Bitcoin Forum

I want to warn all blockchain.info users from a phishing site I saw today on google ads when I searched the word "blockchain", this scam site appears as the first result in the webpage as google show their ads at the top. the site is www dot blockchlan dot info , which of course a scam site that will steal your wallet identifier and password once you inter them and as you may notice, the domain has a very little difference (the letter i and l ) with the real site.
 
so before logging to your web wallet, make sure you are on the real blockchain.info website with https link.

You can also notice this when u log in, the wallet id is always already showed if u login on the real one.
If you go to a phising site, then it will not be filed in automatically.

thank you for your info this is very important because people sometime not checking address bar when opening a site, 1 other way to keep safe maybe bookmark blockchain wallet link every want to login in wallet

Yeah I agree with you, putting the site in the bookmarks is better than searching on google and facing these kind of phishing sites


This depends on if the user is storing his browser cookies or not. I always browse in incognito mood so this difference will not work for me

Then u can make a file with the correct link in it and block all phising sites of blockchain.info

I am going to search for a few phising sites, so people will not fall for it.

Has there been a case of theft related to the site ?
This is really dangerous because the site occupies the top position in the search engine google if not careful someone could be fooled
This should be reported to the blockchain.info or google

To prevent this, I'm usually bookmark the real one so I'm never re-search again to prevent this happening...
So once I'm bookmark for it, i'm just click and will not worried for clicking the fake one

I have contacted google about the phising site: http://www.google.com/safebrowsing/static/submit_success.html?hl=en (http://www.google.com/safebrowsing/static/submit_success.html?hl=en)
I hope they will block the site very quick, and remove it from their ads. I entered the fake site, and u can see that now new transactions are appearing, so that is also a way to see it.

I stopped bookmarking, as this too can also be a danger, as hackers who get into your computer can read your browser cache and passwords.

I now have my wallets backed up offline, on a plug n play hard drive.
Only switch it on when making transactions.

You could always put your wallets/details on a usb stick.

Here is some info from who is lookup of the phising site, of course it has been protected by a guard, so most of it will make no sense :(

I hope we can take it down somehow, I contacted google already about this, see what they will do.

Domain Name: BLOCKCHALN.INFO
Domain ID: D55920347-LRMS
WHOIS Server:
Referral URL: http://www.godaddy.com
Updated Date: 2015-11-10T20:30:17Z
Creation Date: 2015-09-11T04:00:26Z
Registry Expiry Date: 2016-09-11T04:00:26Z
Sponsoring Registrar: GoDaddy.com, LLC
Sponsoring Registrar IANA ID: 146
Domain Status: ok https://icann.org/epp#ok
Registrant ID: CR204243759
Registrant Name: Registration Private
Registrant Organization: Domains By Proxy, LLC
Registrant Street: DomainsByProxy.com
Registrant Street: 14747 N Northsight Blvd Suite 111, PMB 309
Registrant City: Scottsdale
Registrant State/Province: Arizona
Registrant Postal Code: 85260
Registrant Country: US
Registrant Phone: +1.4806242599
Registrant Phone Ext:
Registrant Fax: +1.4806242598
Registrant Fax Ext:
Registrant Email:
Admin ID: CR204243761
Admin Name: Registration Private
Admin Organization: Domains By Proxy, LLC
Admin Street: DomainsByProxy.com
Admin Street: 14747 N Northsight Blvd Suite 111, PMB 309
Admin City: Scottsdale
Admin State/Province: Arizona
Admin Postal Code: 85260
Admin Country: US
Admin Phone: +1.4806242599
Admin Phone Ext:
Admin Fax: +1.4806242598
Admin Fax Ext:
Admin Email:
Tech ID: CR204243760
Tech Name: Registration Private
Tech Organization: Domains By Proxy, LLC
Tech Street: DomainsByProxy.com
Tech Street: 14747 N Northsight Blvd Suite 111, PMB 309
Tech City: Scottsdale
Tech State/Province: Arizona
Tech Postal Code: 85260
Tech Country: US
Tech Phone: +1.4806242599
Tech Phone Ext:
Tech Fax: +1.4806242598
Tech Fax Ext:
Tech Email:
Billing ID: CR204243762
Billing Name: Registration Private
Billing Organization: Domains By Proxy, LLC
Billing Street: DomainsByProxy.com
Billing Street: 14747 N Northsight Blvd Suite 111, PMB 309
Billing City: Scottsdale
Billing State/Province: Arizona
Billing Postal Code: 85260
Billing Country: US
Billing Phone: +1.4806242599
Billing Phone Ext:
Billing Fax: +1.4806242598
Billing Fax Ext:
Billing Email:
Name Server: A.DNSPOD.COM
Name Server: B.DNSPOD.COM
Name Server: C.DNSPOD.COM
DNSSEC: unsigned

Nice of you ;)
Google is usually quick about phishing websites and should be removed any time soon
Though this doesn't change the fact that many phishing website are appearing everyday :(
Solution for this to not use blockchain wallet so we don't grabbed by blockchain phishing website :P

Blockchaln.info is currently hosted at Maersk Holding Bv. This domain is connected to IP address 139.162.15.98 which is hosted on a server that appears to be located in Rotterdam, Netherlands.

Domain Hoster:   Maersk Holding Bv
IP Owner:   Maersk Holding Bv
Server Location:   Rotterdam, Netherlands
Server GEO Location:   51°55'21" North, 4°28'45.012" West [show on google maps]
Domain IP:   139.162.15.98
Domain IP Long:   2342653794
Binary IP:   10001011101000100000111101100010
IP Hostname:   li857-98.members.linode.com

Thank you very good for the information and good suggestion regarding getting saved by going through bookmark, recently my friend got his computer hacked by some site he downloaded the exe file and his computer got hacked throught that keylogger exe , he lost nearly 0.5 btc ,

Now a days their are so many hackers roaming in the cyber who are ready to steal if you do a single mistake.

How did u get the real information?
Also we could do a DOS attack on this site untill Google shuts it down.

Thanks for awaring about the phising sites.Really appreciate it 👏👏 .I think by this time most of bitcoin users should be aware of such things like phising and all and should also be aware about some security measures as well.Anyway really appreciate OP's work of coming forward and letting us know about it.

Update:I searched up again from google but it is not showing.I guess google removed it

W3bin.com Chrome extension ;D

I don't see why people are still using online wallets these days. The only one that actually has a use is coinbase, as they pay your fees ;D


I currently use a Ledger wallet, but I've just ordered a case.

Good to know, thanks for the warning man

Forgot to add this earlier, so they hide twice it seems.
139.162.15.98
Host:   li857-98.members.linode.com
Country: is Singapore

Because some online wallets are used to cash in and cash out like in my place there is no other better way to convert your btc to fiat than the online wallet's offer. But this site is 2 years running until now

people still using those online wallets because they want to get access to their bitcoin anywhere without having to carry a laptop or a pc. so a web wallet will fulfill their needs

Like what? Im using mycelium and so far so good i never had any problems but doesnt mean it is 100% safe to use id say

because online wallet easy to access as long there are internet connections you can use on it everywhere but might be disadvantages for online wallet is susceptible to be hacked but anyway thanks for warning us

Yes, account hacking are becoming most common events now a days. Avoiding untrusted downloads and running a latest antivirus kind of precautions would save us from these hacking. Most importantly online wallet users must do double checking always. They should not click any links even in this forum also.

Hmm, thak your for this advice. I saw yesterday a topic about someone that was hacked on Blockchain and lost 0.04 BTC. I don't know how this can happen if hacker doesn't have access to account identificator. I asked if someone know why maybe that guy was hacked, but the thread was deleted.

Thats how phishing works they will blinded you acting that you are logging in on your account to the real one to get your identificator but int he end you will notice that your not. Be warned

you just need to check that green lock icon thingy that is on the left side of the address, in chrome it is a big green section saying "Blockchain Luxembourg S.A.R.L [LU]" that way you can be sure you are at the right place.

Good job mates, thanks for the informations, in addition it also good to check the green SSL of the blockchain before logging into your account.

Any one had visit this scam site?

Thanks for warning. Up to 99% I'm ising the app for iPhone from blockchain and this works very well.