Steps to check potential phising links

masulum

legendary

Activity: 2226

Merit: 1592

hmph..

Quote from: Baofeng on April 10, 2019, 02:15:47 PM

One thing I don't like about http://redirectdetective[dot]com is that it's not even secure,

As far as i know, browser give notification "not secure" is for all of website does not using SSL. even they are not a phishing sites, browser (chromium based) will give same notification. so, user can be aware about domain name with thats warning.

For all newbie member, in case you are forget to check website/link like this tutorials, i suggest you to install browser extension cryptonite by MetaCert. free version is available.

Code:

download: https://metacert.com/?utm_source=CryptoniteByMetaCert

nakamura12

hero member

Activity: 2268

Merit: 669

Bitcoin Casino Est. 2013

It is also possible to know the site for clickable sites except the shorten link. You can right click the clickable link and paste it on the other browser tab then you will be able to know the hidden link especially if your not using a computer where hidden links won't show unlike the computer where you just point the arrow to the clickable link and the link will be shown below as seen in the op. There is also a browser extension that blocked sites but it is not sugggested as browser extension may be harmful if installed. The safest thing to do is add the phishing links to the file host as stated in the op's final step.

jademaxsuy

full member

Activity: 924

Merit: 220

Nice one OP thank you for the wonderful information younhave shared. Yes, I have been a victim of phishing before with one of my online games account and had been careful enough to visit any sites to which it leads me.not to visit at all possible phishing sites I think.

Now that I have the idea on how to check possible phishing sites then for sure I can go visit sites and have the idea on identifying it if it is a possible phishing site. Thanks to this OP.

lobcmt2

full member

Activity: 462

Merit: 155

Quote from: Harlot on June 09, 2019, 02:50:45 PM

Knowing the URL link if it is a phishing site or not is just one of the first steps in identifying if it is one but surely it isn't enough. Some phishing links really do have a carbon copy of the real website and they also get a convincing domain name (if you aren't familiar with their real domain of the website) to come with it so really being an observant people and looking at security patches and logos is your only way of telling if its a phishing website or not.

Exactly. So, to avoid this, one of the best thing to do is using bookmark tools, that are available on browsers. I also wrote a guide about this months ago. Please check. [GUIDE] Using bookmark tool in browsers to mark bitcointalk topics/ posts

Harlot

hero member

Activity: 1806

Merit: 671

Quote from: ?? on ??

Woah these are very helpful actually I dont know about that second one "pointing the cursor" and you will see the link on the lower left corner. Grin

Knowing the URL link if it is a phishing site or not is just one of the first steps in identifying if it is one but surely it isn't enough. Some phishing links really do have a carbon copy of the real website and they also get a convincing domain name (if you aren't familiar with their real domain of the website) to come with it so really being an observant people and looking at security patches and logos is your only way of telling if its a phishing website or not.

lobcmt2

full member

Activity: 462

Merit: 155

Today, I saw another user mentioned about new phising site of blockchain.com, so please bookmark your most favorite sites, and be careful when you log in your accounts on blockchain.info to avoid get trapped by phising site.
WATCH OUT MALICIOUS BLOCKCHAIN.INFO WALLET PAGE!! (by wwzsocki)

jiten12344321

newbie

Activity: 259

Merit: 0

Thanks for such kind of information as i am a newbie i always get conflicted with phising links my friend lost his 2 ether when he get logged in into a phising link of idex.market and this topic will must help him to get rid of this problem. May i know is there any extention to filter out any phising link like ad-blocker ?

lobcmt2

full member

Activity: 462

Merit: 155

Quote from: GreatArkansas on April 14, 2019, 11:57:39 PM

There are also some browser's extensions that can prevent these kinds of phishing websites. You can install these kinds of browser extensions to extend your security browsing over the internet or use some website to identify if the particular website is included on some blacklist for suspected as a phishing site.
Check this out : [GUIDE] Use this for identifying Scam/Phishing/ Websites & Exchanges in Crypto

I added your topic into the SHOULD READ LIST in the OP, however I don't prefer to use browser's extensions because it will lead to another issues with potential harmful browser's extensions.
Personally, secure our devices by taking careful with all things we do when try connecting to Internet, sites, and so on are enough.
- Bookmarking all trusted, mostly used sites in browser.
- Don't visit unfamiliar sites.
- Don't hurry, and lazy too much to instantly double click / click on links and fall into traps.
- Don't be greedy with strange links that provides airdrops, bounties, give aways, and get trapped.
- Prepare more knowledge, and skills to secure our devices.
- Try to avoid visiting strange sites on mobile devices.

For all those things above, carefullness is the most important thing to keep us safe!
We can have a lot of knowledge, skillful, but if we are careless, we will get trapped some day.

GreatArkansas

legendary

Activity: 2282

Merit: 1344

Buy/Sell crypto at BestChange

There are also some browser's extensions that can prevent these kinds of phishing websites. You can install these kinds of browser extensions to extend your security browsing over the internet or use some website to identify if the particular website is included on some blacklist for suspected as a phishing site.
Check this out : [GUIDE] Use this for identifying Scam/Phishing/ Websites & Exchanges in Crypto

lobcmt2

full member

Activity: 462

Merit: 155

Quote from: Siren on April 11, 2019, 09:20:58 PM

https://bitcointalksearch.org/topic/crypto-scam-howto-protect-yourself-4264404
https://bitcointalksearch.org/topic/how-to-know-if-the-website-is-a-scam-there-you-find-it-4456502

Appreciated your contributions. I will check the contents and see which part of contents I can added to the OP.

Siren

sr. member

Activity: 826

Merit: 265

There is a thread created something like this before and i hope this can be added for reference also

https://bitcointalksearch.org/topic/crypto-scam-howto-protect-yourself-4264404

And another one is to find scam sites

https://bitcointalksearch.org/topic/how-to-know-if-the-website-is-a-scam-there-you-find-it-4456502

Hoping the threads is helpful for others and most importantly for newbies and those who love to browse via internet

jossiel

hero member

Activity: 2842

Merit: 625

Quote from: whotookmycrypto on April 10, 2019, 12:38:10 PM

Quote from: jossiel on April 10, 2019, 07:49:25 AM

Hey, I've been looking for a site like this. Thank you for sharing this site, this is really helpful. Phishers do really use link shortners to hide the real link they are sharing.

They will add some interesting captions and statements relative tovthe topic and at end they'll put that link.

No problem. If someone can point to a browser extension (firefox / chrome) that allows users to hover over a link and receive the eventual website address, do share on this forum. Would send merit your way. Haven't been able to find a plugin with that functionality, the rest all require copying and pasting of addresses which is a hassle.

Will do, if I've found an extension that this kind of function, I'll notify everyone here quickly. I understand what you are trying to convey and I felt that, we have to check it like the tutorial you have given and it consumes time.

Unlike hovering it to the link, you can already check what's the true link behind that shortener.

TryNinja

legendary

Activity: 2758

Merit: 6830

For most famous redirect website, you can just add a "+" (plus symbol) at the end of the URL and you'll go to a page where it shows everything about the redirection link (the final destination, clicks, stats, etc...).

Example:
https://bit.ly/2Vzd1C9+

khaled0111

legendary

Activity: 2520

Merit: 2853

Top Crypto Casino

Quote from: lobcmt2 on April 11, 2019, 01:30:14 PM

...
Not sure why Baofeng stated the site does not really secure. Did you get opinion of Baofeng?

Quote from: Baofeng on April 10, 2019, 02:15:47 PM

One thing I don't like about http://redirectdetective[dot]com is that it's not even secure,

I think because he is using http instead of https (BTW it was whotookmycrypto who mentioned it not Baofeng, sorry for that) Cheesy

There is nothing to fear, I just used virustotal to scan it and the result was 100% clean

lobcmt2

full member

Activity: 462

Merit: 155

Quote from: khaled0111 on April 11, 2019, 01:26:44 PM

There are many online tools that can be used to retrieve the target URL. All you have to do is to copy paste the shortened URL and you will get the original one.
Baofeng justr stated one of them which is redirectdetective.com and here is another one checkshorturl.com

In a summary, I got two potential sites for use:

Code:

redirectdetective.com
checkshorturl.com

Not sure why Baofeng stated the site does not really secure. Did you get opinion of Baofeng?

Quote from: Baofeng on April 10, 2019, 02:15:47 PM

One thing I don't like about http://redirectdetective[dot]com is that it's not even secure,

khaled0111

legendary

Activity: 2520

Merit: 2853

Top Crypto Casino

Quote from: Theb on April 10, 2019, 02:30:45 PM

...

There are many online tools that can be used to retrieve the target URL. All you have to do is to copy paste the shortened URL and you will get the original one.
Baofeng justr stated one of them which is redirectdetective.com and here is another one checkshorturl.com

Theb

hero member

Activity: 1680

Merit: 655

For people recommending on hovering on the potential phishing links, this will only work if the url itself is directly linked to the text. But for URL shorteners this trick won't work as they would only show you the url for the shortned website not the website link itself (try hovering on the shortened link posted by whotookmycrypto in the thread). So if you know that you are on a sketchy website or a strange person have given you a URL shortened link then you must be very cautious on looking at the various red flags seen on a phishing website because I myself personally won't even bite and click the link, I would rather search the official website instead in Google just to be safe.

r1s2g3

sr. member

Activity: 742

Merit: 395

I am alive but in hibernation.

Quote from: r1a2y3m4 on April 10, 2019, 01:31:51 PM

Please don't click what's below this, I only used this as an example.

Hover to this -> twitter.com. As you can see, the in human's eye is twitter.com but if you click it it will redirect you to another page(facebook.com). So, you need to hover on every file that you are suspecting.

I guess, I know about that but it slipped from my mind. I was wondering the same after reading OP that how I will check links that are not posted in this forum.

Quote from: Baofeng on April 10, 2019, 02:15:47 PM

One thing I don't like about http://redirectdetective[dot]com is that it's not even secure,

Still it look better option that going directly to the url shortened link.

Baofeng

legendary

Activity: 2576

Merit: 1655

One thing I don't like about http://redirectdetective[dot]com is that it's not even secure,

r1a2y3m4

full member

Activity: 504

Merit: 127

Match365> be a part of 150BTC inviting bonus

I just want to add an information to check if the link is a phishing link. One way to avoid that is to hover. When we say hover it is when you put your mouse over a file or a link and you can see the link to that file. Here's an example to it.

You can see the blue arrow, I hovered at bitcoin forum. And the link was showed at the lower left part(where the red arrow is pointing).

Please don't click what's below this, I only used this as an example.

Hover to this -> twitter.com. As you can see, the in human's eye is twitter.com but if you click it it will redirect you to another page(facebook.com). So, you need to hover on every file that you are suspecting.

Topic: Steps to check potential phising links (Read 681 times)