Bitcoin Forum
May 11, 2024, 06:22:31 AM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: Metamask Phishing  (Read 126 times)
Yasceine (OP)
Newbie
*
Offline Offline

Activity: 9
Merit: 0


View Profile
June 11, 2018, 06:12:21 AM
 #1

whenever I am trying to complete the KYC, I am being directed to a page saying it is phishing.

Follow the link below to sign a message from ******. Enter the Encrypted message you get after wards. https://[Suspicious link removed]/2*****
The message generated will enable us distribute your token

the warning message is being generated by Metamask as below.
is it a genuine warning message or something normal?

the photo attachment of this post is not enabled?



"There should not be any signed int. If you've found a signed int somewhere, please tell me (within the next 25 years please) and I'll change it to unsigned int." -- Satoshi
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
1715408551
Hero Member
*
Offline Offline

Posts: 1715408551

View Profile Personal Message (Offline)

Ignore
1715408551
Reply with quote  #2

1715408551
Report to moderator
1715408551
Hero Member
*
Offline Offline

Posts: 1715408551

View Profile Personal Message (Offline)

Ignore
1715408551
Reply with quote  #2

1715408551
Report to moderator
BTCforJoe
Hero Member
*****
Offline Offline

Activity: 882
Merit: 976



View Profile WWW
June 11, 2018, 06:20:05 AM
 #2

You can't post photos as a newbie, but you can still show us the link to the screenshot.

I haven't received any message like that from MetaMask, so it's likely that your browser data has been infected, most likely from a site that uses MetaMask that has disguised a user opt-in form (or similar) method to capture/phish your data.

From my understanding, MetaMask doesn't provide account support if you lose your seed, so it would surprise me if they actually did send out some form of warning.

Edit: Actually, wait... Since when does MetaMask require KYC verification? Huh Sounds to me like you're on another website that accepts a MetaMask plugin that is trying to phish information, not on the MetaMask site itself...

BQ
Member
**
Offline Offline

Activity: 616
Merit: 53

CoinMetro - the future of exchanges


View Profile
June 11, 2018, 07:00:00 AM
 #3

You can upload a picture to like www.imgur.com and paste the link.

What KYC are you trying to do? Did you download metamask from metamask.io (one of the chrome/firefox addon pages it links to)?

5 EUR free crypto on signup! XCM exchange token ⚜⚜⚜  CoinMetro - Copy Trading - Margin - 0% maker fee  ⚜⚜⚜ - generate €500 volume in July for a chance to win €100!
Yasceine (OP)
Newbie
*
Offline Offline

Activity: 9
Merit: 0


View Profile
June 11, 2018, 07:39:52 AM
Last edit: June 11, 2018, 08:35:32 AM by Yasceine
 #4

here is the link
https://imgur.com/a/T9M52zd


it is Kentra

please see below

Kindly bare in mind that your Airdrop submission will be considered invalid and you will not receive any tokens if you fail to complete the verification process before the deadline.



Best regards,

Kentra Support.

mithrim
Sr. Member
****
Offline Offline

Activity: 434
Merit: 436


View Profile
June 12, 2018, 06:03:28 PM
Last edit: June 12, 2018, 06:30:07 PM by mithrim
 #5

here is the link



it is Kentra

please see below

Kindly bare in mind that your Airdrop submission will be considered invalid and you will not receive any tokens if you fail to complete the verification process before the deadline.



Best regards,

Kentra Support.



the warning message is being generated by Metamask as below.
is it a genuine warning message or something normal?

Well, I didn't research the project but I would not ignore the warning. Do you have any reason to doubt the project or the people behind it? Did you do your research?
I guess it's an airdrop you just entered? In that case, just skip this one. Better safe than sorry. Alternately you could ask in their telegram/discord chat and see how they respond.
TryNinja
Legendary
*
Offline Offline

Activity: 2828
Merit: 6984



View Profile WWW
June 12, 2018, 06:22:42 PM
 #6

Is this the URL? Here is the reason why it got blacklisted as a phishing website.

Quote
kentra.tech
Fake airdrop directing users to a fake MyEtherWallet - xn--myethrwalt-inbe64c.com
https://urlscan.io/result/5a6ac1e3-1447-4ef8-a0e8-d3f9aaf00f46/
https://urlscan.io/result/a15f09f4-5548-45e5-addc-edc3acf01648/

xn--myethrwalt-inbe64c.com
Fake MyEtherWallet - IDN homograph attack domain
https://urlscan.io/result/03af7e40-ebcf-4056-ad3f-57f0402d9597/
https://urlscan.io/result/0bcb0635-0977-4d72-a673-618195cbf5d1/
address: 0x0A796062214Cf4FC232Dd8538a19035Ac79a595c
From: https://github.com/MetaMask/eth-phishing-detect/pull/1815

.
.HUGE.
▄██████████▄▄
▄█████████████████▄
▄█████████████████████▄
▄███████████████████████▄
▄█████████████████████████▄
███████▌██▌▐██▐██▐████▄███
████▐██▐████▌██▌██▌██▌██
█████▀███▀███▀▐██▐██▐█████

▀█████████████████████████▀

▀███████████████████████▀

▀█████████████████████▀

▀█████████████████▀

▀██████████▀▀
█▀▀▀▀











█▄▄▄▄
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
.
CASINSPORTSBOOK
▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
▀▀▀▀█











▄▄▄▄█
Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!