Bitcoin Forum

I'm just giving the community a heads-up because I've research and found bustabit.com phishing site.

(1)

https://i.imgur.com/Z2oRCS1.png

Archived for reference: https://archive.is/gLCHG


(2)

https://i.imgur.com/WsW7V5O.png

Archive for reference: https://archive.is/FuLTY


So please be careful with this kind of malicious sites specially for us gamblers.

Good find, I myself has seen gambling phishing sites, FAKE dice2.win (https://bitcointalk.org/index.php?topic=5285826.0). And then we have, @DroomieChikito, Be Aware Phishing Roobet.com (https://bitcointalk.org/index.php?topic=5289987.0).

Bustabit is one of the most popular crash games so I'm not surprised that cyber criminals are baiting with this kind of phishing sites. So it's better to bookmark online gambling sites that we frequented so as not to fall for this kind of traps.

Did you report it already?

This is very dangerous site because the look and the feel is 100% perfect. And I'm sure this criminals are going to spread this through PM's in telegram and other social media sites that gamblers are frequented so we don't to have an consensus effort to bring this site very quick.

great find! both phishing is most likely created by the same person there is no difference between the two phishing site. it's a little worrying that this phishing site home page looks almost exactly identical to the original one except for a few differences.

the fake one shows you a login pop up with wrong icons when you click "play now", doesn't redirect you to the crash game and has a much thinner font on their house edge, wagered, bankroll and different amount of bankroll and wagered
https://i.imgur.com/ZwbSYAE.jpg

orginal bustabit:
thicker fonts
https://i.imgur.com/v8HMUHF.jpg

redirect you to the crash game when you click "play now" and has the correct icons when you pressed login after getting redirected to their crash game.
https://i.imgur.com/aZkFfub.jpg


just like what keramit said I suggest reporting or let the bustabit staff know about this phishing site.

People who do not bookmark the site will get a trap from the site, and they will not be suspicious since the domain is almost similar to bustabit. If we do not check or not thorough when we visit the site, we will get a scam by them and maybe the site will steal our money. It is important to be careful when we visit every site, not just the gambling websites.

Nice catch op! This is indeed a phishing website and it looks like the same as the real bustabit I tried to access it through my browser luckily it detects that it is a risky website.

Its easy to recognize if we look closely to the url but it can deceive  those users who use google  search and didn't pay close attention to the link they are clicking to. And this kind of warning posted here is a good warning for users who almost  forgot to check the site they mostly visit since  these phising site are just here waiting for the victims to locate and victimized them.

Even the URL of one of those phishing site is really hard to recognized because it is a homograph attack, so it's not that easy in the beginning.

Yeah, we have to take users who posted this kind of warning because we will never know if we are going to see this phishing site if we search bustabit through Google, (although not advisable, but still maybe there are some members who get get away with that practice because that's what we used to do).

ven though the Bustabit site is very popular and known in various pretty good game lists. There is no denying that there has been an influx of phishing which is very vulnerable to leaks. the criminals were able to outsmart to trap many people inside. This must be followed up, so that all members immediately withdraw and their assets .. before losing more.

Before there was Roobet and now Bustabit, I think scammers are targeting to copy known casino's website and get the credentials. This could be really dangerous for players who are not aware of the website and doesn't bother time checking the URL mostly are newbies luckily the OP managed to spot this website.

For obvious reasons, there could be two set of scammers here, and we have groups that specifically target crypto related online games and perhaps there's also targeted fiat online games as well. And also, there's a lot of money involved that's why scammers will make their way into created similar looking sites to trap their victims.  The Roobet find and this one is just a tip of the iceberg, there could be more that we need to discover and reported.

both site already listed on dnstwister; https://dnstwister.report/search?ed=62757374616269742e636f6d

I suggest to the owner to subscribing, so when a scammer creates a new similar, the sounds will alerting to take and look immediately. ( I don't a part of dnstwister)

---

IP Relationship; https://www.virustotal.com/gui/ip-address/2.57.89.12/relations

https://i.postimg.cc/ydC5VLv6/1.jpg

Fake BNB Giveaway.




IP Relationship; https://www.virustotal.com/gui/ip-address/185.224.138.89/relations

https://i.postimg.cc/63VPTCmr/2.jpg

phishing Buslabiit

Both IP should be tagged as a scammer

---

For sure, to take over your Bitcoin.

Was the website already down? If not what could be the ways or things we can do to turn down the website? Is there a way we could report it to the domain provider or the likes? I think as a player of Bustabit I have a responsibility to report this kind of website so it won't deceive others.

You see nowadays that more and more criminals engage in this type of practice. It is very good that people are alert and report this quickly on the site so that users can be warned.

need much time to take down the phishing, I was reported into https://safebrowsing.google.com/safebrowsing/report_phish/?hl=en you should also do that for quick response by Google.

Another way to take down the phishing is reporting into the provider domain, in this case, first phishing uses the public domain register, so report it to https://publicdomainregistry.com/phishing/.

you should report it also, it will be fast to take down if many people also report it.

I have reported it to their respective domain registrar.


If others wanted to report, here is the link:

https://publicdomainregistry.com/phishing/
https://abuse.registrar.eu/

This is a big help thanks for sharing! I'll report them too so they would know that it's an important case.

Good finding. Other then reporting here can we also report somewhere else so that the site is taken down ?
We know that this site is scam but many who do not follow bitcointalk or gamblers who directly visits the site may get scammed. Maybe its  time that trusted gambling site start to introduce 2fa.

It's ok to have a thread about Bustabit here and another one in the scam section, this is for gamblers awareness, here, Bustabit is a very popular gambling site and every popular gambling site are targeted for phishing we will see more phishing site on popular gambling site so we should be aware of it and be knowledgeable on the difference between a true site and a phishing site.

Thanks for reporting here, credits. I am not an active player on the site myself, but now others can be prevented from playing there.
You really see a lot of those phishing sites. That's the official name if I am not mistaken?

I already got a official response from one of my emails:


Max day that we will see the site suspended is on December 17. So I do hope that from this time and up to December 17, no one will fall for this trap.

Well there will be many more phishing sites that will copy well-known gambling sites because the group believes that with the target of big gambling sites they can make more money, therefore we have to be careful, especially in that URL which is very important, because the scamer will infiltrate where I put it the phishing link.
I saw only 2 well-known sites that were plagiarized by scammers so indeed this possibility can continue and increase which we will find later.

That's great, It was nice to see players cooperating with each other to share this kind of information and help the casinos to report phishing website like this. I've seen a lot of phishing website closed already thanks to the bitcointalk community.

What a greedy scammer, they almost copied the name and if the players will not be careful there is a big chance that they will fall to this kind of phishing site especially if they will hurry in logging in without checking carefully the details.

For bustabit players, it will be good if they will bookmark the website link so they can avoid using this phishing site knowing that we are only human and we are prone to mistakes. An extra i is the difference of their website link and if you will not carefully check it you will surely fall to the hands of the scammers. They almost copied everything in the landing page aside from the photo at the bottom of the page that is not displaying correctly in phishing site.

There will be actual victims that would just come out when they just use google search for searching one website. This is a very common strategy of these scammers and targets newbies that are careful how they browse on the web with the popular websites that they visit like bustabit. It also appears that there are phishing exchanges that everyone should be careful of.

Good job OP! I hope that they'll action on it as soon as possible so that nobody would see the phishing link anymore.

Wow domain hosters actually do this kind of things? Or maybe it depends on the domain hosting services that depend if they will suspend the website or not. Phishing sites or scam websites are mostly created using namecheap and I haven't seen them do any kind of action when it comes to suspending websites maybe that is why a lot of scammers are using it because aside from the accepting cryptocurrencies I think they don't care what kind of content you have in your website as long as you are paying them.

Good catch and I actually saw a similar one here https://bitcointalk.org/index.php?topic=5295450.0 it is really alarming how many scam sites are there now days and I think the only way to avoid these is either by bookmarking the websites you play or just enter the url directly because these scam sites are on the top of results on google so anyone can fall for it.

I hope that's true and it is removed.

Hopefully no one felt for this scam because players who play at bustabit must enter the url directly I mean why would anyone search google for the sites they already play at and if someone is registering then I think they can't get scammed so hopefully no damage done.

This is a very good find and I congratulate the OP for sharing this with the community, sometimes some other users may notice a phishing site and simply ignore it thinking no one is ever going to fall for it, but for the ones that have not been in the market as long as we have there is a real risk of being scammed by these people.

So I urge anyone that finds similar websites to share that with the community as it is the only way we have to reduce the number of scams in the market is by reporting the scammers so they do not get any profits out of this.

This is really good what you did right now , since we have a lot of people who might just directly search on the Google instead of going to the real website through the bookmarks or even the signatures. At least this time hackers tried to go through th effort of replicating the whole site , I found something weird on the internet also
https://bustabit.gb.net/ (https://bustabit.gb.net/)

This is really weird , the website is from Germany and apparently registered in panama , wait till you see their email address.

https://i.ibb.co/Pzxn2yB/Screenshot-2020-12-12-22-21-36-52.jpg (https://ibb.co/Hp7scym)

Now the problem is , apparently this website paid for their advertising, therefore they show up at the top whenever you try and search the normal website on google.

Now they are not actually the gaming website but they are trying to get clients through the name bustabit , when you open they have named their website bustta bit ... That's really funny for me , much like adidas and abibas ...

https://i.ibb.co/fFk0DyN/Screenshot-2020-12-12-22-24-25-84.jpg (https://ibb.co/LRxpNcg)

Now I don't know if things like these are allowed.

Much like :
https://i.ibb.co/87XVpYs/download-2.png (https://imgbb.com/)

But even though this is not gambling related website they are trying to use company's name.. that's sad tho , is this allowed ??

Common problem for most people specially who do try to find up things through google search will really most likely experienced these kind of phishing situation.

Ever in my life had victimized with phishing because I always memorize the domain name on a site which I do tend to deal with.When on the times that Im in doubt then
that's the time I do make some verification.

Phishing attempts isn't something new that's why we should really be careful.

Unfortunately phishing sites are often appear in the Internet. In most cases deceivers want to steal our accounts. And it`s very often when we log in the account and don`t check link of the site. To avoid phishing sites I just add trusted sites to the bookmarks starting from wallets and exchnages and ending casinos and sites where I make bets

Why it took too long to make the decision though, it's pretty obvious that this is a phishing and malicious site. Although they have their processes here, I respect that, but they should make this a priority, a 3 day window is already long in my opinion (after you file the case).

Anyhow, both of the sites are still active at this point. Again, it's good that you have posted it here so that everyone should be aware of it and I also found your post in their official ANN thread so they may also something on their side to bring this site down.

That's actually a good practice to bookmark websites or put them in the trusted websites I think this should be a habit of every internet users to avoid landing to phishing websites like this, isn't?

Yeah it should be a habit, but we really don't know if majority are really practicing or not, or just typing the site or doing some Google search which is very bad as this criminals might pay Google to pay an ads on top of the real website, thus making someone get phished.

So it's a safety precautions, or shall a say to really do safe practice by bookmarking our favourite sites we visited not just bustabit, but everything related to our crypto activities, i.e online wallets.

Hopefully most users would think of this mindset, unfortunately only few of them set this up as an optional actions. Precautionary measures is really a safe method of filtration towards unknown and danger sites, particular to phising sites who've used the names of popular gambling sites.
I would recommend users to verify the gambling site before registration, and if confirmed then you're safe to access their services.

That's still 4 days and if they make aggressive promotion, they can still victimize people, at least we have this thread here, and hopefully, those who are interested to invest in this gambling site they will do research and find this thread so they can save themselves,
it's better to create another one in the scam section for reference.

Bookmarking a website is good option to prevent from phishing, but it will be better if you not use Google and install Adblock. Because if you search any kind service or project using Google, it will show phishing sites first since they paid ads.

---

IMO this thread should be moved to scam accusations section.

Hackers always trying to catch up with those people who are un-careful not doing their job in making sure that they are visiting the right sites to deal their business, they mostly being penetrated without their knowledge, stealing their account information and messed up with their assets / belongings online.

Best to always check and be aware of those many phishing sites out there and keep yourself updated, bookmarking
the sites that you always use also helps avoiding those hackers.

I also saw this post in the gambling section before. Sad that the circles keep trying. The only question is which thread to post it to, would be best in both, if allowed? Then you can reach people via 2 channels to warn.

In any case, the domain will be discontinued from 17 December. Yet you can still scam a lot of people in 4 days, unfortunately. Let's hope it will be December 17th soon. It is understandable that they do not just take any domain off the air immediately

I found another one:


https://i.imgur.com/4t9X8aW.png

Archived: https://archive.is/SJ4T3

Phishing site creation seems to be gaining in popularity. You should see from the domain that something is wrong.
No doubt will be many more of these sites. Good job for the warning and posting guys.

The tendency to target a certain amount of users by creating phishing websites has now increased. They are trying to confuse crypto users by using the name of each popular platform. To stop their activities like this, we must resist their every effort.

Op has done a good job posting this phishing website here, which will be helpful for many new crypto users.

Good news, the first site has been taken down already.


As for the second site, I have received an email that it was taken down, but I can still access it so I may have to make a second email to call their attention again.

New phishing site:


https://talkimg.com/images/2023/11/18/FNllc.png

Archive: https://archive.is/lfO1n

Whois info: