beware of https://login.xn--blockchan-2pba.com/#/login

[Slow death]

today when i was going to download a serie that i like a lot i found this:



https://login.xn--blockchan-2pba.com/#/login

I'm sure it is to steal people's passwords, so I hope people pay a lot of attention:

www.blockchain.com ( Real website )

https://login.xn--blockchan-2pba.com/#/login ( Fake website )

[TryNinja]

Keep in mind that this is a punycode domain. Browser that do not automatically converts them to the text format will make it appear like this :

SCAM!

Code:

https://login.blockchaıın.com/ 

ALWAYS double check your URL and if you are on Firefox, do this: https://ma.ttias.be/show-idn-punycode-firefox-avoid-phishing-urls/

[smyslov]

Obviously the $10,000 is a trap or a bait for you to click the link and login, this trap is for newbies who do not care to look at the url if they are landing on the right domain, I don't think old timers like us will fall into something like this, it's so obvious.

[Baofeng]

Nice catch, based on whois:

Dates   2 days old
Created on 2020-06-01
Expires on 2021-06-01
Updated on 0000-12-31

https://whois.domaintools.com/xn--blockchan-2pba.com

Just a couple days old website who's intention is to obviously phish using blockchain.com.

Reported it to the host provider: abuse@namecheap.com and to
https://safebrowsing.google.com/safebrowsing/report_phish/?hl=en