Bitcoin Forum
May 10, 2024, 02:36:59 PM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: Segwitadress.org(with one d) is a phishing site  (Read 141 times)
Souliber (OP)
Newbie
*
Offline Offline

Activity: 4
Merit: 0


View Profile
August 09, 2018, 04:44:06 PM
Last edit: August 09, 2018, 08:09:18 PM by Souliber
 #1

Beware with it, segwitadress.org(with one d) is the phishing site of the legit segwitaddress.org. I lost all my btc (0.5) sweeping through this site because of misspell to start storing on my new TREZOR and the btc went to another address.

You can report the site here to google, hopefuly it gets blocked and no one fall in the trap anymore: https://safebrowsing.google.com/safebrowsing/report_phish/?hl=en

This is the information I got of the site, if someone have any idea to take actions against it(already sent a ticket to cloudflare support too): https://imgur.com/eykVz1j

Never tought something like this would happen to me and here I am, be obssesively cautious in this space, never is too much. Best wishes and keep safe





1715351819
Hero Member
*
Offline Offline

Posts: 1715351819

View Profile Personal Message (Offline)

Ignore
1715351819
Reply with quote  #2

1715351819
Report to moderator
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
1715351819
Hero Member
*
Offline Offline

Posts: 1715351819

View Profile Personal Message (Offline)

Ignore
1715351819
Reply with quote  #2

1715351819
Report to moderator
TryNinja
Legendary
*
Offline Offline

Activity: 2828
Merit: 6984



View Profile WWW
August 09, 2018, 09:31:39 PM
 #2

TBF, you shouldn't be using a third-party website to move that much money. There are safer ways to sweep your coins.

The IP seems to be owned by CloudFlare[1] and not by the website owner/host. So, there is not much you can do with that.

I've also reported the website to Google.

[1] https://tools.tracemyip.org/lookup/104.27.164.25

.
.HUGE.
▄██████████▄▄
▄█████████████████▄
▄█████████████████████▄
▄███████████████████████▄
▄█████████████████████████▄
███████▌██▌▐██▐██▐████▄███
████▐██▐████▌██▌██▌██▌██
█████▀███▀███▀▐██▐██▐█████

▀█████████████████████████▀

▀███████████████████████▀

▀█████████████████████▀

▀█████████████████▀

▀██████████▀▀
█▀▀▀▀











█▄▄▄▄
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
.
CASINSPORTSBOOK
▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
▀▀▀▀█











▄▄▄▄█
Souliber (OP)
Newbie
*
Offline Offline

Activity: 4
Merit: 0


View Profile
August 10, 2018, 03:26:05 AM
Last edit: August 10, 2018, 04:33:18 AM by Souliber
 #3

I contacted clodflare. I will keep information private from now of how they are helping me.

Keep safe


Avirunes
Legendary
*
Offline Offline

Activity: 3094
Merit: 1468


View Profile WWW
August 10, 2018, 06:36:37 AM
Last edit: August 10, 2018, 06:47:20 AM by Avirunes
 #4

The IP seems to be owned by CloudFlare[1] and not by the website owner/host. So, there is not much you can do with that.

Use: http://www.crimeflare.biz:82/cfs.html#box to search IP behind the cloudflare servers. At some case it does reveals the IP like I did for helix-grams recently while in some case if no IP is found you have option to check with name servers but name servers doesn't gives out a solid proof tho.



Some domains which seems related with the name servers: adi.ns.cloudflare.com and    sri.ns.cloudflare.com

Code:
[1] bccadress.org
[2] bitaddress.info (checked it and it redirects to bitaddress.org. Though I would advice not to open the site)
[3] cashadress.org
[4] claimfork.org
[5] ltcaddress.org

I would recommend not using them.
Souliber (OP)
Newbie
*
Offline Offline

Activity: 4
Merit: 0


View Profile
August 10, 2018, 11:06:59 AM
Last edit: August 10, 2018, 11:42:58 AM by Souliber
 #5

I contacted hosting and domain providers. The site is down.


It is not my funds but at least they will not steal more people.

Thank you for the responses and keep safe



Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!