Does this email come from Hitbtc.com??

sujonali1819

legendary

Activity: 2436

Merit: 1189

Need Campaign Manager?PM on telegram @sujonali1819

Quote from: LeGaulois on October 08, 2019, 02:22:06 PM

Quote

I did not try to visit the link yet. So are you sure the mail comes from hitbtc officially? And these two email

Snip~~
If the bot sees case 2) it means you have an account, so to continue, the hackers will try to brute force the password. It's a way to clean their email lists.

This is probably the reason why I received this email.

Quote from: TryNinja on October 08, 2019, 03:35:23 PM

Copy the link by right-clicking and selecting "Copy URL" or by checking the email source code (but don't open it). If it leads to the real HitBTC website, then it is most likely something trying to login/register with your email.

If it leads to a fake website (e.g: hltbtc.com), then you have your answer.

In any case, since you don't have an account there, I wouldn't worry about this.

This is very informative. I will remember this and try to apply it in the future. Thanks for sharing it.

Note: I have already received the most valuable answer that I wanted to know. So no need to increase this discussion anymore. I am locking this thread to reduce spam. Thanks, all who already tried to solve my issue.

magneto

hero member

Activity: 1666

Merit: 753

Assume that it didn't. It seems extremely suspicious that it would come from two separate email domains when it's from the same service, and plus it ended up in spam. And if you never signed up to HitBTC, why would you even bother clicking it open?

It's likely a spoofed email address and/or a phishing attempt, imo.

But even if it was real, HitBTC is an absolutely terrible exchange to be using. I wouldn't even sign up to it if you asked me to, tbh.

Potato Chips

hero member

Activity: 2786

Merit: 902

yesssir! 🫡

Quote from: sujonali1819 on October 08, 2019, 12:23:38 PM

I did not try to visit the link yet. So are you sure the mail comes from hitbtc officially? And these two email

Code:

both are official?
As I know withdrawal notification comes from this mail.

Code:

Well, I wasn't 100% sure that's why I used the word "seems" but those email addresses mentioned are/were used by hitbtc

ask@hitbtc... - got my confirmation email from here
no-reply@.... - most "Successful Login from New IP" are from here
support@.... - yes, got my withdrawal verification here
and the links all redirect to hitbtc

Just do note of LeGaulois's reply which means anyone can impersonate hitbtc which I have also tried (no harm was done and can be done)

I recommend following TryNinja's advice.

jhenfelipe

hero member

Activity: 1372

Merit: 647

Since you didn't do the Sign-up process, just ignore and don't click the verification link. Idk when it started, but when I log in, the email notifications now come from
the same email ↓

Code:

[email protected]

You might want to read this → Someone created an account with my email address

TryNinja

legendary

Activity: 2758

Merit: 6830

Quote from: sujonali1819 on October 08, 2019, 12:23:38 PM

I did not try to visit the link yet. So are you sure the mail comes from hitbtc officially? And these two email

Code:

both are official?
As I know withdrawal notification comes from this mail.

Code:

Anyway, thanks for your constructive answer.

Copy the link by right-clicking and selecting "Copy URL" or by checking the email source code (but don't open it). If it leads to the real HitBTC website, then it is most likely something trying to login/register with your email.

If it leads to a fake website (e.g: hltbtc.com), then you have your answer.

In any case, since you don't have an account there, I wouldn't worry about this.

carlfebz2

hero member

Activity: 2926

Merit: 722

DGbet.fun - Crypto Sportsbook

I do still had that email confirmation with Hitbtc registration wayback in 2017 (as you can see on the date)

It shows [email protected] im aint sure if they already change it up to [email protected] but as confirmed above that one do really came from them.

LeGaulois

copper member

Activity: 2940

Merit: 4101

Top Crypto Casino

Quote

I did not try to visit the link yet. So are you sure the mail comes from hitbtc officially? And these two email

It doesn't really matter so much since it's something that can be spoofed easily. I receive such emails regularly too, often from Chinese exchanges. I believe hackers with a list try to create an account and depending on the result it helps to identify an account.

The bot tries to create an account then
1) the site says "Registration successful, check out your email for bla bla bla"
2) the site says "wrong login information, bla bla bla"

If the bot sees case 2) it means you have an account, so to continue, the hackers will try to brute force the password. It's a way to clean their email lists.

sujonali1819

legendary

Activity: 2436

Merit: 1189

Need Campaign Manager?PM on telegram @sujonali1819

Quote from: Potato Chips on October 08, 2019, 11:38:58 AM

Checked my email and made an alt using a temp email and those addresses seems to be really from hitbtc BUT since you didn't register, do not touch them as social engineering attacks are still possible.

I noticed that hitbtc doesn't require the user to login again once the email is confirmed, you just need to agree with the terms etc... and then youre at the dashboard so one possibility I could think of is that they want it to disguise as "your account" and deposit funds on it which the scammers can access since they're the one who registered. well, it's a pretty weak method

update

Another one. Tried treating sign in as sign up-- I registered using the sign-in page. guess what? It worked, I received the "Thank you for signing up with HitBTC!
We sent a confirmation email to...." so it's also possible that someone is brute forcing accounts and since you do not have one, it equated as a "sign up"

I did not try to visit the link yet. So are you sure the mail comes from hitbtc officially? And these two email

Code:

both are official?
As I know withdrawal notification comes from this mail.

Code:

Anyway, thanks for your constructive answer.

Potato Chips

hero member

Activity: 2786

Merit: 902

yesssir! 🫡

Checked my email and made an alt using a temp email and those addresses seems to be really from hitbtc BUT since you didn't register, do not touch them as social engineering attacks are still possible.

I noticed that hitbtc doesn't require the user to login again once the email is confirmed, you just need to agree with the terms etc... and then youre at the dashboard so one possibility I could think of is that they want it to disguise as "your account" and deposit funds on it which the scammers can access since they're the one who registered. well, it's a pretty weak method

update

Another one. Tried treating sign in as sign up-- I registered using the sign-in page. guess what? It worked, I received the "Thank you for signing up with HitBTC!
We sent a confirmation email to...." so it's also possible that someone is brute forcing accounts and since you do not have one, it equated as a "sign up"

sujonali1819

legendary

Activity: 2436

Merit: 1189

Need Campaign Manager?PM on telegram @sujonali1819

Usually, I don't check my email much unless I feel the need to. But today I've been checking my email for a while and I see some unwanted emails. Ex:

Today I get an email from the

Code:

in my spam folder. But I did not register on the hitbtc site today. Then I went to find out if such an email had come before. And then I got two more emails about hitbtc site registration from

Code:

and

Code:

So now I want to know as I didn't try to register on the site then why I received this email from hitbtc? Or is it a hacker's phishing link?

Topic: Does this email come from Hitbtc.com?? (Read 191 times)