Bitcoin Forum

Economy => Scam Accusations => Topic started by: dkbit98 on October 23, 2019, 11:12:41 PM



Title: Chainlink phishing SCAM - chianlink.io 🔺
Post by: dkbit98 on October 23, 2019, 11:12:41 PM
What happened: fake Chainlink phishing website - chianlink.io

https://i.imgur.com/WzwYDcp.jpg

Website: https://chianlink.io/
Archived:
https://web.archive.org/web/20191023225418/https://chianlink.io/staking/

Quote
Domain Name: CHIANLINK.IO
Registry Domain ID: D503300001182008932-LRMS
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: www.namecheap.com
Updated Date: 2019-10-16T11:27:15Z
Creation Date: 2019-10-16T11:27:04Z
Registry Expiry Date: 2020-10-16T11:27:04Z

Fake blog: https://blog.chianlink.io

Fake wallet: https://wallet.chianlink.io/
archived: https://web.archive.org/web/20191023230624/https://wallet.chianlink.io/

They are asking for your Ethereum private keys. Pure phishing SCAM.

https://i.imgur.com/cG2qYtK.png  https://i.imgur.com/Z5803Oj.png

https://i.imgur.com/KsuFjlQ.png https://i.imgur.com/hSOlISN.png


Title: Re: Chainlink phishing SCAM - chianlink.io 🔺
Post by: dkbit98 on October 25, 2019, 08:15:19 PM
Update:

Reported to google, symantec and metamask

And metamask blacklisted this phishing scam website

https://i.imgur.com/JN36CLw.png


Title: Re: Chainlink phishing SCAM - chianlink.io 🔺
Post by: Chikito on October 26, 2019, 12:49:23 AM
Update:
Reported to google, Symantec and metamask
I see the site doesn't appear and suspended

https://i.ibb.co/wS9pNX2/222.png

We have to careful IP address: 198.54.115.191
they always change their domain to open scamming people again
https://www.virustotal.com/gui/ip-address/198.54.115.191/relations

Quote
2019-10-26-tshukwasolar.com
2019-10-26-30daysofgratitude.live
2019-10-25-remodelingkirklandwa.com
2019-10-25-jordanyep.com
2019-10-25-www.jordanyep.com
2019-10-25-buyredbull.ca
2019-10-25-www.buyredbull.ca
2019-10-25-huntinghoop.com
2019-10-25-gacimonline.com
2019-10-25-www.impact2050.com

and make another the virus

https://www.virustotal.com/gui/url/13f373f670b993809d305494cb3c55a4cba246e02d00b2bf09ed601fc5d23812/detection

https://i.ibb.co/2Sv5HVY/33.png




Title: Re: Chainlink phishing SCAM - chianlink.io 🔺
Post by: sikke on October 26, 2019, 06:54:36 AM
Good job, OP. Probably directly contributed to them getting banned from their web host.

Anyhow, this is a very obvious example of a phishing scam. There are much more sophisticated ones which take advantage of certain non-ASCII codes that appear on browsers as ASCII text to exactly reproduce what a site looks like (there are probably hundreds of them for exchanges alone).

Just don't click on any google ads that pop up on search results, nor blindly trust on any clickable link that claim to be the official one.


Title: Re: Chainlink phishing SCAM - chianlink.io 🔺
Post by: dkbit98 on October 26, 2019, 08:23:35 AM
We have to careful IP address: 198.54.115.191
they always change their domain to open scamming people again
https://www.virustotal.com/gui/ip-address/198.54.115.191/relations

Thanks for adding this information.

Good job, OP. Probably directly contributed to them getting banned from their web host.

Yes, I was fast to report them everywhere I could to ban them as fast as possible.
I am happy with results  ;D