[List] Phishing Cryptocurrency Site - page 15.

panganib999

hero member

Activity: 1750

Merit: 589

Quote from: Chikito on October 29, 2019, 08:50:14 PM

Phishing exodus wallet site: https://exodlus.io
original here: https://exodus.io/

Look screenshot here ;

Woah. It seems legit that it won't give you any doubts and red flags about joining and using it. These criminals are really getting smarter and smarter as they try to develop and make more phishing and scamming sites. This is why beginners, it is essential if you take vigilance seriously and take it with you all through out your journey here in crypto space. This thread would be very helpful to raise awareness for beginners. Also always avoid impulsively clicking links from unknown sources you could avoid click baits.

Casdinyard

hero member

Activity: 2184

Merit: 891

Leading Crypto Sports Betting and Casino Platform

Quote from: masulum on November 02, 2019, 11:15:53 AM

@OP to avoid any accident unwanted clicking any suspicious website, maybe you can edit link and make it un-clickable, or better to use code tag.

Or don't put the link anymore and besides there's already an image of the fake site. Just to be more safe, I mean some are not really mindful.

Btw, already reported the sites. Thanks for the heads up. Keep it up.

masulum

legendary

Activity: 2324

Merit: 1604

hmph..

@OP to avoid any accident unwanted clicking any suspicious website, maybe you can edit link and make it un-clickable, or better to use code tag. Sometimes when visiting this forum using mobile phone, it's very possible to make unwanted clicking content.

Thank you, and good job to make any phishing website related to crypto in one place.

Chikito

legendary

Activity: 2366

Merit: 2054

Quote from: Lucius on November 01, 2019, 10:00:09 AM

I check all links posted by OP, and only last for fake LB is blocked by Chrome as a dangerous site, all other sites are still fully accessible and pose a threat to uninformed users. More reports will help to change the situation and to do that just report all links to: https://safebrowsing.google.com/safebrowsing/report_phish/?hl=en

I did the report. Maybe google support team have a weekend.

And today found fake binance dex: btnance.org

https://www.virustotal.com/gui/url/2d98a050dc1ce3d617da8d4a59f253147f51b3d7dd837e06506b7f449da732b4/detection

Lucius

legendary

Activity: 3234

Merit: 5637

Blackjack.fun-Free Raffle-Join&Win $50🎲

I check all links posted by OP, and only last for fake LB is blocked by Chrome as a dangerous site, all other sites are still fully accessible and pose a threat to uninformed users. More reports will help to change the situation and to do that just report all links to: https://safebrowsing.google.com/safebrowsing/report_phish/?hl=en

Chikito

legendary

Activity: 2366

Merit: 2054

Found another LocalBitcoins Phising site

Fake: localbcoin.com

Scanned by Virustotal
https://www.virustotal.com/gui/url/98ec2e650058b3d527d441a7d8d614ea77d32335b83aebeac78f98c0cbe7c007/detection

Code:

Domain Name: LOCALBCOIN.COM
Registry Domain ID: 2448745451_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: http://www.namecheap.com
Updated Date: 2019-10-28T04:15:26Z
Creation Date: 2019-10-28T04:05:28Z
Registry Expiry Date: 2020-10-28T04:05:28Z
Registrar: NameCheap, Inc.
Registrar IANA ID: 1068
Registrar Abuse Contact Email: [email protected]
Registrar Abuse Contact Phone: +1.6613102107
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Name Server: DNS1.NAMECHEAPHOSTING.COM
Name Server: DNS2.NAMECHEAPHOSTING.COM

Be Aware newbie should double-check before sign in

Wysi

sr. member

Activity: 1638

Merit: 261

Quote from: Chikito on November 01, 2019, 01:20:00 AM

Be careful of this :

fake MyEtherWallet: https[:]//myetherwallet-extra-bonuses.000webhostapp.com/access-my-wallet/

reported.

Code:

Domain Name: 000WEBHOSTAPP.COM
Registry Domain ID: 2027404438_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.hostinger.com
Registrar URL: http://www.hostinger.com
Updated Date: 2017-04-05T08:04:14Z
Creation Date: 2016-05-11T13:34:12Z
Registry Expiry Date: 2022-05-11T13:34:12Z
Registrar: Hostinger, UAB
Registrar IANA ID: 1636
Registrar Abuse Contact Email: [email protected]
Registrar Abuse Contact Phone: +37064503378
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Name Server: DNS1.000WEBHOST.COM
Name Server: DNS2.000WEBHOST.COM
DNSSEC: unsigned
URL of the ICANN Whois Inaccuracy Complaint Form: https://www.icann.org/wicf/
>>> Last update of whois database: 2019-10-30T12:23:33Z <<<

These hackers an go to any extend in order to cheat people. Thank you so much for bringing this to our notice as this will help most of the newbies and those users who are rarely uses MEW. MEW is doing it's part by asking us to double check the URL link before we enter any details. We need to be more cautious as these hackers might come up with same tactics for other exchanges as well.

Chikito

legendary

Activity: 2366

Merit: 2054

Be careful of this :

fake MyEtherWallet: https[:]//myetherwallet-extra-bonuses.000webhostapp.com/access-my-wallet/

reported.

Code:

Domain Name: 000WEBHOSTAPP.COM
Registry Domain ID: 2027404438_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.hostinger.com
Registrar URL: http://www.hostinger.com
Updated Date: 2017-04-05T08:04:14Z
Creation Date: 2016-05-11T13:34:12Z
Registry Expiry Date: 2022-05-11T13:34:12Z
Registrar: Hostinger, UAB
Registrar IANA ID: 1636
Registrar Abuse Contact Email: [email protected]
Registrar Abuse Contact Phone: +37064503378
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Name Server: DNS1.000WEBHOST.COM
Name Server: DNS2.000WEBHOST.COM
DNSSEC: unsigned
URL of the ICANN Whois Inaccuracy Complaint Form: https://www.icann.org/wicf/
>>> Last update of whois database: 2019-10-30T12:23:33Z <<<

Casdinyard

hero member

Activity: 2184

Merit: 891

Leading Crypto Sports Betting and Casino Platform

Quote from: SabrinaCane on October 31, 2019, 10:37:25 AM

OHMYDAYS thanks for the warning! I have just had a call from this number that offered to sell me bitcoin and told me to go to this webpage!! I told him I had to check it over first and give him a call back and stumbled across this https://scam-numbers.co.uk/Number/0031858888229/ and also this post so thanks guys! Seems to be a scam for sure! If anyone can point me in the direction of a legitimate seller that would be grand! Thanks, Sabrina x

If you prefer to buy on your local, head on here.
https://localbitcoins.com/

But you can buy more conveniently on exchange sites sich as binance and bittrex and other reputed sites.
You can create your account here.
https://www.binance.com/m-register.html
https://global.bittrex.com/account/register

Good thing you didn't easily believe on those cold callers. Next time be careful where you sign up such as giving your personal information since cold callers use this to keep bothering you.

Bightening

member

Activity: 66

Merit: 18

I literally do byte.

Quote from: SabrinaCane on October 31, 2019, 10:37:25 AM

OHMYDAYS thanks for the warning! I have just had a call from this number that offered to sell me bitcoin and told me to go to this webpage!! I told him I had to check it over first and give him a call back and stumbled across this https://scam-numbers.co.uk/Number/0031858888229/ and also this post so thanks guys! Seems to be a scam for sure! If anyone can point me in the direction of a legitimate seller that would be grand! Thanks, Sabrina x

There’re a good number of exchanges that would sell you bitcoins. I don’t know your country/region, or your payment option, so can’t help.

Phishing tricks keep getting better. Every internet user should keep that information in mind every time you use the internet, most especially when it comes to finances and privacy.
I’m working on a thread that explains more details on phishing tricks forum users like btt are liable to, and should be aware of.

panganib999

hero member

Activity: 1750

Merit: 589

Quote from: Chikito on October 30, 2019, 07:06:14 AM

Quote from: barnes13 on October 30, 2019, 06:44:46 AM

I think that he can now use the original link and in the future, the link can turn into a program that he has inserted a virus in?

Maybe Next when a lot of people trust fake site Scammer prepares to inject a virus, Fake electrum looks clean from virus atm.
When looking at fake exodus site I found a lot of phishing
https://www.virustotal.com/gui/url/8bb6a4ef386b9c29d2cc00509aa3a44ec7d7dbf792f057074ad0ec471d8611e9/detection

This thing could really fool lots of people. The site looks so fine and legitimate that you won't think any bad about it, not even a doubt. People should really take caution and be extra careful of what websites they are going to website. Since there are websites who are copying the graphic user interface of original websites, they coukd put a bookmark to their most visited sites so that they won't be redirected and use fake ones which might be packaged with other malicious softwares.

SabrinaCane

newbie

Activity: 1

Merit: 0

OHMYDAYS thanks for the warning! I have just had a call from this number that offered to sell me bitcoin and told me to go to this webpage!! I told him I had to check it over first and give him a call back and stumbled across this https://scam-numbers.co.uk/Number/0031858888229/ and also this post so thanks guys! Seems to be a scam for sure! If anyone can point me in the direction of a legitimate seller that would be grand! Thanks, Sabrina x

Chikito

legendary

Activity: 2366

Merit: 2054

Found Fake MyEtherwallet: myetherewallet.info

Code:

Domain Name: WWW-MYETHEREWALLET.INFO
Registry Domain ID: D503300001182102047-LRMS
Registrar WHOIS Server: whois.reg.com
Registrar URL: http://www.reg.com
Updated Date: 2019-10-27T13:00:27Z
Creation Date: 2019-10-26T20:28:05Z
Registry Expiry Date: 2020-10-26T20:28:05Z
Registrar Registration Expiration Date:
Registrar: Limited Liability Company "Registrar of domain names REG.RU"
Registrar IANA ID: 1606
Registrar Abuse Contact Email: [email protected]
Registrar Abuse Contact Phone: +7.4955801111

https://www.virustotal.com/gui/url/c214a72e293e3f54dd2af812cf1f53c19656a4a61c9cc4436963204483ee2d89/detection

Code:

myelherewallut.com
myeihereswallet.com
muetherewallet.com
myeiherwollet.com
myelherewallets.com

erickastella

sr. member

Activity: 826

Merit: 281

thank you very much my brother with this I can avoid phishing very much, I am very helped by this post, thank you very much for sharing the information my friend
I also have a suggestion that there is an antivirus called ESET antivirus which is very powerful because it can detect phishing and other websites.

notblox1

legendary

Activity: 2086

Merit: 1282

Logo Designer ⛨ BSFL Division1

Thanks for warning us!

Looks like this is some kind of bad Russian only version of exodus phishing.
I reported it also...so let's hope they will take it down soon.

Chikito

legendary

Activity: 2366

Merit: 2054

Quote from: barnes13 on October 30, 2019, 10:51:55 AM

https://safebrowsing.google.com/safebrowsing/report_badware/
https://safety.yahoo.com/MY/Security/REPORTING-SECURITY-ISSUES-MY.html

When we look at the history Scammer always changes the domain.
Scammer always changes it into another fake website.
I am ready to report that IP address here https://www.abuseipdb.com/
Still, don't know what the best place to report IP address like your both link

Lafu

legendary

Activity: 3136

Merit: 3213

Looks like there is now again some wave of phishing sites like it was last year at some point .

Always read the Name in the adress field and check it a few times before you enter or connect to the webpage , Wallet or anything !
Also check a few times what you downloading or doing when you have to insert your password and Login details .

I cant say it often enough ! Check everything 2 times or more when you Login in something specialy when money or crypto is involved !

Its your money and Coins

barnes13

hero member

Activity: 1274

Merit: 521

7enius - Your Cryptocurrency Marketing Consultant

Maybe I want to give some advice to you if you find a site like that, we can report it via Google or Yahoo.

The steps to report it through Google are very easy:
Step 1: Go to page: https://safebrowsing.google.com/safebrowsing/report_badware/

Step 2: Write the URL that is suspected as fake or scam website

Step 3: You can write additional details about the website and explain it in the space provided

Step 4: Click "submit report" and Google will investigate it.

Steps to report via Yahoo you can see it by visiting this link: https://safety.yahoo.com/MY/Security/REPORTING-SECURITY-ISSUES-MY.html

DdmrDdmr

legendary

Activity: 2338

Merit: 10802

There are lies, damned lies and statistics. MTwain

Quote from: barnes13 on October 30, 2019, 07:33:24 AM

<...>

Yes, you're right. I just did a side by side comparison on all the links and they all seem to be original so far. It’s likely that they created the page ahead of the development as @JeromeTash suggests, and were discovered sooner that they expected.

JeromeTash

legendary

Activity: 2338

Merit: 1261

Heisenberg

Quote from: barnes13 on October 30, 2019, 07:33:24 AM

If the fake website from Exodus I can clearly see they put phishing on the program, but have you seen the fake website from Electrum? The link to download the file provided is exactly the same as the one on the original Electrum website: https://www.virustotal.com/gui/url/ba31287b8adf984730d6ff37f414e165d61dac7f3cb226b967d48262931fab48/detection

There is a also a possibility that they are still updating their website. If you look at the domain information, the domain is newly registered. Perhaps they are still planning to include their malicious files soon.

It's good that OP discovered the phishing sites very early.

Topic: [List] Phishing Cryptocurrency Site - page 15. (Read 11573 times)