Bitcoin Forum

Lately I've been fascinated finding crypto phishing related website. So I wrote this simply guide on how to report them if ever you find one.

Internet Explorer:

1. Click on the Settings Icon
2. Select Safety then click on Report unsafe website
3. Click I think this is a phishing site
4. Then follow the instructions
5. Click Submit

https://talkimg.com/images/2023/10/19/RpV0J.png

Firefox:

1. Go to Help
2. Then select Report Deceptive Site..
3. Then enter the phishing website on the URL textbox
4. Click I'm not a robot
5. Put some Comments (Optional)
6. Click Submit Report

https://talkimg.com/images/2023/10/19/RprmC.png

Google Chrome

1. Go to url: https://safebrowsing.google.com/safebrowsing/report_phish/?hl=en
2. Enter the phishing site on the URL textbox
3. Click I'm not a robot
4. Write down comments on Additional details about the phishing violation (Optional)
5. Click Submit Report

https://talkimg.com/images/2023/10/19/Rp1Jb.png

Alternatively, you can also report phishing sites to the following:

1. US-CERT - mailto: phishing-report@us-cert.gov
2. Symantec - https://symsubmit.symantec.com/
3. Microsoft - https://www.microsoft.com/en-us/wdsi/support/report-unsafe-site
4. Netcraft - https://report.netcraft.com/report
5. Anti-Phishing Working Group (APWG) - mailto: reportphishing@apwg.org

You can also used domain and IP look up tools to search for the phishing site Registrar and report the abuse to them so that the website will be taken down immediately.

1. https://who.is/
2. http://research.domaintools.com/

This is very informative.

It is sad that this feature is unkown to many people. If everyone  used that button in every phising, the web would be much cleaner.

I believe this is a great way to keep the web safer. We all do our part.

To be honest, I never knew that these browsers supports this kind of feature where you can report a phishing site. This means that the phishing sites will be blocked. This will lessen the phishing sites out there. It can't be help that there will be another phishing sites. It's not only in crypto world have phishing sites but also online games and more.

Thanks for the info, just want to add something, if you receive a phishing link directly to your email you can also directly report it from there.
I am using gmail for sure other email providers have this option too like yahoo.

This image is just for example:

https://i.imgur.com/F9L2nNV.jpg

I also found this website about cryptocurrency where you can also report such phishing websites or scam websites: https://cryptoscamdb.org/
It is former https://etherscamdb.info/.
It's quite good since they are more likely focus on cryptocurrencies.
Btw, also much useful is what OP said on the last part of his first post, reporting it to domain registrar. Since they can take down the website as soon as possible once the website found guilty.

TravelMug, thank you for the guide post that gives me steps to investigate sites and report them if they are phishing.

I know any report from us will be "a sand in a desert" but without report contributions, the world will be burried by phishing sites.

I am not surprised that browsers have this feature where you can report phishing sites and how to report phishing sites. When I still don't know cryptocurrency I have know what phishing site is already because of game where a player create a site that looks like the real one and the goal is to steal my username and password.

To be true I never knew about this where we can do such things.I will definitely try on different explorers and will report the scam websites..thank you.

Yes, not all people are actually checking what you can do with the browser used and would only surf and install browser extension without knowing those feature that you can report a phishing sites. I am glad that op created this thread for making us know that we can also report phishing sites too.

How to save this post?

You can either Bookmark this through your browser, or click on 'Watch' at the top of the thread.

To check on all Watched threads, just navigate to the Watchlist on the top-left of the forum.

Not many people understand it, cybersecurity and protection are important as much as the Internet, Bitcoin, and Blockchain technology altogether.
Thank you for this thread.

Yes, you are right, that's why I wrote this guide to really help others there, specially those newbies that are still just starting their journey.

And now more than ever, we really need to be very careful as the attacks are ramping up because obviously the market is on a bull run and criminals wanted to trap us with those phishing and fake sites around. So as a community we need to be vigilant and then reports sites that we discover and found.

I will add that many users sometimes will not be able to immediately understand which site they are on. There are many tutorials on how to detect phishing sites, I also want to add a simple check from Google. Here you can check whether the site contains dangerous elements or not

https://transparencyreport.google.com/safe-browsing/search?url=https:%2F%2Fbitcointalk.org%2F&hl=en
https://pr-cy.ru/safe-browsing/
https://yandex.ru/safety/
https://wpsec.com/
https://wprecon.com/
https://hackertarget.com/wordpress-security-scan/
https://quttera.com/
https://safeweb.norton.com/
https://www.virustotal.com/gui/

This is maybe not a subject for this thread, but a crypto phishing scam opens some further questions towards security when the blockchain technology is in use.
For example to find a solution to protect your cryptocurrency by some kind of smart contract. There I have a suggestion and a few questions.

- In the wallets like Metamask, Portis, MCW..etc., the private keys and "send function" should be protected by another password.

- How to win over the situation when a hacker place a resend monitoring bot? Is it possible somehow to check if the resend monitoring bot is already plugged in the hacked account?
https://ethereum.stackexchange.com/questions/83718/how-to-retrieve-erc20-from-a-hacked-address-monitored-by-a-bot

- How to save coins/tokens which are already locked in defi or some other contract when a crypto account gets compromised?

- Is it possible somehow to connect a VPN or IPFS protocol and cryptocurrency account at the request of the user?

I'm sure the solutions for these problems can be resolved by the responsible people in the wallet companies and some smart blockchain developers.

Attainable Hacks on Keystore Files in Ethereum Wallets - A Systematic Analysis
https://www.researchgate.net/publication/337610456_Attainable_Hacks_on_Keystore_Files_in_Ethereum_Wallets-A_Systematic_Analysis

The Little-Known Ways Ethereum Reveals User Location Data
https://www.coindesk.com/the-little-known-ways-ethereum-reveals-user-location-data

This post is extremely helpful and informative.

I had actually no idea that you can use your web browser to report a phising website. I only knew that you need to go to Google or Bing to report them.

I am assuming using the browser reporting link these websites will get reported to all major search engines.

Thanks for sharing.

As far as I know reports do not affect search results, but in case the report is marked as "good" anyone who visits the phishing link gets the message that the site is potentially dangerous - deceptive, see this link (https://user-media-prod-cdn.itsre-sumo.mozilla.net/uploads/images/2018-09-14-19-52-24-d08876.png).

Of course, this is just a warning that some users ignore and still choose to visit the site - but some people simply can't be helped because they are the biggest danger to themselves.