Bitcoin Forum
October 18, 2018, 09:47:20 PM *
News: Make sure you are not using versions of Bitcoin Core other than 0.17.0 [Torrent], 0.16.3, 0.15.2, or 0.14.3. More info.
 
   Home   Help Search Donate Login Register  
Pages: [1]
  Print  
Author Topic: Metamask Phishing  (Read 44 times)
Yasceine
Newbie
*
Offline Offline

Activity: 10
Merit: 0


View Profile
June 11, 2018, 06:12:21 AM
 #1

whenever I am trying to complete the KYC, I am being directed to a page saying it is phishing.

Follow the link below to sign a message from ******. Enter the Encrypted message you get after wards. https://[Suspicious link removed]/2*****
The message generated will enable us distribute your token

the warning message is being generated by Metamask as below.
is it a genuine warning message or something normal?

the photo attachment of this post is not enabled?



1539899240
Hero Member
*
Offline Offline

Posts: 1539899240

View Profile Personal Message (Offline)

Ignore
1539899240
Reply with quote  #2

1539899240
Report to moderator
1539899240
Hero Member
*
Offline Offline

Posts: 1539899240

View Profile Personal Message (Offline)

Ignore
1539899240
Reply with quote  #2

1539899240
Report to moderator
1539899240
Hero Member
*
Offline Offline

Posts: 1539899240

View Profile Personal Message (Offline)

Ignore
1539899240
Reply with quote  #2

1539899240
Report to moderator
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
1539899240
Hero Member
*
Offline Offline

Posts: 1539899240

View Profile Personal Message (Offline)

Ignore
1539899240
Reply with quote  #2

1539899240
Report to moderator
1539899240
Hero Member
*
Offline Offline

Posts: 1539899240

View Profile Personal Message (Offline)

Ignore
1539899240
Reply with quote  #2

1539899240
Report to moderator
1539899240
Hero Member
*
Offline Offline

Posts: 1539899240

View Profile Personal Message (Offline)

Ignore
1539899240
Reply with quote  #2

1539899240
Report to moderator
BTCforJoe
Hero Member
*****
Offline Offline

Activity: 882
Merit: 970



View Profile WWW
June 11, 2018, 06:20:05 AM
 #2

You can't post photos as a newbie, but you can still show us the link to the screenshot.

I haven't received any message like that from MetaMask, so it's likely that your browser data has been infected, most likely from a site that uses MetaMask that has disguised a user opt-in form (or similar) method to capture/phish your data.

From my understanding, MetaMask doesn't provide account support if you lose your seed, so it would surprise me if they actually did send out some form of warning.

Edit: Actually, wait... Since when does MetaMask require KYC verification? Huh Sounds to me like you're on another website that accepts a MetaMask plugin that is trying to phish information, not on the MetaMask site itself...

BQ
Member
**
Offline Offline

Activity: 252
Merit: 47

Alfa-Enzo Introducing the First Global Smartmarket


View Profile
June 11, 2018, 07:00:00 AM
 #3

You can upload a picture to like www.imgur.com and paste the link.

What KYC are you trying to do? Did you download metamask from metamask.io (one of the chrome/firefox addon pages it links to)?

╭═══════════════════   A L F A ─ E N Z O   ═══════════════════╮
│   \▼/"Develop, standardize, protect, and promote" the AEF Ecosystem\▼/  │
╰════════════ FACEBOOKTWITTERTELEGRAM ══════════════╯
Yasceine
Newbie
*
Offline Offline

Activity: 10
Merit: 0


View Profile
June 11, 2018, 07:39:52 AM
 #4

here is the link
https://imgur.com/a/T9M52zd


it is Kentra

please see below

Kindly bare in mind that your Airdrop submission will be considered invalid and you will not receive any tokens if you fail to complete the verification process before the deadline.



Best regards,

Kentra Support.

mithrim
Sr. Member
****
Offline Offline

Activity: 406
Merit: 346



View Profile
June 12, 2018, 06:03:28 PM
 #5

here is the link



it is Kentra

please see below

Kindly bare in mind that your Airdrop submission will be considered invalid and you will not receive any tokens if you fail to complete the verification process before the deadline.



Best regards,

Kentra Support.



the warning message is being generated by Metamask as below.
is it a genuine warning message or something normal?

Well, I didn't research the project but I would not ignore the warning. Do you have any reason to doubt the project or the people behind it? Did you do your research?
I guess it's an airdrop you just entered? In that case, just skip this one. Better safe than sorry. Alternately you could ask in their telegram/discord chat and see how they respond.

PLAY MOBILE GAMES MINE
CRYPTO-TOKENS EARN REAL MONEY
                    ▄▄██▄▄
                ▄▄██████████▄▄
            ▄▄███████▀▀▀████████▄
         ▄███████▀▀        ▀███████▄▄
     ▄▄███████▀      ▄▄▄▄      ▀███████▄▄
     ███████▄      ▒███████▄▄     ▀▀█████
      ▀▀███████▄▄     ▀▀███████▄▄     ▀▀█
          ▀▀███████▄▄     ▀▀███████▄
     ██▄      ▀███████▄▄      ▀████████▄
    ▐█████▄▄      ▀███████▄▄      ▀██████
      ▀███████▄▄     ▀▀███████▄▄     ▀▀██
         ▀▀███████▄▄     ▀▀███████▄▄
    ▐█▄▄     ▀▀███████▄      ▀▀███████▄▄
    ▐█████▄      ▀████████▄      ▀███████
     ▀███████▄▄      ▀█▀▀      ▄████████▀
         ▀███████▄▄        ▄▄███████▀
            ▀▀███████▄▄▄▄███████▀▀
                ▀▀██████████▀▀
                    ▀▀██▀▀
.
     
        █░████████████████████   █░████████████████████            ██████░           ██████                  ████░░  ████████████████████  ███░████ ███████░ ███   ░███           
       ██████░░░░░░░░░░░░░░░░    ░██░██░░░░░░░░░░░░░░░           ░████░██░░          ███████░              ██████░░  █████░░░░░░░░░░░░░░   █████░   ██████░  ███   ░██░           
       █████                     ░██░█                          ████░█░█████         █████████            ███████░░  █████                 ███░     ███ ░███ ████ ░███             
       ░░████░░░░░░░░░░░░░███    ░██░█                         █████░   █████        ██████████░         ░██░████░░  █████░░░░░░░░░░░░░█░  ███░     ███  ░███ ░██████             
         ██░█████████████████░█  ░██░█             ███░█     ░█████      █████░      █████ ████░█      ██████ ███░░  ██████████████████░░                                         
                          █████  ░██░█             █████    █░██░█        ░░████     █████  █░████   ░█████   ███░░  █████                                                         
                          █░███  ░██░█             ░████   ██████          ░█████    █████   ░██████████░█    ███░░  █████                                                         
        ██████████████████░████  ███████████████████████ ░█████              ██████  █████     █░███████░     ███░░  ████████████████████                                         
       ░██████████████████████    █░████████████████░█░ ██████                ██████ █████      ░██████       ███░░  ████████████████████ 
.

▄▀▀▀▀▀▀▀▀▀▀▀▄
█   ▄▄▄▄▄▄   ██▄
█  ▓▓▓▓▓▓▓▌  ████▄
█  ▓▓▓▓▓▓▓▌  ███████▄
█  ▓▓▓▓▓▓▓▌  ▐▓███████▄
█              ▀▀▀▀▀▀▀▀█
█  ▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀  █
█                      █
█  ▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀  █
█  ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄  █
█                      █
█  ▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀  █
█                      █
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
.

                              ▄████▄
                        ▄▄█████▀▀███
                    ▄▄████▀▀     ███
              ▄▄▄████▀▀    ▄▄   ▐██
          ▄▄█████▀       ▄█▀    ██▌
     ▄▄████▀▀▀       ▄███▀      ██▌
    ████▀        ▄▄████▀       ▐██
     ██████▄▄  ▄█████▀         ██▌
          ▀████████           ▐██
            ▀████▌            ███
             ▀███  ▄██▄▄     ▐██▀
              ███▄███▀███▄   ███
              ▀███▀▀   ▀▀███▄██▌
                          ▀▀█▀▀
TryNinja
Hero Member
*****
Online Online

Activity: 798
Merit: 775


ChipMixer's Badge of Honor


View Profile
June 12, 2018, 06:22:42 PM
 #6

Is this the URL? Here is the reason why it got blacklisted as a phishing website.

Quote
kentra.tech
Fake airdrop directing users to a fake MyEtherWallet - xn--myethrwalt-inbe64c.com
https://urlscan.io/result/5a6ac1e3-1447-4ef8-a0e8-d3f9aaf00f46/
https://urlscan.io/result/a15f09f4-5548-45e5-addc-edc3acf01648/

xn--myethrwalt-inbe64c.com
Fake MyEtherWallet - IDN homograph attack domain
https://urlscan.io/result/03af7e40-ebcf-4056-ad3f-57f0402d9597/
https://urlscan.io/result/0bcb0635-0977-4d72-a673-618195cbf5d1/
address: 0x0A796062214Cf4FC232Dd8538a19035Ac79a595c
From: https://github.com/MetaMask/eth-phishing-detect/pull/1815

Pages: [1]
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!