Bitcoin Forum

Within recent days, I read some posts/ threads that mentioned about attacks on renowned casinos: BitVest, PrimeDice.

BitVest
Hackers tried to scam others with fake BitVest give aways:
⚠️ How Scammer tried to Hack my Bitcointalk and how to Protect yourself?⚠️ (https://bitcointalk.org/index.php?topic=5173531.0)
Appreciated findings and warnings of dkbit98 (https://bitcointalk.org/index.php?action=profile;u=1410401)

PrimeDice
Attackers use fake domain name.

Maybe more accounts from same owners might do this in coming days, to attack BitVest, PrimeDice, and other casinos that have high traffic and huge users.

I looked into the Primedice.net domain whois and that domain was registered shortly after Primedice.com was registered (about 6 years ago).

Without paying a premium to look-up the whois info, its hard to tell if its the original owner. But I am assuming somebody back in 2013 was simply registering a bunch of domain names just in case a casino site became popular and eventually decided to do some phishing attacks on it.

So I am guessing that more and more of these domain will eventually become available for sale and I don't think Primedice.net is the only one out there.

Just make certain you check the URL before opening a account and depositing.

yes this is the best thing to do to avoid phishers   . make sure to double check the domain name if they are correctly spelled but if your not sure you can do a quick research on this site and also on google as well  .  fake sites are also obvious because their sites design was bad and seems to be pretty cheap  but why they will built a good and expensive one if they will going to shut it down later on  ?

Thanks for the heads up op. I usually play on Primedice now and then which is why this is news to me. I have heard of these kinds of scams before(Bittrex fake site etc) where the biggest error is not checking the website name and security properly.

This is why I always check these things whenever I deposit my money on these websites just to make sure everything is fine and I urge others to do the same.

A pro liar will make everything looks great to scam people. And it's not that hard to make a website with a beautiful page. You can do a really nice design with free web builder such as Elementor, Envato, and so on. They're free to use even though it comes with a premium package. So, it's not that costly actually.

This kind of giveaway scammers are very active in twitter. Often you will see giveaway to comment and retweet the post then deposit x amount of BTC to get 2x or 3x in return

Scammers are always very active.

If you take a look here https://whoisrequest.com/history/ (https://whoisrequest.com/history/) you can see that primedice.net name expired 23-June-2016 and was then re-registered by someone in October. The timing works as the domain was 1st registered in May 2013 so if they bought it for 3 years and they did not renew 3 years and 1 month later it drops.

Someone then picked it up in October 2016 and it's been active since.
It's now at namecheap. Drop them a line and let them know about the scamming:

Registrar: NAMECHEAP INC
Registrar IANA ID: 1068
Registrar Abuse Contact Email: abuse@namecheap.com
Registrar Abuse Contact Phone: +1.6613102107

-Dave

The first one is actually the dangerous one because of using the click bait link. Tho, that was sent via pmed.  I think it has nothing to do with the gambling site names. It just happens maybe because this topics are getting a lot of attention from the targeted rank accounts of the hacker.

The 2nd one is actually just hilarious and to be very honest it can be really too dumb to even think that it was legit.

And this is something one should do every time, even if phishing websites are not frequent. I usually use the links that I already used (when browser already knows it) or bookmarks. This can help to avoid suspicious websites, but of course, there's no protection from hackers that attack the original websites. Not having much money in a casino or on an exchange website for a long period of time seems to be one of the main rules, though. There's less chance of having problems with a good wallet than an intermediary like casino/exchange, who often even warn people not to store their money there.

^ That is an easy way to heads up that always remember the domain name or much better to bookmark the website. Nowadays there are a lot of scammers waiting to a noob one that the target to be fooled by them. Always check the URL when clicking a website even a casino that lure people by having giveaways to click you a bait website as OP said. Nevertheless, we should be careful about those PM'ed links that look suspicious.

Indeed, with most passwords managers you get the chance to store the url as well, so you can actually open the site FROM the password manager (which simply passes the argument to your browser).

Phishing attacks are on the wild, and people should be double careful. Also, never, ever repeat passwords, one more reason to use a password manager with a very good password to open it, preferably from a secured os/pc. Can't stress that enough, windows won't cut it. Go linux or bsd, that and the usual browser (ie. chrome) works for 90% of internet users out there.

A good password manager is not paid, and is NOT an online service, but a free and open source program you download, such as: KeepassXC (https://keepassxc.org/).

Do NOT use anything that requires you to login to an online site as password manager, much less something that demands a subscription fee.

I commend this suggestion. I have LastPass as my password manager on certain sites and applications and it works like a charm. If the domain is completely off from the record LastPass has, it wouldn't autofill the password and will, at most cases, tell you that this isn't the same site you're use to log in. They are a bit pricey but given that I have used the said service in most of my important web accounts--related to work, bank, etc--it's a steal and would surely help me in times of phishing attempts.

Does make sense yet these 2 things you had said is the nearest probable thing or reason why these links do exist which neither used for phishing or just simply buying out alternative domain names of possible popular sites that they do see that has potential and might give them some money soon.This isn't new anymore but most of the time this do talks about phishing attempts everytime we do see sites do copy other sites as well.

Another good way to check some story about website is to search on google bitcointalk and then type website's adress. Since bitcointalk's pages are indexed quickly, user can find what is posted about that domain and if it's real or not after viewing some posts around it. If there is nothing about url on bitcointalk, better to avoid it or at least ask here, no one will blame you for that.
Primedice really need to take care of that domain primedice.net
Btw at first users have to be careful but sadly they aren't.

If i was that person, i am saving it in a bookmark already and no one could phish me unless the website itself is being compromised. And to those who haven't save the site yet and they don't know which or what is the right one, just simply search it on BTT or in google if in doubt.

Easier said that done. I'm sure there are a lot of beginners in crypto and it's possible that they can fall from this new waves of attacks. Specially criminal know that there are a lot of gullible individual who lacks the proper education on how to secure their accounts.

They are targeting those gullible users and to those who don't care about the sites that they are opening. Even if you are an old-timer, sometimes these scammers know how to lure their potential victims because the sites are sometimes too good that you don't even know the difference from legit one.

I use avg antivirus so I dont have these types of problems

If you totally depends on antivirus softwares, you will be unsafe. Being careful with links, and always check site address before clicking and logging in your accounts. Bookmarking site address is helpful but there are risks of tampering too. So, it is better if you are more careful, and remember site address, then type exactly sure what you want to use. Try not to search using Google because phising sites might appear at top of search results.

if I click on a "suspicious" link it gives me a warning  :)  so I will not click it

Nope, unsafe.
you should not click on links you don't know. Hover mouse of computer / touchpad on link, to get exactly link (if it is shortened/ hidden link) to check address first, compare it with what you remember; if link looks strange, stop at it, don't click and let your safety depends on antivirus software's warnings.

Thank you for this warning I almost click the link but I confuse and check the url and noticed a fake give away, scammer always find a way to make hack so everyone always be check what you do before doing any action.

I guess if they are selling primedice.net to people who might get it for phishing stuff and may get peoples money and run with it, than why don't the primedice team just buy it and redirect it to primedice itself?

Surely they have made tons of profit in the past 6 years, yes they have reinvested plenty of it for primedice itself and also created stake and they have been paying employees as well plus they surely have been living a lot better than how they used to live with this money and all that, but not being able to buy primedice.net is not an excuse, they surely have plenty of money to recover from tens of bitcoins loss with a whale so it shouldn't be a question when they pay like 10-50 btc just to get that name.

I don't know the price but I am sure it should be cheap for their wallet (quite expensive for us of course).

All that need to be consider here as a gambler is for a gambler to always check the URL of any website before making an account with them because this will be a.major. attack against the said casinos, more also, whenever these fake website are found let.them be taken down to avoid attack on members account on the forum.

You don't need to be a gambler to check links before clicking on them.
You don't need to be a trader to do this.
You don't need to be an investor to do this.
Carefully do this for your own personal securities: emails, bank accounts, important data, etc.
There are two ways to check links: hovering on link; or clicking on quote button to see link in quoted contents. If links are shortened one, let's further check this. However, I don't care to do that ;set step, especially with links from strangers, newbies. Why do they have to post shortened links of famous sites?

Lol, are you serious? anti-virus and you think you will not be a victim here.

You are a classic example of why scammers still ploy cryptoverse because there are a lot of uneducated users. If I'm not in your shoes, you better read and go around the forum to learn how to protect yourself better dude.

The lesson here is not to click on any links and not trust anyone here. Used our common sense to see the URL or better yet bookmark the sites just to be sure, so stay safe everyone.

thank you for bringing it to the attention , will get in touch with the admins of the sites mentioned
as for primedice.net , I highly doubt anyone who knows something about the dice sites business would consider buying it
only potential scammers, but this is going to be very short lived attempt
I remember several of them attempted during the past few years , they even managed to build a decently looking Primedice's login page
also admin of paradice dice site set up phishing sites , primedice.co and such - didn't work either

Exactly warning! Such kind of careless people, who solely depend upon protection and warnings of antivirus softwares on potential threats are perfect targets of hackers. If they don't change their careless habits, they will soon have opportunities to learn from their own lessons, and they will never forget about their own bloody money-lost lessons.

It's very important to bookmark if you do have a favorite gambling site to play your games, it will helps you to avoid being victimized by those fake website who's intentionally hacked gamblers account, it's always better to prevent or avoid things to happen if in case that you are unsure always
double check before opening or visiting any websites not only in gambling but also those important website that you always visiting.

Bookmark can be tampered too, so it is safest if you bookmark URL of your favorite and important sites in you mind, not simply bookmark them in browsers. Typing exactly URL of sites you want to visit and log in your accounts in address bar in your browser. Then, no attackers can trap you with their phising sites.

Thank you for your advice, I will try to be careful at every pm that come in. Indeed phishing attacks lately increased , their attack targets are beginners who are new to crypto. So be beware of anyone.


Well sometimes beginners do not pay attention to the site domain, we need to educate the importance of user security. Moreover, hackers not only attack through PM, but they do spamming in e-mail, where it will be difficult to distinguish originals and fakes. If you sometimes forget to pay attention to the domain, it's better to use an antivirus that has browser security features such as avast, Kaspersky, McAfee, etc. Maybe it will help a little when we are careless.

You are correct that bookmarks can be tampered the same as your clipboard that is why the most safest thing to do is to type the site manually so that you can avoid getting phished by the phishing sites all over the internet or shared by scammers.  Let's thank the op on sharing this thread about this phishing site and the forum user who send it.

Yes I am serious and I never gotten a virus especially not by  clicking no dam links lol

Using an antivirus isn't a solution for phishing and such. Mind you, these type of attacks exist not in your local machine but rather in the web, and would only perpetrate/be effective if you yourself entered your details. If you're a Windows user, Windows Defender is already a good antivirus in itself with some few tweaks to ensure that your system is still performing at its peak and no slowdowns would occur. Even if you have a bulletproof system that you think won't get infected, well being more cautious isn't going to hurt one bit, too.

A good advice especially now that hackers have shifted their hacking activities to gambling and casino sites. Checking and rechecking of URL before longing is very important as I have had many stories of hackers taking advantage of just little character to steal people's  password and username! If you must login into your account at primetime or betvest you should click from the links at the campaign threads as this will to some extent save you from " story that touched the heart.

Viruses born to defeat antivirus softwares, so basically you are unsafe even you use whatever antivirus softwares for your computers.
It is especially right if you have careless habits on Internet. You are safe today, you have been safe till now, but it does not guarentee that you will be forever safely.

Don't be a prophet of doom.  ;D ;D ;D

Yes viruses are born to infect computers not to defeat anti-viruses. And even if they are, anti virus manufactures aren't sleeping either. It is practically unprofitable for any single guy sitting on his mothers basement to try and code malware that could defeat giants such as Norton, McAfee, etc.

We think the huge problems is from Phishing, trying to fake domains, and DNS poisoning. That's why we are great believers in EV SSL for businesses. people who use terrible long domain names with confusing extensions such as .io, .me, etc are mostly susceptible to this target. They expose their users to become easy phishing targets.

Well said.
It's only the us for whom we fall in trouble if we see honestly.
We ourselves become careless and click on the phishing sites.
Moreover some of us don't enable the 2FA for which this problem becomes more serious.
Hope people will come to understand things more clearl and become more careful next time.

If you cannot get to people's coins directly, then you target the services they use, because people make mistakes. They also know these gamblers have a lot of money and that they are so preoccupied with their gambling urge that they would not even notice if they use the wrong domain.  :P

The gambling sites should take notice about this recent attack on their customers and they should develop additional security features to protect their customers accounts. <Let each user create a database of say 5 words that would be presented to them, when they enter the site and then the user have to type the corresponding words that are paired with those words, before the site grants them access.>

So even if the phishing attack was successful, it would not be possible for the attacker to login without this word pairing.  ;)

Maybe google authentication should be activated as this is what safe my friend’s account from been hacked in January this year. These hackers can go to any lengths in stilling people funds from exchange, casinos and gambling sites and wallets providers sites and applications. The owners of the casino websites can do a little if the players and investors themselves are not playing safe.

Okay lets say these gambling sites do have these 2fa things but most gamblers doesnt really care on activating it (this is a common behavior).

They would only set it up after such scam incident.They should done it on the first place to secure their accounts and i agree on what Kakmakr said or suggestion on having that 5 word but somehow if this codes being inputted up on a phishing site the account would be still accessed.