Chainlink phishing SCAM - chianlink.io 🔺

[dkbit98]

What happened: fake Chainlink phishing website - chianlink.io



Website: https://chianlink.io/
Archived:
https://web.archive.org/web/20191023225418/https://chianlink.io/staking/

Domain Name: CHIANLINK.IO
Registry Domain ID: D503300001182008932-LRMS
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: www.namecheap.com
Updated Date: 2019-10-16T11:27:15Z
Creation Date: 2019-10-16T11:27:04Z
Registry Expiry Date: 2020-10-16T11:27:04Z

Fake blog: https://blog.chianlink.io

Fake wallet: https://wallet.chianlink.io/
archived: https://web.archive.org/web/20191023230624/https://wallet.chianlink.io/

They are asking for your Ethereum private keys. Pure phishing SCAM.

 

[dkbit98]

Update:

Reported to google, symantec and metamask

And metamask blacklisted this phishing scam website

[Chikito]

Update:
Reported to google, Symantec and metamask

I see the site doesn't appear and suspended



We have to careful IP address: 198.54.115.191
they always change their domain to open scamming people again
https://www.virustotal.com/gui/ip-address/198.54.115.191/relations

2019-10-26-tshukwasolar.com
2019-10-26-30daysofgratitude.live
2019-10-25-remodelingkirklandwa.com
2019-10-25-jordanyep.com
2019-10-25-www.jordanyep.com
2019-10-25-buyredbull.ca
2019-10-25-www.buyredbull.ca
2019-10-25-huntinghoop.com
2019-10-25-gacimonline.com
2019-10-25-www.impact2050.com

and make another the virus

https://www.virustotal.com/gui/url/13f373f670b993809d305494cb3c55a4cba246e02d00b2bf09ed601fc5d23812/detection

[sikke]

Good job, OP. Probably directly contributed to them getting banned from their web host.

Anyhow, this is a very obvious example of a phishing scam. There are much more sophisticated ones which take advantage of certain non-ASCII codes that appear on browsers as ASCII text to exactly reproduce what a site looks like (there are probably hundreds of them for exchanges alone).

Just don't click on any google ads that pop up on search results, nor blindly trust on any clickable link that claim to be the official one.

[dkbit98]

We have to careful IP address: 198.54.115.191
they always change their domain to open scamming people again
https://www.virustotal.com/gui/ip-address/198.54.115.191/relations

Thanks for adding this information.

Good job, OP. Probably directly contributed to them getting banned from their web host.

Yes, I was fast to report them everywhere I could to ban them as fast as possible.
I am happy with results