Author

Topic: To blockchain.info wallet users, Be aware of phishing sites (Read 1691 times)

hero member
Activity: 686
Merit: 500
Thanks for warning. Up to 99% I'm ising the app for iPhone from blockchain and this works very well.
legendary
Activity: 1524
Merit: 1001
NOBT - WNOBT your saving bank◕◡◕
I want to warn all blockchain.info users from a phishing site I saw today on google ads when I searched the word "blockchain", this scam site appears as the first result in the webpage as google show their ads at the top. the site is www dot blockchlan dot info , which of course a scam site that will steal your wallet identifier and password once you inter them and as you may notice, the domain has a very little difference (the letter i and l ) with the real site.
 
so before logging to your web wallet, make sure you are on the real blockchain.info website with https link.
Any one had visit this scam site?
sr. member
Activity: 434
Merit: 250
Good job mates, thanks for the informations, in addition it also good to check the green SSL of the blockchain before logging into your account.
hero member
Activity: 770
Merit: 500
Bazinga!

thank you for your info this is very important because people sometime not checking address bar when opening a site, 1 other way to keep safe maybe bookmark blockchain wallet link every want to login in wallet

Yeah I agree with you, putting the site in the bookmarks is better than searching on google and facing these kind of phishing sites


You can also notice this when u log in, the wallet id is always already showed if u login on the real one.
If you go to a phising site, then it will not be filed in automatically.

This depends on if the user is storing his browser cookies or not. I always browse in incognito mood so this difference will not work for me

Then u can make a file with the correct link in it and block all phising sites of blockchain.info

I am going to search for a few phising sites, so people will not fall for it.

you just need to check that green lock icon thingy that is on the left side of the address, in chrome it is a big green section saying "Blockchain Luxembourg S.A.R.L [LU]" that way you can be sure you are at the right place.
hero member
Activity: 714
Merit: 500
morir es descansar
Hmm, thak your for this advice. I saw yesterday a topic about someone that was hacked on Blockchain and lost 0.04 BTC. I don't know how this can happen if hacker doesn't have access to account identificator. I asked if someone know why maybe that guy was hacked, but the thread was deleted.

Thats how phishing works they will blinded you acting that you are logging in on your account to the real one to get your identificator but int he end you will notice that your not. Be warned
hero member
Activity: 1190
Merit: 525
CryptoTalk.Org - Get Paid for every Post!
Hmm, thak your for this advice. I saw yesterday a topic about someone that was hacked on Blockchain and lost 0.04 BTC. I don't know how this can happen if hacker doesn't have access to account identificator. I asked if someone know why maybe that guy was hacked, but the thread was deleted.
legendary
Activity: 1554
Merit: 1054
-snip-

Thank you very good for the information and good suggestion regarding getting saved by going through bookmark, recently my friend got his computer hacked by some site he downloaded the exe file and his computer got hacked throught that keylogger exe , he lost nearly 0.5 btc ,

Now a days their are so many hackers roaming in the cyber who are ready to steal if you do a single mistake.
Yes, account hacking are becoming most common events now a days. Avoiding untrusted downloads and running a latest antivirus kind of precautions would save us from these hacking. Most importantly online wallet users must do double checking always. They should not click any links even in this forum also.
legendary
Activity: 980
Merit: 1000
I don't see why people are still using online wallets these days. The only one that actually has a use is coinbase, as they pay your fees Grin


I currently use a Ledger wallet, but I've just ordered a case.

people still using those online wallets because they want to get access to their bitcoin anywhere without having to carry a laptop or a pc. so a web wallet will fulfill their needs
because online wallet easy to access as long there are internet connections you can use on it everywhere but might be disadvantages for online wallet is susceptible to be hacked but anyway thanks for warning us
hero member
Activity: 714
Merit: 500
morir es descansar
I don't see why people are still using online wallets these days. The only one that actually has a use is coinbase, as they pay your fees Grin


I currently use a Ledger wallet, but I've just ordered a case.

people still using those online wallets because they want to get access to their bitcoin anywhere without having to carry a laptop or a pc. so a web wallet will fulfill their needs



In that case, smartphone/tablet also can fulfill their needs.
Also, i think wallet apps in smartphone has better security than access online wallet and login.

Like what? Im using mycelium and so far so good i never had any problems but doesnt mean it is 100% safe to use id say
sr. member
Activity: 434
Merit: 250
Young but I'm not that bold
I don't see why people are still using online wallets these days. The only one that actually has a use is coinbase, as they pay your fees Grin


I currently use a Ledger wallet, but I've just ordered a case.

people still using those online wallets because they want to get access to their bitcoin anywhere without having to carry a laptop or a pc. so a web wallet will fulfill their needs

hero member
Activity: 714
Merit: 500
morir es descansar
I don't see why people are still using online wallets these days. The only one that actually has a use is coinbase, as they pay your fees Grin


I currently use a Ledger wallet, but I've just ordered a case.


Because some online wallets are used to cash in and cash out like in my place there is no other better way to convert your btc to fiat than the online wallet's offer. But this site is 2 years running until now
legendary
Activity: 1134
Merit: 1000
Soon, I have to go away.
Blockchaln.info is currently hosted at Maersk Holding Bv. This domain is connected to IP address 139.162.15.98 which is hosted on a server that appears to be located in Rotterdam, Netherlands.

Domain Hoster:   Maersk Holding Bv
IP Owner:   Maersk Holding Bv
Server Location:   Rotterdam, Netherlands
Server GEO Location:   51°55'21" North, 4°28'45.012" West [show on google maps]
Domain IP:   139.162.15.98
Domain IP Long:   2342653794
Binary IP:   10001011101000100000111101100010
IP Hostname:   li857-98.members.linode.com


Forgot to add this earlier, so they hide twice it seems.
139.162.15.98
Host:   li857-98.members.linode.com
Country: is Singapore
hero member
Activity: 539
Merit: 500
Good to know, thanks for the warning man
legendary
Activity: 938
Merit: 1002
I don't see why people are still using online wallets these days. The only one that actually has a use is coinbase, as they pay your fees Grin


I currently use a Ledger wallet, but I've just ordered a case.
legendary
Activity: 1134
Merit: 1000
Soon, I have to go away.
W3bin.com Chrome extension Grin
legendary
Activity: 3094
Merit: 1472
Thanks for awaring about the phising sites.Really appreciate it 👏👏 .I think by this time most of bitcoin users should be aware of such things like phising and all and should also be aware about some security measures as well.Anyway really appreciate OP's work of coming forward and letting us know about it.

Update:I searched up again from google but it is not showing.I guess google removed it
legendary
Activity: 1232
Merit: 1017
Blockchaln.info is currently hosted at Maersk Holding Bv. This domain is connected to IP address 139.162.15.98 which is hosted on a server that appears to be located in Rotterdam, Netherlands.

Domain Hoster:   Maersk Holding Bv
IP Owner:   Maersk Holding Bv
Server Location:   Rotterdam, Netherlands
Server GEO Location:   51°55'21" North, 4°28'45.012" West [show on google maps]
Domain IP:   139.162.15.98
Domain IP Long:   2342653794
Binary IP:   10001011101000100000111101100010
IP Hostname:   li857-98.members.linode.com
How did u get the real information?
Also we could do a DOS attack on this site untill Google shuts it down.
legendary
Activity: 1190
Merit: 1002

thank you for your info this is very important because people sometime not checking address bar when opening a site, 1 other way to keep safe maybe bookmark blockchain wallet link every want to login in wallet

Yeah I agree with you, putting the site in the bookmarks is better than searching on google and facing these kind of phishing sites

Has there been a case of theft related to the site ?
This is really dangerous because the site occupies the top position in the search engine google if not careful someone could be fooled
This should be reported to the blockchain.info or google

There are many hack attempt to blockchain.info everyday and there are some cases where users funds had been stolen.
The most famous case is where a hacker returned 267BTC, source

Also, in past they have many bugs such as flaws when make a new address through mobile apps.

Thank you very good for the information and good suggestion regarding getting saved by going through bookmark, recently my friend got his computer hacked by some site he downloaded the exe file and his computer got hacked throught that keylogger exe , he lost nearly 0.5 btc ,

Now a days their are so many hackers roaming in the cyber who are ready to steal if you do a single mistake.
legendary
Activity: 1134
Merit: 1000
Soon, I have to go away.
Blockchaln.info is currently hosted at Maersk Holding Bv. This domain is connected to IP address 139.162.15.98 which is hosted on a server that appears to be located in Rotterdam, Netherlands.

Domain Hoster:   Maersk Holding Bv
IP Owner:   Maersk Holding Bv
Server Location:   Rotterdam, Netherlands
Server GEO Location:   51°55'21" North, 4°28'45.012" West [show on google maps]
Domain IP:   139.162.15.98
Domain IP Long:   2342653794
Binary IP:   10001011101000100000111101100010
IP Hostname:   li857-98.members.linode.com
hero member
Activity: 714
Merit: 528
I have contacted google about the phising site: http://www.google.com/safebrowsing/static/submit_success.html?hl=en
I hope they will block the site very quick, and remove it from their ads. I entered the fake site, and u can see that now new transactions are appearing, so that is also a way to see it.
Nice of you Wink
Google is usually quick about phishing websites and should be removed any time soon
Though this doesn't change the fact that many phishing website are appearing everyday Sad
Solution for this to not use blockchain wallet so we don't grabbed by blockchain phishing website Tongue
legendary
Activity: 1232
Merit: 1017
Here is some info from who is lookup of the phising site, of course it has been protected by a guard, so most of it will make no sense Sad

I hope we can take it down somehow, I contacted google already about this, see what they will do.

Domain Name: BLOCKCHALN.INFO
Domain ID: D55920347-LRMS
WHOIS Server:
Referral URL: http://www.godaddy.com
Updated Date: 2015-11-10T20:30:17Z
Creation Date: 2015-09-11T04:00:26Z
Registry Expiry Date: 2016-09-11T04:00:26Z
Sponsoring Registrar: GoDaddy.com, LLC
Sponsoring Registrar IANA ID: 146
Domain Status: ok https://icann.org/epp#ok
Registrant ID: CR204243759
Registrant Name: Registration Private
Registrant Organization: Domains By Proxy, LLC
Registrant Street: DomainsByProxy.com
Registrant Street: 14747 N Northsight Blvd Suite 111, PMB 309
Registrant City: Scottsdale
Registrant State/Province: Arizona
Registrant Postal Code: 85260
Registrant Country: US
Registrant Phone: +1.4806242599
Registrant Phone Ext:
Registrant Fax: +1.4806242598
Registrant Fax Ext:
Registrant Email:
Admin ID: CR204243761
Admin Name: Registration Private
Admin Organization: Domains By Proxy, LLC
Admin Street: DomainsByProxy.com
Admin Street: 14747 N Northsight Blvd Suite 111, PMB 309
Admin City: Scottsdale
Admin State/Province: Arizona
Admin Postal Code: 85260
Admin Country: US
Admin Phone: +1.4806242599
Admin Phone Ext:
Admin Fax: +1.4806242598
Admin Fax Ext:
Admin Email:
Tech ID: CR204243760
Tech Name: Registration Private
Tech Organization: Domains By Proxy, LLC
Tech Street: DomainsByProxy.com
Tech Street: 14747 N Northsight Blvd Suite 111, PMB 309
Tech City: Scottsdale
Tech State/Province: Arizona
Tech Postal Code: 85260
Tech Country: US
Tech Phone: +1.4806242599
Tech Phone Ext:
Tech Fax: +1.4806242598
Tech Fax Ext:
Tech Email:
Billing ID: CR204243762
Billing Name: Registration Private
Billing Organization: Domains By Proxy, LLC
Billing Street: DomainsByProxy.com
Billing Street: 14747 N Northsight Blvd Suite 111, PMB 309
Billing City: Scottsdale
Billing State/Province: Arizona
Billing Postal Code: 85260
Billing Country: US
Billing Phone: +1.4806242599
Billing Phone Ext:
Billing Fax: +1.4806242598
Billing Fax Ext:
Billing Email:
Name Server: A.DNSPOD.COM
Name Server: B.DNSPOD.COM
Name Server: C.DNSPOD.COM
DNSSEC: unsigned
legendary
Activity: 1134
Merit: 1000
Soon, I have to go away.
I stopped bookmarking, as this too can also be a danger, as hackers who get into your computer can read your browser cache and passwords.

I now have my wallets backed up offline, on a plug n play hard drive.
Only switch it on when making transactions.

You could always put your wallets/details on a usb stick.
legendary
Activity: 1232
Merit: 1017
I have contacted google about the phising site: http://www.google.com/safebrowsing/static/submit_success.html?hl=en
I hope they will block the site very quick, and remove it from their ads. I entered the fake site, and u can see that now new transactions are appearing, so that is also a way to see it.
legendary
Activity: 1148
Merit: 1006
Black Panther
To prevent this, I'm usually bookmark the real one so I'm never re-search again to prevent this happening...
So once I'm bookmark for it, i'm just click and will not worried for clicking the fake one
hero member
Activity: 2856
Merit: 644
https://duelbits.com/

thank you for your info this is very important because people sometime not checking address bar when opening a site, 1 other way to keep safe maybe bookmark blockchain wallet link every want to login in wallet

Yeah I agree with you, putting the site in the bookmarks is better than searching on google and facing these kind of phishing sites

Has there been a case of theft related to the site ?
This is really dangerous because the site occupies the top position in the search engine google if not careful someone could be fooled
This should be reported to the blockchain.info or google
legendary
Activity: 1232
Merit: 1017

thank you for your info this is very important because people sometime not checking address bar when opening a site, 1 other way to keep safe maybe bookmark blockchain wallet link every want to login in wallet

Yeah I agree with you, putting the site in the bookmarks is better than searching on google and facing these kind of phishing sites


You can also notice this when u log in, the wallet id is always already showed if u login on the real one.
If you go to a phising site, then it will not be filed in automatically.

This depends on if the user is storing his browser cookies or not. I always browse in incognito mood so this difference will not work for me

Then u can make a file with the correct link in it and block all phising sites of blockchain.info

I am going to search for a few phising sites, so people will not fall for it.
sr. member
Activity: 434
Merit: 250
Young but I'm not that bold

thank you for your info this is very important because people sometime not checking address bar when opening a site, 1 other way to keep safe maybe bookmark blockchain wallet link every want to login in wallet

Yeah I agree with you, putting the site in the bookmarks is better than searching on google and facing these kind of phishing sites


You can also notice this when u log in, the wallet id is always already showed if u login on the real one.
If you go to a phising site, then it will not be filed in automatically.

This depends on if the user is storing his browser cookies or not. I always browse in incognito mood so this difference will not work for me
sr. member
Activity: 619
Merit: 250
I want to warn all blockchain.info users from a phishing site I saw today on google ads when I searched the word "blockchain", this scam site appears as the first result in the webpage as google show their ads at the top. the site is www dot blockchlan dot info , which of course a scam site that will steal your wallet identifier and password once you inter them and as you may notice, the domain has a very little difference (the letter i and l ) with the real site.
 
so before logging to your web wallet, make sure you are on the real blockchain.info website with https link.
thank you for your info this is very important because people sometime not checking address bar when opening a site, 1 other way to keep safe maybe bookmark blockchain wallet link every want to login in wallet
legendary
Activity: 1232
Merit: 1017
I want to warn all blockchain.info users from a phishing site I saw today on google ads when I searched the word "blockchain", this scam site appears as the first result in the webpage as google show their ads at the top. the site is www dot blockchlan dot info , which of course a scam site that will steal your wallet identifier and password once you inter them and as you may notice, the domain has a very little difference (the letter i and l ) with the real site.
 
so before logging to your web wallet, make sure you are on the real blockchain.info website with https link.
You can also notice this when u log in, the wallet id is always already showed if u login on the real one.
If you go to a phising site, then it will not be filed in automatically.
sr. member
Activity: 434
Merit: 250
Young but I'm not that bold
I want to warn all blockchain.info users from a phishing site I saw today on google ads when I searched the word "blockchain", this scam site appears as the first result in the webpage as google show their ads at the top. the site is www dot blockchlan dot info , which of course a scam site that will steal your wallet identifier and password once you inter them and as you may notice, the domain has a very little difference (the letter i and l ) with the real site.
 
so before logging to your web wallet, make sure you are on the real blockchain.info website with https link.
Jump to: