Bitcoin Forum
June 25, 2024, 10:28:47 AM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: [Scam Alert]: Fake MetaMask website  (Read 71 times)
TravelMug (OP)
Hero Member
*****
Offline Offline

Activity: 2674
Merit: 854



View Profile
October 06, 2020, 01:05:41 AM
Last edit: October 19, 2023, 04:10:27 AM by TravelMug
Merited by DdmrDdmr (2), dkbit98 (1)
 #1

What happened: Fake MetaMask website

Website:
Code:
https://www.login-metamask.com/



Archived: https://archive.is/dmadb

Just like any other fake sites out there, it will steal your seed and mnemonic phrase.

But I did try to play around with this criminals by entering f*** Y*** like phrase, lol.

The website is newly created.

Quote
Whois Record for Login-MetaMask.com
How does this work?
 Domain Profile
Registrant   WhoisGuard Protected
Registrant Org   WhoisGuard, Inc.
Registrant Country   pa
Registrar   NAMECHEAP INC NameCheap, Inc.
IANA ID: 1068
URL: http://www.namecheap.com
Whois Server: whois.namecheap.com

(p)
Registrar Status   addPeriod, clientTransferProhibited
Dates   2 days old
Created on 2020-10-03
Expires on 2021-10-03
Updated on 0000-12-31

https://whois.domaintools.com/login-metamask.com

R


▀▀▀▀▀▀▀██████▄▄
████████████████
▀▀▀▀█████▀▀▀█████
████████▌███▐████
▄▄▄▄█████▄▄▄█████
████████████████
▄▄▄▄▄▄▄██████▀▀
LLBIT
  CRYPTO   
FUTURES
 1,000x 
LEVERAGE
COMPETITIVE
    FEES    
 INSTANT 
EXECUTION
.
   TRADE NOW   
Raflesia
Hero Member
*****
Offline Offline

Activity: 2366
Merit: 580


_""""Duelbits""""_


View Profile WWW
October 06, 2020, 02:43:34 AM
 #2

Good catch guys ,,,,

It looks suspicious with the login-metamask domain name but you can quickly catch it and publish it here for many to know especially newbies.

If we are not careful in seeing the links then it is dangerous that the scamer will continue to do ways to make the phishing site as similar as possible.

███████████████████████████
███████▄████████████▄██████
████████▄████████▄████████
███▀█████▀▄███▄▀█████▀███
█████▀█▀▄██▀▀▀██▄▀█▀█████
███████▄███████████▄███████
███████████████████████████
███████▀███████████▀███████
████▄██▄▀██▄▄▄██▀▄██▄████
████▄████▄▀███▀▄████▄████
██▄███▀▀█▀██████▀█▀███▄███
██▀█▀████████████████▀█▀███
███████████████████████████
.
.Duelbits.
▄▄█▄▄░░▄▄█▄▄░░▄▄█▄▄
███░░░░███░░░░███
░░░░░░░░░░░░░
░░░░░░░░░░░░
▀██████████
░░░░░███░░░░
░░░░░███▄█░░░
░░██▌░░███░▀░░██▌
█░██░░███░░░██
█▀▀▀█▌░███░░█▀▀▀█▌
▄█▄░░░██▄███▄█▄░░▄██▄
▄███▄
░░░░▀██▄▀
.
REGIONAL
SPONSOR
███▀██▀███▀█▀▀▀▀██▀▀▀██
██░▀░██░█░███░▀██░███▄█
█▄███▄██▄████▄████▄▄▄██
██▀ ▀███▀▀░▀██▀▀▀██████
███▄███░▄▀██████▀█▀█▀▀█
████▀▀██▄▀█████▄█▀███▄█
███▄▄▄████████▄█▄▀█████
███▀▀▀████████████▄▀███
███▄░▄█▀▀▀██████▀▀▀▄███
███████▄██▄▌████▀▀█████
▀██▄█████▄█▄▄▄██▄████▀
▀▀██████████▄▄███▀▀
▀▀▀▀█▀▀▀▀
.
EUROPEAN
BETTING
PARTNER
Yaunfitda
Hero Member
*****
Offline Offline

Activity: 2884
Merit: 599



View Profile
October 06, 2020, 06:45:47 AM
 #3

Good catch guys ,,,,

It looks suspicious with the login-metamask domain name but you can quickly catch it and publish it here for many to know especially newbies.

If we are not careful in seeing the links then it is dangerous that the scamer will continue to do ways to make the phishing site as similar as possible.
Yes, and it's a bit scary with the metamask.com domain name with login in front. Again, this could be spread thru Twitter campaign or Google ads (known for not doing their job, by allowing this kind of phishing to freely displayed on top of the real sites).

███████████████████████████████
███████████████████████████████
███▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀███████████
█████████████▀▀        ▀▀██████
██████▀▀▀▀▀▀              ▀████
██████████▀     ▄▄██▄▄     ▀███
██████████      ██████      ███
██████████▄     ▀▀██▀▀     ▄███
██████▄▄▄▄▄▄              ▄████
█████████████▄▄        ▄▄██████
███▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄███████████
███████████████████████████████
███████████████████████████████
.
|
▄▄███████▄▄
▄████▀▀▀▀▀▀▀████▄
▄███▀▄▄███████▄▄▀███▄
▄██▀▄█▀▀▀█████▀▀▀█▄▀██▄
▄██▄██████▀████░███▄██▄
███░████████▀██░████░███
███░████░█▄████▀░████░███
███░████░███▄████████░███
▀██▄▀███░█████▄█████▀▄██▀
▀██▄▀█▄▄▄██████▄██▀▄██▀
▀███▄▀▀███████▀▀▄███▀
▀████▄▄▄▄▄▄▄████▀
▀▀███████▀▀
SSC NAPOLI
OFFICIAL EUROPEAN
BETTING PARTNER
|.ROLLBOTS.|
▄▄███████▄▄
▄███████████████▄
▄███████████████████▄
▄██▀▀▀▀▀▀▀▀▀▀▀▀▀▀█████▄
▄█████████▀████████▀████▄
██████▄▄▄█████▄▄█████████
█████████████████████████
██████▀▀▀█████▀▀█████████
▀█████████▄████████▄████▀
▀██▄▄▄▄▄▄▄▄▄▄▄▄▄▄█████▀
▀███████████████████▀
▀███████████████▀
▀▀███████▀▀
ROLLBIT COIN
TRADE RLB NOW!
|...PLAY NOW...
dkbit98
Legendary
*
Offline Offline

Activity: 2268
Merit: 7264



View Profile WWW
October 06, 2020, 07:50:03 AM
 #4

Thanks for reporting.
I will tell you what I do for fun sometimes.... I enter some random words and insults in those empty fields just to waste time for scammers and send them a warm message.  Cheesy
NEVER enter any real seed words in any form or website!

█████████████████████████
████▐██▄█████████████████
████▐██████▄▄▄███████████
████▐████▄█████▄▄████████
████▐█████▀▀▀▀▀███▄██████
████▐███▀████████████████
████▐█████████▄█████▌████
████▐██▌█████▀██████▌████
████▐██████████▀████▌████
█████▀███▄█████▄███▀█████
███████▀█████████▀███████
██████████▀███▀██████████
█████████████████████████
.
BC.GAME
▄▄░░░▄▀▀▄████████
▄▄▄
██████████████
█████░░▄▄▄▄████████
▄▄▄▄▄▄▄▄▄██▄██████▄▄▄▄████
▄███▄█▄▄██████████▄████▄████
███████████████████████████▀███
▀████▄██▄██▄░░░░▄████████████
▀▀▀█████▄▄▄███████████▀██
███████████████████▀██
███████████████████▄██
▄███████████████████▄██
█████████████████████▀██
██████████████████████▄
.
..CASINO....SPORTS....RACING..
DdmrDdmr
Legendary
*
Offline Offline

Activity: 2352
Merit: 10867


There are lies, damned lies and statistics. MTwain


View Profile WWW
October 06, 2020, 10:04:25 AM
 #5

Rather similar (not exact) to the one reported by @cryptomaniac_xxx a couple of days ago:
[Scam]: Fake Metamask website-https://www.metamask.site/.

Possibly from the same phishers, who simply popup with another site as soon as one is taken down. Ideally, all these reports would reference how these sites are actually encountered by the common person (i.e. Google Ad, Twitter, etc.).
jossiel
Hero Member
*****
Offline Offline

Activity: 3024
Merit: 632


casinosblockchain.io


View Profile
October 06, 2020, 12:03:54 PM
 #6

That's an awesome find you've got.

Possibly from the same phishers, who simply popup with another site as soon as one is taken down. Ideally, all these reports would reference how these sites are actually encountered by the common person (i.e. Google Ad, Twitter, etc.).
Possible. And if one of their phishing website got caught and shut down, they'll just turn in to the other and they will repeat the process. Google is mostly where they are advertising. A simple keyword search will show them at the top results and this probably how op found it out.

Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!