[Shady] sendbit.io + cryptotalk99

[bob123]

sendbit.io (web wallet) is shady and might be malicious.

Code:

$ whois sendbit.io
Domain Name: SENDBIT.IO
Registry Domain ID: D503300001183785123-LRMS
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: www.namecheap.com
Updated Date: 2020-04-16T18:15:20Z
Creation Date: 2020-04-11T08:53:43Z

User LeonCrypto registered May 09, 2020, 10:55:24 AM, just to shill sendbit.io 10 minutes later. His one and only post yet. (archived)


1) sendbit.io is deceiving potential customer:

They claim:

Just to clarify we do not have access to your private keys we use something called "createwallet" (https://bitcoincore.org/en/doc/0.17.0/rpc/wallet/createwallet/) using JSON RPC [...]

(archived)

However:

• The encrypted file is stored on their server
• The password used to encrypt it is send in plaintext to their server

This concept is not similar to blockchain.com, where the keys are created and encrypted client-side and only are stored on the server.
They have full access to the private keys.



2) sendbit.io is donating to themselves:

sendbit.io donation address: 32xTvYfrjf8KMemRfbmz9CrcBo6Q8YK6aq (archived)
Outgoing transaction to address 3AN8iJKd8VaVfczVY4Vvj8CQtMxZeNCFiP.
The very next and only transaction from 3AN8i.. goes back to 32xTvYfrjf8KMemRfbmz9CrcBo6Q8YK6aq and 34Yam2jeDX348v6KtN6d21psC1gxn1o9tD.
The very next and only transaction from 34Yam2.. goes back to to 32xTvYfrjf8KMemRfbmz9CrcBo6Q8YK6aq and 2 other addresses (34pVKwsP8YmyifjPBAWGnjcQKj4UNag3Gq and 38FrvmdxuHud75gQQqjA5fmp7rb3YxfrUy) which both again fund the sendbit.io donation address 32xTvYfrjf8KMemRfbmz9CrcBo6Q8YK6aq and other address... and so on.. This continues.

This seems very shady to me. The only reason one would do that, i can think of, is to increase their reputation or popularity by pretending there are a lot of donations coming in.


3) cryptotalk99 affiliated with sendbit.io

3.1)
He is heavily shilling sendbit.io:

I don't know what programming language you're using based on PHP this is the best I could find https://sendbit.io/page/api-documentation other than coinpayments.

Sendbit.io allows you to have private key access so you're in control of your funds.

This might help:
https://www.sendbit.io/page/api-documentation

https://www.coinpayments.net/merchant-tools

Can anyone look into https://www.sendbit.io/page/api-documentation and suggest?

[...]
The top two wallets for me are:

https://blockchain.com
https://sendbit.io

But I still recommend anyone reading this to go with a wallet that gives you your private keys...https://sendbit.io does.

[...]
In the future double-check the address before you actually send the payment.

checkout https://sendbit.io they prevent clipboard hijacking and even give you private keys for each address you own.


Sorry for your loss buddy.

If you're looking for a secure online wallet check out https://sendbit.io or trezor.io


Sendbit.io allows you to have access to your private keys... That's pretty cool and they have an awesome API
Trezor.io you'll need to order their hardware device your private keys are inside that.

Post history archived: https://archive.vn/gzNgd, https://archive.vn/3K73x, https://archive.vn/QWsQR



3.2)
Address used from cryptoworld99 to send out 40$ in a contest/donation : 3AkoGZo64KFZ6GrsjxDiwUoR5puAW1x9NZ (archived).
This address has:

• 1 incoming transaction, from address 1hasanwdFRZkZn665PLrNMjsJyqWBuecy which has an incoming transaction from 38q7yuD28n7mQ6uecQRT6z9ux6ygLkPPK4, which also funds 32xTvYfrjf8KMemRfbmz9CrcBo6Q8YK6aq and also received a transaction from an address which also funded 32xTvYfrjf8KMemRfbmz9CrcBo6Q8YK6aq.
• 1 outgoing transaction which funded 32xTvYfrjf8KMemRfbmz9CrcBo6Q8YK6aq directly and another address which also funded 32xTvYfrjf8KMemRfbmz9CrcBo6Q8YK6aq
  The address used by cryptotalk99 (3AkoGZo64KFZ6GrsjxDiwUoR5puAW1x9NZ) seems to be included into the self-donation-circle.

This thread is used as a reference for a general warning towards this wallet.

[1714762318]

1714762318

[Harlot]

However:

• The encrypted file is stored on their server
• The password used to encrypt it is send in plaintext to their server

This concept is not similar to blockchain.com, where the keys are created and encrypted client-side and only are stored on the server.
They have full access to the private keys.

Definitely not a safe way of storing a password. Usually when we think about the basics of password encryption like AES the password is automatically encrypted in the client side. In this way where the password is on a plain text the other party would also know your password since it would be readable on their part.

2) sendbit.io is donating to themselves:

sendbit.io donation address: 32xTvYfrjf8KMemRfbmz9CrcBo6Q8YK6aq (archived)
Outgoing transaction to address 3AN8iJKd8VaVfczVY4Vvj8CQtMxZeNCFiP.
The very next and only transaction from 3AN8i.. goes back to 32xTvYfrjf8KMemRfbmz9CrcBo6Q8YK6aq and 34Yam2jeDX348v6KtN6d21psC1gxn1o9tD.
The very next and only transaction from 34Yam2.. goes back to to 32xTvYfrjf8KMemRfbmz9CrcBo6Q8YK6aq and 2 other addresses (34pVKwsP8YmyifjPBAWGnjcQKj4UNag3Gq and 38FrvmdxuHud75gQQqjA5fmp7rb3YxfrUy) which both again fund the sendbit.io donation address 32xTvYfrjf8KMemRfbmz9CrcBo6Q8YK6aq and other address... and so on.. This continues.

This seems very shady to me. The only reason one would do that, i can think of, is to increase their reputation or popularity by pretending there are a lot of donations coming in.

I do have to agree with you on this one transaction spoofing is something commonly done by scammers particularly HYIP sites and Cryptocurrency doublers in order to impress the viewers and make it look like their service is real. Overall just by looking at your first two points I would say that their web wallet is not to be trusted with since they like you said are already doing a shady activity. And also the timing of the two accounts shilling this web wallet is very near to each other showing that they are somehow coordinated on promoting this possible scam.

[JeromeTash]

I must say am so disappointed in this cryptoworld99 guy. I thought he had some good intentions here and even tried to give him a benefit of doubt in one of the replies

I think the whole Contest or Donation Stunt he pulled off some days back was part of the plan to fool some members here into think he had good intentions

[cryptoworld99]

Dude I'm not affiliated with anyone? have you ever used their system? they collect their fees on the same addresses as the donation address I've noticed this myself a couple of times. perhaps to show transparency... we don't know if they are a scam but as a user honestly I am able to send my money out straight away.

[cryptoworld99]

I must say am so disappointed in this cryptoworld99 guy. I thought he had some good intentions here and even tried to give him a benefit of doubt in one of the replies

I think the whole Contest or Donation Stunt he pulled off some days back was part of the plan to fool some members here into think he had good intentions

I intend to fool nobody neither am I'm promoting any service! People on here are always quick to judge (i.e: bob123)

bob here is posting half of the things,

https://bitcointalk.org/index.php?action=profile;u=2802158;sa=showPosts


check out the forum yourself for the full discussion, anyway, I don't' want to get dragged into this all over again thanks for the negative feedback on my account btw...

[bob123]

they collect their fees on the same addresses as the donation address

Wait.. so they also take fees ?!
Why would any sane person want to use that shit wallet ?

perhaps to show transparency...

Rather to deceive...

we don't know if they are a scam

No, we don't.
That's the reason this topic has a [shady] tag instead of [scam].
And that's the reason there is no open flag against sendbit yet.

I am able to send my money out straight away.

And so is sendbit.io..

[cryptoworld99]

Fair play if you don't wish to use that wallet. I personally use coinpayments.net and sendbit.io however, I don't store large amounts of my crypto assets online anyway. It's still fairly new so we should give them a chance to prove themselves at least.  I am a bitcoinist and i have my own offline nodes along with that i'm developing a hardware wallet that I will post on here soon.