Bitcoin Forum
September 24, 2020, 09:51:23 PM *
News: Latest Bitcoin Core release: 0.20.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1] 2 »  All
  Print  
Author Topic: Host-file to deal with phishing sites  (Read 558 times)
hd49728
Hero Member
*****
Offline Offline

Activity: 770
Merit: 622



View Profile
August 23, 2019, 10:01:00 AM
Last edit: January 30, 2020, 02:48:54 AM by hd49728
Merited by LoyceV (5), DdmrDdmr (2), Quickseller (1), Avirunes (1), Baofeng (1), Bttzed03 (1), dkbit98 (1), Tytanowy Janusz (1)
 #1

Phishing sites are one of the worst things, the you never want to be trapped, because you will lose your identities and money too in case you use same emails and same passwords over different platforms, includes phishing sites.

Rules to fight against phishing sites:
- Never click on links in emails or any groups sent by strangers.
- Never create accounts on newborn, strange sites/ forums if you do not make your own research about those sites.
- For already known phishing sites, there are steps to add them into host-files to avoid probability that your browsers will open those sites, by you, your wife/husband, children, whoever.
BTW, I appreciated the post of o_e_l_e_o.
Another one to be added to your hosts files then.

On Windows, navigate to "C:\Windows\System32\Drivers\etc\", and open the hosts file in a text editor.
On Mac, navigate to "/private/etc/", and open the host file in a text editor.
On Linux, open terminal and write "sudo nano /etc/hosts"

Add the following two lines to the bottom of the hosts file:
Code:
0.0.0.0 bitcointalk.to
0.0.0.0 fonstavka.com

Your browser will now be unable to open those two phishing sites.

Read more: https://support.rackspace.com/how-to/modify-your-hosts-file/


So, what is new in this thread?
Steps to add phishing sites, and turn them off are above, what we need is list of phishing site.

So, if you know any phishing sites, please leave them here, I will add them to the list. I hope that we all will make a long list of phishing sites.

Code:
0.0.0.0 bitcointalk.to
0.0.0.0 fonstavka.com
0.0.0.0 thebitcointalk.net
0.0.0.0 fonstavka.com
0.0.0.0 lawcommonentrance.com
0.0.0.0 electrum.org.uk
0.0.0.0 electrumclient.org
0.0.0.0 downloadelectrum.org
0.0.0.0 electrumsite.com
0.0.0.0 electrumweb.net
0.0.0.0 electrumupdate.com
0.0.0.0 electrumproject.org
0.0.0.0 mercatox.org
0.0.0.0 bitplace.org
0.0.0.0 coinpalace.org
0.0.0.0 exmo.space
0.0.0.0 poficrypt.com
0.0.0.0 coinsweet.org
0.0.0.0 cryptexcurrency.com
0.0.0.0 crypton-bnb.com
0.0.0.0 cryptexplatform.com
0.0.0.0 crypto-trader24.com
0.0.0.0 24xfast.com
0.0.0.0 24xtransfer.com
0.0.0.0 24xtrade.com
0.0.0.0 24burntrade.com
0.0.0.0 bitusual.com
0.0.0.0 24fastcoin.com
0.0.0.0 social-info.ru
0.0.0.0 margo-event.com
0.0.0.0 www.social-analysis.ru
0.0.0.0 24spacetrade.com
0.0.0.0 24xholding.com
0.0.0.0 ancebit.com
0.0.0.0 24xcointrade.com
0.0.0.0 24bestchanger.com
0.0.0.0 24xhold.com
0.0.0.0 cryptextrade.com
0.0.0.0 tradexblue.com
0.0.0.0 bitmate24.com
0.0.0.0 poficrypt.com
0.0.0.0 evrostyle.net
0.0.0.0 24excoin.com
0.0.0.0 fastchange24.com
0.0.0.0 cryptonplatform.io
0.0.0.0 best-xtrades.com
0.0.0.0 tradexmate.com
0.0.0.0 fixtradecorp.com
0.0.0.0 bitbeaxy.com
0.0.0.0 24bitstamp.com
0.0.0.0 mercatox.org
0.0.0.0 crypto-change24.com
0.0.0.0 bitspace24.com
0.0.0.0 bitbns.org
0.0.0.0 24coindesk.com
0.0.0.0 coinsbank.store
0.0.0.0 xcryptoplatform.com
0.0.0.0 bitshumb.com
0.0.0.0 https://brave-browser.info
0.0.0.0 https://bitblender.eu/
0.0.0.0 https://bounty-brave.info/
0.0.0.0 https://litecoln.org/
0.0.0.0 https://biockcheln.info/
0.0.0.0 http://iocaibitcoins.com/
0.0.0.0 https://iocaibitcoins.com/
0.0.0.0 https://lolibitcoins.net/
0.0.0.0 http://privatemgrgg.pw/vcruntime140.dll
0.0.0.0 https://localbicolns.org/
0.0.0.0 http://localbicolns.org/
0.0.0.0 http://mgsocl.su/api/check.get
0.0.0.0 http://mgsocl.su/api/gate.get
0.0.0.0 http://dress-x.ru/freebl3.dll
0.0.0.0 https://brave-drop.info
0.0.0.0 https://electrum.cash/#home
0.0.0.0 smatmixer.io
Someone did it, but you still can contribute to my list.
SteveBlack's hosts
Report phishing site through the page

Disable punny coded phishing sites

Source: https://winaero.com/blog/enable-idn-punycode-firefox-address-bar/
What is punny code?
Punycode is a special encoding used to convert Unicode characters to ASCII, which is a smaller, more restricted character set than Unicode. Punycode is used to encode internationalized domain names (IDNs) as a defense against address spoofing. Firefox allows enabling IDN punycode instead of non-Latin letters and Unicode symbols. This can be very useful, as you can find out if the currently opened web page is a phishing site or just a non-official mirror of some web site which you would like to avoid.
Ex: A phishing site of Binance that use punny code


At first glance, the addresses look very similar. Some users may not pay attention to the small dots below the "n" letter, which are there because it is a unicode symbol 'n with a dot below it' (U+1E47). This way, phishing web sites may trick you and make you believe that you are visiting the official genuine site.

For advanced protection, you can enable IDN Punycode protection in Firefox. With the option enabled, the address becomes like this:

Obviously, it doesn't look like the right web address any more.

If you find this feature useful and would like to enable it, here is how.

To enable IDN Punycode in Firefox Address Bar, do the following.
Read more here


Punnycode attacks

1. Be cautious if the site presses you to do something quickly. This is a classic strategy by hackers to rush their potential victims so that they are less likely to notice anything suspicious. Often they will offer a ‘limited time only’ deal, and make it difficult to exit the page with ‘are you sure you want to exit’ pop ups: these are all tactics to make you stay on their site longer and give them your details.
2. If you are being offered a deal, go to the original company site and check if it’s available there as well, if not it’s mostly likely a scam doing it’s best to mimic the established brand and trick visitors into handing over their details.
3. If some of the letters in the address bar look weird, or the website design looks different, rewrite it or visit the original company URL in a new tab to compare. The letters in the address bar looking strange is a key indicator that punycode is being used to trick you into thinking you are visiting a well-established brand site when in fact you are being taken to a malicious site.
4. Use a password manager; this reduces the risk of pasting passwords into dodgy sites.
5. Force your browser to display Punycode names, this option is available in Firefox.
6. Click on the padlock to view and inspect the HTTPS certificate.

IDN homograph attack

Should-read threads:
What to do to avoid phishing sites
[LEARN] Phishing Quizzes - Beginners & Experts

.freebitcoin.       ▄▄▄█▀▀██▄▄▄
   ▄▄██████▄▄█  █▀▀█▄▄
  ███  █▀▀███████▄▄██▀
   ▀▀▀██▄▄█  ████▀▀  ▄██
▄███▄▄  ▀▀▀▀▀▀▀  ▄▄██████
██▀▀█████▄     ▄██▀█ ▀▀██
██▄▄███▀▀██   ███▀ ▄▄  ▀█
███████▄▄███ ███▄▄ ▀▀▄  █
██▀▀████████ █████  █▀▄██
 █▄▄████████ █████   ███
  ▀████  ███ ████▄▄███▀
     ▀▀████   ████▀▀
BITCOIN
DICE
EVENT
BETTING
WIN A LAMBO !

.
            ▄▄▄▄▄▄▄▄▄▄███████████▄▄▄▄▄
▄▄▄▄▄██████████████████████████████████▄▄▄▄
▀██████████████████████████████████████████████▄▄▄
▄▄████▄█████▄████████████████████████████▄█████▄████▄▄
▀████████▀▀▀████████████████████████████████▀▀▀██████████▄
  ▀▀▀████▄▄▄███████████████████████████████▄▄▄██████████
       ▀█████▀  ▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀  ▀█████▀▀▀▀▀▀▀▀▀▀
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
.PLAY NOW.
1600984283
Hero Member
*
Offline Offline

Posts: 1600984283

View Profile Personal Message (Offline)

Ignore
1600984283
Reply with quote  #2

1600984283
Report to moderator
1600984283
Hero Member
*
Offline Offline

Posts: 1600984283

View Profile Personal Message (Offline)

Ignore
1600984283
Reply with quote  #2

1600984283
Report to moderator
LEADING CRYPTO SPORTSBOOK & CASINO F U N . F A S T . F A I R . PROUD
PARTNER
OF
CRYPTO
EXCLUSIVE
CLUBHOUSE
FAST &
SECURE PAYMENTS
20+ DAILY
PRICE
BOOSTS
PLAY NOW
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
1600984283
Hero Member
*
Offline Offline

Posts: 1600984283

View Profile Personal Message (Offline)

Ignore
1600984283
Reply with quote  #2

1600984283
Report to moderator
1600984283
Hero Member
*
Offline Offline

Posts: 1600984283

View Profile Personal Message (Offline)

Ignore
1600984283
Reply with quote  #2

1600984283
Report to moderator
Tytanowy Janusz
Hero Member
*****
Offline Offline

Activity: 882
Merit: 920



View Profile
August 23, 2019, 10:08:53 AM
Merited by hd49728 (1)
 #2

The most tricky phising website i've heard was this one. Looks like Binance.com but there are no "n". This is strange n with dot at the bottom.


source

How to deal with such a phishing adress? Those dots are almost unnoticable.

███████████████████████████
█████████▀▄▄▄▄▄██▀▀████████
█████▀▄█▀▀▄▄▄▄▄▄▄▀▀▄▄▀█████
████ █▀▄███████████▄▀██████
███▄█ ███████▀ ██████ █ ███
██▀█ ███  ▀▀█  ▀██████ █ ██
██ █ ████▄▄      ▀▀▀██ █ ██
██ █ █████▌        ▄██ ████
███▄█ █████▄▄   ▄▄███ █▀███
████▀█▄▀█████▌  ▀██▀▄█ ████
█████▄▀▀▄▄▀▀▀▀   ▄▄█▀▄█████
████████▄██▀▀▀▀▀▀██████████
███████████████████████████

        ▄     ▀
         █ ▄▀
   ▄▀     █    ▄▀
  ▄   ▄▄  ██▄▄▀
 ▀      ▀▄▄██   ▄ ▄▄▀▀

          ▀██ ▄▀▀▀▄ ▀▄
           ███▀
 ▀▄
  ▄  ▀▄ ██▌  ▀▄
    ▀  ▄  ▐██
    ▄
   ▐██      ▄
     ▀
   ▄███▌ ▄▄   ▀
  ▄▄
▄▄ ▄█████▄ ▄▄ ▄▄
JOIN ►     ▬▬▬▬▬▬▬▬▬▬▬▬▬▬
..$20,000 ROO'S FALL FAIR..
       ▄▄██████▄▄▄
      ██▄▄▀▀█▀▀
     ████▄▀▀▄██▀
     ▄▀▀▄▄▄██▀
    ▀  ▀▀▀▀▀
             ▄▄▄▄▄▄▄
          ▄███▄▄▄████▄  ▄▄▀
        ▄████████▀▀▀█▄▀▀
     ▄███▀▀▄▄██▄▄▀▀█████
 ▄▄████▄▄▄▄▄▄▀▀████████
▀▀██▀▀▀▄▀███████▄▀████
   ▀▀██████████████▀
       ▀▀▀███████▀▀
.
...PLAY NOW...
TryNinja
Legendary
*
Offline Offline

Activity: 1512
Merit: 2727


Merit & Notifications bot: @BTTSuperNotifier_bot


View Profile WWW
August 23, 2019, 10:11:39 AM
Merited by TMAN (20), Tytanowy Janusz (1), hd49728 (1)
 #3

How to deal with such a phishing adress? Looks like Binance.com but there are no "n". This is strange n with dot at the bottom.

https://i.imgur.com/H1MjCo6.png
source
Enable the punycode “detection” on your browser.

https://winaero.com/blog/enable-idn-punycode-firefox-address-bar/

It will go from this:



To this:


LoyceV
Legendary
*
Offline Offline

Activity: 1988
Merit: 6970


Thick-Skinned Gang Leader


View Profile WWW
August 23, 2019, 10:21:58 AM
Merited by hd49728 (1)
 #4

Allow me to quote myself, this is what started it:
I totally fell for the cloned site, until I realized I couldn't see your trust ratings.
I have added this line to /etc/hosts
Code:
127.0.0.1       bitcointalk.to
Now my computer can't access that phishing site anymore.

And this is my addition to this topic:
Someone who has time should maintain a list of these phishing sites, and we can encourage all new users to update their hosts file.
Someone already did that: https://github.com/StevenBlack/hosts (scroll down a bit to see many different categories hosts files). The one mentioned above isn't on it though, so I've added it by myself.



For historical purposes:
^ ^  Another post I wish I could simply +1 or "Like"

Please Theymos.....    Grin
Just 3 days later, theymos introduced the Merit system Cheesy

Upgrade00
Hero Member
*****
Offline Offline

Activity: 714
Merit: 720



View Profile WWW
August 23, 2019, 10:31:55 AM
 #5

- Never create accounts on newborn, strange sites/ forums if you do not make your own research about those sites.

And do not use the same or similar email and password when opening different accounts on different websites even after making your research, sites could be hacked and you would not want your entire online activity compromised. If possible have records of all your log in details on different accounts, especially if you're into cryptocurrency and could be using different exchanges at the same time.

Also, Have you most frequently visited sites bookmarked.





.
.




░██████████████████░
████████████████████
█████████▀░░░███████
█████████░░▄████████
███████▀▀░░▀▀███████
███████▄▄░░▄▄███████
█████████░░█████████

█████████░░█████████

█████████▄▄█████████

████████████████████

░██████████████████░
░██████████████████░
████████████████████
████████████▀▀▀█▀███
███░▀█████▀░░░░░▀███
███▌░░░▀▀▀░░░░░░████
████▄░░░░░░░░░░░████
█████▀░░░░░░░░░█████

██████▄░░░░░▄▄██████

█████▄▄▄▄███████████

████████████████████

░██████████████████░
░██████████████████░
████████████████████
████████████████████
███████████▀▀░░▐████
███████▀▀░░░░░█████
████▀░░░▄█▀░░░▐█████
█████▄▄█▀░░░░░██████

███████▌▄▄▄▐██████

████████████████████

████████████████████

░██████████████████░
dkbit98
Hero Member
*****
Offline Offline

Activity: 910
Merit: 1187


First 100% Liquid Stablecoin Backed by Gold


View Profile
August 23, 2019, 01:38:26 PM
Merited by hd49728 (1)
 #6

It is also a good thing to have Metamask and Malwarebytes extensions installed in your browser to protect from some phishing websites,
but scammers always create new websites and there is no 100% protection against this.

Few more websites to report phishing websites:

https://submit.symantec.com/antifraud/phish.cgi
https://www.comodo.com/home/internet-security/submit.php?url=http://sebiltv.com.tr/index/index.php?topic=5088858.0&&submissionType=1&source=1

wwzsocki
Legendary
*
Offline Offline

Activity: 1428
Merit: 1363


First 100% Liquid Stablecoin Backed by Gold


View Profile WWW
August 23, 2019, 04:55:18 PM
Last edit: September 22, 2019, 11:41:13 AM by wwzsocki
 #7

The most tricky phising website i've heard was this one. Looks like Binance.com but there are no "n". This is strange n with dot at the bottom.


source

How to deal with such a phishing adress? Those dots are almost unnoticable.

Very good that you shared this.

I had to look for quite some time on the URL to spot the difference and to be honest I wasn't able to.

I saw these two dots after I read about them. I am so happy that I have Binance platform installed

hd49728
Hero Member
*****
Offline Offline

Activity: 770
Merit: 622



View Profile
August 23, 2019, 05:10:04 PM
Last edit: September 20, 2019, 06:13:49 PM by hd49728
 #8

Sometimes, it looks like dust on computer screen, and most of us don't realize it. It is very risky, especially for careless guys. I remember there is user whom wear animated avatar of an ant, and at first time I saw that avatar, I thought there is an ant on my computer screen. That's weird but funny when I discovered that is an avatar.

.freebitcoin.       ▄▄▄█▀▀██▄▄▄
   ▄▄██████▄▄█  █▀▀█▄▄
  ███  █▀▀███████▄▄██▀
   ▀▀▀██▄▄█  ████▀▀  ▄██
▄███▄▄  ▀▀▀▀▀▀▀  ▄▄██████
██▀▀█████▄     ▄██▀█ ▀▀██
██▄▄███▀▀██   ███▀ ▄▄  ▀█
███████▄▄███ ███▄▄ ▀▀▄  █
██▀▀████████ █████  █▀▄██
 █▄▄████████ █████   ███
  ▀████  ███ ████▄▄███▀
     ▀▀████   ████▀▀
BITCOIN
DICE
EVENT
BETTING
WIN A LAMBO !

.
            ▄▄▄▄▄▄▄▄▄▄███████████▄▄▄▄▄
▄▄▄▄▄██████████████████████████████████▄▄▄▄
▀██████████████████████████████████████████████▄▄▄
▄▄████▄█████▄████████████████████████████▄█████▄████▄▄
▀████████▀▀▀████████████████████████████████▀▀▀██████████▄
  ▀▀▀████▄▄▄███████████████████████████████▄▄▄██████████
       ▀█████▀  ▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀  ▀█████▀▀▀▀▀▀▀▀▀▀
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
.PLAY NOW.
wwzsocki
Legendary
*
Offline Offline

Activity: 1428
Merit: 1363


First 100% Liquid Stablecoin Backed by Gold


View Profile WWW
August 24, 2019, 11:46:53 AM
 #9

Sometimes, it looks like dust on computer screen...

Exactly, even after I have read about the dots, still I was trying to clean the screen. First, with a finger  Wink and later with a special spray. I was sure is just dust.

I think this one is the biggest threat from all fake URL's I have seen so far.

hd49728
Hero Member
*****
Offline Offline

Activity: 770
Merit: 622



View Profile
August 24, 2019, 01:33:01 PM
Last edit: September 20, 2019, 06:13:37 PM by hd49728
 #10

I added those phishing exchanges to host-file in OP, took them from MEE6 Discord bot SCAM ALERT Phishing exchanges !!
Code:
0.0.0.0 mercatox.org
0.0.0.0 bitplace.org
0.0.0.0 coinpalace.org
0.0.0.0 exmo.space
0.0.0.0 poficrypt.com
0.0.0.0 coinsweet.org
0.0.0.0 cryptexcurrency.com
0.0.0.0 crypton-bnb.com
0.0.0.0 cryptexplatform.com
0.0.0.0 crypto-trader24.com
0.0.0.0 24xfast.com
0.0.0.0 24xtransfer.com
0.0.0.0 24xtrade.com
0.0.0.0 24burntrade.com
0.0.0.0 bitusual.com
0.0.0.0 24fastcoin.com
0.0.0.0 social-info.ru
0.0.0.0 margo-event.com
0.0.0.0 www.social-analysis.ru
0.0.0.0 24spacetrade.com
0.0.0.0 24xholding.com
0.0.0.0 ancebit.com
0.0.0.0 24xcointrade.com
0.0.0.0 24bestchanger.com
0.0.0.0 24xhold.com
0.0.0.0 cryptextrade.com
0.0.0.0 tradexblue.com
0.0.0.0 bitmate24.com
0.0.0.0 poficrypt.com
0.0.0.0 evrostyle.net
0.0.0.0 24excoin.com
0.0.0.0 fastchange24.com
0.0.0.0 cryptonplatform.io
0.0.0.0 best-xtrades.com
0.0.0.0 tradexmate.com
0.0.0.0 fixtradecorp.com
0.0.0.0 bitbeaxy.com
0.0.0.0 24bitstamp.com
0.0.0.0 mercatox.org
0.0.0.0 crypto-change24.com
0.0.0.0 bitspace24.com
0.0.0.0 bitbns.org
0.0.0.0 24coindesk.com
0.0.0.0 coinsbank.store
0.0.0.0 xcryptoplatform.com
0.0.0.0 bitshumb.com

.freebitcoin.       ▄▄▄█▀▀██▄▄▄
   ▄▄██████▄▄█  █▀▀█▄▄
  ███  █▀▀███████▄▄██▀
   ▀▀▀██▄▄█  ████▀▀  ▄██
▄███▄▄  ▀▀▀▀▀▀▀  ▄▄██████
██▀▀█████▄     ▄██▀█ ▀▀██
██▄▄███▀▀██   ███▀ ▄▄  ▀█
███████▄▄███ ███▄▄ ▀▀▄  █
██▀▀████████ █████  █▀▄██
 █▄▄████████ █████   ███
  ▀████  ███ ████▄▄███▀
     ▀▀████   ████▀▀
BITCOIN
DICE
EVENT
BETTING
WIN A LAMBO !

.
            ▄▄▄▄▄▄▄▄▄▄███████████▄▄▄▄▄
▄▄▄▄▄██████████████████████████████████▄▄▄▄
▀██████████████████████████████████████████████▄▄▄
▄▄████▄█████▄████████████████████████████▄█████▄████▄▄
▀████████▀▀▀████████████████████████████████▀▀▀██████████▄
  ▀▀▀████▄▄▄███████████████████████████████▄▄▄██████████
       ▀█████▀  ▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀  ▀█████▀▀▀▀▀▀▀▀▀▀
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
.PLAY NOW.
Bitcoin Smith
Member
**
Offline Offline

Activity: 294
Merit: 13


View Profile
August 24, 2019, 01:47:20 PM
 #11

We can see lot of new phishing sites popup every day so its impossible to find out all those sites upto date but all we can do is login to the coinmarket cap and login to the exchange from the link placed there,I hope there is no phishing sites will attack by this way.

For too often usage bookmarking the sites really important.
Avirunes
Legendary
*
Offline Offline

Activity: 1890
Merit: 1371



View Profile WWW
August 24, 2019, 08:18:43 PM
 #12

We can see lot of new phishing sites popup every day so its impossible to find out all those sites upto date but all we can do is login to the coinmarket cap and login to the exchange from the link placed there,I hope there is no phishing sites will attack by this way.

For too often usage bookmarking the sites really important.

That's not a solution (I mean coinmarket n stuff). Phisers not only targets exchange, they can also target gambling sites or other sites which are popular in the crypto community. They can attack by hiding it in hyperlink behind the text in email or other ways and someone can fall for it believing it as a actual link to the site.

I think it is the only way- by spreading the awareness about such attempts and ways to avoid it. GJ @OP , BTW didn't knew
about Punycode so thanks.

Baofeng
Legendary
*
Offline Offline

Activity: 1274
Merit: 1183


View Profile
August 26, 2019, 12:13:46 PM
Merited by Quickseller (1)
 #13

Code:
  PHISHING LINK - https://brave-browser.info/


..bustadice..         ▄▄████████████▄▄
     ▄▄████████▀▀▀▀████████▄▄
   ▄███████████    ███████████▄
  █████    ████▄▄▄▄████    █████
 ██████    ████████▀▀██    ██████
██████████████████   █████████████
█████████████████▌  ▐█████████████
███    ██████████   ███████    ███
███    ████████▀   ▐███████    ███
██████████████      ██████████████
██████████████      ██████████████
 ██████████████▄▄▄▄██████████████
  ▀████████████████████████████▀
                     ▄▄███████▄▄
                  ▄███████████████▄
   ███████████  ▄████▀▀       ▀▀████▄
               ████▀      ██     ▀████
 ███████████  ████        ██       ████
             ████         ██        ████
███████████  ████     ▄▄▄▄██        ████
             ████     ▀▀▀▀▀▀        ████
 ███████████  ████                 ████
               ████▄             ▄████
   ███████████  ▀████▄▄       ▄▄████▀
                  ▀███████████████▀
                     ▀▀███████▀▀
           ▄██▄
           ████
            ██
            ▀▀
 ▄██████████████████████▄
██████▀▀██████████▀▀██████
█████    ████████    █████
█████▄  ▄████████▄  ▄█████
██████████████████████████
██████████████████████████
    ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
    ▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
       ████████████
......Play......
hd49728
Hero Member
*****
Offline Offline

Activity: 770
Merit: 622



View Profile
August 27, 2019, 01:49:20 AM
Last edit: September 20, 2019, 06:13:23 PM by hd49728
 #14

Code:
 PHISHING LINK - https://brave-browser.info/


I added it to host-file in OP. Thank you, Baofeng.
Exactly, even after I have read about the dots, still I was trying to clean the screen. First, with a finger  Wink and later with a special spray. I was sure is just dust.
Like that annoying animated avatar (becoin):
First time I saw it, I tried to clean my computer screen, honestly.   Roll Eyes

.freebitcoin.       ▄▄▄█▀▀██▄▄▄
   ▄▄██████▄▄█  █▀▀█▄▄
  ███  █▀▀███████▄▄██▀
   ▀▀▀██▄▄█  ████▀▀  ▄██
▄███▄▄  ▀▀▀▀▀▀▀  ▄▄██████
██▀▀█████▄     ▄██▀█ ▀▀██
██▄▄███▀▀██   ███▀ ▄▄  ▀█
███████▄▄███ ███▄▄ ▀▀▄  █
██▀▀████████ █████  █▀▄██
 █▄▄████████ █████   ███
  ▀████  ███ ████▄▄███▀
     ▀▀████   ████▀▀
BITCOIN
DICE
EVENT
BETTING
WIN A LAMBO !

.
            ▄▄▄▄▄▄▄▄▄▄███████████▄▄▄▄▄
▄▄▄▄▄██████████████████████████████████▄▄▄▄
▀██████████████████████████████████████████████▄▄▄
▄▄████▄█████▄████████████████████████████▄█████▄████▄▄
▀████████▀▀▀████████████████████████████████▀▀▀██████████▄
  ▀▀▀████▄▄▄███████████████████████████████▄▄▄██████████
       ▀█████▀  ▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀  ▀█████▀▀▀▀▀▀▀▀▀▀
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
.PLAY NOW.
hd49728
Hero Member
*****
Offline Offline

Activity: 770
Merit: 622



View Profile
September 06, 2019, 02:00:01 AM
Last edit: September 20, 2019, 06:13:10 PM by hd49728
 #15

I saw a thread on fake site of Bitblender, that was shutdown by their team (likely scam exited) months ago:
[Warning] Fake Bitblender site
Code:
https://bitblender[dot]eu/
That site is added to the host file in OP (last line in OP list)
Code:
0.0.0.0 https://bitblender.eu/

.freebitcoin.       ▄▄▄█▀▀██▄▄▄
   ▄▄██████▄▄█  █▀▀█▄▄
  ███  █▀▀███████▄▄██▀
   ▀▀▀██▄▄█  ████▀▀  ▄██
▄███▄▄  ▀▀▀▀▀▀▀  ▄▄██████
██▀▀█████▄     ▄██▀█ ▀▀██
██▄▄███▀▀██   ███▀ ▄▄  ▀█
███████▄▄███ ███▄▄ ▀▀▄  █
██▀▀████████ █████  █▀▄██
 █▄▄████████ █████   ███
  ▀████  ███ ████▄▄███▀
     ▀▀████   ████▀▀
BITCOIN
DICE
EVENT
BETTING
WIN A LAMBO !

.
            ▄▄▄▄▄▄▄▄▄▄███████████▄▄▄▄▄
▄▄▄▄▄██████████████████████████████████▄▄▄▄
▀██████████████████████████████████████████████▄▄▄
▄▄████▄█████▄████████████████████████████▄█████▄████▄▄
▀████████▀▀▀████████████████████████████████▀▀▀██████████▄
  ▀▀▀████▄▄▄███████████████████████████████▄▄▄██████████
       ▀█████▀  ▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀  ▀█████▀▀▀▀▀▀▀▀▀▀
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
.PLAY NOW.
hd49728
Hero Member
*****
Offline Offline

Activity: 770
Merit: 622



View Profile
September 18, 2019, 07:05:02 AM
Last edit: September 20, 2019, 06:12:58 PM by hd49728
 #16

Those sites have been masked already, but I would prefer to leave them here as an example of phishing sites with punny codes.
Code:
https://stéllar.org/account-viewer/#!/
https://mediụm.com/blog/stellar-community/third-lumen-distribution-program/
https://claimlumens.org/a64bff5080fb2bb636b2e2b7940f04ad

https://xn--stllar-cva.org/account-viewer/#!/
https://xn--medim-9d2b.com/blog/stellar-community/third-lumen-distribution-program/
Moreover, there is another topic from wwzsocki: What is Punycode and how to protect yourself from Homograph Phishing attacks?. In that topic, you can see some phishing sites that use punny codes.

.freebitcoin.       ▄▄▄█▀▀██▄▄▄
   ▄▄██████▄▄█  █▀▀█▄▄
  ███  █▀▀███████▄▄██▀
   ▀▀▀██▄▄█  ████▀▀  ▄██
▄███▄▄  ▀▀▀▀▀▀▀  ▄▄██████
██▀▀█████▄     ▄██▀█ ▀▀██
██▄▄███▀▀██   ███▀ ▄▄  ▀█
███████▄▄███ ███▄▄ ▀▀▄  █
██▀▀████████ █████  █▀▄██
 █▄▄████████ █████   ███
  ▀████  ███ ████▄▄███▀
     ▀▀████   ████▀▀
BITCOIN
DICE
EVENT
BETTING
WIN A LAMBO !

.
            ▄▄▄▄▄▄▄▄▄▄███████████▄▄▄▄▄
▄▄▄▄▄██████████████████████████████████▄▄▄▄
▀██████████████████████████████████████████████▄▄▄
▄▄████▄█████▄████████████████████████████▄█████▄████▄▄
▀████████▀▀▀████████████████████████████████▀▀▀██████████▄
  ▀▀▀████▄▄▄███████████████████████████████▄▄▄██████████
       ▀█████▀  ▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀  ▀█████▀▀▀▀▀▀▀▀▀▀
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
.PLAY NOW.
panganib999
Sr. Member
****
Offline Offline

Activity: 980
Merit: 291



View Profile
October 20, 2019, 11:31:45 AM
 #17

- Never create accounts on newborn, strange sites/ forums if you do not make your own research about those sites.

And do not use the same or similar email and password when opening different accounts on different websites even after making your research, sites could be hacked and you would not want your entire online activity compromised. If possible have records of all your log in details on different accounts, especially if you're into cryptocurrency and could be using different exchanges at the same time.

Also, Have you most frequently visited sites bookmarked.

Being victimized by phishing sites and being phished is far most horrible thing you could let yourself get into. Phishing is technically the heaviest and the one that you should avoid in terms of cybercrimes for it would cost you so much and will put you in danger. Once the site collected all of your information and everything you'll be putting using your clipboard you're doomed. That's why everyone, especially the newbies, should be very careful and vigilant upon entering sites and downloading applications. I could agree that for them to avoid it, theybcould bookmark their most visited sites so if one that looks and acts the same suddenly appeared they would know that it wasn't the site they used to visit and it might be risky using it.


████████████████████████████████████
████████████████████████████████████
████████████████████████████████████
████████████████████████████████████
████████████████████████████████████
████████████████████████████████████
████████████████████████████████████
████████████████████████████████████
████████████████████████████████████
████████████████████████████████████
████████████████████████████████████
███████████████████████████████████
████████████████████████████████████
████████████████████████████████████
████████████████████████████████████
.
CASINEOS


r



PLAY NOW
nakamura12
Full Member
***
Offline Offline

Activity: 952
Merit: 224


★777Coin.com★ Fun BTC Casino!


View Profile
October 20, 2019, 04:11:08 PM
 #18

Being victimized by phishing sites and being phished is far most horrible thing you could let yourself get into. Phishing is technically the heaviest and the one that you should avoid in terms of cybercrimes for it would cost you so much and will put you in danger. Once the site collected all of your information and everything you'll be putting using your clipboard you're doomed. That's why everyone, especially the newbies, should be very careful and vigilant upon entering sites and downloading applications. I could agree that for them to avoid it, theybcould bookmark their most visited sites so if one that looks and acts the same suddenly appeared they would know that it wasn't the site they used to visit and it might be risky using it.


There's no doubt that phishing sites are one of the dangerous thing that you can imagine that might/will happen to you if you got yourself getting phished by a phishing site which you mentioned that they can get your information and it can be sold. Anyway, bookmark could also be compromised the same as the clipboard hijacking.

hd49728
Hero Member
*****
Offline Offline

Activity: 770
Merit: 622



View Profile
October 20, 2019, 05:34:31 PM
 #19

Dangerous sites are not really dangerous ones, if people don't careless to visit, create and log in their accounts on such sites with same passwords on other sites. Generally, people can protect themselves from such sites by maintaining good web-surfing behaviors. It's key thing to self-protect from dangerous phishing sites.

.freebitcoin.       ▄▄▄█▀▀██▄▄▄
   ▄▄██████▄▄█  █▀▀█▄▄
  ███  █▀▀███████▄▄██▀
   ▀▀▀██▄▄█  ████▀▀  ▄██
▄███▄▄  ▀▀▀▀▀▀▀  ▄▄██████
██▀▀█████▄     ▄██▀█ ▀▀██
██▄▄███▀▀██   ███▀ ▄▄  ▀█
███████▄▄███ ███▄▄ ▀▀▄  █
██▀▀████████ █████  █▀▄██
 █▄▄████████ █████   ███
  ▀████  ███ ████▄▄███▀
     ▀▀████   ████▀▀
BITCOIN
DICE
EVENT
BETTING
WIN A LAMBO !

.
            ▄▄▄▄▄▄▄▄▄▄███████████▄▄▄▄▄
▄▄▄▄▄██████████████████████████████████▄▄▄▄
▀██████████████████████████████████████████████▄▄▄
▄▄████▄█████▄████████████████████████████▄█████▄████▄▄
▀████████▀▀▀████████████████████████████████▀▀▀██████████▄
  ▀▀▀████▄▄▄███████████████████████████████▄▄▄██████████
       ▀█████▀  ▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀  ▀█████▀▀▀▀▀▀▀▀▀▀
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
.PLAY NOW.
LbtalkL
Full Member
***
Offline Offline

Activity: 1050
Merit: 160


View Profile
October 20, 2019, 06:06:32 PM
 #20

Thanks for the list I will add this on my host file, I also use Metacert by Cryptonite extension but it is trial only. The icon turns green when it is safe and black if not. Every day there are new phishing sites created so we need to be careful to look carefully on the URL if it is correct before entering something and don't click suspicious links on the email.
Pages: [1] 2 »  All
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!