So when and how bitcoin wallets in mobiles and desktop is considered to be insecured too? The difference is only the latter needs installation.
There is a big jump from a website to a mobile and desktop wallets! When you open a website you have no idea what you are running and what you are sending to that website's servers and you have no way of knowing it. But with a desktop/mobile wallet you have a choice to download and install what is open source so you can verify that it is not doing something malicious. 
Topic: bitcoinpaperwallet.com - scam still alive? - page 2. (Read 488 times)
What I see right now it is literally wild west - none of those companies even get back to me and acknowledged the problem.
They guy even has PayPal for his [email protected] account and PayPal doesn't give literally a shit.
And here what he replied via his contact form:
Bitcoin Paper
Thu, Feb 10, 10:46 PM (8 days ago)
to me
Hi,
When you create a wallet, you, and only you have control/knowledge of your address and private key.
Keys are generated in your browser locally.
There is a few things I can recommend checking:
1. Do you have an up to date antivirus?
2. Do you have any browser extensions?
3. Are you sure you were using our domain and not a phishing site?
4. We're you using TOR to access the website?
5. Are you sure that you and only you had access to your private key?
6. Did you run the website offline?
I know of a website out there phishing on google called PaperWalletBitcoin.com that steals your private key. I have already reported them to google but no action has been taken. If you inspect element on the page when you generate a key on their website you can see your private key being sent out 5-10 seconds later to their server. Did you by chance click on this website and not the official BitcoinPaperWallet.com?
I hope you can find out what happened to your coins,
Regards,
BPW Team
So we know his: PayPal, Domain, Hosting, Cloudflare account, Gmail and can't do anything with that.
They guy even has PayPal for his [email protected] account and PayPal doesn't give literally a shit.
And here what he replied via his contact form:
Quote
Bitcoin Paper
Thu, Feb 10, 10:46 PM (8 days ago)
to me
Hi,
When you create a wallet, you, and only you have control/knowledge of your address and private key.
Keys are generated in your browser locally.
There is a few things I can recommend checking:
1. Do you have an up to date antivirus?
2. Do you have any browser extensions?
3. Are you sure you were using our domain and not a phishing site?
4. We're you using TOR to access the website?
5. Are you sure that you and only you had access to your private key?
6. Did you run the website offline?
I know of a website out there phishing on google called PaperWalletBitcoin.com that steals your private key. I have already reported them to google but no action has been taken. If you inspect element on the page when you generate a key on their website you can see your private key being sent out 5-10 seconds later to their server. Did you by chance click on this website and not the official BitcoinPaperWallet.com?
I hope you can find out what happened to your coins,
Regards,
BPW Team
So we know his: PayPal, Domain, Hosting, Cloudflare account, Gmail and can't do anything with that.
In addition to complaining enom don't forget to report to all the other AV sites too, here are a few:
https://safebrowsing.google.com/safebrowsing/report_phish/?rd=1&hl=en
https://support.malwarebytes.com/hc/en-us/articles/360038522814-Submit-a-phishing-link-malicious-website-or-file-to-Malwarebytes
https://submit.norton.com/?type=URL
https://global.sitesafety.trendmicro.com/
https://support.eset.com/en/kb141-submit-a-virus-website-or-potential-false-positive-sample-to-the-eset-lab
The site itself is behind cloudflare, you can try to report to them but for the most part they really don't care about what they protect.
-Dave
Good idea. Google is best for this coz they are the most common search engine used by ordinary people who doesn't have an idea about these websites and to avoid it appearing in the search query as well. Well, as long as many people report it.https://safebrowsing.google.com/safebrowsing/report_phish/?rd=1&hl=en
https://support.malwarebytes.com/hc/en-us/articles/360038522814-Submit-a-phishing-link-malicious-website-or-file-to-Malwarebytes
https://submit.norton.com/?type=URL
https://global.sitesafety.trendmicro.com/
https://support.eset.com/en/kb141-submit-a-virus-website-or-potential-false-positive-sample-to-the-eset-lab
The site itself is behind cloudflare, you can try to report to them but for the most part they really don't care about what they protect.
-Dave
In any case people shouldn't be using a website to create their bitcoin wallets in first place! That's just silly and extremely insecure regardless of what website you are using or who controls it.
So when and how bitcoin wallets in mobiles and desktop is considered to be insecured too? The difference is only the latter needs installation. The website in question turned into a scam after its ownership was changed in 2018 and is probably still owned by the same scammer.
What I don't understand is why canton handed over such a sensitive and popular website to new owners who reputation was still unknown?Why didn't he just put down the whole project if he could not proceed, supporting it?
I mean, that's a honeypot for scammers. It was a just a matter of spending a few thousands of dollars to buy it and then later scam the hell out of some many users who used the site
But it wasn't really popular though, bitaddress.org was popular and is still around. This other site came later and tried gaining some popularity by duplicating the same service but couldn't succeed as much. Then the developer abandoned it while trying to make some money from his work.
In any case people shouldn't be using a website to create their bitcoin wallets in first place! That's just silly and extremely insecure regardless of what website you are using or who controls it.
In addition to complaining enom don't forget to report to all the other AV sites too, here are a few:
https://safebrowsing.google.com/safebrowsing/report_phish/?rd=1&hl=en
https://support.malwarebytes.com/hc/en-us/articles/360038522814-Submit-a-phishing-link-malicious-website-or-file-to-Malwarebytes
https://submit.norton.com/?type=URL
https://global.sitesafety.trendmicro.com/
https://support.eset.com/en/kb141-submit-a-virus-website-or-potential-false-positive-sample-to-the-eset-lab
The site itself is behind cloudflare, you can try to report to them but for the most part they really don't care about what they protect.
-Dave
https://safebrowsing.google.com/safebrowsing/report_phish/?rd=1&hl=en
https://support.malwarebytes.com/hc/en-us/articles/360038522814-Submit-a-phishing-link-malicious-website-or-file-to-Malwarebytes
https://submit.norton.com/?type=URL
https://global.sitesafety.trendmicro.com/
https://support.eset.com/en/kb141-submit-a-virus-website-or-potential-false-positive-sample-to-the-eset-lab
The site itself is behind cloudflare, you can try to report to them but for the most part they really don't care about what they protect.
-Dave
It seems the website is 9 yrs old alive and kicking and they keep scamming but we do not know if the owner is already dead or not. As you said your client lost funds and the transfer amount has still not been transferred to another wallet yet.
I'd like to suggest you try if you want to know the name and address of the owner of the website try to contact this https://www.enom.com/reseller/contact-us/
Because the domain is registered on that site.
I think that you can able to get the real name and address of that scammer on enom.com because they only accept these payment methods credit cards, PayPal, check, or wire transfers.
Just try to ask them about the name, address, and contact number of the owner of that website. Let's hope that the domain provider will cooperate and don't forget to tell them that the owner is a scammer send some proof.
I'd like to suggest you try if you want to know the name and address of the owner of the website try to contact this https://www.enom.com/reseller/contact-us/
Because the domain is registered on that site.
I think that you can able to get the real name and address of that scammer on enom.com because they only accept these payment methods credit cards, PayPal, check, or wire transfers.
Just try to ask them about the name, address, and contact number of the owner of that website. Let's hope that the domain provider will cooperate and don't forget to tell them that the owner is a scammer send some proof.
Not everyone uses MetaMaks..
What I see the guy still hold coins, and he scammed already hundred and hundres of dollars. No way to withdraw them, so it just matter when authorities will start investigate this case. Also all victims can make one money pool and just hire lawyer to start proceeding him.
What I see the guy still hold coins, and he scammed already hundred and hundres of dollars. No way to withdraw them, so it just matter when authorities will start investigate this case. Also all victims can make one money pool and just hire lawyer to start proceeding him.
The website in question turned into a scam after its ownership was changed in 2018 and is probably still owned by the same scammer.
What I don't understand is why canton handed over such a sensitive and popular website to new owners who reputation was still unknown?Why didn't he just put down the whole project if he could not proceed, supporting it?
I mean, that's a honeypot for scammers. It was a just a matter of spending a few thousands of dollars to buy it and then later scam the hell out of some many users who used the site
The website in question turned into a scam after its ownership was changed in 2018 and is probably still owned by the same scammer.
bitcoinpaperwallet[.]com is a scam
Why has my newly created Bitcoin address already been used?
Maybe here more people who lost their money?
Yes, Visit the following topics.bitcoinpaperwallet[.]com is a scam
Why has my newly created Bitcoin address already been used?
Apparently, CoinDesk tried to dig into it and to reach out to the new owner, but he's denying that they're responsible for people losing their funds...
https://www.coindesk.com/tech/2021/02/24/bitcoinpaperwallet-back-door-responsible-for-millions-in-missing-funds-research-suggests/
The good thing now is that most people use MetaMaks nowadays, and since the site is added to their domain warning list, people shouldn't be able to access it. Not without seeing a warning anyway.
https://www.coindesk.com/tech/2021/02/24/bitcoinpaperwallet-back-door-responsible-for-millions-in-missing-funds-research-suggests/
The good thing now is that most people use MetaMaks nowadays, and since the site is added to their domain warning list, people shouldn't be able to access it. Not without seeing a warning anyway.
Hey people, I found some posts from the last year.. Recently one of my clients also lost their funds via that "safe paper wallet".
Based on the transactions where coins were moved I see more victims - so probably the owner still alive and that website still working. However coins are not moving anywhere and still on that address.
Maybe here more people who lost their money? Or maybe someone dig into it?
I don't believe that community can't stop him and he can keep doing his phishing.
Based on the transactions where coins were moved I see more victims - so probably the owner still alive and that website still working. However coins are not moving anywhere and still on that address.
Maybe here more people who lost their money? Or maybe someone dig into it?
I don't believe that community can't stop him and he can keep doing his phishing.
Jump to: