Bitcoin Forum
January 25, 2020, 04:43:28 PM *
News: Latest Bitcoin Core release: 0.19.0.1 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: Segwitadress.org(with one d) is a phishing site  (Read 63 times)
Souliber
Newbie
*
Offline Offline

Activity: 4
Merit: 0


View Profile
August 09, 2018, 04:44:06 PM
Last edit: August 09, 2018, 08:09:18 PM by Souliber
 #1

Beware with it, segwitadress.org(with one d) is the phishing site of the legit segwitaddress.org. I lost all my btc (0.5) sweeping through this site because of misspell to start storing on my new TREZOR and the btc went to another address.

You can report the site here to google, hopefuly it gets blocked and no one fall in the trap anymore: https://safebrowsing.google.com/safebrowsing/report_phish/?hl=en

This is the information I got of the site, if someone have any idea to take actions against it(already sent a ticket to cloudflare support too): https://imgur.com/eykVz1j

Never tought something like this would happen to me and here I am, be obssesively cautious in this space, never is too much. Best wishes and keep safe





1579970608
Hero Member
*
Offline Offline

Posts: 1579970608

View Profile Personal Message (Offline)

Ignore
1579970608
Reply with quote  #2

1579970608
Report to moderator
1579970608
Hero Member
*
Offline Offline

Posts: 1579970608

View Profile Personal Message (Offline)

Ignore
1579970608
Reply with quote  #2

1579970608
Report to moderator
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
1579970608
Hero Member
*
Offline Offline

Posts: 1579970608

View Profile Personal Message (Offline)

Ignore
1579970608
Reply with quote  #2

1579970608
Report to moderator
1579970608
Hero Member
*
Offline Offline

Posts: 1579970608

View Profile Personal Message (Offline)

Ignore
1579970608
Reply with quote  #2

1579970608
Report to moderator
TryNinja
Legendary
*
Offline Offline

Activity: 1260
Merit: 1774



View Profile
August 09, 2018, 09:31:39 PM
 #2

TBF, you shouldn't be using a third-party website to move that much money. There are safer ways to sweep your coins.

The IP seems to be owned by CloudFlare[1] and not by the website owner/host. So, there is not much you can do with that.

I've also reported the website to Google.

[1] https://tools.tracemyip.org/lookup/104.27.164.25

Souliber
Newbie
*
Offline Offline

Activity: 4
Merit: 0


View Profile
August 10, 2018, 03:26:05 AM
Last edit: August 10, 2018, 04:33:18 AM by Souliber
 #3

I contacted clodflare. I will keep information private from now of how they are helping me.

Keep safe


Avirunes
Legendary
*
Offline Offline

Activity: 1638
Merit: 1275



View Profile WWW
August 10, 2018, 06:36:37 AM
Last edit: August 10, 2018, 06:47:20 AM by Avirunes
 #4

The IP seems to be owned by CloudFlare[1] and not by the website owner/host. So, there is not much you can do with that.

Use: http://www.crimeflare.biz:82/cfs.html#box to search IP behind the cloudflare servers. At some case it does reveals the IP like I did for helix-grams recently while in some case if no IP is found you have option to check with name servers but name servers doesn't gives out a solid proof tho.



Some domains which seems related with the name servers: adi.ns.cloudflare.com and    sri.ns.cloudflare.com

Code:
[1] bccadress.org
[2] bitaddress.info (checked it and it redirects to bitaddress.org. Though I would advice not to open the site)
[3] cashadress.org
[4] claimfork.org
[5] ltcaddress.org

I would recommend not using them.

smartmixer.io▀  ▀  ▀  ▀  ▀
▄  ▄  ▄  ▄  ▄

▀  ▀  ▀  ▀  ▀
▄  ▄  ▄  ▄  ▄

▀  ▀  ▀  ▀  ▀
▄  ▄  ▄  ▄  ▄

▀  ▀  ▀  ▀  ▀
▄  ▄  ▄  ▄  ▄

▀  ▀  ▀  ▀  ▀
.Make your Cryptos untraceable!.
(( ███████ ((    TELEGRAM    )) ███████ ))
▄▄███████▄▄
▄███████▀███████▄
▄███▀▀▀ ▄▄▄ ▀▀▀███▄
▄███ ▄▀▀▀   ▀▀▀▄ ███▄
████ █  ▄   ▄█ █ ████
████▌▐▌ ▀█▄█▀ ▐▌▐████
▀████ ▀▄  ▀  ▄▀ ████▀
▀████▄ ▀▄▄▄▀ ▄████▀
▀█████▄▄ ▄▄█████▀
▀▀███████▀▀
.
NO LOGS
▄▄███████▄▄
▄██████▀▀▀██████▄
▄█████▀ ▄▄▄ ▀█████▄
▄██████ ▀   █ ██████▄
███████   █▀  ███████
████████▄ ▄ ▄████████
▀████▀         ▀████▀
▀███   ▄   ▄   ███▀
▀███████████████▀
▀▀███████▀▀
.
NO SIGN-UP
▄▄███████▄▄
▄███████████████▄
▄███████▀   ▀█████▄
▄████▀  ▀      █████▄
████     ▄▀▄  ▀ ▀████
███    ▄▀▄ ▄▀▄    ███
▀███▄▄  ▀█ █▀   ▄███▀
▀████████ ████████▀
▀███████████████▀
▀▀███████▀▀
.

70% COMSN
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
MIX NOW!
.
▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
▀  ▀  ▀  ▀  ▀
▄  ▄  ▄  ▄  ▄

▀  ▀  ▀  ▀  ▀
▄  ▄  ▄  ▄  ▄

▀  ▀  ▀  ▀  ▀
▄  ▄  ▄  ▄  ▄

▀  ▀  ▀  ▀  ▀
▄  ▄  ▄  ▄  ▄

▀  ▀  ▀  ▀  ▀
Souliber
Newbie
*
Offline Offline

Activity: 4
Merit: 0


View Profile
August 10, 2018, 11:06:59 AM
Last edit: August 10, 2018, 11:42:58 AM by Souliber
 #5

I contacted hosting and domain providers. The site is down.


It is not my funds but at least they will not steal more people.

Thank you for the responses and keep safe



Pages: [1]
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!