Bitcoin Forum

Economy => Scam Accusations => Topic started by: CryptoYar on August 15, 2020, 06:06:00 AM



Title: [Alert] Phishing websites
Post by: CryptoYar on August 15, 2020, 06:06:00 AM
What happened: This is a phishing website, if someone generates a wallet here, then it is possible that his wallet gets hacked.

Website:
Code:
https://etcwallet.net/

Archived: https://archive.vn/7G9XZ

https://i.ibb.co/Qc7vL14/f6fc06c6ed505dce46eae10fd48f3a744e74e5f2471d46885f7a5d9eaa67a816.png

https://i.ibb.co/g4Sf3tS/Screenshot-20200814-161921.jpg
Virustotal (https://www.virustotal.com/gui/url/f6fc06c6ed505dce46eae10fd48f3a744e74e5f2471d46885f7a5d9eaa67a816/summary)

Quote
(p)
Registrar Status   ok
Dates   481 days old
Created on 2019-04-21
Expires on 2022-04-21
Updated on 2020-08-03     
Name Servers   DNS.FASTDNS24.COM (has 53,261 domains)
DNS2.FASTDNS24.ORG (has 320 domains)
DNS3.FASTDNS24.EU (has 93 domains)
DNS4.FASTDNS24.LINK (has 104 domains)
https://whois.domaintools.com/etcwallet.net


Some Tips: We often do not check before creating an account on the website whether the account I am creating is real or fake, I think we should definitely check it as this is the only way we can avoid scams and hacks.



CHANGELOGS
Code:
https://bitcointalk.org/index.php?topic=5268976.msg55113269#msg55113269

https://bitcointalk.org/index.php?topic=5268976.msg55176216#msg55176216

https://bitcointalk.org/index.php?topic=5268976.msg55312176#msg55312176

https://bitcointalk.org/index.php?topic=5268976.msg56044521#msg56044521

https://bitcointalk.org/index.php?topic=5268976.msg57665490#msg57665490

https://bitcointalk.org/index.php?topic=5268976.msg58908577#msg58908577


Title: Re: [Alert] Phishing websites
Post by: CryptoYar on September 02, 2020, 06:49:18 AM
What happened: CLO coin phishing wallet, If you login with your private key on this website then your private key will be stolen.

Website:
Code:
https://www.clowallet.network/

Archived: https://archive.vn/oaou5

https://i.ibb.co/DYHwj5z/image.png
https://i.ibb.co/TYdVBrX/Screenshot-20200902-113757.jpghttps://i.ibb.co/D52xRDs/Screenshot-20200902-113734.jpg
www.virustotal.com (https://www.virustotal.com/gui/url/de62bdae79efefa48644b0279c98ca948dd9aaf14e68c0847f93d45b4ab363a6/summary)

Quote
465 days old
Created on 2019-05-25
Expires on 2021-05-25
Updated on 2020-07-09
https://whois.domaintools.com/clowallet.network


Title: Re: [Alert] Phishing websites
Post by: hugeblack on September 02, 2020, 07:40:20 AM
After entering the password, the site asks you to download a file, I have not tried it, but it is dangerous to download that file or create any new wallet.
I tried to set up an offline wallet, but it seems that their servers already know the private key. Also, it is dangerous to generate the password using unknown websites or closed source unknow wallet.
Finally, as you mentioned, the website design can be found in many sites.


Title: Re: [Alert] Phishing websites
Post by: CryptoYar on September 02, 2020, 09:59:22 AM
~snip~
Finally, as you mentioned, the website design can be found in many sites.
Of course, the design of these websites is the same, just the name has changed, we can assume that these websites are controlled by the same group.

However, I am going to inform the Callisto Network team about this, hope that people stay away from this website. Thank you


Title: Re: [Alert] Phishing websites
Post by: CryptoYar on September 11, 2020, 02:19:25 PM
What happened: DBIX wallet phishing website. Please stay away from this website.

Website:
Code:
https://dbix.link/

Archived: https://archive.vn/uQxzn

https://i.ibb.co/yhbm4sp/image.png

https://i.ibb.co/9cxz350/image.png
Virustotal (https://www.virustotal.com/gui/url/4cb7438d1226cf69021af7068966f790da3bdb7783dfb9ac8ad8d4eee2063493/detection)

Quote
Registrar Status   clientTransferProhibited
Dates   583 days old
Created on 2019-02-06
Expires on 2021-02-06
Updated on 2020-03-22

https://whois.domaintools.com/dbix.link


Title: Re: [Alert] Phishing websites
Post by: CryptoYar on October 04, 2020, 09:01:07 AM
What happened: It is aka coin malicious online wallet. Please do not use your private keys on this website.

Website:
Code:
https://myakawallet.com

Archived: https://archive.vn/kPPxV

https://i.ibb.co/1z8N5VW/862a6a73f2541494ff2da7088b21dca84757ed2a6d96ac1961dbf2a16c5c7745.png

https://i.ibb.co/FnQ0R3g/Screenshot-20201004-120503.jpghttps://i.ibb.co/TcjVprp/Screenshot-20201004-120531.jpg

Quote
Registrar Status   clientTransferProhibited
Dates   592 days old
Created on 2019-02-20
Expires on 2021-02-20
Updated on 2020-02-20
https://whois.domaintools.com/myakawallet.com


Title: Re: [Alert] Phishing websites
Post by: CryptoYar on December 30, 2020, 09:21:58 AM
What happened: Phishing wallet of Expanse ( EXP ) coin

The use of a web wallet has always been very risky, but there are some websites whose purpose is only to steal your private key. so please stay away from such website,

Website:
Code:
https://expwallet.net


Archived: https://archive.vn/aKYcy

https://i.ibb.co/3h6JWpX/32cd47680c614e421fc401c5220e1f08a179585d5b54220fe7faa47a7e807dac.pnghttps://i.ibb.co/WvjKQPt/Screenshot-20201230-134733.jpg

https://i.ibb.co/Z86xBbH/Screenshot-20201230-131704.jpghttps://i.ibb.co/mGVqb2P/Screenshot-20201230-131635.jpg

Quote
Dates   578 days old
Created on 2019-06-01
Expires on 2021-06-01
Updated on 2020-06-03

whois  (https://whois.domaintools.com/expwallet.net) | | virustotal (https://www.virustotal.com/gui/url/faf347a0e9cbd8a08f030b70a58b79737985a3df9d3f9843a3606325ee99c125/detection)


Title: Re: [Alert] Phishing websites
Post by: aioc on January 01, 2021, 11:37:24 PM
Quote
Dates   578 days old
Created on 2019-06-01
Expires on 2021-06-01
Updated on 2020-06-03
This is a big and serious concern Expanse developers  should address and do something to take down this phishing Expanse wallet, it will harm their reputation if something like this happens, or they should issue a warning to their forum and homepage, or better to report it to their web host or domain registrar, why it lasted for 500 days is really a big concern.


Title: Re: [Alert] Phishing websites
Post by: Lorence.xD on January 02, 2021, 06:53:07 AM
After entering the password, the site asks you to download a file, I have not tried it, but it is dangerous to download that file or create any new wallet.
If you do not mind to explore a little more about this website, you can try doing it in a Virtual Machine and do what was instructed, to make sure that you are secure you can do a double layered Virtual Machine. I am not that tech savvy but a Youtuber that I am following is doing this kinds of stuff that involves downloading suspicious files and getting attacked by a ransomware.
Finally, as you mentioned, the website design can be found in many sites.
Website design is the biggest giveaway if you are suspicious of one, most scam websites do not even change the template or texts on the website to at least sell it to an average user.


Title: Re: [Alert] Phishing websites
Post by: CryptoYar on January 07, 2021, 07:42:09 PM
What happened: Blockchain wallet phishing page


Website:
Code:
https://blockchainsupportwalletsync.com/


Archived: https://archive.vn/3J6tP

https://i.ibb.co/NCLsp3k/image.png[/url]

https://i.ibb.co/3spv3Xr/Screenshot-20210108-002535.jpghttps://i.ibb.co/sRySr0G/Screenshot-20210108-002444.jpg


Quote
Registrant   WhoisGuard Protected
Registrant Org   WhoisGuard, Inc.
Registrant Country   pa
Registrar   NAMECHEAP INC NameCheap, Inc.
IANA ID: 1068
URL: http://www.namecheap.com
Whois Server: whois.namecheap.com

(p)
Registrar Status   addPeriod, clientTransferProhibited
Dates   53 days old
Created on 2020-11-15
Expires on 2021-11-15
Updated on 0000-12-31


Virustotal (https://www.virustotal.com/gui/url/6f25c2219e19a7222f4a75f4d5b941cc5301c219f7a806267019553915532aff/detection) | | Whois (https://whois.domaintools.com/blockchainsupportwalletsync.com)


Title: Re: [Alert] Phishing websites
Post by: CryptoYar on August 11, 2021, 01:41:09 AM

What happened:
WalletConnect phishing website



Website:
Code:
http://walletconnectssupport.com


Archived: https://archive.vn/trOY8

https://i.ibb.co/c6KHpv0/b93b671c5fe51bef091038a7c4bf672c1f830a4eec9e78502c1eabf04a3522b7.png


Quote
Dates   120 days old
Created on 2021-04-12
Expires on 2022-04-12
Updated on 0000-12-31


Whois (https://whois.domaintools.com/walletconnectssupport.com)




Real website: https://walletconnect.org/


Title: Re: [blockchain-fix.com] Phishing website
Post by: CryptoYar on January 05, 2022, 02:45:22 PM
What happened: another phishing website that asks you your private key.

Website
Code:
https://blockchain-fix.com/wallets.html

Domain info
Quote
Dates   6 days old
Created on 2021-12-30
Expires on 2022-12-30
Updated on 2021-12-30

https://web.archive.org/web/20220105143732/https://blockchain-fix.com/wallets.html

https://i.ibb.co/Msvcckn/26a97b938341cd774882c3927f00f36d7fa373cdb571e0e49408d9ec0e8b59a4.png



Title: Re: [blockchain-fix.com] Phishing website
Post by: ScamViruS on January 05, 2022, 07:47:49 PM
What happened:another phishing website that asks you your private key.

Website
Code:
https://blockchain-fix.com/wallets.html

Scammers are trying in various ways to steal the wallet information of crypto users. Every day scammers are creating phishing websites using different names and they are trying to steal wallet information in different ways. New crypto users should be able to search the internet for anything they are aware of so as not to fall into the trap of phishing websites.


Title: Re: [Alert] Phishing websites
Post by: examplens on January 10, 2022, 11:54:45 AM
Nice work OP. I hope this helps someone, though I am so sceptical. people very rarely check where they leave data and especially do not check the credibility of the site.
I have one suggestion for you. Can you add something like "update log" to the first post? this would be very useful, especially if the thread expands.