Bitcoin Forum

Other => Beginners & Help => Topic started by: Yasceine on June 11, 2018, 06:12:21 AM



Title: Metamask Phishing
Post by: Yasceine on June 11, 2018, 06:12:21 AM
whenever I am trying to complete the KYC, I am being directed to a page saying it is phishing.

Follow the link below to sign a message from ******. Enter the Encrypted message you get after wards. https://[Suspicious link removed]/2*****
The message generated will enable us distribute your token

the warning message is being generated by Metamask as below.
is it a genuine warning message or something normal?

the photo attachment of this post is not enabled?





Title: Re: Metamask Phishing
Post by: BTCforJoe on June 11, 2018, 06:20:05 AM
You can't post photos as a newbie, but you can still show us the link to the screenshot.

I haven't received any message like that from MetaMask, so it's likely that your browser data has been infected, most likely from a site that uses MetaMask that has disguised a user opt-in form (or similar) method to capture/phish your data.

From my understanding, MetaMask doesn't provide account support if you lose your seed, so it would surprise me if they actually did send out some form of warning.

Edit: Actually, wait... Since when does MetaMask require KYC verification? ??? Sounds to me like you're on another website that accepts a MetaMask plugin that is trying to phish information, not on the MetaMask site itself...


Title: Re: Metamask Phishing
Post by: BQ on June 11, 2018, 07:00:00 AM
You can upload a picture to like www.imgur.com and paste the link.

What KYC are you trying to do? Did you download metamask from metamask.io (one of the chrome/firefox addon pages it links to)?


Title: Re: Metamask Phishing
Post by: Yasceine on June 11, 2018, 07:39:52 AM
here is the link
https://imgur.com/a/T9M52zd


it is Kentra

please see below

Kindly bare in mind that your Airdrop submission will be considered invalid and you will not receive any tokens if you fail to complete the verification process before the deadline.



Best regards,

Kentra Support.



Title: Re: Metamask Phishing
Post by: mithrim on June 12, 2018, 06:03:28 PM
here is the link
https://i.imgur.com/cy1GKUX.png


it is Kentra

please see below

Kindly bare in mind that your Airdrop submission will be considered invalid and you will not receive any tokens if you fail to complete the verification process before the deadline.



Best regards,

Kentra Support.



the warning message is being generated by Metamask as below.
is it a genuine warning message or something normal?

Well, I didn't research the project but I would not ignore the warning. Do you have any reason to doubt the project or the people behind it? Did you do your research?
I guess it's an airdrop you just entered? In that case, just skip this one. Better safe than sorry. Alternately you could ask in their telegram/discord chat and see how they respond.


Title: Re: Metamask Phishing
Post by: TryNinja on June 12, 2018, 06:22:42 PM
Is this the URL? Here is the reason why it got blacklisted as a phishing website.

Quote
kentra.tech
Fake airdrop directing users to a fake MyEtherWallet - xn--myethrwalt-inbe64c.com
https://urlscan.io/result/5a6ac1e3-1447-4ef8-a0e8-d3f9aaf00f46/
https://urlscan.io/result/a15f09f4-5548-45e5-addc-edc3acf01648/

xn--myethrwalt-inbe64c.com
Fake MyEtherWallet - IDN homograph attack domain
https://urlscan.io/result/03af7e40-ebcf-4056-ad3f-57f0402d9597/
https://urlscan.io/result/0bcb0635-0977-4d72-a673-618195cbf5d1/
address: 0x0A796062214Cf4FC232Dd8538a19035Ac79a595c
From: https://github.com/MetaMask/eth-phishing-detect/pull/1815