Print Page - {Warning} Fake WalletConnect clone site

This is probably the inspiration of the scammers when creating the Be careful with this so called Integration Wallet website (https://bitcointalk.org/index.php?topic=5308513.0) by @Jating because we have the original: https://walletconnect.org/wallets/.

But then again, scammers created a similar looking website. Take note of the "s" in the name,

Phishing Site:

Code:

https://walletconnects.org/data/index.php

https://i.imgur.com/rDMjC78.png

Archived: https://archive.is/RzT48

Quote

Whois Record for WalletConnects.org
Registrant Org    WhoisGuard, Inc.
Registrant Country    pa
Registrar    NameCheap, Inc.
IANA ID: 1068
URL: http://www.namecheap.com
Whois Server: whois.namecheap.com

(p)
Registrar Status    serverTransferProhibited
Dates    23 days old
Created on 2020-12-22
Expires on 2021-12-22
Updated on 2020-12-22

Name Servers    DNS1.NAMECHEAPHOSTING.COM (has 1,007,460 domains)
DNS2.NAMECHEAPHOSTING.COM (has 1,007,460 domains)


Tech Contact    —
IP Address    162.0.209.221 - 72 other sites hosted on this server

So I'm expecting that these criminals are going to create a lot of these wallet integration clones moving forward, so this is a warning already.

This is the new scam tactic now, there was similar one reported some days ago

Be careful with this so called Integration Wallet website
https://bitcointalk.org/index.php?topic=5308513.0

I believe such sites will ask for seed phrase which will be the means of scamming people by using victims seedphrase to steal from their wallet after compromising the wallet, and it will be bad if someone give such sites any of the seed phrase of any of his/her wallet having bitcoin and other funds, all the bitcoin and other funds will just be completely gone.

They are the season of scammers because many beginners rush into the market without thinking about the consequences of their investments.
I do not expect that such scam will stop. Therefore, it is a primary matter that all these topics be grouped into one topic and that they be reported to contribute to its closure.

URL name must be checked multiple times and report that scam site.

Thanks for the mentioned, yes, the real website could have been given them the idea to create such 'integration wallet' that I initially discovered. Much easier for them to trap crypto enthusiast as everything is set into one website.

But very dangerous if you haven't had the experience and not checking if the URL is correct or not.

There's a similar scam wallet out there and it's still active

Code:

https://walletsconnect.online/

^ DO NOT OPEN

A seven year crypto veteran has fallen victim to that website. He committed a rookie mistake of giving out his private key.
https://i.ibb.co/d5WftZT/Untitled.png
(source) (https://twitter.com/bitcoin_dad/status/1348692662170251264)

I guess there will be more that will come out in the coming days.

Another reminder:
1. Double check the handle of telegram support.
2. Double check handles of exchanges that will offer help. The guy was about to fall victim to another scam when a scammer pretended to be from HUOBI exchange.

Real account: https://twitter.com/HuobiGlobal
FAKE account: https://twitter.com/HuboiGIobaI (Please report)
https://i.ibb.co/Q8hsnx9/Untitled.png
source (https://twitter.com/bitcoin_dad/status/1348697980241465345)

The scammers select the names of these fake websites in such a way that if the people are a little unaware, they will fall prey to these fake websites. Because there are many people who do not check the url well before using any website and wallet, which is very dangerous for them. So everyone should check the url of that website well before using any website. Thank you @Baofeng, after this warning of yours, many new crypto users will probably avoid falling into this trap.

LOL, one stop shop for scammers, if you own at least one wallet in the list and you get trap, ouch.

So yeah, this is probably the latest in the bag of tricks from this criminals, and I don't know how it is possible for someone like what @Bttzed03 will fall for this scheme. That's why we really need to check everything, not just visually, use our common sense at all times.

The integration wallet now is indeed the main target if we don't pay attention to it in more detail then we will be trapped into their pool, all efforts have been made I see this is indeed the most attractive target maybe only slightly changes the domain and of course we need to pay attention to the URL or at least compare before visiting her.

I think there will be many cases or victims of this finding so we realize ourselves with common sense, especially beginners who need to pay attention to, I am sure they will connect the integration wallet during the airdrop so that's a lot of cases.

the scammers continue to create phishing websites as mentioned by the OP. I don't know how many phishing websites like this I have found. The template used is 100% the same and the only difference is the website URL. if not vigilant it will fall into his trap. Phishing website links like this are usually found in several telegram groups, twitter and in email messages.

@Baofeng, I would like to report a similar phishing site:

Code:

https://walletconnecl.org/wallets

Archive: https://archive.is/ARp7G

https://i.imgur.com/9TG2vbl.png

You can also add this to the growing lists:

And as others have said, this could the next wave of scams because we have move to such wallet integrations and as a result scammers are taking the opportunity again.

Code:

https://walletsconnect.top/

https://i.imgur.com/JAs1umf.png

Archive: https://archive.is/XPKjC

Quote

Registrant    REDACTED FOR PRIVACY
Registrant Org    N/A
Registrant Country    ng
Registrar    PDR Ltd
IANA ID: 303
URL: http://publicdomainregistry.com
Whois Server: whois.publicdomainregistry.com

(p)
Registrar Status    clientTransferProhibited
Dates    13 days old
Created on 2021-01-23
Expires on 2022-01-23
Updated on 2021-01-29

Name Servers    NS1.VERCEL-DNS.COM (has 24,396 domains)
NS2.VERCEL-DNS.COM (has 24,396 domains)


Tech Contact    REDACTED FOR PRIVACY
REDACTED FOR PRIVACY,
REDACTED FOR PRIVACY, REDACTED FOR PRIVACY, REDACTED FOR PRIVACY, REDACTED FOR PRIVACY
(p) (f)
IP Address    76.76.21.21 - 66,022 other sites hosted on this server

New one, although this is 25 days old already.

Code:

https://www.integratewallet.live/

https://i.imgur.com/8icm9TY.png

Archive: https://archive.is/76fQW

Quote

Registrant    REDACTED FOR PRIVACY
Registrant Org    Integration Wallet
Registrant Country    ng
Registrar    GoDaddy.com, LLC
IANA ID: 146
URL: http://www.godaddy.com/domains/search.aspx?ci=8990
Whois Server: whois.godaddy.com/

(p)
Registrar Status    clientDeleteProhibited, clientRenewProhibited, clientTransferProhibited, clientUpdateProhibited
Dates    25 days old
Created on 2021-01-13
Expires on 2022-01-13
Updated on 2021-01-18

Name Servers    DNS1.P06.NSONE.NET (has 2,312,195 domains)
DNS2.P06.NSONE.NET (has 2,312,195 domains)
DNS3.P06.NSONE.NET (has 2,312,195 domains)
DNS4.P06.NSONE.NET (has 2,312,195 domains)


Tech Contact    REDACTED FOR PRIVACY
REDACTED FOR PRIVACY,
REDACTED FOR PRIVACY, REDACTED FOR PRIVACY, REDACTED FOR PRIVACY, REDACTED FOR PRIVACY
(p) (f)
IP Address    54.215.113.85 - 26,206 other sites hosted on this server

Latest from this criminals:

This is just a reminder as this kind of fake websites are now polluting our crypto space.

Code:

https://connectionlivewallet.org/

https://i.imgur.com/qREAFoG.png

Archive: https://archive.is/J0hQE

Quote

Registrant Org    WhoisGuard, Inc.
Registrant Country    pa
Registrar    NameCheap, Inc.
IANA ID: 1068
URL: http://www.namecheap.com
Whois Server: whois.namecheap.com

(p)
Registrar Status    serverTransferProhibited
Dates    12 days old
Created on 2021-01-28
Expires on 2022-01-28

IP Address    76.76.21.21 - 66,603 other sites hosted on this server

Another similar looking website.

Code:

https://ewalletconnect.link/en/

https://i.imgur.com/NYJhb5L.png

Archive: https://archive.is/DRc1x

Quote

Dates    4 days old
Created on 2021-02-26
Expires on 2022-02-26
Updated on 2021-02-26

Name Servers    DNS1.NAMECHEAPHOSTING.COM (has 1,039,518 domains)
DNS2.NAMECHEAPHOSTING.COM (has 1,039,518 domains)


Tech Contact    REDACTED FOR PRIVACY
REDACTED FOR PRIVACY,
REDACTED FOR PRIVACY, REDACTED FOR PRIVACY, REDACTED FOR PRIVACY, REDACTED FOR PRIVACY
IP Address    198.54.115.110 - 570 other sites hosted on this server

Another phishing website of walletconnect.org

Code:

https://walletconnect.cc/

https://i.ibb.co/QX3J1Qy/image.png

Archive: https://archive.vn/WipPP

Quote

Registrar Status clientTransferProhibited
Dates 12 days old
Created on 2021-02-19
Expires on 2022-02-19
Updated on 0000-12-31

https://whois.domaintools.com/walletconnect.cc

Another phishing site again,

Code:

https://walletsconnect.net/

https://i.imgur.com/OPFCeXQ.png

Archived: https://archive.is/gCIoX

Quote

Dates    37 days old
Created on 2021-01-30
Expires on 2022-01-30
Updated on 0000-12-31

Name Servers    NS1.DNS-PARKING.COM (has 942,170 domains)
NS2.DNS-PARKING.COM (has 942,170 domains)


Tech Contact    WhoisGuard Protected
WhoisGuard, Inc.
P.O. Box 0823-03411,
Panama, Panama, pa

(p) (f)
IP Address    45.87.81.104 - 57 other sites hosted on this server

New one, three day old fake and phishing clone site

Code:

https://smartintegration.live/

https://i.imgur.com/v8M2nRe.png

Archive: https://archive.is/2zJ3s

Quote

Registrant    REDACTED FOR PRIVACY
Registrant Org    Integration Wallet
Registrant Country    ng
Registrar    GoDaddy.com, LLC
IANA ID: 146
URL: http://www.godaddy.com/domains/search.aspx?ci=8990
Whois Server: whois.godaddy.com/

(p)
Registrar Status    addPeriod, clientDeleteProhibited, clientRenewProhibited, clientTransferProhibited, clientUpdateProhibited
Dates    3 days old
Created on 2021-03-08
Expires on 2022-03-08
Updated on 2021-03-08

Name Servers    DNS1.P06.NSONE.NET (has 2,353,801 domains)
DNS2.P06.NSONE.NET (has 2,353,801 domains)
DNS3.P06.NSONE.NET (has 2,353,801 domains)
DNS4.P06.NSONE.NET (has 2,353,801 domains)


Tech Contact    REDACTED FOR PRIVACY
REDACTED FOR PRIVACY,
REDACTED FOR PRIVACY, REDACTED FOR PRIVACY, REDACTED FOR PRIVACY, REDACTED FOR PRIVACY
(p) (f)
IP Address    138.68.234.180 - 11,256 other sites hosted on this server

@Baofeng - you can check this new clone site

Code:

https://waletconnect.com/

https://i.imgur.com/1dXACds.png

Quote

Dates    20 days old
Created on 2021-02-27
Expires on 2022-02-27
Updated on 0000-12-31

(p) (f)
IP Address    192.64.117.204 - 259 other sites hosted on this server

Another one of them,

Code:

https://walletliveconnection.com/

https://i.imgur.com/tnp3CQV.png

Archive: https://archive.is/1Uiy8

Quote

Dates    29 days old
Created on 2021-02-23
Expires on 2022-02-23
Updated on 2021-02-23

IP Address    162.222.226.120 - 407 other sites hosted on this server

Latest fake and phishing sites. So again just be careful out there, cyber threat actors are everywhere.

Code:

https://activatewallet.live/index.html

https://i.imgur.com/1Qh5MrO.png

Archive: https://archive.is/MlHwT

Quote

Dates    33 days old
Created on 2021-04-02
Expires on 2022-04-02
Updated on 2021-04-25

Name Servers    AMANDA.NS.CLOUDFLARE.COM (has 19,031,614 domains)
HENRY.NS.CLOUDFLARE.COM (has 19,031,614 domains)


Tech Contact    REDACTED FOR PRIVACY
REDACTED FOR PRIVACY,
REDACTED FOR PRIVACY, REDACTED FOR PRIVACY, REDACTED FOR PRIVACY, REDACTED FOR PRIVACY
(p) (f)
IP Address    104.21.44.195 - 388 other sites hosted on this server

This is most likely another one of those sites

Code:

https://walletconnectfast.com/wallet/walletconnect

Sorry, no image cause I don't want to get my wallets cleaned again. Feel free to update it if you feel it should be here.

Quote

Domain Name: WALLETCONNECTFAST.COM
Registry Domain ID: 2614488307_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: http://www.namecheap.com
Updated Date: 2021-06-04T03:26:20Z
Creation Date: 2021-05-24T06:46:30Z
Registry Expiry Date: 2022-05-24T06:46:30Z
Registrar: NameCheap, Inc.
Registrar IANA ID: 1068
Registrar Abuse Contact Email: abuse@namecheap.com
Registrar Abuse Contact Phone: +1.6613102107
Domain Status: clientHold https://icann.org/epp#clientHold
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Name Server: DNS1.NAMECHEAPHOSTING.COM
Name Server: DNS2.NAMECHEAPHOSTING.COM
DNSSEC: unsigned
URL of the ICANN Whois Inaccuracy Complaint Form: https://www.icann.org/wicf/
>>> Last update of whois database: 2021-06-04T09:35:39Z <<<

https://uk.godaddy.com/whois/results.aspx?checkAvail=1&domain=https%3A%2F%2Fwalletconnectfast.com%2Fwallet%2Fwalletconnect

Stay safe!

Bitcoin Forum

Economy => Scam Accusations => Topic started by: Baofeng on January 14, 2021, 12:21:54 PM