[Alert] Phishing websites

[CryptoYar]

What happened: This is a phishing website, if someone generates a wallet here, then it is possible that his wallet gets hacked.

Website:

Code:

https://etcwallet.net/

Archived: https://archive.vn/7G9XZ




Virustotal

(p)
Registrar Status   ok
Dates   481 days old
Created on 2019-04-21
Expires on 2022-04-21
Updated on 2020-08-03     
Name Servers   DNS.FASTDNS24.COM (has 53,261 domains)
DNS2.FASTDNS24.ORG (has 320 domains)
DNS3.FASTDNS24.EU (has 93 domains)
DNS4.FASTDNS24.LINK (has 104 domains)

https://whois.domaintools.com/etcwallet.net


Some Tips: We often do not check before creating an account on the website whether the account I am creating is real or fake, I think we should definitely check it as this is the only way we can avoid scams and hacks.

CHANGELOGS

Code:

https://bitcointalk.org/index.php?topic=5268976.msg55113269#msg55113269

https://bitcointalk.org/index.php?topic=5268976.msg55176216#msg55176216

https://bitcointalk.org/index.php?topic=5268976.msg55312176#msg55312176

https://bitcointalk.org/index.php?topic=5268976.msg56044521#msg56044521

https://bitcointalk.org/index.php?topic=5268976.msg57665490#msg57665490

https://bitcointalk.org/index.php?topic=5268976.msg58908577#msg58908577

[CryptoYar]

What happened: CLO coin phishing wallet, If you login with your private key on this website then your private key will be stolen.

Website:

Code:

https://www.clowallet.network/

Archived: https://archive.vn/oaou5


www.virustotal.com

465 days old
Created on 2019-05-25
Expires on 2021-05-25
Updated on 2020-07-09

https://whois.domaintools.com/clowallet.network

[hugeblack]

After entering the password, the site asks you to download a file, I have not tried it, but it is dangerous to download that file or create any new wallet.
I tried to set up an offline wallet, but it seems that their servers already know the private key. Also, it is dangerous to generate the password using unknown websites or closed source unknow wallet.
Finally, as you mentioned, the website design can be found in many sites.

[CryptoYar]

~snip~
Finally, as you mentioned, the website design can be found in many sites.

Of course, the design of these websites is the same, just the name has changed, we can assume that these websites are controlled by the same group.

However, I am going to inform the Callisto Network team about this, hope that people stay away from this website. Thank you

[CryptoYar]

What happened: DBIX wallet phishing website. Please stay away from this website.

Website:

Code:

https://dbix.link/

Archived: https://archive.vn/uQxzn




Virustotal

Registrar Status   clientTransferProhibited
Dates   583 days old
Created on 2019-02-06
Expires on 2021-02-06
Updated on 2020-03-22

https://whois.domaintools.com/dbix.link

[CryptoYar]

What happened: It is aka coin malicious online wallet. Please do not use your private keys on this website.

Website:

Code:

https://myakawallet.com

Archived: https://archive.vn/kPPxV

Registrar Status   clientTransferProhibited
Dates   592 days old
Created on 2019-02-20
Expires on 2021-02-20
Updated on 2020-02-20

https://whois.domaintools.com/myakawallet.com

[CryptoYar]

What happened: Phishing wallet of Expanse ( EXP ) coin

The use of a web wallet has always been very risky, but there are some websites whose purpose is only to steal your private key. so please stay away from such website,

Website:

Code:

https://expwallet.net

Archived: https://archive.vn/aKYcy

Dates   578 days old
Created on 2019-06-01
Expires on 2021-06-01
Updated on 2020-06-03

whois | | virustotal

[aioc]

Dates   578 days old
Created on 2019-06-01
Expires on 2021-06-01
Updated on 2020-06-03

This is a big and serious concern Expanse developers  should address and do something to take down this phishing Expanse wallet, it will harm their reputation if something like this happens, or they should issue a warning to their forum and homepage, or better to report it to their web host or domain registrar, why it lasted for 500 days is really a big concern.

[Lorence.xD]

After entering the password, the site asks you to download a file, I have not tried it, but it is dangerous to download that file or create any new wallet.

If you do not mind to explore a little more about this website, you can try doing it in a Virtual Machine and do what was instructed, to make sure that you are secure you can do a double layered Virtual Machine. I am not that tech savvy but a Youtuber that I am following is doing this kinds of stuff that involves downloading suspicious files and getting attacked by a ransomware.

Finally, as you mentioned, the website design can be found in many sites.

Website design is the biggest giveaway if you are suspicious of one, most scam websites do not even change the template or texts on the website to at least sell it to an average user.

[CryptoYar]

What happened: Blockchain wallet phishing page


Website:

Code:

https://blockchainsupportwalletsync.com/

Archived: https://archive.vn/3J6tP

[/url]

Registrant   WhoisGuard Protected
Registrant Org   WhoisGuard, Inc.
Registrant Country   pa
Registrar   NAMECHEAP INC NameCheap, Inc.
IANA ID: 1068
URL: http://www.namecheap.com
Whois Server: whois.namecheap.com

(p)
Registrar Status   addPeriod, clientTransferProhibited
Dates   53 days old
Created on 2020-11-15
Expires on 2021-11-15
Updated on 0000-12-31

Virustotal | | Whois

[CryptoYar]

What happened:
WalletConnect phishing website


Website:

Code:

http://walletconnectssupport.com

Archived: https://archive.vn/trOY8

Dates   120 days old
Created on 2021-04-12
Expires on 2022-04-12
Updated on 0000-12-31

Whois



Real website: https://walletconnect.org/

[CryptoYar]

What happened: another phishing website that asks you your private key.

Website

Code:

https://blockchain-fix.com/wallets.html

Domain info

Dates   6 days old
Created on 2021-12-30
Expires on 2022-12-30
Updated on 2021-12-30

https://web.archive.org/web/20220105143732/https://blockchain-fix.com/wallets.html

[ScamViruS]

What happened:another phishing website that asks you your private key.

Website

Code:

https://blockchain-fix.com/wallets.html

Scammers are trying in various ways to steal the wallet information of crypto users. Every day scammers are creating phishing websites using different names and they are trying to steal wallet information in different ways. New crypto users should be able to search the internet for anything they are aware of so as not to fall into the trap of phishing websites.

[examplens]

Nice work OP. I hope this helps someone, though I am so sceptical. people very rarely check where they leave data and especially do not check the credibility of the site.
I have one suggestion for you. Can you add something like "update log" to the first post? this would be very useful, especially if the thread expands.