socks435 (OP)
Legendary
Offline
Activity: 2044
Merit: 1030
I'm looking for free spin.
|
|
April 01, 2019, 11:04:51 AM Last edit: June 19, 2019, 09:10:43 PM by socks435 Merited by suchmoon (4), DdmrDdmr (3), BitMaxz (2), Pmalek (1), mk4 (1), Baofeng (1), o_e_l_e_o (1) |
|
I just want people here to be aware on phishing fake Electrum websites that is why I created this thread to people who doesn't know if what are phishing site is. Electrum announce that lower version of electrum is no longer connected to the servers because it's under attack with fake/phishing URL link if you click the pop up screen that asking to update the Electrum you will be redirect to a fake website that listed below. Here is the sample of Electrum phishing site look like below. If you found a fake electrum website please post it here or PM me I will add it here so that other forum members are aware on fake phishing site. Here is my list of active fake electrum website that I found when scraping using scrapebox. http://electrum.org.uk/ http://electrumclient.org/ http://downloadelectrum.org/ http://electrumsite.com/ http://electrumweb.net/ http://electrumupdate.com/ http://electrumproject.org I put them into code so that they are not linked here on the forum.
To protect your self from these phishing sites you can edit your hosts and add this line below. 127.0.0.1 electrum.org.uk 127.0.0.1 electrumclient.org 127.0.0.1 downloadelectrum.org 127.0.0.1 electrumsite.com 127.0.0.1 electrumweb.net 127.0.0.1 electrumupdate.com 127.0.0.1 electrumproject.org
I'll put another list below for those who can help to hunt other active phishing sites including your username or I might be rewarded you with merit. Just make sure the site is active. Updated 6/20/2019 electrumcircle.com Added by me l-electrum.org Added by me
www[.]electrumbuild[.]org added by hugeblack www[.]electrumupgrade[.]org added by hugeblack
electrum.bz added by Baofeng
electrumsecuredownload.com added by Lucius
elecfrum.org Added by HCP electrum.mx Added by HCP
https://electrumus[dot]com/#home Added by Baofeng
|
Decided to end it with zer0 profit.
|
|
|
|
socks435 (OP)
Legendary
Offline
Activity: 2044
Merit: 1030
I'm looking for free spin.
|
|
April 01, 2019, 11:25:36 AM |
|
Thanks for your help but the link you put is not the correct URL and the site seems a blog. The correct one according to the linked thread is It seems the site is no longer active. What I want is active Electrum phishing sites.
|
Decided to end it with zer0 profit.
|
|
|
Jating
|
|
April 01, 2019, 12:57:44 PM |
|
Since everyone here uses different OS, I will quote this here: Another one to be added to your hosts files then.
On Windows, navigate to "C:\Windows\System32\Drivers\etc\", and open the hosts file in a text editor. On Mac, navigate to "/private/etc/", and open the hosts file in a text editor. On Linux, open terminal and write "sudo nano /etc/hosts"
Then add the following line quoted by you below. 127.0.0.1 electrum.org.uk 127.0.0.1 electrumclient.org 127.0.0.1 downloadelectrum.org 127.0.0.1 electrumsite.com 127.0.0.1 electrumweb.net 127.0.0.1 electrumupdate.com 127.0.0.1 electrumproject.org
The original post can be found here: https://bitcointalk.org/index.php?topic=5126419.0
|
|
|
|
Kakmakr
Legendary
Offline
Activity: 3542
Merit: 1965
Leading Crypto Sports Betting & Casino Platform
|
|
April 01, 2019, 01:06:17 PM |
|
I also noticed something weird, when I accessed my wallet over the weekend. The option to automatically chose the server are being disabled by default. A possible fake server was selected by default and it did not want to connect to it. I enabled the "auto" selection again and it connected to the legit server. I updated to the latest version of the software, but I think they found some workaround to manipulate the server selection. <This raised my red flags and I now check the server every time I connect.>
|
..Stake.com.. | | | ▄████████████████████████████████████▄ ██ ▄▄▄▄▄▄▄▄▄▄ ▄▄▄▄▄▄▄▄▄▄ ██ ▄████▄ ██ ▀▀▀▀▀▀▀▀▀▀ ██████████ ▀▀▀▀▀▀▀▀▀▀ ██ ██████ ██ ██████████ ██ ██ ██████████ ██ ▀██▀ ██ ██ ██ ██████ ██ ██ ██ ██ ██ ██ ██████ ██ █████ ███ ██████ ██ ████▄ ██ ██ █████ ███ ████ ████ █████ ███ ████████ ██ ████ ████ ██████████ ████ ████ ████▀ ██ ██████████ ▄▄▄▄▄▄▄▄▄▄ ██████████ ██ ██ ▀▀▀▀▀▀▀▀▀▀ ██ ▀█████████▀ ▄████████████▄ ▀█████████▀ ▄▄▄▄▄▄▄▄▄▄▄▄███ ██ ██ ███▄▄▄▄▄▄▄▄▄▄▄▄ ██████████████████████████████████████████ | | | | | | ▄▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▄ █ ▄▀▄ █▀▀█▀▄▄ █ █▀█ █ ▐ ▐▌ █ ▄██▄ █ ▌ █ █ ▄██████▄ █ ▌ ▐▌ █ ██████████ █ ▐ █ █ ▐██████████▌ █ ▐ ▐▌ █ ▀▀██████▀▀ █ ▌ █ █ ▄▄▄██▄▄▄ █ ▌▐▌ █ █▐ █ █ █▐▐▌ █ █▐█ ▀▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▀█ | | | | | | ▄▄█████████▄▄ ▄██▀▀▀▀█████▀▀▀▀██▄ ▄█▀ ▐█▌ ▀█▄ ██ ▐█▌ ██ ████▄ ▄█████▄ ▄████ ████████▄███████████▄████████ ███▀ █████████████ ▀███ ██ ███████████ ██ ▀█▄ █████████ ▄█▀ ▀█▄ ▄██▀▀▀▀▀▀▀██▄ ▄▄▄█▀ ▀███████ ███████▀ ▀█████▄ ▄█████▀ ▀▀▀███▄▄▄███▀▀▀ | | | ..PLAY NOW.. |
|
|
|
hugeblack
Legendary
Offline
Activity: 2660
Merit: 3918
|
|
April 01, 2019, 01:36:42 PM |
|
Good work, thanks for the warning but such lists will not be useful because scammers are ahead of you in a step "Create more phishing sites." All official electrum wallet releases are signed by ThomasV so it is better to modify this subject to be how to check signatures to avoid phishing Electrum websites/links. So before you download a wallet, check your wallet signature "import ThomasV.asc public key and verify other signatures". Note that: Windows builds are reproducible, and signed by several developers. See the list here Add this to your list www[.]electrumbuild[.]org www[.]electrumupgrade[.]org
|
|
|
|
Harlot
|
|
April 01, 2019, 03:29:40 PM |
|
People also need to be aware that older versions of Electrum's software has been hijacked by hackers now which will block your attempt to send BTC and fool you on trying to install a "newer" vesrion of Electrum which is also fake as its just a phishing software trying to steal your seeds and private keys. Electrum hacks are almost everywhere as its a popular desktop wallet and I think Electrum should keep up on their monitoring to avoid potential losses from their clients.
|
|
|
|
Lucius
Legendary
Offline
Activity: 3388
Merit: 6103
Crypto Swap Exchange🈺
|
|
April 02, 2019, 10:27:11 AM |
|
I check all sites from the list, the result is the following : First and last site from the list are loaded quite normal (no blocking from adblock, av or other security software), and other sites are blocked by my browser (Firefox) as Deceptive site ahead with the following warning : electrumclient.org has been reported as a deceptive site. You can report a detection problem or ignore the risk and go to this unsafe site. Learn more about deceptive sites and phishing at www.antiphishing.org. Learn more about Firefox’s Phishing and Malware Protection at support.mozilla.org. Although the idea of blocking such sites in users host file is not bad, for most users it still represents a challenge. What we need to do is report such sites as phishing to Google. In this way such sites will be blocked for every user, even those who are not aware of the problem will be protected. It is also important to use adblocks for browsers, since most users use search engines to find Electrum site, and bad ones usually pops up at the top of the search list. The last line of defense is antivirus software which should be updated, and good AV will analyze any downloaded file and prevent the user from installing bad software.
|
|
|
|
o_e_l_e_o
In memoriam
Legendary
Offline
Activity: 2268
Merit: 18718
|
|
April 02, 2019, 02:42:54 PM |
|
Although the idea of blocking such sites in users host file is not bad, for most users it still represents a challenge. What we need to do is report such sites as phishing to Google. In this way such sites will be blocked for every user, even those who are not aware of the problem will be protected. On Firefox you can also access this link (with the URL pre-populated by the page you are visiting from) by click on Help -> Report deceptive site. I've tried to make the instructions to edit the hosts file as simple as possible - you literally just locate the file in the directories I have listed, open it with a text editor, paste the code at the bottom, and save it. Most users should be able to manage that. It is also important to use adblocks for browsers, since most users use search engines to find Electrum site, and bad ones usually pops up at the top of the search list. The last line of defense is antivirus software which should be updated, and good AV will analyze any downloaded file and prevent the user from installing bad software. You shouldn't be using a search engine to find sites like electrum, myetherwallet, binanace, this forum, etc. It is much safer to manually type in the URL. Ad-blockers and antivirus are a must (in addition to extensions like HTTPS Everywhere and Privacy Badger), but you can't rely on these to protect you 100%.
|
|
|
|
Juggy777
|
|
April 02, 2019, 05:38:05 PM |
|
People also need to be aware that older versions of Electrum's software has been hijacked by hackers now which will block your attempt to send BTC and fool you on trying to install a "newer" vesrion of Electrum which is also fake as its just a phishing software trying to steal your seeds and private keys. Electrum hacks are almost everywhere as its a popular desktop wallet and I think Electrum should keep up on their monitoring to avoid potential losses from their clients.
Hey this reminds me of the hack which happened in Electrum wallet a while ago, where people were asked to update it from the wallet itself. I feel this thread contains valuable information as large number of people including me use Electrum wallet for storing and transacting bitcoins. Also I feel one should use Electrum app on mobile to be on a safe side, as all issues seem to be on the desktop version so far.
|
|
|
|
Baofeng
Legendary
Offline
Activity: 2744
Merit: 1676
|
|
April 03, 2019, 05:55:58 AM |
|
Will you consider this one? Obviously, there is a Github repo link which I think is another way to phished specially noob's. http://docs.electrum.org/en/latest/
Off-topic. Glad to see someone who uses scrapebox. . I'm been using it way back 2010-2011 when I was doing a lot of social media marketing back then. And I was amaze that it has a lot of updates, totally lose my mind seeing lots of options now.
|
RAZED | │ | ███████▄▄▄████▄▄▄▄ ████▄███████████████▄ ██▄██████▀▀████▀▀█████▄ ░▄███████████▄█▌████████▄ ▄█████████▄████▌█████████▄ ██████████▀███████▄███████▄ ██████████████▐█▄█▀████████ ▀████████████▌▐█▀██████████ ░▀███████████▌▀████████████ ██▀███████▄▄▄█████▄▄██████ █████████████████████████ █████▀█████████████████▀ ███████████████████████ | ▄▄███████▄▄ ▄███████████████▄ ▄███████████████████▄ ▄█████████████████████▄ ▄███████████████████████▄ █████████████████████████ █████████████████████████ █████████████████████████ ▀███████████████████████▀ ▀█████████████████████▀ ▀███████████████████▀ ▀███████████████▀ ███████████████████ | RAZED ORIGINALS SLOTS & LIVE CASINO SPORTSBOOK | | | NO KYC | | │ | RAZE THE LIMITS ►PLAY NOW |
|
|
|
Lucius
Legendary
Offline
Activity: 3388
Merit: 6103
Crypto Swap Exchange🈺
|
|
April 03, 2019, 09:03:02 AM |
|
~snip~
In fact, it is not difficult to edit host file, but some users will certainly have problems with such things. This only solves the problem of the existing phishing sites, and the much bigger problem are new or undetected sites which appear every day. Internet users use search engines, this is an indisputable fact - and so will be in the future. It's important when we make sure that the address of a site is correct, to add that site to our browser bookmarks and use that link to access site every time. Antivirus and adblockers are not 100% safe way of protecting, but in my personal experience in most cases they do their job well. Yesterday I report first and last phishing site from the list to Google Safe Browsing, today both sites are blocked by Malwarebytes as phishing sites. It seems the majority of security software and browsers using Google data for phishing sites, so it is important to report such sites as soon as possible, and they will be blocked in one way or another.
|
|
|
|
socks435 (OP)
Legendary
Offline
Activity: 2044
Merit: 1030
I'm looking for free spin.
|
|
April 06, 2019, 05:48:56 PM Last edit: April 06, 2019, 06:35:25 PM by socks435 |
|
Update: I added these 2 alive phishing Electrum websites. electrumcircle.com l-electrum.org I'll add more once I found new Electrum phishing websites. Anyone can help me find fake Electrum sites just make sure it is alive website.
|
Decided to end it with zer0 profit.
|
|
|
Baofeng
Legendary
Offline
Activity: 2744
Merit: 1676
|
|
April 18, 2019, 07:29:40 AM |
|
|
RAZED | │ | ███████▄▄▄████▄▄▄▄ ████▄███████████████▄ ██▄██████▀▀████▀▀█████▄ ░▄███████████▄█▌████████▄ ▄█████████▄████▌█████████▄ ██████████▀███████▄███████▄ ██████████████▐█▄█▀████████ ▀████████████▌▐█▀██████████ ░▀███████████▌▀████████████ ██▀███████▄▄▄█████▄▄██████ █████████████████████████ █████▀█████████████████▀ ███████████████████████ | ▄▄███████▄▄ ▄███████████████▄ ▄███████████████████▄ ▄█████████████████████▄ ▄███████████████████████▄ █████████████████████████ █████████████████████████ █████████████████████████ ▀███████████████████████▀ ▀█████████████████████▀ ▀███████████████████▀ ▀███████████████▀ ███████████████████ | RAZED ORIGINALS SLOTS & LIVE CASINO SPORTSBOOK | | | NO KYC | | │ | RAZE THE LIMITS ►PLAY NOW |
|
|
|
Lucius
Legendary
Offline
Activity: 3388
Merit: 6103
Crypto Swap Exchange🈺
|
|
April 18, 2019, 09:41:27 AM |
|
Baofeng, that site is already reported in Electrum board, and it is blocked in some browsers (Firefox, Brave), and Malwarebytes is also block access to that site. http://electrumsecuredownload.com This one is still available in some browsers, but I hope that it will be blocked soon. Just use link to report such sites to Google (link in my previous post), and they will remove them from search results.
|
|
|
|
TryNinja
Legendary
Offline
Activity: 2982
Merit: 7398
Top Crypto Casino
|
|
April 18, 2019, 10:05:53 AM |
|
Make sure to always report them with these links: They will be blocked on Chrome and Firefox.
|
|
|
|
HCP
Legendary
Offline
Activity: 2086
Merit: 4361
<insert witty quote here>
|
|
May 15, 2019, 03:43:33 AM |
|
A couple of others to add to your list... The first was being shilled on the boards yesterday... the later is an old fake website that seems to have resurfaced.
|
|
|
|
Kakmakr
Legendary
Offline
Activity: 3542
Merit: 1965
Leading Crypto Sports Betting & Casino Platform
|
|
May 15, 2019, 07:31:25 AM |
|
I see they added a link to the latest Electrum update at the bottom of the wallet, when you open it. People should not simply click on that link, without double checking the URL that it is pointing too. We saw how "default" servers with exploits have been added in the client in previous versions, so it is not unlikely that hackers might edit that Url and replace it with a phishing site. I download all "updates" from the official site or Github repository, so I ignore prompts like that.
|
..Stake.com.. | | | ▄████████████████████████████████████▄ ██ ▄▄▄▄▄▄▄▄▄▄ ▄▄▄▄▄▄▄▄▄▄ ██ ▄████▄ ██ ▀▀▀▀▀▀▀▀▀▀ ██████████ ▀▀▀▀▀▀▀▀▀▀ ██ ██████ ██ ██████████ ██ ██ ██████████ ██ ▀██▀ ██ ██ ██ ██████ ██ ██ ██ ██ ██ ██ ██████ ██ █████ ███ ██████ ██ ████▄ ██ ██ █████ ███ ████ ████ █████ ███ ████████ ██ ████ ████ ██████████ ████ ████ ████▀ ██ ██████████ ▄▄▄▄▄▄▄▄▄▄ ██████████ ██ ██ ▀▀▀▀▀▀▀▀▀▀ ██ ▀█████████▀ ▄████████████▄ ▀█████████▀ ▄▄▄▄▄▄▄▄▄▄▄▄███ ██ ██ ███▄▄▄▄▄▄▄▄▄▄▄▄ ██████████████████████████████████████████ | | | | | | ▄▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▄ █ ▄▀▄ █▀▀█▀▄▄ █ █▀█ █ ▐ ▐▌ █ ▄██▄ █ ▌ █ █ ▄██████▄ █ ▌ ▐▌ █ ██████████ █ ▐ █ █ ▐██████████▌ █ ▐ ▐▌ █ ▀▀██████▀▀ █ ▌ █ █ ▄▄▄██▄▄▄ █ ▌▐▌ █ █▐ █ █ █▐▐▌ █ █▐█ ▀▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▀█ | | | | | | ▄▄█████████▄▄ ▄██▀▀▀▀█████▀▀▀▀██▄ ▄█▀ ▐█▌ ▀█▄ ██ ▐█▌ ██ ████▄ ▄█████▄ ▄████ ████████▄███████████▄████████ ███▀ █████████████ ▀███ ██ ███████████ ██ ▀█▄ █████████ ▄█▀ ▀█▄ ▄██▀▀▀▀▀▀▀██▄ ▄▄▄█▀ ▀███████ ███████▀ ▀█████▄ ▄█████▀ ▀▀▀███▄▄▄███▀▀▀ | | | ..PLAY NOW.. |
|
|
|
Pmalek
Legendary
Offline
Activity: 2912
Merit: 7512
Playgram - The Telegram Casino
|
|
May 15, 2019, 08:51:58 AM |
|
To expend on what HCP said in his post earlier. There were a few threads opened yesterday on the forum, probably from hacked accounts, that were shilling a fake message that Electrum was updated to version 3.3.6. There is no version 3.3.6 so be careful if you see such threads. It leads to a fake wallet hosted on the address that HCP posted in his post.
|
|
|
|
▄▄███████▄▄███████ ▄███████████████▄▄▄▄▄ ▄████████████████████▀░ ▄█████████████████████▄░ ▄█████████▀▀████████████▄ ██████████████▀▀█████████ █████████████████████████ ██████████████▄▄█████████ ▀█████████▄▄████████████▀ ▀█████████████████████▀░ ▀████████████████████▄░ ▀███████████████▀▀▀▀▀ ▀▀███████▀▀███████ | ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄ Playgram.io ▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀ | ▄▄▄░░ ▀▄ █ █ █ █ █ █ █ ▄▀ ▀▀▀░░
| │ | ▄▄▄███████▄▄▄ ▄▄███████████████▄▄ ▄███████████████████▄ ▄██████████████▀▀█████▄ ▄██████████▀▀███▄██▐████▄ ██████▀▀████▄▄▀▀█████████ ████▄▄███▄██▀█████▐██████ ██████████▀██████████████ ▀███████▌▐██▄████▐██████▀ ▀███████▄▄███▄████████▀ ▀███████████████████▀ ▀▀███████████████▀▀ ▀▀▀███████▀▀▀ | | │ | ██████▄▄███████▄▄████████ ███▄███████████████▄░░▀█▀ ███████████░█████████░░█ ░█████▀██▄▄░▄▄██▀█████░█ █████▄░▄███▄███▄░▄██████ ████████████████████████ ████████████████████████ ██░▄▄▄░██░▄▄▄░██░▄▄▄░███ ██░░░█░██░░░█░██░░░█░████ ██░░█░░██░░█░░██░░█░░████ ██▄▄▄▄▄██▄▄▄▄▄██▄▄▄▄▄████ ███████████████████████ ███████████████████████ | | │ | ► | |
|
|
|
HCP
Legendary
Offline
Activity: 2086
Merit: 4361
<insert witty quote here>
|
|
May 15, 2019, 10:01:01 PM |
|
So... some positive news... I received this email overnight Domain Registrars usually take abuse claims relatively seriously... especially in the case of malware and phishing. It's worth reporting! Namecheap Legal & Abuse Team < abuse@namecheap.com> 15 May 2019, 22:46 to me Hello, This is to inform you that the electrum[ . ]mx domain was suspended. It has been placed on the clientHold status and locked to prevent modifications in our system. Thank you for letting us know about the issue. ----------------------- Regards, Nikita O. Legal & Abuse Department Namecheap.com
|
|
|
|
|