Be Careful to Write

[Chikito]

We should careful when to write on a box address.

Like my friend, He was bought a new device and wants to download electrum wallet, then prepare to write electrum.org but made 1 mistake wroten eklectrum.org, and what happened next?
perfectly direct to phishing electrum

Code:

https://electrum.cash/#home

Look cash camouflage into Bitcoin wallet and should be fake and scam.

How to avoid it:

1. Always double-check before entering a keyboard button.
2. Bookmark electrum.org 
3. Sign up or log in, then Sync. When you have change device, just log in your firefox account and all bookmark will appear.

[hd49728]

It is a phishing site tries to fake Electrum.org. The kinda phishing site is very common but there are always lots of people fall into traps of phishing sites and lose money.

What to do to avoid phising sites
Host-file to deal with phishing sites
I have some for phishing sites and some external topics in these topics. Hope these ones can help you guys.

The phishing site brought by OP added in the list (at the bottom line).

Code:

0.0.0.0 bitcointalk.to
0.0.0.0 fonstavka.com
0.0.0.0 thebitcointalk.net
0.0.0.0 fonstavka.com
0.0.0.0 lawcommonentrance.com
0.0.0.0 electrum.org.uk
0.0.0.0 electrumclient.org
0.0.0.0 downloadelectrum.org
0.0.0.0 electrumsite.com
0.0.0.0 electrumweb.net
0.0.0.0 electrumupdate.com
0.0.0.0 electrumproject.org
0.0.0.0 mercatox.org
0.0.0.0 bitplace.org
0.0.0.0 coinpalace.org
0.0.0.0 exmo.space
0.0.0.0 poficrypt.com
0.0.0.0 coinsweet.org
0.0.0.0 cryptexcurrency.com
0.0.0.0 crypton-bnb.com
0.0.0.0 cryptexplatform.com
0.0.0.0 crypto-trader24.com
0.0.0.0 24xfast.com
0.0.0.0 24xtransfer.com
0.0.0.0 24xtrade.com
0.0.0.0 24burntrade.com
0.0.0.0 bitusual.com
0.0.0.0 24fastcoin.com
0.0.0.0 social-info.ru
0.0.0.0 margo-event.com
0.0.0.0 www.social-analysis.ru
0.0.0.0 24spacetrade.com
0.0.0.0 24xholding.com
0.0.0.0 ancebit.com
0.0.0.0 24xcointrade.com
0.0.0.0 24bestchanger.com
0.0.0.0 24xhold.com
0.0.0.0 cryptextrade.com
0.0.0.0 tradexblue.com
0.0.0.0 bitmate24.com
0.0.0.0 poficrypt.com
0.0.0.0 evrostyle.net
0.0.0.0 24excoin.com
0.0.0.0 fastchange24.com
0.0.0.0 cryptonplatform.io
0.0.0.0 best-xtrades.com
0.0.0.0 tradexmate.com
0.0.0.0 fixtradecorp.com
0.0.0.0 bitbeaxy.com
0.0.0.0 24bitstamp.com
0.0.0.0 mercatox.org
0.0.0.0 crypto-change24.com
0.0.0.0 bitspace24.com
0.0.0.0 bitbns.org
0.0.0.0 24coindesk.com
0.0.0.0 coinsbank.store
0.0.0.0 xcryptoplatform.com
0.0.0.0 bitshumb.com
0.0.0.0 https://brave-browser.info
0.0.0.0 https://bitblender.eu/
0.0.0.0 https://bounty-brave.info/
0.0.0.0 https://litecoln.org/
0.0.0.0 https://biockcheln.info/
0.0.0.0 http://iocaibitcoins.com/
0.0.0.0 https://iocaibitcoins.com/
0.0.0.0 https://lolibitcoins.net/
0.0.0.0 http://privatemgrgg.pw/vcruntime140.dll
0.0.0.0 https://localbicolns.org/
0.0.0.0 http://localbicolns.org/
0.0.0.0 http://mgsocl.su/api/check.get
0.0.0.0 http://mgsocl.su/api/gate.get
0.0.0.0 http://dress-x.ru/freebl3.dll
0.0.0.0 https://brave-drop.info
0.0.0.0 https://electrum.cash/#home

Let's check your knowledge on phishing by doing those phishing quizzes.
[LEARN] Phishing Quizzes - Beginners & Experts

[mk4]

Not sure how your friend mistyped "electrum" for "eklectrum", as he would probably need to be really drunk to mistype it that bad, but yea. Doublecheck what you're typing and copy-pasting people. Especially when were talking about freakin bitcoin, that's hugely hugely targeted by scammers and hackers.

[bitmover]

Any website related to cryptocurrency or any kind of money should be double checked. Try to find their social media pages (Twitter, Facebook, Reddit, Medium, etc) to confirm you are on the official website. You can find press releases on famous news websites with links to their official websites also.

eklectrum is so obvious phising and  your friend was careless...

[o_e_l_e_o]

Not sure how your friend mistyped "electrum" for "eklectrum", as he would probably need to be really drunk to mistype it that bad, but yea.

On a standard English QWERTY keyboard, a simple slip when pressing the "L" button could quite easily type "KL" instead.

In addition to the advice above about host files and double checking URLs (which is obviously good advice), this is why the Electrum website tells you to verify your downloads, we all go on and on about verifying your downloads, and multiple guides have been created to show you how to verify your downloads. 30 seconds spent to verify your download prior to installing completely negates the risk of visiting fake sites or downloading a malicious copy of Electrum.

Editing your host file is useful for sites like the fake bitcointalk forum which doesn't change its URL, but for sites like fake Electrum sites it is next to useless. By the time you've added one URL to your hosts file, the scammers have already moved on to another URL. You can add these sites to your hosts file for the rest of time and never be completely safe.

Verify your downloads!

[LTU_btc]

Does anyone knows where this website is hosted? I'm on mobile now, so it would be difficult to find this information for me. But it would be good to find it and report this website to hosting provider for abuse to shutdown it.

Not sure how your friend mistyped "electrum" for "eklectrum", as he would probably need to be really drunk to mistype it that bad, but yea. Doublecheck what you're typing and copy-pasting people. Especially when were talking about freakin bitcoin, that's hugely hugely targeted by scammers and hackers.

You don't have to be drunk, because it's very easy to make duch mistype. Maybe OP's friend didn't knew how to write name of wallet and intentionally wanted to write Elektrum and he made typing mistake when doing it.

[o_e_l_e_o]

Does anyone knows where this website is hosted? I'm on mobile now, so it would be difficult to find this information for me. But it would be good to find it and report this website to hosting provider for abuse to shutdown it.

The "eklectrum" redirection site also shares the same registrar and was also created 3 days ago. You can report them both to the email address above, and you can also report them to Google's Safe Browsing feature. They will get taken down rapidly, but it makes little difference as new ones will have popped up within the hour. It's an endless game of cat-and-mouse. We will never win by chasing them around scam page after scam page. Better just to end the game altogether by teaching everyone to verify their downloads.

[jossiel]

Not sure how your friend mistyped "electrum" for "eklectrum"

I usually have the same experience by typing the wrong letter before and after the correct letter because letter 'k' and 'l' were just close to each other. And his friend probably got it wrong for typing quickly and was confident that he typed the right website.

It might be a simple practice to bookmark the legit websites that you visit but it will save you from any future trouble of landing to the wrong one which is a phishing site.

[Chikito]

What to do to avoid phising sites
Host-file to deal with phishing sites
[LEARN] Phishing Quizzes - Beginners & Experts

Thanks for those liink.
I have Tool For Catch Phishing , purpose hunting and reporting to https://safebrowsing.google.com/safebrowsing/report_phish/?hl=en when funding phishing

Not sure how your friend mistyped "electrum" for "eklectrum",

because letter K and L are close together on keyboard

Try to find their social media pages (Twitter, Facebook, Reddit, Medium, etc) to confirm you are on the official website.

I am suggested my friend join Bitcointalk forum

On a standard English QWERTY keyboard, a simple slip when pressing the "L" button could quite easily type "KL" instead.

Thanks,
He was bookmarked all related cryptocurrency website on his browser for avoid typo

I search related IP : https://www.virustotal.com/gui/ip-address/167.114.220.88/relations
we can find another phishing web like trezor related IP

he was bookmarked and sign up firefox account for synchronicity when changing new device

[robelneo]

Make a habit of always bookmarking trusted sites that you frequently used or use the search engine like Google so you can be sure that you are landing on the right site, or get an anti-virus with website detection if the site you are landing is a phishing site, and never type the address in the address bar always use Google.

[Baofeng]

You can also call the attention of @socks435 to update his list: ⚠⚠️⚠~Beware on active phishing Electrum websites~⚠⚠️⚠ (Collection list updated) .

Actually another one surfaces about a month ago:

Code:

PHISHING LINK - eleckctrum.org

The good thing is that it was reported and taken down already.

[jossiel]

he was bookmarked and sign up firefox account for synchronicity when changing new device

But on this case, he just typed it and got the wrong letters typed together which were "K" and "L".  Although phishing links are very popular now, thank you for bringing this up for additional awareness of everyone.

The good thing is that it was reported and taken down already.

Yes!

The landing page indicates now the website is unsafe. Good job guys.

[o_e_l_e_o]

never type the address in the address bar always use Google.

This is terrible advice, and the exact opposite of what you should do.

Google frequently links to phishing, malicious, or otherwise fake sites. Scammers often purchase ads and so their fake links appear at the top of search results. One of the most common ways to be scammed is by using a search engine to find the site. The best way to be sure you are landing on the correct page is to type it in the address bar, and double check your spelling.

Using bookmarks is better, but still not 100% foolproof. There was a post I read a while ago about a mixing service which had shutdown, and a scammer then purchased the expired URL. Anyone who followed their previous bookmark would now land on a scam site and lose their coins.

[Pmalek]

All this could have been prevented by verifying the signature of the downloaded file before installing and using the software. Too bad.
 
Electrum-related phishing threads are actually not that common on the Electrum sub-forum recently. I was thinking about that the other day. Have users started to follow the advice of the creators or is is something else? I believe it is something else. Probably in the price of Bitcoin in recent months which hasn't been that favorable.

As soon as Bitcoin starts a new upward rally I expect more of the Electrum 4.0 related phishing incidents.

[BitcoinsGreat]

Any website related to cryptocurrency or any kind of money should be double checked. Try to find their social media pages (Twitter, Facebook, Reddit, Medium, etc) to confirm you are on the official website. You can find press releases on famous news websites with links to their official websites also.

eklectrum is so obvious phising and  your friend was careless...

Someone if we get scam by phishing sites, it is our own fault, rather than anyone else. As in this case eklectrum and electrum has a visual difference and should be noted. If someone just does not look at the url after typing, then whose fault it is ? Scammers are always waiting for these mistake to get hold of the funds of these users.

[hd49728]

Using bookmarks is better, but still not 100% foolproof. There was a post I read a while ago about a mixing service which had shutdown, and a scammer then purchased the expired URL. Anyone who followed their previous bookmark would now land on a scam site and lose their coins.

Bookmarking is convenient but it is not totally safe because it can be tampered, not only as a result of expired-URLs change hands.
I use bookmark on browsers for unimportant sites, but for important ones, I bookmark them in my head, instead. No one can tamper my memory if there is nothing wrong with my health conditions, seriously.

[Goodvalony]

thank you for this wonderful opinion. i used electrum wallet and discovered that i can't sync my wallet. i tried downloading the new wallet but it failed. it was hard to find the correct website but i managed to get over it. my wallet is up to date as we speak. Good job.

[LTU_btc]

They will get taken down rapidly, but it makes little difference as new ones will have popped up within the hour. It's an endless game of cat-and-mouse. We will never win by chasing them around scam page after scam page. Better just to end the game altogether by teaching everyone to verify their downloads.

We will not win this war, but it's better than doing nothing. And same thing can be said about educating people. We can it as much as we can, but there always will be people who aren't aware about these things, especially newbies in crypto. It's same thing like people who are falling into most obvious scams.

[Kemarit]

They will get taken down rapidly, but it makes little difference as new ones will have popped up within the hour. It's an endless game of cat-and-mouse. We will never win by chasing them around scam page after scam page. Better just to end the game altogether by teaching everyone to verify their downloads.

We will not win this war, but it's better than doing nothing. And same thing can be said about educating people. We can it as much as we can, but there always will be people who aren't aware about these things, especially newbies in crypto. It's same thing like people who are falling into most obvious scams.

And the good thing is that lately, there are a lot of members exposing them, so it's getting some traction around the community and we do hope that newbies won't fall or at least think twice when they see members exposing the true color of this supposedly fake websites. It's a big mountain to climb, but collaboratively, we might turn the tide in the coming years.

[virasog]

They will get taken down rapidly, but it makes little difference as new ones will have popped up within the hour. It's an endless game of cat-and-mouse. We will never win by chasing them around scam page after scam page. Better just to end the game altogether by teaching everyone to verify their downloads.

We will not win this war, but it's better than doing nothing. And same thing can be said about educating people. We can it as much as we can, but there always will be people who aren't aware about these things, especially newbies in crypto. It's same thing like people who are falling into most obvious scams.

No matter how much we educate people and warn people, there are many people who will still face the scam and get trapped in it. Some people do not pay attention to details and they have to pay for it. The only thing we can do it is to warn our near and dear ones if we see any such phishing sites and hope no one get affected by them.