Bitcoin Forum

Other => Beginners & Help => Topic started by: Baofeng on August 07, 2020, 02:07:09 PM



Title: {Warning}: Fake Coinbase website
Post by: Baofeng on August 07, 2020, 02:07:09 PM
There is a new fake and clone Coinbase website, I'm just giving out a warning specially for newbies. Using the old but still effective Homograph attack.

Website:
Code:
www.xn--conbase-sfb.com

Archived: http://archive.is/P7dAW

Which will redirect you to: coınbase.com (do not click)

https://i.imgur.com/CFLdi0b.png

Whois info:

https://whois.domaintools.com/xn--conbase-sfb.com

Quote
Coınbase.com
Whois Record for Coınbase.com
 Domain Profile
Registrant   WhoisGuard Protected
Registrant Org   WhoisGuard, Inc.
Registrant Country   pa
Registrar   NAMECHEAP INC NameCheap, Inc.
IANA ID: 1068
URL: http://www.namecheap.com
Whois Server: whois.namecheap.com

(p)
Registrar Status   addPeriod, clientTransferProhibited
Dates   2 days old
Created on 2020-08-05
Expires on 2021-08-05
Updated on 0000-12-31   
 
Name Servers   DNS1.REGISTRAR-SERVERS.COM (has 6,373,289 domains)
DNS2.REGISTRAR-SERVERS.COM (has 6,373,289 domains)
  
Tech Contact   WhoisGuard Protected
WhoisGuard, Inc.
P.O. Box 0823-03411,
Panama, Panama, pa

(p) (f)
IP Address   162.213.251.182 - 341 other sites hosted on this server
  
IP Location   United States Of America - Georgia - Atlanta - Namecheap Inc.
ASN   United States Of America AS22612 NAMECHEAP-NET, US (registered Jun 21, 2011)
Domain Status   Registered And No Website
IP History   19 changes on 19 unique IP addresses over 3 years     
Registrar History   2 registrars with 1 drop     
Hosting History   5 changes on 4 unique name servers over 3 years     
 Website
Website Title   None given.     
Whois Record ( last updated on 2020-08-07 )
Domain name: xn--conbase-sfb.com
Registry Domain ID: 2551013777_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: http://www.namecheap.com
Updated Date: 0001-01-01T00:00:00.00Z
Creation Date: 2020-08-05T18:01:25.00Z
Registrar Registration Expiration Date: 2021-08-05T18:01:25.00Z
Registrar: NAMECHEAP INC
Registrar IANA ID: 1068
Registrar Abuse Contact Email:
Registrar Abuse Contact Phone: +1.6613102107
Reseller: NAMECHEAP INC


Title: Re: {Warning}: Fake Coinbase website
Post by: jossiel on August 07, 2020, 03:13:03 PM
Thanks for the warning.

Fake apps and websites copying website will be rampant due to the current news that's coming out from Coinbase. They are trending as they are planning to do many things with their platforms. From listings of upcoming altcoins to listing to the stock market.

It can fake out those newbies that have no idea which is the legit website and app of theirs.


Title: Re: {Warning}: Fake Coinbase website
Post by: sheenshane on August 07, 2020, 04:13:01 PM
It's a nice spot, thank you for the warning.

I think lazy newbies that didn't know how to verify the legitimacy of the site will always fall to this kind of trap.
Anyway, have you already reported this to the Coinbase Reporting phishing sites (https://help.coinbase.com/en/coinbase/privacy-and-security/avoiding-phishing-and-scams/reporting-phishing-sites)

Coinsbase itself already aware of this kind of tricks by scammers, to avoid being phished this might worth reading, "What is phishing?" (https://help.coinbase.com/en/coinbase/privacy-and-security/avoiding-phishing-and-scams/what-is-phishing).


Title: Re: {Warning}: Fake Coinbase website
Post by: daneal stev on August 07, 2020, 04:42:48 PM
First, I want to thank you for this important warning. Frankly, we are now in a time that contains many fake sites that impersonate and place official and reliable sites and unfortunately there are many beginners who cannot distinguish between a fake and real site and for this reason they are hacked I have encountered many sites. Among these sites is the site for the blockchain wallet, but it is good that I was able to discover it, so I hope everyone will pay attention to this matter and take caution as much as possible


Title: Re: {Warning}: Fake Coinbase website
Post by: ScamViruS on August 07, 2020, 06:04:57 PM
Thank you OP for your warning. This post will prevent many newbies from falling into the trap of such scams. Because scammer's main target is to trap newbies. And many times they become successful.

So newbies will be alert because of your warning. Now every day different types of scam websites are coming up. Scammers are working hard to present themselves as credible. This is because people are now more aware that scammers are creating websites with different ideas.


Title: Re: {Warning}: Fake Coinbase website
Post by: 20kevin20 on August 08, 2020, 07:29:10 AM
I think we need a sticky thread on this board to inform newcomers about false and malicious ads. There are too many out there for all to be spotted - there were a few "how to avoid phishing websites" threads popping up here every now and then and I guess a thread to cover most, if not all, ways to avoid them is much better and more helpful than 1 thread for each false site/app.


Title: Re: {Warning}: Fake Coinbase website
Post by: dondonk on August 08, 2020, 07:46:55 AM
We must be observant in reading the name of the website in order to avoid attempts at homograph attacks. when compared to the original web there are differences in design. but generally using the same color and may be difficult to distinguish for beginners. Thank you for the information .


Title: Re: {Warning}: Fake Coinbase website
Post by: Maus0728 on August 08, 2020, 07:58:14 AM
I think we need a sticky thread on this board to inform newcomers about false and malicious ads. There are too many out there for all to be spotted - there were a few "how to avoid phishing websites" threads popping up here every now and then and I guess a thread to cover most, if not all, ways to avoid them is much better and more helpful than 1 thread for each false site/app.
Actually, there is a huge list of scam website created by @examplens (https://bitcointalk.org/index.php?action=profile;u=314792) but it was last updated 2 month ago.
[1] [SCAM ALERT] List 220+ scam websites (Updated 01.June) (https://bitcointalk.org/index.php?topic=5201588.msg53079027#msg53079027)

I wonder if reporting these website to google are really effective or it's just a waste of time. I have read an old post that these reported sites still remain on google search.


Title: Re: {Warning}: Fake Coinbase website
Post by: examplens on August 08, 2020, 08:44:44 AM
I think we need a sticky thread on this board to inform newcomers about false and malicious ads. There are too many out there for all to be spotted - there were a few "how to avoid phishing websites" threads popping up here every now and then and I guess a thread to cover most, if not all, ways to avoid them is much better and more helpful than 1 thread for each false site/app.
Actually, there is a huge list of scam website created by @examplens (https://bitcointalk.org/index.php?action=profile;u=314792) but it was last updated 2 month ago.
[1] [SCAM ALERT] List 220+ scam websites (Updated 01.June) (https://bitcointalk.org/index.php?topic=5201588.msg53079027#msg53079027)

I wonder if reporting these website to google are really effective or it's just a waste of time. I have read an old post that these reported sites still remain on google search.

These websites and domains are problematic in several ways. there can even be found some quite good domain names, scammers after exhausting the possibility of making money through it, he can offer these domains to sell. some unfortunate buyer can buy a blacklisted domain and introduce his business to the problem from the beginning.


I had some health issues, so I didn't really have time to update this list even if I have a lot of new scam websites on my list. I'll expand the list these days, I hope.  ;)


Title: Re: {Warning}: Fake Coinbase website
Post by: Jating on August 08, 2020, 12:00:17 PM
I think we need a sticky thread on this board to inform newcomers about false and malicious ads. There are too many out there for all to be spotted - there were a few "how to avoid phishing websites" threads popping up here every now and then and I guess a thread to cover most, if not all, ways to avoid them is much better and more helpful than 1 thread for each false site/app.
Actually, there is a huge list of scam website created by @examplens (https://bitcointalk.org/index.php?action=profile;u=314792) but it was last updated 2 month ago.
[1] [SCAM ALERT] List 220+ scam websites (Updated 01.June) (https://bitcointalk.org/index.php?topic=5201588.msg53079027#msg53079027)

I wonder if reporting these website to google are really effective or it's just a waste of time. I have read an old post that these reported sites still remain on google search.

I don't think it's a waste of time, it's better to report them so that Google will take notice, otherwise they won't block the site on their platform.

The problem is that they are really slow in reacting to such reports, unless the reports coming are many and maybe they will take actions about it.

I reported it to Google/Namecheap, let's see how it goes.


Title: Re: {Warning}: Fake Coinbase website
Post by: DdmrDdmr on August 08, 2020, 02:07:03 PM
The site seems to be "empty" now (at least, all I get now is a blank "Index Of" type page). I don’t know if the OP knows how this fake site tried to spread (i.e. Add, Twitter, facebook, link on articles, etc.). This would always be an interesting piece of information, since it would pinpoint the access route, and that is valuable information to train people’s awareness and vivid eye detection.


Title: Re: {Warning}: Fake Coinbase website
Post by: 20kevin20 on August 08, 2020, 03:21:21 PM
Actually, there is a huge list of scam website created by @examplens (https://bitcointalk.org/index.php?action=profile;u=314792) but it was last updated 2 month ago.
[1] [SCAM ALERT] List 220+ scam websites (Updated 01.June) (https://bitcointalk.org/index.php?topic=5201588.msg53079027#msg53079027)

I wonder if reporting these website to google are really effective or it's just a waste of time. I have read an old post that these reported sites still remain on google search.
That thread, along with a scam avoidance guide, would do great as a sticky imo.

I mostly don't even bother doing anything for Google anymore. I honestly sometimes really wish they'd get flooded by cyberthieves just so that a larger number of people finally decide to abolish it.


Title: Re: {Warning}: Fake Coinbase website
Post by: coupable on August 08, 2020, 11:47:34 PM
I don't think it's a waste of time, it's better to report them so that Google will take notice, otherwise they won't block the site on their platform.
Already reported using googlesafebrowsing and send a link of this thread to the coinbase help center using the chat-bot.

I would also like to mention here that according to dnstwister (https://dnstwister.report/), there are already 168 domains similar to coinbase official domain. Check this link: https://dnstwister.report/search?ed=636f696e626173652e636f6d


Title: Re: {Warning}: Fake Coinbase website
Post by: Baofeng on August 09, 2020, 09:58:56 PM
Ok, it seems that the websites has been blocked already:

on Firefox:

https://i.imgur.com/5YndvxH.png

On Chrome, (I have EAL installed)

https://i.imgur.com/P7DHJRH.png

On Opera/Brave:

https://i.imgur.com/nlCEEg1.png

On Safari:

https://i.imgur.com/7tyZwsO.png

Good job to those who have reported it.