Bitcoin Forum
October 16, 2018, 03:54:19 PM *
News: Make sure you are not using versions of Bitcoin Core other than 0.17.0 [Torrent], 0.16.3, 0.15.2, or 0.14.3. More info.
 
   Home   Help Search Donate Login Register  
Pages: [1]
  Print  
Author Topic: Segwitadress.org(with one d) is a phishing site  (Read 45 times)
Souliber
Newbie
*
Offline Offline

Activity: 4
Merit: 0


View Profile
August 09, 2018, 04:44:06 PM
 #1

Beware with it, segwitadress.org(with one d) is the phishing site of the legit segwitaddress.org. I lost all my btc (0.5) sweeping through this site because of misspell to start storing on my new TREZOR and the btc went to another address.

You can report the site here to google, hopefuly it gets blocked and no one fall in the trap anymore: https://safebrowsing.google.com/safebrowsing/report_phish/?hl=en

This is the information I got of the site, if someone have any idea to take actions against it(already sent a ticket to cloudflare support too): https://imgur.com/eykVz1j

Never tought something like this would happen to me and here I am, be obssesively cautious in this space, never is too much. Best wishes and keep safe





1539705259
Hero Member
*
Offline Offline

Posts: 1539705259

View Profile Personal Message (Offline)

Ignore
1539705259
Reply with quote  #2

1539705259
Report to moderator
1539705259
Hero Member
*
Offline Offline

Posts: 1539705259

View Profile Personal Message (Offline)

Ignore
1539705259
Reply with quote  #2

1539705259
Report to moderator
Once a transaction has 6 confirmations, it is extremely unlikely that an attacker without at least 50% of the network's computation power would be able to reverse it.
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
TryNinja
Hero Member
*****
Offline Offline

Activity: 798
Merit: 774


ChipMixer's Badge of Honor


View Profile
August 09, 2018, 09:31:39 PM
 #2

TBF, you shouldn't be using a third-party website to move that much money. There are safer ways to sweep your coins.

The IP seems to be owned by CloudFlare[1] and not by the website owner/host. So, there is not much you can do with that.

I've also reported the website to Google.

[1] https://tools.tracemyip.org/lookup/104.27.164.25

Souliber
Newbie
*
Offline Offline

Activity: 4
Merit: 0


View Profile
August 10, 2018, 03:26:05 AM
 #3

I contacted clodflare. I will keep information private from now of how they are helping me.

Keep safe


Avirunes
Copper Member
Legendary
*
Online Online

Activity: 1232
Merit: 1092



View Profile
August 10, 2018, 06:36:37 AM
 #4

The IP seems to be owned by CloudFlare[1] and not by the website owner/host. So, there is not much you can do with that.

Use: http://www.crimeflare.biz:82/cfs.html#box to search IP behind the cloudflare servers. At some case it does reveals the IP like I did for helix-grams recently while in some case if no IP is found you have option to check with name servers but name servers doesn't gives out a solid proof tho.



Some domains which seems related with the name servers: adi.ns.cloudflare.com and    sri.ns.cloudflare.com

Code:
[1] bccadress.org
[2] bitaddress.info (checked it and it redirects to bitaddress.org. Though I would advice not to open the site)
[3] cashadress.org
[4] claimfork.org
[5] ltcaddress.org

I would recommend not using them.

███           ▄▄▄                          ███
███           ███    ▄█                    ███
███ ▄▄▄▄▄▄          ▄██▄▄▄▄      ▄▄▄▄▄     ███        ▄██▄    ▄▄▄         ▄▄▄
███████████▄  ███ ▐████████  ██▄███████▄   ███       ██████    ███       ███▀
███▀    ▀███▌ ███   ███      ███▀    ▀███  ███      ████████    ███     ███▀
███      ▐██▌ ███   ███      ███      ███  ███     ██▀    ▀██    ███   ███▀
███      ▐██▌ ███   ███      ███      ███  ███    ███      ███    ███ ███▀
███▄    ▄███▌ ███   ███▄     ███▄    ▄███  ███   ████▄    ▄████    █████▀
███████████▀  ███   ▀██████  ███████████▀  ███  ████████████████    ███▀
▀▀▀ ▀▀▀▀▀▀    ▀▀▀     ▀▀▀▀▀  ███ ▀▀▀▀▀▀    ▀▀▀   ▀▀▀▀▀▀▀▀▀▀▀▀▀▀    ███▀
                             ███       ▄▄▄ ▄   ▄  ▄ ▄▄▄          ▄███▀
                             ███      █    █   █  █ █▄▄▀      █████▀
                             ▀▀▀      ▀▄▄▄ █▄▄ ▀▄▄▀ █▄▄█      ▀▀▀















❱❱
❰❰

Souliber
Newbie
*
Offline Offline

Activity: 4
Merit: 0


View Profile
August 10, 2018, 11:06:59 AM
 #5

I contacted hosting and domain providers. The site is down.


It is not my funds but at least they will not steal more people.

Thank you for the responses and keep safe



Pages: [1]
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!