Bitcoin Forum
November 03, 2024, 04:56:19 PM *
News: Latest Bitcoin Core release: 28.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: [WARNING]FAKE BLOCKCHAIN APP SUPPORT AND PHISHING WEBSITE  (Read 206 times)
Krislaw (OP)
Sr. Member
****
Offline Offline

Activity: 1204
Merit: 388


View Profile WWW
March 06, 2020, 08:49:46 PM
Last edit: March 07, 2020, 09:10:16 AM by Krislaw
Merited by DdmrDdmr (2), Husna QA (1), masulum (1), Heisenberg_Hunter (1)
 #1

So I received an email from this email
Code:
BIockchaincrypto@www.kreizel-virelizier-avocat-lehavre.fr 
telling me to verify m email through fake website.

Fake web link:
Code:
https://login.blorckhain.com/en/password_update/token=nD7sYfshLxV8Sv2/?login=gmaill


There's a "r" between the o and c. You guys should be careful about clicking links from mails. Always check the sender info.
This looked very real to me until I checked the sender
masulum
Legendary
*
Offline Offline

Activity: 2324
Merit: 1604

hmph..


View Profile WWW
March 06, 2020, 10:33:11 PM
Merited by Krislaw (1)
 #2

Nice catch, but Krislaw please make this link unclickable or put in "code" tag. To prevent unwanted click and trapping members login to this phishing.

HOLD...
BitSat19
Member
**
Offline Offline

Activity: 476
Merit: 62


View Profile
March 06, 2020, 10:37:19 PM
 #3

Very good work from @Krislaw because posting here these things helping many members specially newbies because I also have few emails from different sites about confirmations and stuff like this but ignoring never post here now feeling this can help many in good way.
Husna QA
Legendary
*
Offline Offline

Activity: 2450
Merit: 3040


Payment Gateway Allows Recurring Payments


View Profile WWW
March 07, 2020, 04:23:39 AM
 #4

-snip-
Fake web link: https://login.blorckhain.com/en/password_update/token=nD7sYfshLxV8Sv2/?login=gmaill
-snip-
At https://www.whois.com/whois/blorckhain.com
The fake web registered on March 5, 2020, and the link listed in the first post above can still be accessed.
I've helped report it at https://safebrowsing.google.com/safebrowsing/report_phish/?hl=id.

..cryptomus..   
  
.
lllllllllllllllllll CRYPTO
PAYMENT GATEWAY
▄█▀▀██▄░░░▄█████▄░░░▄▀████▄
██░▀▄██░░░██▄░▄██░░░██▄▀▀▀█
██░▀▄██░░░███▄███░░░███░░▄█
▀▀▀▀▀░░░░░▀▀▀▀▀░░░░░▀▀▀▀▀
▄▄▄▄▄░░░░░▄▄▄▄▄░░░░░▄▄▄▄▄
███▀▄██░░░██▀░▀██░░░██▀▀▀▀█
██▀▄███░░░██░░░██░░░█▄███░█
▀█▄▄▄█▀░░░▀██▄██▀░░░▀█▄▄▄█▀

▄█████▄░░░▄█▀▀██▄░░░▄█████▄
█▀░█░▀█░░░█░▀░▀▀█░░░██▄░▄██
█▄█▄█▄█░░░███░▀▄█░░░███▄███
▀▀▀▀▀░░░░░▀▀▀▀▀░░░░░▀▀▀▀▀
ACCEPT
CRYPTO
PAYMENTS
..GET STARTED..
sheenshane
Legendary
*
Offline Offline

Activity: 2492
Merit: 1232



View Profile WWW
March 07, 2020, 06:25:17 AM
 #5

Thanks for the head ups I also reported this phishing site to the link given by @Husna QA.

This message you received is from your spam email inbox?
For me, I usually ignored messages on my spam box or never respond because usually, scammers can spam messages there. Probably those emails contain phishing sites like this.

I may suggest changing another email address is the best solution to avoid possible scams.
minairia3
Sr. Member
****
Offline Offline

Activity: 1638
Merit: 326


Vave.com - Crypto Casino


View Profile
March 07, 2020, 06:34:05 AM
 #6

I did receive it also but never opened the message. As I know that this could be a phishing site. If someone is rushing and accidentally filled in some data this will gonna be a huge mess for users knowing that the site is scam.

Goos thing that youve reported it here as many will be aware of this modus. Nice job, OP.

Thanks for the head ups I also reported this phishing site to the link given by @Husna QA.

This message you received is from your spam email inbox?
Hello mine, wasnt in the spam messages. How come that this message wasnt listed there as this is clearly a spam message right.

CryptoYar
Hero Member
*****
Offline Offline

Activity: 1064
Merit: 639



View Profile
March 07, 2020, 12:23:15 PM
Merited by Krislaw (1)
 #7

Fake:
Code:
https://login.blorckhain.com
Datacenter: FOP HORBAN VITALII Anatoliyovich
Server IP: 92.63.197.246
Location: Ukraine
City: Blahodatne
Nameservers: ns2.openprovider.be, ns1.openprovider.nl, ns3.openprovider.eu

Real:
Code:
https://login.blockchain.com
Datacenter: Cloudflare, Inc.
Server IP: 104.18.93.71
Location: United States of America
City: Chicago
Nameservers: jay.ns.cloudflare.com, beth.ns.cloudflare.com
Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!