[UPDATES] Blockchain.com Clone - PHISHING (New: Google Docs Malware)

[masulum]

Please double check sender of the email you received. Here is another Blockchain.com email clone I have received today.

Email sender:

Code:

erickqq20her@gmx.com

If you are clicking this email, you will redirect to
_____________________________________

Code:

https://biockchaine.com/en/btc/tx/c603dae6d270849a11bd2e4b0469066282052b498264dea131e86069/

Login page of this website (checking using Sandboxie):
_____________________________________


Domain information:
biockchaine.com

Domain lookup:

Code:

Domain Name: biockchaine.com
Registry Domain ID: 2429545862_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.registrar.eu
Registrar URL: http://www.registrar.eu
Updated Date: 2019-09-03T18:25:04Z
Creation Date: 2019-09-03T13:01:45Z
Registrar Registration Expiration Date: 2020-09-03T13:01:45Z
Registrar: Hosting Concepts B.V. d/b/a Openprovider
Registrar IANA ID: 1647
Registrar Abuse Contact Email: email@registrar.eu
Registrar Abuse Contact Phone: +31.104482297

Original website:
https://blockchain.com or https://blockchain.info

Known original email:
noreply@blockchain.com
no-reply@blockchain.info

Updates: Some thread must read by newbies or anyone that doesn't care about phishing before:

• Half of all Phishing Sites Now Have the Padlock Sign - by Pmalek
  
• What is Punycode and how to protect yourself from Homograph Phishing attacks? - by wwzsocki
  
• Chainlink phishing SCAM - chianlink.io - by dkbit98
  
• [Warning] Phising Exodus Website [exodlus.io] - by DroomieChikito
  

[kolonel_x]

The look of this site is exactly the same as the original only a different domain, scamers have now done everything to fool many people, at this time I don't receive emails like that, but I will be vigilant and be careful when viewing domains.

[panganib999]

The look of this site is exactly the same as the original only a different domain, scamers have now done everything to fool many people, at this time I don't receive emails like that, but I will be vigilant and be careful when viewing domains.

This fake website could trick and fool so many crypto enthusiasts especially beginners. Beginners aren't really familiar with the site so they are probably the ones that have a high risk of falling into these traps. Good thing this was posted here so people, again, especially the beginners could take note and be warned of this one. Scammers are doing everything just to collect information through phishing and use it for executing other schemes like identity theft or stealing assets, so beginners or the so-called newbies, be cautious, y'all has been warned.

[JeromeTash]

Hahaha the email part was a real redflag... seems like some cheap ass scammer who is using a personal email service  

You could also add that people should keep a keen eye on the email address sending the message
Some Known official Email addresses from blockchain wallet's support are;

Code:

noreply@blockchain.com
no-reply@blockchain.info

[masulum]

This kind of email usually go straight to your spam folder, especially if you use GMail which have great spam detection.

Gmx is white listed email addrss i think. Because gmx is email hosting provider too. Maybe this is the reason why their email not marked as spam.

-snip-

Thank you, i will add this

[Chikito]

Blockchain.com aka Blockchain.info have a lot of problems.
When we go to Web Wallets board, We will be funded about 95% problem, scamming, phishing about that site.

[joniboini]

Do we need a new thread if there's a new phishing email sent to our inbox?

I know the purpose is good, but if anyone has at least a little security awareness, then they won't even bother to check the suspicious link in the first place.

[Rmcdermott927]

Hahaha the email part was a real redflag... seems like some cheap ass scammer who is using a personal email service  

You could also add that people should keep a keen eye on the email address sending the message
Some Known official Email addresses from blockchain wallet's support are;

Code:

noreply@blockchain.com
no-reply@blockchain.info

Sadly, as lazy as this scam was, it will inevitably make some money,

[Lafu]

Nice catch masulum !

Guess this will be not the only and last phishing clone for blockchain.com !
This phishing things getting bigger and bigger and they also getting smarter on how they doing it .
Always checking the webpage 2 times before you will enter the site.

[masulum]

Nice catch masulum !

Thank you very much

Guess this will be not the only and last phishing clone for blockchain.com !
This phishing things getting bigger and bigger and they also getting smarter on how they doing it .
Always checking the webpage 2 times before you will enter the site.

Exacly, every day, someone will try new ways to get a victim. And I agree with you, to double check every URL inside action button, hyperlink in email, file sharing or hyperlink on website.

[erickastella]

thank you for this information is very valuable, in my opinion phishing is almost exactly the same as the original if people who want to log in do not see the url address of the website, my tips if you want to log on to the website first check the url or not, because it can we just login via phishing web

[Kakmakr]

Do we need a new thread if there's a new phishing email sent to our inbox?

I know the purpose is good, but if anyone has at least a little security awareness, then they won't even bother to check the suspicious link in the first place.

Yes, it is always a good idea to remind people about this type of attack and to highlight the most recent ones that are doing the rounds.    People have a very short memory and they are bombarded with many different attacks, so a reminder will not hurt anyone.

A good habit will always be not to "click" on any links that are provided in any email and to rather type the address of the websites and services you use on the Internet. <Also do not use the auto complete feature, because hackers have even exploited that in the past>

Thank you OP for reminding us.  

[lobat999]

It seems these people who are into phishing modus operandi will stop at nothing, even if they have to clone all the crypto related sites just to get what they want!

Thankfully people nowadays are very well aware of this kinds of phishing emails because the crypto-community are helping each other give mass awareness about this kinds of evil and shameless acts. Great job OP.

[ABCbits]

This kind of email usually go straight to your spam folder, especially if you use GMail which have great spam detection.

Gmx is white listed email addrss i think. Because gmx is email hosting provider too. Maybe this is the reason why their email not marked as spam.

That makes sense, but GMail also scan email content before determine whether it's spam or not. AFAIK detecting email impersonation should be easy for google.

You might want to report the mail as spam/spam if you haven't, so GMail filtering will be better

[Sirait]

It seems these people who are into phishing modus operandi will stop at nothing, even if they have to clone all the crypto related sites just to get what they want!

Thankfully people nowadays are very well aware of this kinds of phishing emails because the crypto-community are helping each other give mass awareness about this kinds of evil and shameless acts. Great job OP.

they will never stop because their brains are only filled with greed and laziness. the movements of people like them must be minimized. some time ago a scammer was arrested by my country's police, the mode is the same that is spreading malware in fake e-mail messages.

phenomena like this must continue to be broadcast because the memory of humans is limited.

[lobat999]

It seems these people who are into phishing modus operandi will stop at nothing, even if they have to clone all the crypto related sites just to get what they want!

Thankfully people nowadays are very well aware of this kinds of phishing emails because the crypto-community are helping each other give mass awareness about this kinds of evil and shameless acts. Great job OP.

they will never stop because their brains are only filled with greed and laziness. the movements of people like them must be minimized. some time ago a scammer was arrested by my country's police, the mode is the same that is spreading malware in fake e-mail messages.

phenomena like this must continue to be broadcast because the memory of humans is limited.

I was wondering why do they still continue these kinds of illicit acts? Actually these email sources maybe be traced to its source through digital forensics but I think nobody will come after them and let them be indicted.

There should be some kind of international police like the Interpol to tackle this job and enforce the teeth of the law. After all, cyberlaws are already in effect to most parts of the world and all we need is an international cooperation among Governments to enforce it.

[Lafu]

I dont know if Blockchain.com has and App for smartphones or mobiles too on the Googleplay platform.
But if they have one too maybe watch out if you use or install that too there are the same phishing apps as Webpages sometimes .
I look for it when i have the time maybe there is something i can find about that.

[masulum]

That makes sense, but GMail also scan email content before determine whether it's spam or not. AFAIK detecting email impersonation should be easy for google.

You might want to report the mail as spam/spam if you haven't, so GMail filtering will be better

Thank you, Email has been reported to my email provider, in this case, I am using Yandex email service for custom domain. With few emails I have with the same domain, just that email received phishing mail. Maybe because I use this email to register on airdrop few years ago.

I dont know if Blockchain.com has and App for smartphones or mobiles too on the Googleplay platform.
But if they have one too maybe watch out if you use or install that too there are the same phishing apps as Webpages sometimes .
I look for it when i have the time maybe there is something i can find about that.

Yes, blockchain.com has Android & iOS app: https://www.blockchain.com/wallet

[dkbit98]

Thanks for reporting one more scammer phishing link attempt...
people need to always double check browsers url address and email sender address.

I recently received similar thing directing me to fake Chainlink website...
but phishing website was chianlink.io not chainlink.io

more info:
https://bitcointalk.org/index.php?topic=5195454

[masulum]

<snip>
I recently received similar thing directing me to fake Chainlink website...
but phishing website was chianlink.io not chainlink.io
<snip>

I already mention your thread on another thread about phishing behind HTTPS address. You can read here Phishing attempts increase 400%, many malicious URLs found on trusted domains. That's good, Bitcointalk member very active to create a warning thread about phishing, malware and virus sites.

Thank you for your contribution to add info about Chainlink here