Bitcoin Forum
October 17, 2021, 10:33:27 AM *
News: Latest Bitcoin Core release: 22.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1] 2 »  All
  Print  
Author Topic: To blockchain.info wallet users, Be aware of phishing sites  (Read 1592 times)
coinzat
Sr. Member
****
Offline Offline

Activity: 434
Merit: 250


Young but I'm not that bold


View Profile
March 27, 2016, 11:23:37 AM
 #1

I want to warn all blockchain.info users from a phishing site I saw today on google ads when I searched the word "blockchain", this scam site appears as the first result in the webpage as google show their ads at the top. the site is www dot blockchlan dot info , which of course a scam site that will steal your wallet identifier and password once you inter them and as you may notice, the domain has a very little difference (the letter i and l ) with the real site.
 
so before logging to your web wallet, make sure you are on the real blockchain.info website with https link.
1634466807
Hero Member
*
Offline Offline

Posts: 1634466807

View Profile Personal Message (Offline)

Ignore
1634466807
Reply with quote  #2

1634466807
Report to moderator
1634466807
Hero Member
*
Offline Offline

Posts: 1634466807

View Profile Personal Message (Offline)

Ignore
1634466807
Reply with quote  #2

1634466807
Report to moderator
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
1634466807
Hero Member
*
Offline Offline

Posts: 1634466807

View Profile Personal Message (Offline)

Ignore
1634466807
Reply with quote  #2

1634466807
Report to moderator
FruitsBasket
Legendary
*
Offline Offline

Activity: 1232
Merit: 1017


View Profile
March 27, 2016, 11:26:36 AM
 #2

I want to warn all blockchain.info users from a phishing site I saw today on google ads when I searched the word "blockchain", this scam site appears as the first result in the webpage as google show their ads at the top. the site is www dot blockchlan dot info , which of course a scam site that will steal your wallet identifier and password once you inter them and as you may notice, the domain has a very little difference (the letter i and l ) with the real site.
 
so before logging to your web wallet, make sure you are on the real blockchain.info website with https link.
You can also notice this when u log in, the wallet id is always already showed if u login on the real one.
If you go to a phising site, then it will not be filed in automatically.

fck@dt-alwayzz_newbz
childish
Sr. Member
****
Offline Offline

Activity: 619
Merit: 250


View Profile
March 27, 2016, 11:32:57 AM
 #3

I want to warn all blockchain.info users from a phishing site I saw today on google ads when I searched the word "blockchain", this scam site appears as the first result in the webpage as google show their ads at the top. the site is www dot blockchlan dot info , which of course a scam site that will steal your wallet identifier and password once you inter them and as you may notice, the domain has a very little difference (the letter i and l ) with the real site.
 
so before logging to your web wallet, make sure you are on the real blockchain.info website with https link.
thank you for your info this is very important because people sometime not checking address bar when opening a site, 1 other way to keep safe maybe bookmark blockchain wallet link every want to login in wallet

coinzat
Sr. Member
****
Offline Offline

Activity: 434
Merit: 250


Young but I'm not that bold


View Profile
March 27, 2016, 11:55:35 AM
 #4


thank you for your info this is very important because people sometime not checking address bar when opening a site, 1 other way to keep safe maybe bookmark blockchain wallet link every want to login in wallet

Yeah I agree with you, putting the site in the bookmarks is better than searching on google and facing these kind of phishing sites


You can also notice this when u log in, the wallet id is always already showed if u login on the real one.
If you go to a phising site, then it will not be filed in automatically.

This depends on if the user is storing his browser cookies or not. I always browse in incognito mood so this difference will not work for me
FruitsBasket
Legendary
*
Offline Offline

Activity: 1232
Merit: 1017


View Profile
March 27, 2016, 12:02:27 PM
 #5


thank you for your info this is very important because people sometime not checking address bar when opening a site, 1 other way to keep safe maybe bookmark blockchain wallet link every want to login in wallet

Yeah I agree with you, putting the site in the bookmarks is better than searching on google and facing these kind of phishing sites


You can also notice this when u log in, the wallet id is always already showed if u login on the real one.
If you go to a phising site, then it will not be filed in automatically.

This depends on if the user is storing his browser cookies or not. I always browse in incognito mood so this difference will not work for me

Then u can make a file with the correct link in it and block all phising sites of blockchain.info

I am going to search for a few phising sites, so people will not fall for it.

fck@dt-alwayzz_newbz
Furious 7
Hero Member
*****
Offline Offline

Activity: 1918
Merit: 568


https://duelbits.com/


View Profile WWW
March 27, 2016, 12:04:33 PM
 #6


thank you for your info this is very important because people sometime not checking address bar when opening a site, 1 other way to keep safe maybe bookmark blockchain wallet link every want to login in wallet

Yeah I agree with you, putting the site in the bookmarks is better than searching on google and facing these kind of phishing sites

Has there been a case of theft related to the site ?
This is really dangerous because the site occupies the top position in the search engine google if not careful someone could be fooled
This should be reported to the blockchain.info or google

Duelbits            ▄████▄▄
          ▄█████████▄
        ▄█████████████▄
     ▄██████████████████▄
   ▄████▄▄▄█████████▄▄▄███▄
 ▄████▐▀▄▄▀▌████▐▀▄▄▀▌██

 ██████▀▀▀▀███████▀▀▀▀█████

▐████████████■▄▄▄■██████████▀
▐██████████████████████████▀
██████████████████████████▀
▀███████████████████████▀
  ▀███████████████████▀
    ▀███████████████▀
.
         ▄ ▄▄▀▀▀▀▄▄
         ▄▀▀▄      █
         █   ▀▄     █
       ▄█▄     ▀▄   █
      ▄▀ ▀▄      ▀█▀
    ▄▀     ▀█▄▄▄▀▀ ▀
  ▄▀  ▄▀  ▄▀

Live Games

   ▄▄▀▀▀▀▀▀▀▄▄
 ▄▀ ▄▄▀▀▀▀▀▄▄ ▀▄
▄▀ █ ▄  █  ▄ █ ▀▄
█ █   ▀   ▀   █ █  ▄▄▄
█ ▀▀▀▀▀▀▀▀▀▀▀▀▀ █ █   █
█▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀█  █▄█
█ ▀▀█  ▀▀█  ▀▀█ █  █▄█

Slots
.
        ▄▀▀▀▀▀▀▀▀▀▀▀▀▀▄
        █         ▄▄  █
▄▀▀▀▀▀▀▀▀▀▀▀▀▀▄       █
█  ▄▄         █       █
█             █       █
█   ▄▀▀▄▀▀▄   █       █
█   ▀▄   ▄▀   █       █

Blackjack
|              ▄▄▀▀█▌
          ▄▄▀█▄    █
        ▄▀     ▀▄▄ █
       █    ▄▄    ▀█
    ▄▄█    █  █   ▐▌
  ▄▀ █      ▀▀    █
▄▀  ▐▌           █
█ ▄▀▀▄▄        ▄▀
▀▀  ▄  ▀▄▄   ▄▀█
  ▄▀   ▄  ▀█▀  █
   ▄▀ ▄▀   █  █
  ▄▀ █     █▄▀
   ▄▀
NEW GAME!
..CRASH...
|||
[ Đ ][ Ł ]
AVAILABLE NOW
sukamasoto
Legendary
*
Offline Offline

Activity: 1148
Merit: 1006

Black Panther


View Profile
March 27, 2016, 03:15:01 PM
 #7

To prevent this, I'm usually bookmark the real one so I'm never re-search again to prevent this happening...
So once I'm bookmark for it, i'm just click and will not worried for clicking the fake one


                                      ▄._      
                                       ▀█████████▀ 
                                     ,▄▓████████   
                                ╓▄▓███████████▀   
                           ╓▄▓███████▀╙.  ▀█     
                      ▄▄▓███████▀╙▄▄▄▄███         
                 ▄▄▓███████▀╙▄,  ▓███████        
           .▄▄▓██████▀▀╙▄▄▓████▌ ████████         
      .▄▄███████▀▀╙▄▄  ▐███████▌ ████████         
 .▄▄███████▀▀ ▐▄▄▓████ ▐███████▌ ████████         
╙█████▀▀▐▄▄▓  ████████ ▐███████▌ ████████        
 ╙▀ ▄▄▓█████  ████████ ▐███████▌ ████████         
    ████████  ████████ ▐███████▌ ████████         
    ████████  ████████ ▐███████▌ ████████             
FruitsBasket
Legendary
*
Offline Offline

Activity: 1232
Merit: 1017


View Profile
March 27, 2016, 03:19:20 PM
 #8

I have contacted google about the phising site: http://www.google.com/safebrowsing/static/submit_success.html?hl=en
I hope they will block the site very quick, and remove it from their ads. I entered the fake site, and u can see that now new transactions are appearing, so that is also a way to see it.

fck@dt-alwayzz_newbz
Racey
Legendary
*
Offline Offline

Activity: 1148
Merit: 1000


Soon, I have to go away.


View Profile
March 27, 2016, 03:27:27 PM
 #9

I stopped bookmarking, as this too can also be a danger, as hackers who get into your computer can read your browser cache and passwords.

I now have my wallets backed up offline, on a plug n play hard drive.
Only switch it on when making transactions.

You could always put your wallets/details on a usb stick.

And its gone.
FruitsBasket
Legendary
*
Offline Offline

Activity: 1232
Merit: 1017


View Profile
March 27, 2016, 03:32:08 PM
 #10

Here is some info from who is lookup of the phising site, of course it has been protected by a guard, so most of it will make no sense Sad

I hope we can take it down somehow, I contacted google already about this, see what they will do.

Domain Name: BLOCKCHALN.INFO
Domain ID: D55920347-LRMS
WHOIS Server:
Referral URL: http://www.godaddy.com
Updated Date: 2015-11-10T20:30:17Z
Creation Date: 2015-09-11T04:00:26Z
Registry Expiry Date: 2016-09-11T04:00:26Z
Sponsoring Registrar: GoDaddy.com, LLC
Sponsoring Registrar IANA ID: 146
Domain Status: ok https://icann.org/epp#ok
Registrant ID: CR204243759
Registrant Name: Registration Private
Registrant Organization: Domains By Proxy, LLC
Registrant Street: DomainsByProxy.com
Registrant Street: 14747 N Northsight Blvd Suite 111, PMB 309
Registrant City: Scottsdale
Registrant State/Province: Arizona
Registrant Postal Code: 85260
Registrant Country: US
Registrant Phone: +1.4806242599
Registrant Phone Ext:
Registrant Fax: +1.4806242598
Registrant Fax Ext:
Registrant Email:
Admin ID: CR204243761
Admin Name: Registration Private
Admin Organization: Domains By Proxy, LLC
Admin Street: DomainsByProxy.com
Admin Street: 14747 N Northsight Blvd Suite 111, PMB 309
Admin City: Scottsdale
Admin State/Province: Arizona
Admin Postal Code: 85260
Admin Country: US
Admin Phone: +1.4806242599
Admin Phone Ext:
Admin Fax: +1.4806242598
Admin Fax Ext:
Admin Email:
Tech ID: CR204243760
Tech Name: Registration Private
Tech Organization: Domains By Proxy, LLC
Tech Street: DomainsByProxy.com
Tech Street: 14747 N Northsight Blvd Suite 111, PMB 309
Tech City: Scottsdale
Tech State/Province: Arizona
Tech Postal Code: 85260
Tech Country: US
Tech Phone: +1.4806242599
Tech Phone Ext:
Tech Fax: +1.4806242598
Tech Fax Ext:
Tech Email:
Billing ID: CR204243762
Billing Name: Registration Private
Billing Organization: Domains By Proxy, LLC
Billing Street: DomainsByProxy.com
Billing Street: 14747 N Northsight Blvd Suite 111, PMB 309
Billing City: Scottsdale
Billing State/Province: Arizona
Billing Postal Code: 85260
Billing Country: US
Billing Phone: +1.4806242599
Billing Phone Ext:
Billing Fax: +1.4806242598
Billing Fax Ext:
Billing Email:
Name Server: A.DNSPOD.COM
Name Server: B.DNSPOD.COM
Name Server: C.DNSPOD.COM
DNSSEC: unsigned

fck@dt-alwayzz_newbz
teddy5145
Hero Member
*****
Offline Offline

Activity: 714
Merit: 527


View Profile
March 27, 2016, 03:34:14 PM
 #11

I have contacted google about the phising site: http://www.google.com/safebrowsing/static/submit_success.html?hl=en
I hope they will block the site very quick, and remove it from their ads. I entered the fake site, and u can see that now new transactions are appearing, so that is also a way to see it.
Nice of you Wink
Google is usually quick about phishing websites and should be removed any time soon
Though this doesn't change the fact that many phishing website are appearing everyday Sad
Solution for this to not use blockchain wallet so we don't grabbed by blockchain phishing website Tongue
Racey
Legendary
*
Offline Offline

Activity: 1148
Merit: 1000


Soon, I have to go away.


View Profile
March 27, 2016, 03:36:34 PM
 #12

Blockchaln.info is currently hosted at Maersk Holding Bv. This domain is connected to IP address 139.162.15.98 which is hosted on a server that appears to be located in Rotterdam, Netherlands.

Domain Hoster:   Maersk Holding Bv
IP Owner:   Maersk Holding Bv
Server Location:   Rotterdam, Netherlands
Server GEO Location:   51°55'21" North, 4°28'45.012" West [show on google maps]
Domain IP:   139.162.15.98
Domain IP Long:   2342653794
Binary IP:   10001011101000100000111101100010
IP Hostname:   li857-98.members.linode.com

And its gone.
equator
Legendary
*
Offline Offline

Activity: 1190
Merit: 1002


View Profile
March 27, 2016, 03:37:18 PM
 #13


thank you for your info this is very important because people sometime not checking address bar when opening a site, 1 other way to keep safe maybe bookmark blockchain wallet link every want to login in wallet

Yeah I agree with you, putting the site in the bookmarks is better than searching on google and facing these kind of phishing sites

Has there been a case of theft related to the site ?
This is really dangerous because the site occupies the top position in the search engine google if not careful someone could be fooled
This should be reported to the blockchain.info or google

There are many hack attempt to blockchain.info everyday and there are some cases where users funds had been stolen.
The most famous case is where a hacker returned 267BTC, source

Also, in past they have many bugs such as flaws when make a new address through mobile apps.

Thank you very good for the information and good suggestion regarding getting saved by going through bookmark, recently my friend got his computer hacked by some site he downloaded the exe file and his computer got hacked throught that keylogger exe , he lost nearly 0.5 btc ,

Now a days their are so many hackers roaming in the cyber who are ready to steal if you do a single mistake.
FruitsBasket
Legendary
*
Offline Offline

Activity: 1232
Merit: 1017


View Profile
March 27, 2016, 03:40:32 PM
 #14

Blockchaln.info is currently hosted at Maersk Holding Bv. This domain is connected to IP address 139.162.15.98 which is hosted on a server that appears to be located in Rotterdam, Netherlands.

Domain Hoster:   Maersk Holding Bv
IP Owner:   Maersk Holding Bv
Server Location:   Rotterdam, Netherlands
Server GEO Location:   51°55'21" North, 4°28'45.012" West [show on google maps]
Domain IP:   139.162.15.98
Domain IP Long:   2342653794
Binary IP:   10001011101000100000111101100010
IP Hostname:   li857-98.members.linode.com
How did u get the real information?
Also we could do a DOS attack on this site untill Google shuts it down.

fck@dt-alwayzz_newbz
Avirunes
Legendary
*
Offline Offline

Activity: 2268
Merit: 1410



View Profile WWW
March 27, 2016, 03:42:38 PM
 #15

Thanks for awaring about the phising sites.Really appreciate it 👏👏 .I think by this time most of bitcoin users should be aware of such things like phising and all and should also be aware about some security measures as well.Anyway really appreciate OP's work of coming forward and letting us know about it.

Update:I searched up again from google but it is not showing.I guess google removed it

███████████████████████████
█████████▀▄▄▄▄▄██▀▀████████
█████▀▄█▀▀▄▄▄▄▄▄▄▀▀▄▄▀█████
████ █▀▄███████████▄▀██████
███▄█ ███████▀ ██████ █ ███
██▀█ ███  ▀▀█  ▀██████ █ ██
██ █ ████▄▄      ▀▀▀██ █ ██
██ █ █████▌        ▄██ ████
███▄█ █████▄▄   ▄▄███ █▀███
████▀█▄▀█████▌  ▀██▀▄█ ████
█████▄▀▀▄▄▀▀▀▀   ▄▄█▀▄█████
████████▄██▀▀▀▀▀▀██████████
███████████████████████████
.
█ █▀█ █▀█ █▀█  ▄  ▄▀▀ █   ▄▀█ ▀█▀ ▄▀▀ ▄███▄
█ █▀█ █ █ █ █ ▀█▀ ▀▀█ █   █ █  █  ▀▀█ ▀███▀
█ █▄█ █▄█ █▄█     ▄▄▀ ▀▄▄ █▄▀  █  ▄▄▀   
                                        █
████████████████████████████████████ 
███▀▀▀▀▀▀██████▀▀▀▀▀▀██████▀▀▀▀▀▀███ 
█▀▄██▀███▄▀██▀▄██▀███▄▀██▀▄██▀███▄▀████▄
█ █ ▀ ▀███ ██ █ ▀ ▀███ ██ █ ▀ ▀███ █████
█ ██    ▄█ ██ ██    ▄█ ██ ██    ▄█ █████
█▄▀██  ▀█▀▄██▄▀██  ▀█▀▄██▄▀██  ▀█▀▄████▀
███▄▄▄▄▄▄██████▄▄▄▄▄▄██████▄▄▄▄▄▄███
████████████████████████████████████
CRYPTO'S FASTEST
GROWING CASINO

‎ ★
█▄             ▄█
██▄         ▄██
▐█████████████████▌
█████████████████

▄█████████████████▄
▀▀
▄▄▄▄    ▄▄▄▄   ▀▀
▀███▀  ▄████▀  ▄██▀

▄▄   ▀█████  ▀▀▄▄
██████████████████
████▀▀▀▀▀▀▀▀▀▀▀▀█████
██████▄▄▄▄▄▄▄▄███████
▀███████████████▀
▀▀██████████▀▀
▄▄█████████▄▄
▄█▀▀  ▀▀███▀▀  ▀▀█▄
▄█▀        █        ██▄
▄█          █         ██▄
▄███       ▄███▄       ███▄
███▀▀█▄▄▄▄███████▄▄▄▄█▀▀███
█▀      ▀█████████▀      ▀█
█        █████████        █
▀█       █████████       █▀
▀█     ▄█       █▄     █▀
▀██████         ██████▀
▀████▄       ▄████▀
▄▄▄█████▀▀███▄▄▄▄▄███▀▀█████▄▄▄
★ ‎
‎ ★
..PLAY NOW..
Racey
Legendary
*
Offline Offline

Activity: 1148
Merit: 1000


Soon, I have to go away.


View Profile
March 27, 2016, 03:45:39 PM
 #16

W3bin.com Chrome extension Grin

And its gone.
Monnt
Legendary
*
Offline Offline

Activity: 938
Merit: 1000


View Profile
March 27, 2016, 07:15:04 PM
 #17

I don't see why people are still using online wallets these days. The only one that actually has a use is coinbase, as they pay your fees Grin


I currently use a Ledger wallet, but I've just ordered a case.
GHCoins45
Hero Member
*****
Offline Offline

Activity: 545
Merit: 500



View Profile
March 27, 2016, 07:18:00 PM
 #18

Good to know, thanks for the warning man
Racey
Legendary
*
Offline Offline

Activity: 1148
Merit: 1000


Soon, I have to go away.


View Profile
March 27, 2016, 07:24:02 PM
Last edit: March 27, 2016, 07:39:33 PM by Racey
 #19

Blockchaln.info is currently hosted at Maersk Holding Bv. This domain is connected to IP address 139.162.15.98 which is hosted on a server that appears to be located in Rotterdam, Netherlands.

Domain Hoster:   Maersk Holding Bv
IP Owner:   Maersk Holding Bv
Server Location:   Rotterdam, Netherlands
Server GEO Location:   51°55'21" North, 4°28'45.012" West [show on google maps]
Domain IP:   139.162.15.98
Domain IP Long:   2342653794
Binary IP:   10001011101000100000111101100010
IP Hostname:   li857-98.members.linode.com


Forgot to add this earlier, so they hide twice it seems.
139.162.15.98
Host:   li857-98.members.linode.com
Country: is Singapore

And its gone.
Pro Gamers
Hero Member
*****
Offline Offline

Activity: 700
Merit: 500

morir es descansar


View Profile
March 27, 2016, 07:31:27 PM
 #20

I don't see why people are still using online wallets these days. The only one that actually has a use is coinbase, as they pay your fees Grin


I currently use a Ledger wallet, but I've just ordered a case.


Because some online wallets are used to cash in and cash out like in my place there is no other better way to convert your btc to fiat than the online wallet's offer. But this site is 2 years running until now
Pages: [1] 2 »  All
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!