Topic: FreeBitco.in-$200 FreeBTC⭐Win Lambo🔥0.2BTC DailyJackpot🏆$32,500 Wager Contest - page 135. (Read 559592 times)

There are several ways to just compromise part of a website. It could’ve been a sophisticated man-in-the-middle attack or a malicious extension injecting the notification in your browser. There are even some websites that look exactly like FreeBitco.in and have nearly identical functionality. I don’t know the likelihood of these scenarios, but it would really clear things up if they responded directly to your concerns.


Comparing these user’s FreeBitco.in deposits with my own, my most recent deposit was consolidated along with several other deposits 24 hours ago. I also have another recent deposit that was consolidated into their hot wallet. None of these transfers follow the same consolidation pattern as these affected users, whose deposits were first swept into a Bech32 address and then consolidated. If the purpose for changing addresses to a new format is to save fees, it doesn’t make sense to add an extra step in between depositing and consolidation.

If it was a phishing site, how do you explain the following:
1) same message for address change appearing on my mobile app and on the browser
2) reward points updated correctly in their database; just prior to depositing, the lost bets caused an adequate increase in the reward points status, and this amount is still there.  I used the same page to deposit.  I'm no expert, but I would suppose if it was a phishing site, then the whole webpage would need to be a scam, not just the part which was related to the new address notification and the QR code.
3) they corrected the link for generating new bitcoin address after we brought it to attention, now this "new deposit address" button is working properly

It would be too big of a conspiracy theory all 3 above to be true.

I'm suspecting that many more had the same notification, not just the few of us, but either they didn't deposit to it, or deposited a smaller amount so they didn't feel the pain, and did not want to spend too much time trying to rescue their funds.  Even myself, I am a newbee in this forum, and I only joined driven by the search for similar cases where people had not been credited their deposits.  In fact, main purpose was to try to find a way how to reach FBC's support team  (since none of my messages to FBC's support mail resulted with an answer, which on it's own is a red-flag for me). 

Then I read jper3009's case, and I understood that TheQuin is their support, so I have a glimmer of hope.   I am waiting for TheQuin's response, but I see he has not been online for 5 days.  I hope my case will not take 8 months like jper3009    

Any other constructive suggestions are welcomed, but please don't put salt on the wound by just giving your opinions that it is our browser's issue or similar, since it is dismissing the real issue.   The real issue, is we need to get the answer from the support so that we know for sure what is the situation, and avoid speculations.

Be super careful on double checking, basic thing to do is use another browser really.  Its fast and easy thing to do that that will alter your setup without too much hassle imo.     A modern thing is bad extensions that implement bad code, some are reviewed and then removed from active usage and they do try to keep all the code in check for bad instances.     There's probably a really good guide (on this forum even) to all the sites and ways to check your machine, I remember Malwarebytes is one place for example but somebody will give a whole list and ways to check.  

Ultimately I have to say windows is not an especially secure operating system, if you are behind NAT mostly you will be ok but Linux is far superior for security in my experience.     Its best to assume you do need to check and follow the most secure route or method recommended an attacker will rely on people taking the shortest most convenient route to any task.

Phishing is extremely popular because it works, I used to speak to someone whose entire job was to just employ the knowledge he had on techniques of how to compromise a website or even an entire work site and its network.  They get paid well as I understand it because it is such an ongoing vulnerability and its been that way for a long time, I don't personally think the situation improved apart from there are a few good companies.   I found Sophos was a good company but they may have withdrawn their best products to paid or business license only I didn't check recently but there are good operations out there trying to help people to spot everything from mal ware to viruses etc.

You do realize that no one else has seen that message, except for the few of you who are affected by this "bug"?


This wouldn't make sense since fees are typically independent of deposit amounts. It would be more logical for them to focus on reducing fees for consolidating smaller deposits, not the other way around. Besides, they have no way of knowing in advance how much someone will deposit.


I'm not so sure about that. I also tried tracing the blockchain transactions from the addresses mentioned, but couldn't find any evidence that they are related to known FreeBitcoin wallets. Can you point me to the evidence why you think these addresses are "with them"?


It would be helpful if you explained where that HTTPS request to bitwrecken.com came from. As Warfare pointed out, that domain is only 19 days old and there is no evidence that it has anything to do with the FreeBitcoin site. Can you post the source code that generated the GET request you saw in your dev tools? it could help us find the cause of the problem and also help prevent someone else from becoming a victim if it is a scam.

That is truly a suspicious domain that is just 19 days old.
Furthermore, it is blacklisted by DomainTools‘ Domain Hotlist - a "predictive, prioritized, and easily consumable block list that identifies active, high-risk domains".

Well 3 tickets is enough to win! I make sure I always have at least 1 ticket (either buying it or when I get lucky from the WOF spins). Good luck all, this prize can be life changing.

Nah but big thanks bro, all of those ads spent have been worth it definitely.

There should be a big notice with that but I think the devs will do it with the convenience of their customers and won't choose this as necessary. Anyway, with some concerns out there I hope that they'll all be resolved.

I have 3 tickets but I'm hoping

I understand what your saying I'm not silly, there rolling back code dude, I can and have now generated a btc address I use my mobile for freebitcoin only. Not my laptop. I only logged in on there to get dev tools.to see why it wasn't working.

The new address before I sent it k triple checked it eas correct in the clipboard and it sent to the new address which was on my account everything was normal except the message about the new btc address.



It's been rolled back to what it was before. Maybe since we deposit a lot they may have targeted us to save on fees is what I'm thinking.

It's quite hard to hijack my phones browser since it's quite nerfed on the scripting end.

There's no big conspiracy I'm not concerned the money hasn't been sent to freebitco.in as. I've followed the wallet transfers it's definitely with them.. what I'm concerned about is the time frame.on resolving it, it's thr wrong timing

While I appreciate your two cents and observations i understand where your coming from not everything affects everyone.

Here's hoping we get our.money soon.

It looks like someone from the Freebitco.in platform is reading our posts after all.  I just tried to create a new deposit address and now it worked just fine...  hah, i guess the video helped...

I hope they will also resolve the pending crediting to my account.
Unfortunately I haven't seen TheQuin online in the last 3-4 days.   

i was right to bet on him

I just checked this myself and can confirm that there are no suspicious external resources loaded via http/https GET requests from the freebitco.in website, especially nothing linked to that shady bitwrecken.com domain. You probably have some kind of malware or some script messing up with the code on your machine.

Clicking the "NEW DEPOSIT ADDRESS" button calls the function "GenerateMainDepositAddress();". This function can be found in the file https://static1.freebitco.in/min/main_6mar2024-2.js.  Here's the entire function:


So, as you can see from the source code, the correct GET call goes to "/?op=generate_main_bitcoin_deposit_address" from the main freebitco.in domain, not from an external site.

I placed the bets 1 day before the price prediction was about to end.
Yes, I usually don't place bets on FUN token price.
The reason that I don't track FUN token price actively but I do it for BTC and ETH.

Sigh... I did not say there was a redirect I said there was a HTPP get request they are different things. These are used in api calls for scripts and is normal.

There's nothing wrong with the site, I don't have malware, just to prove the point I'll check it on a new account to double check and a different pc.....

You need to look at network under developer tools chrome to check what request is being made and to where when you click the button..

As long as there has been some form of redirection to that website to generate a new deposit address then it is definitely a scam,redirects were famous not that long ago when Windows machines were being targeted massively with this type of malware which in fact in those machines it stayed in the clipboard there and have made quite some damage.This sounds a lot like that only it redirected to a so called website and the money that goes through these generated addresses from victims go directly to the scammer/s website,that is very bad and it was quite some time I didn't hear about this.

True! But it's almost impossible to get one super active player or whale, it's much better for me I think to get 1000 very small players, maybe only 1 remember to freeroll once a week, that's still about 30 rolls a day, so it's 30 lotto tickets a day, plus satoshi. Even if they roll once a month, it's 6 a day

And you never know when they start going active, whereas a whale once he busts, it's over (I think).

Makes me tempted to think about doing ads again lol


A few years ago even. I think it's a wallet thing, and so much active balances in them, that if you change everything they lost a big cost in consolidation (I believe this is what what said).

Dude, that looks like a scam! There is no request to "bitwrecken.com" from freebitco.in in my logs when I request to generate a new deposit address.  It looks like you have malware on your computer.

It would be good if someone else can confirm this.

It might be the case but the developers should look into this again. Segwit has been here for sometime and fees suddenly cranking up like a wave is nothing new, so this might help as a method to cut down fees during such times. However I cant speak for them for what the owners have in mind.

Since most of us have switched to SegWit wallets and the legacy wallets are lying there collecting dust, having to withdraw back to the legacy wallet and then send to the SegWit wallet is a two step process which can essentially be reduced to one.

I don't know if it's been mentioned since but the reason given by theQuinn some time ago was "Changing the deposit addresses to Segwit requires a major database reorganisation because the initial deposit address is used to index the accounts. To do that we would have to take the site offline for many hours to implement. Maybe if we have some other necessity to take the site down we could do it at the same time but we don't want to have an outage just for that."

https://bitcointalksearch.org/topic/m.52973892

when logging in on the PC now fresh it makes a request via HTTPS to here https://bitwrecken.com/?action=new&id=482015 when clicking new deposit address and the response is 0 from the request. it should be 1.