Bitcoin Forum

Other => Beginners & Help => Topic started by: Krislaw on March 27, 2020, 04:14:26 PM



Title: [WARNING]ANOTHER FAKE BLOCKCHAIN WEBSITE
Post by: Krislaw on March 27, 2020, 04:14:26 PM
Some weeks ago I made a topic (https://bitcointalk.org/index.php?topic=5230995.msg53978478#msg53978478) about a fake blockchain website that wants me to confirm if I'm still using my 2FA email account.
Now this week, I received another one asking me to change my password due to security reasons.
https://i.ibb.co/TLVJkHX/Screenshot-20200327-170325-Gmail.jpg (https://ibb.co/9tFBNqX)
Email Details
Sender
Code:
Blockchainmemory@obasmart.com.br
Fake Web Url
Code:
https://blockchain-com.org/#/login

WHOIS.COM DATA
Code:
Domain:blockchain-com.org
Registrar:Hosting Concepts B.V. d/b/a Openprovider
Registered On:2020-03-27
Expires On:2021-03-27
Updated On:2020-03-27
Status:clientTransferProhibited
serverTransferProhibited
addPeriod
Name Servers:a.dnspod.com
b.dnspod.com

My Suggestion on How to Avoid This
Don't use your main email address when filling airdrops so that your email address won't be their target.
Avoid clicking any links in your in your inbox without proper research. Don't fall for scams because of the little penny they promised you.


Title: Re: [WARNING]ANOTHER FAKE BLOCKCHAIN WEBSITE
Post by: mk4 on March 27, 2020, 04:33:15 PM
Meh. The typical password change phishing attempt. Really nothing new to be honest. The scammer was so lazy/inexperienced that he/she didn't even spoof the From email address. But thanks for the heads up for the newbies I guess.

Don't use your main email address when filling airdrops so that your email address won't be their target.
Probably a better suggestion would be to not use airdrops in general.


Title: Re: [WARNING]ANOTHER FAKE BLOCKCHAIN WEBSITE
Post by: Csmiami on March 27, 2020, 06:21:33 PM
Got a similar one last week, but in this case, they were even lazier:

https://i.imgur.com/8WZZeAD.png

Blockchain, google play and apple store images were not links, it was in russian, the address had nothing to do with blockchain, and it's the first time I see that you are required to confirm your email once you are using 2FA.

Even funnier, that email is not used on any blockchain account, so it went straight to spam ::)