links that would appear as I search. And for bookmarking, it's a lowkey advise but definitely works.

That's right, there's no other thing that we can do but to unite and voluntarily report all of those suspicious and obvious websites that would appear on google's ad appearance on its top search.

It's always like this, Google should have been more aware with all of these phishing links as they accept them to advertise with them and then eventually, they're being reported. They should increase their way of filtering these scam ads and the standards before accepting such.

We can just hope for the best that Google would be thoughtful of the newbies in the crypto and they'll eliminate these type of ads. That's what they can do to give back to community by protecting everyone by not allowing to pass these scam sites to advertise on them.

There might be some targeting based on these ads and you're not part of it, but some folks really are seeing these ads for real.

I didn't know that they've got such feature before but it's better be gone because scammers/hackers will take advantage of this feature.

Damn, too many of them and it seems unstoppable. We really have just to volunteer on our own if we see such appear everytime we search with those few clicks and report it, there's also the other way of reporting it on OP.

If he's also careless and there's some ads appeared at the top search, basically, these phishing links are the ones that shall appear. If someone is not keen on really checking the spelling of the URL and has got his Metamask and the other mentioned wallet ready, he'll voluntarily going to fall for this scam.

I have reported all of those links that have been on this thread and hopefully the others would also do the same thing. These scammers a.k.a hackers too knows how to really use and maximize the use of Google.

It didn't show to me but today I tried and now there is a new phishing site using this keyword "coinmarketcap" and here is another fake one below


The owner seems too desperate to get some victims and abuse the free $100 credits on AdWords.
Why not report it together again before anyone falls into this trap?

It seems they have few strategies having multiple domain and set them to target different countries and new users only.

If the person searching for coinmarketcap without checking the url would surely fall with this phishing site. This is clearly a phishing site and it is not an exchange so why would you connect any wallet. This is the reason why we should be careful enough with what we do especially when you want to import a wallet since phishing sites are still around just like this one. Phishing sites have been discussed many times and there are tips how to avoid it or never see it again which is to block the fake site.

It seems that in the past Coinmarketcap had provided a SWAP feature which was directly integrated with several Dapps websites such as Uniswap, Pancakeswap and ran on the BNB and ETH networks. But when I check now the feature is gone. For some reason I also don't know, maybe there are some bugs or there will be more development.

About Coinmarketcap phishing website, I found 3 phishing websites and all of them were advertised by Google. Scammers deliberately make this and advertise it so that it can be clicked by unscrupulous victims.
To report it, click report so that phishing websites like this are immediately removed. and make sure the original website to be bookmarked.

You are right, I tried it and the results will match the keywords and no ads appear. But I feel the need to ask, is this extension really safe to use over some other ad blocking extensions?

Here are some search results based on common keywords such as coinmarketcap and bscscan.

I would rename the subject to "Beware of any fake website!". unfortunately, phishing is so common, it is very difficult to fight against it.
it certainly doesn't help when Google accepts such dubious sites, in addition to their fake fight and crypto ban in their ad space


I don't see any similar ads either.
Although the Chrome SEO plugin helps me, gives me certain metrics for sites, so all my results are numbered. I rarely even see sponsored search results at all.

I have never seen CoinMarketCap ask to connect Metamask, so I am not gonna connect it anyway. But the problem would happen with newbies and that's for sharing with us. Hope newbies will take the lesson from here. Google doesn't filter phishing sites at all. So always need to be very careful connecting your wallet to Google search. We shouldn't be greedy and have to share with the community when we find something suspicious like this. So we can save our funds and help others as well.

This can be classified into the category of one of the more sophisticated scams, where the scammers  actually spend money to promote their make-believe schemes. You would be surprised and wonder why these money they spend on running ads for dubious means cannot be redirected to investment in legitimate things.

 If we can really commit to reporting these dubious ads whenever we come across them as people who know better, we actually will be doing the cryptocurrency community a favour helping to reduce the number of fraudulent ads and people who fall victim to them.

I'm not sure if an ad block extension will help, but I think Ublock Origin has filtered out a lot of ads when I googled. Maybe you should consider an ad blocker, it will at least help you get search results without ads.

This suggestion may have been talked about a lot, but I think bookmarking the original site will also prevent you from entering phishing sites. So always being alert is important.

Not only the Coinmarkercap phishing site, but when I do a random search for "bscscan" on google then on the first page I will find another phishing site almost the same as the coinmarketcap phishing site, is it possible this is done by the same scam? I don't know exactly but it seems that the phishing site is now back in Google search.

But be careful when doing a typed search on google, make sure to click on the original link, sometimes above it is always slipped on a phishing site.

The hackers don't target us because we are aware of what these websites for, they are targeting those that lack of knowledge about these things in crypto.

Yeah, it's why it's highly recommended that if you visit a website at most times, you just save and bookmark it and avoid searching it on google using keywords. It is no problem for us but the main concern are the newbies.

That's the sad thing. Technically, this can be avoided when one has got to learn about those adblockers or is a checker of URLs and attentive to detail for spellings and also active in the community knowing how these attackers come but, they're not targeting us. As for the browser wallets like Metamask, I think most users would agree about can be used conveniently but they ignore that fact that phishers are targeting them because of how many they are.

Since you've mentioned about keeping some information on your email address. I hope that you don't keep such passwords and login details there. I've read that there were people that also have kept their private keys and seeds there and I'm just hoping that you don't do that.

I usually use Brave but it's just so happen that during that time, I've chosen to go with Microsoft Edge and it appeared there as I type google.com first. I agree and as suggested also by Lucius, having an adblocker is one of the best ways to not meet these phishing ads.

Yes and as well as avoid clicking those ads that's making it look like a suggested website if someone is into keyword searching.

I remember there's someone from the forum, I can't remember that guy exactly that has became a victim of the same attack and then he admitted that he's tired at that time and haven't checked the letters correctly. These scammers uses that unfortunate moment and sort of psychological factor to trick their victims.

True and literally newbies that aren't aware that there's no need to connect wallets just for accessing CMC.

Just a random shitcoin that I've seen on some topics. Actually, I've used different browsers for it and it has appeared for a couple of minutes and that screenshot I've made was the first time I've seen it. And then, I've made a few refresh continuously like around 3-5 times and then it's gone.

I've reported them already, I'll include the link of reporting it on the original post.

Yes, this is not new. Google keeps on just accepting these paid ads to appear to their users and they don't really clear and filter it. And that's why we have to be vigilant and take action on it and keep on repeating to inform others about this trick that these scammers/hackers do.

It's very likely that there's only one person or group of people behind these links.

What the site shamelessly actually does is, with either of the wallets (were someone to be compelled to connect to them there and then), is to end up asking them for their seed. The screen is modal, so the user either aborts the operation, or sheepishly follows the layout path to providing his seed.

It’s not the only attempt though. These other sites have a similar name and identical results:

a few days ago I also had an experience like the OP found. I don't think this is anything new because it's not the first time I've seen a fake CMC site.
but it's good that the OP publishes this, especially for those who are new to CMC, and won't be fooled by the fake site.
it looks like the fake site can't be found anymore.


some people access CMC and connect wallets to take part in the airdrop. maybe some people don't realize it if they are not active in the information in the airdrop community.
regarding CMC diamonds can be obtained from daily claims. and diamonds can be exchanged like merchandise or NFT.

It seems that the wallet connection feature is what scammers want to use to create a fake CMC site.

What exact keyword do you use? I tried a few keywords with the market cap but didn't show any ads on Google.
It seems that they targeting US users.

And based on Whois it's a 1-day old domain look below


So it's obvious that this website is being made for phishing.

I think we need a volunteer here to report them to Google below
- https://safebrowsing.google.com/safebrowsing/report_phish/?hl=en

If more people report it I'm sure this domain will remove immediately from their Google ads and it also help our community to fall into this trap.

thank you for reminding everyone. I usually open coinmarketcap to just see the latest news and also price changes in the crypto market so that's why I pinned it in my browser.

The scammer uses a phishing trick to capture people who rarely open CoinMarketcap, for newbies it's better to pinned the CoinMarketcap site in your browser if you open it often and always pay attention to the sites you open, don't carelessly connect your web wallet to websites.

You are wrong, I have my metamask wallet connected to coinmarketcap website for airdrop participation and also to claim free NFTs using CMC Diamonds, I have over 2800 Diamonds on the platform and I can use it to claim some free spot/NFT or tokens in future.

Brave isn't completely ad free (if you click to receive ads) and I've not used librewolf to know how it works. Getting rid of trackers by using brave is a good start but you have one of the biggest suggestions you're into crypto if brave declares itself as brave browser to the websites you're connecting to (unless they've managed to mask that).

Don't trust any ads with funds too even if they look legit. It doesn't take much time to retype a Web link or search via multiple search engines to see if what you have found is the legit site before parting with any information. Even buying something with a card, it's much safer to use a site that's trusted and searchable than to use one that's findable from.an ad.

---

I think these sorts of scam trends are generally ones picking on people who are either tired or distracted (not concentrating too) as a lot of users who know what they're doing under normal circumstances would just reject or close such popups (just closing comes with its own problems too because then you probably still have it as a pending request you might accidentally click).

This is not the first time scammers are making fake CMC websites and posting google ads for that.
My suggestion is to install some ad blocking extension like uBlock Origin, or just use browsers with integrated adblockers like Librewolf (based on Firefox) or Brave browser (based on Chromium).
With this you won't see most of the ads on all websites including youtube, but you can whitelist Bitcointalk forum

Best solution for this is to stop using Metamask wallet, or at least double check url bar before connecting any website with wallets like this.

For record, this is the website of https://coinmarketcap.com/.
I do save such web address on my home screen to avoid doubt or to be confused on the address. It helps if you have the correct address of the site you use always to just save it on your phone and on your email address incase you lose your phone. It is that important to keep some information on your email and not to disclose your password.

The website looks really different and phishing.

Even more, most people with not much of knowledge on this kind of things use Chrome as the default browser on their Android phones (yes, they browse from the phone).
And Chrome for Android doesn't support extensions (guess why). Of course all the competitor browsers do support those extensions, but people tend to stick with Chrome.

A simple solution is to install Ad Block (uBlock Origin) and never see those paid search results. If the majority had the knowledge that such a thing is possible, then not only would scammers have almost no chance, but Google would also give up this method of displaying ads.

Maybe I'm old-fashioned, but I've never understood why anyone agrees to the concept of a crypto wallet in the browser - it's a real nightmare when it comes to security. And yet, to some extent, I can understand why this idea was so well received by users - simplicity and accessibility with free use are a winning combination for many.

Not so long ago we had another fake one -> Fake Coinmarketcap Website

It's the "wetcap" for me 😆. Thanks for alerting us to it. This is the reason I like to bookmark every vital site I visit and know I will revisit or use regularly. I don't even trust people to just call out a website to me, I want it copied and sent. Any slight variation in spelling this day leads one to a totally different site. Phishers everywhere. That site didn't even hide its attempt to scam from the onset by asking users to connect their wallets to it. For me, even without suspecting that the url was different, was a red flag.

Lol, there's no reason why we need to connect Metamask or Walletconnect since Coinmarketcap isn't an exchange. If the phishing site didn't ask to connect a wallet and only allow user to sign in their Coinmarketcap account, many newbies will get tricked since it's same like the official site. I think if there's a newbie get phished in this site, they're don't have any brain to thought before randomly give access their wallet.

I was just browsing some random stuff on Google and then this appeared on my search. See image below.



It's shown at the top search and I'm sure that many of us know that Google don't really filter these phishing and scam websites. After I've seen the ad, I'm aware of it that it is sketchy and tried to visit it. And this is what it has shown me, the website is asking for these two wallets to connect to them. I'm safe since I don't have those wallets installed on my browser.



So there it goes, not so unknown conclusion that many have been hacked through this. The forceful asking for the users to connect to their Metamask, Wallet Connect and other wallets before accessing into these fake websites and services lead the victims into stealing their funds.

And that's why for newbies and even those folks that have been long in the community, be careful. This isn't just the one and there are other websites that they are copying. For example, the popular crypto websites like exchanges (Binance, Coinbase, etc.) and other wallet services aside from Coinmarketcap.

Let's report these suspicious and harmful phishing links, not just this one but the others too through the link below:

---

The links below are the phishing links that has been also caught by other forum members, if you've got spare time, let's report all of them. These are the few from the many out there.