Warning: Bustabit phishing site | Bitcointalksearch.org

Dave1

hero member

Activity: 1414

Merit: 542

New phishing site:

Code:

https://bustabjt.com/

Archive: https://archive.is/lfO1n

Whois info:

Quote

Whois Record for BustaBjt.com
How does this work?
Domain Profile
Registrant    WhoisGuard Protected
Registrant Org    WhoisGuard, Inc.
Registrant Country    pa
Registrar    NAMECHEAP INC NameCheap, Inc.
IANA ID: 1068
URL: http://www.namecheap.com
Whois Server: whois.namecheap.com

(p)
Registrar Status    addPeriod, clientTransferProhibited
Dates    10 days old
Created on 2020-12-17
Expires on 2021-12-17
Updated on 0000-12-31

Name Servers    DNS1.NAMECHEAPHOSTING.COM (has 995,981 domains)
DNS2.NAMECHEAPHOSTING.COM (has 995,981 domains)


Tech Contact    WhoisGuard Protected
WhoisGuard, Inc.
P.O. Box 0823-03411,
Panama, Panama, pa

(p) (f)
IP Address    104.219.248.115 - 1,840 other sites hosted on this server

Dave1

hero member

Activity: 1414

Merit: 542

Good news, the first site has been taken down already.

Quote

PublicDomainRegistry.com <[email protected]>

Sun, Dec 13, 9:13 PM (2 days ago)

Hello,

Please note, we have reviewed your complaint and have suspended the reported domain name(s).

Feel free to contact us if you have any further queries.

Regards,
Abuse Mitigation Team
PublicDomainRegistry

As for the second site, I have received an email that it was taken down, but I can still access it so I may have to make a second email to call their attention again.

ScamViruS

hero member

Activity: 1876

Merit: 721

Top Crypto Casino

Quote from: cutesgirl on December 14, 2020, 01:50:16 PM

Phishing site creation seems to be gaining in popularity. You should see from the domain that something is wrong.
No doubt will be many more of these sites. Good job for the warning and posting guys.

The tendency to target a certain amount of users by creating phishing websites has now increased. They are trying to confuse crypto users by using the name of each popular platform. To stop their activities like this, we must resist their every effort.

Op has done a good job posting this phishing website here, which will be helpful for many new crypto users.

cutesgirl

sr. member

Activity: 938

Merit: 251

Phishing site creation seems to be gaining in popularity. You should see from the domain that something is wrong.
No doubt will be many more of these sites. Good job for the warning and posting guys.

Dave1

hero member

Activity: 1414

Merit: 542

I found another one:

Code:

https://bustabìt.com/
xn--bustabt-4ya.com

Archived: https://archive.is/SJ4T3

Quote

Registrant    WhoisGuard Protected
Registrant Org    WhoisGuard, Inc.
Registrant Country    pa
Registrar    NAMECHEAP INC NameCheap, Inc.
IANA ID: 1068
URL: http://www.namecheap.com
Whois Server: whois.namecheap.com

(p)
Registrar Status    clientTransferProhibited
Dates    70 days old
Created on 2020-10-04
Expires on 2021-10-04
Updated on 0000-12-31

(p) (f)
IP Address    104.27.166.63 - 552 other sites hosted on this server

aomakun

sr. member

Activity: 1020

Merit: 253

JangaCams.com

In any case, the domain will be discontinued from 17 December. Yet you can still scam a lot of people in 4 days, unfortunately. Let's hope it will be December 17th soon. It is understandable that they do not just take any domain off the air immediately

imutlinda

sr. member

Activity: 926

Merit: 256

I also saw this post in the gambling section before. Sad that the circles keep trying. The only question is which thread to post it to, would be best in both, if allowed? Then you can reach people via 2 channels to warn.

Fredomago

legendary

Activity: 2996

Merit: 1054

Leading Crypto Sports Betting & Casino Platform

Quote from: nykka on December 12, 2020, 07:09:07 PM

Unfortunately phishing sites are often appear in the Internet. In most cases deceivers want to steal our accounts. And it`s very often when we log in the account and don`t check link of the site. To avoid phishing sites I just add trusted sites to the bookmarks starting from wallets and exchnages and ending casinos and sites where I make bets

Hackers always trying to catch up with those people who are un-careful not doing their job in making sure that they are visiting the right sites to deal their business, they mostly being penetrated without their knowledge, stealing their account information and messed up with their assets / belongings online.

Best to always check and be aware of those many phishing sites out there and keep yourself updated, bookmarking
the sites that you always use also helps avoiding those hackers.

Jawhead999

legendary

Activity: 1834

Merit: 1208

Quote from: Zackgeno96 on December 13, 2020, 07:50:17 AM

Quote from: nykka on December 12, 2020, 07:09:07 PM

Unfortunately phishing sites are often appear in the Internet. In most cases deceivers want to steal our accounts. And it`s very often when we log in the account and don`t check link of the site. To avoid phishing sites I just add trusted sites to the bookmarks starting from wallets and exchnages and ending casinos and sites where I make bets

That's actually a good practice to bookmark websites or put them in the trusted websites I think this should be a habit of every internet users to avoid landing to phishing websites like this, isn't?

Bookmarking a website is good option to prevent from phishing, but it will be better if you not use Google and install Adblock. Because if you search any kind service or project using Google, it will show phishing sites first since they paid ads.

IMO this thread should be moved to scam accusations section.

fortunecrypto

legendary

Activity: 2450

Merit: 1047

Quote from: Dave1 on December 12, 2020, 08:20:33 AM

I already got a official response from one of my emails:

Quote

Servicedesk (Openprovider)

Dec 12, 2020, 12:23 GMT+1

Dear Sir, Madam,

Thank you for the notification.

We have informed the reseller about your complaint and he will investigate this issue. If we do not receive any update from them, we will suspend the domain after 2020-12-17 12:23:09 CET and it will stop working.

Please, check this article about abuse procedure in order to know more about the responsibilities of the registrar: https://support.openprovider.eu/hc/en-us/articles/360001725008-Reporting-abuse.

Have a nice day.
Kind regards,
Abuse Team

Max day that we will see the site suspended is on December 17. So I do hope that from this time and up to December 17, no one will fall for this trap.

That's still 4 days and if they make aggressive promotion, they can still victimize people, at least we have this thread here, and hopefully, those who are interested to invest in this gambling site they will do research and find this thread so they can save themselves,
it's better to create another one in the scam section for reference.

Hippocrypto

sr. member

Activity: 1484

Merit: 277

Quote from: Zackgeno96 on December 13, 2020, 07:50:17 AM

Quote from: nykka on December 12, 2020, 07:09:07 PM

Unfortunately phishing sites are often appear in the Internet. In most cases deceivers want to steal our accounts. And it`s very often when we log in the account and don`t check link of the site. To avoid phishing sites I just add trusted sites to the bookmarks starting from wallets and exchnages and ending casinos and sites where I make bets

That's actually a good practice to bookmark websites or put them in the trusted websites I think this should be a habit of every internet users to avoid landing to phishing websites like this, isn't?

Hopefully most users would think of this mindset, unfortunately only few of them set this up as an optional actions. Precautionary measures is really a safe method of filtration towards unknown and danger sites, particular to phising sites who've used the names of popular gambling sites.
I would recommend users to verify the gambling site before registration, and if confirmed then you're safe to access their services.

btc_angela

hero member

Activity: 2660

Merit: 551

Quote from: Zackgeno96 on December 13, 2020, 07:50:17 AM

Quote from: nykka on December 12, 2020, 07:09:07 PM

Unfortunately phishing sites are often appear in the Internet. In most cases deceivers want to steal our accounts. And it`s very often when we log in the account and don`t check link of the site. To avoid phishing sites I just add trusted sites to the bookmarks starting from wallets and exchnages and ending casinos and sites where I make bets

That's actually a good practice to bookmark websites or put them in the trusted websites I think this should be a habit of every internet users to avoid landing to phishing websites like this, isn't?

Yeah it should be a habit, but we really don't know if majority are really practicing or not, or just typing the site or doing some Google search which is very bad as this criminals might pay Google to pay an ads on top of the real website, thus making someone get phished.

So it's a safety precautions, or shall a say to really do safe practice by bookmarking our favourite sites we visited not just bustabit, but everything related to our crypto activities, i.e online wallets.

Zackgeno96

hero member

Activity: 1778

Merit: 520

Quote from: nykka on December 12, 2020, 07:09:07 PM

Unfortunately phishing sites are often appear in the Internet. In most cases deceivers want to steal our accounts. And it`s very often when we log in the account and don`t check link of the site. To avoid phishing sites I just add trusted sites to the bookmarks starting from wallets and exchnages and ending casinos and sites where I make bets

That's actually a good practice to bookmark websites or put them in the trusted websites I think this should be a habit of every internet users to avoid landing to phishing websites like this, isn't?

Jating

hero member

Activity: 2842

Merit: 772

Quote from: Dave1 on December 12, 2020, 08:20:33 AM

I already got a official response from one of my emails:

Quote

Servicedesk (Openprovider)

Dec 12, 2020, 12:23 GMT+1

Dear Sir, Madam,

Thank you for the notification.

We have informed the reseller about your complaint and he will investigate this issue. If we do not receive any update from them, we will suspend the domain after 2020-12-17 12:23:09 CET and it will stop working.

Please, check this article about abuse procedure in order to know more about the responsibilities of the registrar: https://support.openprovider.eu/hc/en-us/articles/360001725008-Reporting-abuse.

Have a nice day.
Kind regards,
Abuse Team

Max day that we will see the site suspended is on December 17. So I do hope that from this time and up to December 17, no one will fall for this trap.

Why it took too long to make the decision though, it's pretty obvious that this is a phishing and malicious site. Although they have their processes here, I respect that, but they should make this a priority, a 3 day window is already long in my opinion (after you file the case).

Anyhow, both of the sites are still active at this point. Again, it's good that you have posted it here so that everyone should be aware of it and I also found your post in their official ANN thread so they may also something on their side to bring this site down.

nykka

member

Activity: 252

Merit: 11

Unfortunately phishing sites are often appear in the Internet. In most cases deceivers want to steal our accounts. And it`s very often when we log in the account and don`t check link of the site. To avoid phishing sites I just add trusted sites to the bookmarks starting from wallets and exchnages and ending casinos and sites where I make bets

Lanatsa

hero member

Activity: 2968

Merit: 687

Quote from: fiulpro on December 12, 2020, 03:27:11 PM

This is really good what you did right now , since we have a lot of people who might just directly search on the Google instead of going to the real website through the bookmarks or even the signatures. At least this time hackers tried to go through th effort of replicating the whole site , I found something weird on the internet also

Common problem for most people specially who do try to find up things through google search will really most likely experienced these kind of phishing situation.

Ever in my life had victimized with phishing because I always memorize the domain name on a site which I do tend to deal with.When on the times that Im in doubt then
that's the time I do make some verification.

Phishing attempts isn't something new that's why we should really be careful.

fiulpro

hero member

Activity: 1890

Merit: 831

This is really good what you did right now , since we have a lot of people who might just directly search on the Google instead of going to the real website through the bookmarks or even the signatures. At least this time hackers tried to go through th effort of replicating the whole site , I found something weird on the internet also
https://bustabit.gb.net/

Quote

bustabit.gb.net
****whois information****

Registrar Info
Name
NAMECHEAP INC
Whois Server
whois.namecheap.com
Referral URL
http://www.namecheap.com
Status
addPeriod https://icann.org/epp#addPeriod
clientTransferProhibited https://icann.org/epp#clientTransferProhibited
serverTransferProhibited https://icann.org/epp#serverTransferProhibited
Important Dates
Expires On
2021-12-08
Registered On
2020-12-08
Updated On
0001-01-01
Name Servers
dns1.namecheaphosting.com
156.154.132.200
dns2.namecheaphosting.com
156.154.133.200

This is really weird , the website is from Germany and apparently registered in panama , wait till you see their email address.

Now the problem is , apparently this website paid for their advertising, therefore they show up at the top whenever you try and search the normal website on google.

Now they are not actually the gaming website but they are trying to get clients through the name bustabit , when you open they have named their website bustta bit ... That's really funny for me , much like adidas and abibas ...

Now I don't know if things like these are allowed.

Much like :

But even though this is not gambling related website they are trying to use company's name.. that's sad tho , is this allowed ??

wxa7115

hero member

Activity: 2814

Merit: 734

Bitcoin is GOD

This is a very good find and I congratulate the OP for sharing this with the community, sometimes some other users may notice a phishing site and simply ignore it thinking no one is ever going to fall for it, but for the ones that have not been in the market as long as we have there is a real risk of being scammed by these people.

So I urge anyone that finds similar websites to share that with the community as it is the only way we have to reduce the number of scams in the market is by reporting the scammers so they do not get any profits out of this.

tbterryboy

sr. member

Activity: 2030

Merit: 323

Good catch and I actually saw a similar one here https://bitcointalksearch.org/topic/--5295450 it is really alarming how many scam sites are there now days and I think the only way to avoid these is either by bookmarking the websites you play or just enter the url directly because these scam sites are on the top of results on google so anyone can fall for it.

Quote from: Dave1 on December 12, 2020, 08:20:33 AM

Max day that we will see the site suspended is on December 17. So I do hope that from this time and up to December 17, no one will fall for this trap.

I hope that's true and it is removed.

Hopefully no one felt for this scam because players who play at bustabit must enter the url directly I mean why would anyone search google for the sites they already play at and if someone is registering then I think they can't get scammed so hopefully no damage done.

Harlot

hero member

Activity: 1806

Merit: 672

Quote from: Dave1 on December 12, 2020, 08:20:33 AM

I already got a official response from one of my emails:

Quote

Servicedesk (Openprovider)

Dec 12, 2020, 12:23 GMT+1

Dear Sir, Madam,

Thank you for the notification.

We have informed the reseller about your complaint and he will investigate this issue. If we do not receive any update from them, we will suspend the domain after 2020-12-17 12:23:09 CET and it will stop working.

Please, check this article about abuse procedure in order to know more about the responsibilities of the registrar: https://support.openprovider.eu/hc/en-us/articles/360001725008-Reporting-abuse.

Have a nice day.
Kind regards,
Abuse Team

Max day that we will see the site suspended is on December 17. So I do hope that from this time and up to December 17, no one will fall for this trap.

Wow domain hosters actually do this kind of things? Or maybe it depends on the domain hosting services that depend if they will suspend the website or not. Phishing sites or scam websites are mostly created using namecheap and I haven't seen them do any kind of action when it comes to suspending websites maybe that is why a lot of scammers are using it because aside from the accepting cryptocurrencies I think they don't care what kind of content you have in your website as long as you are paying them.

sunsilk

hero member

Activity: 3038

Merit: 634

Quote from: kamadazje on December 12, 2020, 12:28:07 PM

What a greedy scammer, they almost copied the name and if the players will not be careful there is a big chance that they will fall to this kind of phishing site especially if they will hurry in logging in without checking carefully the details.

For bustabit players, it will be good if they will bookmark the website link so they can avoid using this phishing site knowing that we are only human and we are prone to mistakes. An extra i is the difference of their website link and if you will not carefully check it you will surely fall to the hands of the scammers. They almost copied everything in the landing page aside from the photo at the bottom of the page that is not displaying correctly in phishing site.

There will be actual victims that would just come out when they just use google search for searching one website. This is a very common strategy of these scammers and targets newbies that are careful how they browse on the web with the popular websites that they visit like bustabit. It also appears that there are phishing exchanges that everyone should be careful of.

Quote from: Dave1 on December 12, 2020, 08:20:33 AM

I already got a official response from one of my emails:
~snip~
Max day that we will see the site suspended is on December 17. So I do hope that from this time and up to December 17, no one will fall for this trap.

Good job OP! I hope that they'll action on it as soon as possible so that nobody would see the phishing link anymore.

kamadazje

jr. member

Activity: 209

Merit: 3

What a greedy scammer, they almost copied the name and if the players will not be careful there is a big chance that they will fall to this kind of phishing site especially if they will hurry in logging in without checking carefully the details.

For bustabit players, it will be good if they will bookmark the website link so they can avoid using this phishing site knowing that we are only human and we are prone to mistakes. An extra i is the difference of their website link and if you will not carefully check it you will surely fall to the hands of the scammers. They almost copied everything in the landing page aside from the photo at the bottom of the page that is not displaying correctly in phishing site.

Zackgeno96

hero member

Activity: 1778

Merit: 520

Quote from: Dave1 on December 12, 2020, 08:20:33 AM

I already got a official response from one of my emails:

Quote

Servicedesk (Openprovider)

Dec 12, 2020, 12:23 GMT+1

Dear Sir, Madam,

Thank you for the notification.

We have informed the reseller about your complaint and he will investigate this issue. If we do not receive any update from them, we will suspend the domain after 2020-12-17 12:23:09 CET and it will stop working.

Please, check this article about abuse procedure in order to know more about the responsibilities of the registrar: https://support.openprovider.eu/hc/en-us/articles/360001725008-Reporting-abuse.

Have a nice day.
Kind regards,
Abuse Team

Max day that we will see the site suspended is on December 17. So I do hope that from this time and up to December 17, no one will fall for this trap.

That's great, It was nice to see players cooperating with each other to share this kind of information and help the casinos to report phishing website like this. I've seen a lot of phishing website closed already thanks to the bitcointalk community.

Raflesia

hero member

Activity: 2282

Merit: 560

_""""Duelbits""""_

Quote from: Baofeng on December 11, 2020, 06:12:15 PM

Quote from: Lavander on December 11, 2020, 06:57:28 AM

Before there was Roobet and now Bustabit, I think scammers are targeting to copy known casino's website and get the credentials. This could be really dangerous for players who are not aware of the website and doesn't bother time checking the URL mostly are newbies luckily the OP managed to spot this website.

For obvious reasons, there could be two set of scammers here, and we have groups that specifically target crypto related online games and perhaps there's also targeted fiat online games as well. And also, there's a lot of money involved that's why scammers will make their way into created similar looking sites to trap their victims. The Roobet find and this one is just a tip of the iceberg, there could be more that we need to discover and reported.

Well there will be many more phishing sites that will copy well-known gambling sites because the group believes that with the target of big gambling sites they can make more money, therefore we have to be careful, especially in that URL which is very important, because the scamer will infiltrate where I put it the phishing link.
I saw only 2 well-known sites that were plagiarized by scammers so indeed this possibility can continue and increase which we will find later.

Dave1

hero member

Activity: 1414

Merit: 542

I already got a official response from one of my emails:

Quote

Servicedesk (Openprovider)

Dec 12, 2020, 12:23 GMT+1

Dear Sir, Madam,

Thank you for the notification.

We have informed the reseller about your complaint and he will investigate this issue. If we do not receive any update from them, we will suspend the domain after 2020-12-17 12:23:09 CET and it will stop working.

Please, check this article about abuse procedure in order to know more about the responsibilities of the registrar: https://support.openprovider.eu/hc/en-us/articles/360001725008-Reporting-abuse.

Have a nice day.
Kind regards,
Abuse Team

Max day that we will see the site suspended is on December 17. So I do hope that from this time and up to December 17, no one will fall for this trap.

ufaiz50

hero member

Activity: 1666

Merit: 502

Thanks for reporting here, credits. I am not an active player on the site myself, but now others can be prevented from playing there.
You really see a lot of those phishing sites. That's the official name if I am not mistaken?

coin-investor

hero member

Activity: 3024

Merit: 614

Leading Crypto Sports Betting & Casino Platform

It's ok to have a thread about Bustabit here and another one in the scam section, this is for gamblers awareness, here, Bustabit is a very popular gambling site and every popular gambling site are targeted for phishing we will see more phishing site on popular gambling site so we should be aware of it and be knowledgeable on the difference between a true site and a phishing site.

virasog

legendary

Activity: 3136

Merit: 1172

Leading Crypto Sports Betting & Casino Platform

Quote from: Dave1 on December 10, 2020, 07:00:38 AM

I'm just giving the community a heads-up because I've research and found bustabit.com phishing site.

Good finding. Other then reporting here can we also report somewhere else so that the site is taken down ?
We know that this site is scam but many who do not follow bitcointalk or gamblers who directly visits the site may get scammed. Maybe its time that trusted gambling site start to introduce 2fa.

msarro

hero member

Activity: 788

Merit: 505

Quote from: Dave1 on December 12, 2020, 06:18:00 AM

Quote from: msarro on December 12, 2020, 05:17:55 AM

Was the website already down? If not what could be the ways or things we can do to turn down the website? Is there a way we could report it to the domain provider or the likes? I think as a player of Bustabit I have a responsibility to report this kind of website so it won't deceive others.

I have reported it to their respective domain registrar.

Quote

PublicDomainRegistry.com <[email protected]>

Thank you for reaching out to us. Our Team is working on your request and will get back to you within 48 hours.

Subject: Phishing - https://bustabiit.com/

Case Number : 28084354

If others wanted to report, here is the link:

https://publicdomainregistry.com/phishing/
https://abuse.registrar.eu/

This is a big help thanks for sharing! I'll report them too so they would know that it's an important case.

Dave1

hero member

Activity: 1414

Merit: 542

Quote from: msarro on December 12, 2020, 05:17:55 AM

Was the website already down? If not what could be the ways or things we can do to turn down the website? Is there a way we could report it to the domain provider or the likes? I think as a player of Bustabit I have a responsibility to report this kind of website so it won't deceive others.

I have reported it to their respective domain registrar.

Quote

PublicDomainRegistry.com <[email protected]>

Thank you for reaching out to us. Our Team is working on your request and will get back to you within 48 hours.

Subject: Phishing - https://bustabiit.com/

Case Number : 28084354

If others wanted to report, here is the link:

https://publicdomainregistry.com/phishing/
https://abuse.registrar.eu/

Chikito

legendary

Activity: 2366

Merit: 2054

Quote from: msarro on December 12, 2020, 05:17:55 AM

Was the website already down? If not what could be the ways or things we can do to turn down the website? Is there a way we could report it to the domain provider or the likes?

need much time to take down the phishing, I was reported into https://safebrowsing.google.com/safebrowsing/report_phish/?hl=en you should also do that for quick response by Google.

Another way to take down the phishing is reporting into the provider domain, in this case, first phishing uses the public domain register, so report it to https://publicdomainregistry.com/phishing/.

Quote from: imutlinda on December 12, 2020, 05:39:05 AM

It is very good that people are alert and report this quickly on the site so that users can be warned.

you should report it also, it will be fast to take down if many people also report it.

imutlinda

sr. member

Activity: 926

Merit: 256

You see nowadays that more and more criminals engage in this type of practice. It is very good that people are alert and report this quickly on the site so that users can be warned.

msarro

hero member

Activity: 788

Merit: 505

Was the website already down? If not what could be the ways or things we can do to turn down the website? Is there a way we could report it to the domain provider or the likes? I think as a player of Bustabit I have a responsibility to report this kind of website so it won't deceive others.

Chikito

legendary

Activity: 2366

Merit: 2054

Quote from: Dave1 on December 10, 2020, 07:00:38 AM

(1)

Code:

https://bustabiit.com/

(2)

Code:

https://bùstabit.com/
xn--bstabit-y1a.com

both site already listed on dnstwister; https://dnstwister.report/search?ed=62757374616269742e636f6d

I suggest to the owner to subscribing, so when a scammer creates a new similar, the sounds will alerting to take and look immediately. ( I don't a part of dnstwister)

Quote from: Dave1 on December 10, 2020, 07:00:38 AM

Quote

IP Address 2.57.89.12 - 167 other sites hosted on this server

IP Relationship; https://www.virustotal.com/gui/ip-address/2.57.89.12/relations

Fake BNB Giveaway.

Quote from: Dave1 on December 10, 2020, 07:00:38 AM

Quote

IP Address 185.224.138.89 - 153 other sites hosted on this server

IP Relationship; https://www.virustotal.com/gui/ip-address/185.224.138.89/relations

phishing Buslabiit

Both IP should be tagged as a scammer

Quote from: Lavander on December 11, 2020, 06:57:28 AM

..I think scammers are targeting to copy known casino's website and get the credentials. .

For sure, to take over your Bitcoin.

Baofeng

legendary

Activity: 2576

Merit: 1655

Quote from: Lavander on December 11, 2020, 06:57:28 AM

Before there was Roobet and now Bustabit, I think scammers are targeting to copy known casino's website and get the credentials. This could be really dangerous for players who are not aware of the website and doesn't bother time checking the URL mostly are newbies luckily the OP managed to spot this website.

For obvious reasons, there could be two set of scammers here, and we have groups that specifically target crypto related online games and perhaps there's also targeted fiat online games as well. And also, there's a lot of money involved that's why scammers will make their way into created similar looking sites to trap their victims. The Roobet find and this one is just a tip of the iceberg, there could be more that we need to discover and reported.

Lavander

full member

Activity: 369

Merit: 101

Before there was Roobet and now Bustabit, I think scammers are targeting to copy known casino's website and get the credentials. This could be really dangerous for players who are not aware of the website and doesn't bother time checking the URL mostly are newbies luckily the OP managed to spot this website.

bekti3

member

Activity: 1078

Merit: 15

ven though the Bustabit site is very popular and known in various pretty good game lists. There is no denying that there has been an influx of phishing which is very vulnerable to leaks. the criminals were able to outsmart to trap many people inside. This must be followed up, so that all members immediately withdraw and their assets .. before losing more.

Yaunfitda

hero member

Activity: 2870

Merit: 594

Quote from: arwin100 on December 11, 2020, 03:39:06 AM

Its easy to recognize if we look closely to the url but it can deceive those users who use google search and didn't pay close attention to the link they are clicking to. And this kind of warning posted here is a good warning for users who almost forgot to check the site they mostly visit since these phising site are just here waiting for the victims to locate and victimized them.

Even the URL of one of those phishing site is really hard to recognized because it is a homograph attack, so it's not that easy in the beginning.

Yeah, we have to take users who posted this kind of warning because we will never know if we are going to see this phishing site if we search bustabit through Google, (although not advisable, but still maybe there are some members who get get away with that practice because that's what we used to do).

arwin100

hero member

Activity: 2632

Merit: 787

Jack of all trades 💯

Its easy to recognize if we look closely to the url but it can deceive those users who use google search and didn't pay close attention to the link they are clicking to. And this kind of warning posted here is a good warning for users who almost forgot to check the site they mostly visit since these phising site are just here waiting for the victims to locate and victimized them.

msarro

hero member

Activity: 788

Merit: 505

Nice catch op! This is indeed a phishing website and it looks like the same as the real bustabit I tried to access it through my browser luckily it detects that it is a risky website.

Quote

Deceptive site ahead

Attackers on www.bustabiit.com may trick you into doing something dangerous like installing software or revealing your personal information (for example, passwords, phone numbers, or credit cards). Learn more

michellee

hero member

Activity: 2604

Merit: 816

🐺Spinarium.com🐺 - iGaming casino

People who do not bookmark the site will get a trap from the site, and they will not be suspicious since the domain is almost similar to bustabit. If we do not check or not thorough when we visit the site, we will get a scam by them and maybe the site will steal our money. It is important to be careful when we visit every site, not just the gambling websites.

acroman08

legendary

Activity: 2520

Merit: 1113

great find! both phishing is most likely created by the same person there is no difference between the two phishing site. it's a little worrying that this phishing site home page looks almost exactly identical to the original one except for a few differences.

the fake one shows you a login pop up with wrong icons when you click "play now", doesn't redirect you to the crash game and has a much thinner font on their house edge, wagered, bankroll and different amount of bankroll and wagered

orginal bustabit:
thicker fonts

redirect you to the crash game when you click "play now" and has the correct icons when you pressed login after getting redirected to their crash game.

just like what keramit said I suggest reporting or let the bustabit staff know about this phishing site.

Kemarit

legendary

Activity: 3080

Merit: 1353

Did you report it already?

This is very dangerous site because the look and the feel is 100% perfect. And I'm sure this criminals are going to spread this through PM's in telegram and other social media sites that gamblers are frequented so we don't to have an consensus effort to bring this site very quick.

Jating

hero member

Activity: 2842

Merit: 772

Good find, I myself has seen gambling phishing sites, FAKE dice2.win. And then we have, @DroomieChikito, Be Aware Phishing Roobet.com.

Bustabit is one of the most popular crash games so I'm not surprised that cyber criminals are baiting with this kind of phishing sites. So it's better to bookmark online gambling sites that we frequented so as not to fall for this kind of traps.

Dave1

hero member

Activity: 1414

Merit: 542

I'm just giving the community a heads-up because I've research and found bustabit.com phishing site.

(1)

Code:

https://bustabiit.com/

Archived for reference: https://archive.is/gLCHG

Quote

Registrant    GDPR Masked
Registrant Org    GDPR Masked
Registrant Country    nl
Registrar    PDR Ltd. d/b/a PublicDomainRegistry.com
IANA ID: 303
URL: www.publicdomainregistry.com,http://www.publicdomainregistry.com
Whois Server: whois.publicdomainregistry.com

(p)
Registrar Status    clientTransferProhibited
Dates    58 days old
Created on 2020-10-13
Expires on 2021-10-13
Updated on 2020-10-13

Name Servers    NS1.DNS-PARKING.COM (has 760,763 domains)
NS2.DNS-PARKING.COM (has 760,763 domains)


Tech Contact    GDPR Masked
GDPR Masked,
GDPR Masked, GDPR Masked, GDPR Masked, GDPR Masked

IP Address    2.57.89.12 - 167 other sites hosted on this server

(2)

Code:

https://bùstabit.com/
xn--bstabit-y1a.com

Archive for reference: https://archive.is/FuLTY

Quote

Registrant    REDACTED FOR PRIVACY
Registrant Country    nl
Registrar    Hosting Concepts B.V. d/b/a Openprovider
IANA ID: 1647
URL: http://www.registrar.eu,http://www.openprovider.com
Whois Server: whois.registrar.eu

(p)
Registrar Status    clientTransferProhibited, ok
Dates    39 days old
Created on 2020-11-01
Expires on 2021-11-01
Updated on 2020-11-01

Name Servers    NS1.DNS-PARKING.COM (has 760,763 domains)
NS2.DNS-PARKING.COM (has 760,763 domains)


Tech Contact    REDACTED FOR PRIVACY
REDACTED FOR PRIVACY,
REDACTED FOR PRIVACY, REDACTED FOR PRIVACY, REDACTED FOR PRIVACY, REDACTED FOR PRIVACY
(p) (f)
IP Address    185.224.138.89 - 153 other sites hosted on this server

So please be careful with this kind of malicious sites specially for us gamblers.

Topic: Warning: Bustabit phishing site (Read 674 times)