Fake XMR wallet on Displayed in Google/Google Ads

[cryptomaniac_xxx]

I just try to search for XMR wallet in Google using this keywords:

xmr wallet
xmr wallets

And Google display a fake and phishing site thru their Ads.

Code:

https://xmr-wallet.org/#/login.html

Archived: https://archive.is/NUzye



This is how the fake website looks like



This is the domain information of this fake website:

https://whois.domaintools.com/xmrwallet.org



This is the real website: https://www.xmrwallet.com/#/login.html

I have send a report to namecheap:

Code:

Ticket ID: DVE-462-52122

So just be careful check everything before entering your seed.

[acroman08]

nice find!

And Google display a fake and phishing site thru their Ads.

I've seen a lot of fake site/phishing site over the years I've been using google I just tend to report them but in order for the ad to be taken there have to be a lot of report coming requesting for the ad to be taken down.

[noormcs5]

nice find!

And Google display a fake and phishing site thru their Ads.

I've seen a lot of fake site/phishing site over the years I've been using google I just tend to report them but in order for the ad to be taken there have to be a lot of report coming requesting for the ad to be taken down.

Does not google ad check the site before posting it on the sites as their ads or they are just concern with the money which they get from publishing these ads 

If you want access any of your wallet, don't click on the ads link, rather look for the website link in google search.

[Lucius]

cryptomaniac_xxx, Anyone who doesn't have AdBlock installed in their browser will see these ads, and it's known that Google can't control the content of these ads - or rather, they don't care too much about anything but profit. Therefore, everyone should protect themselves in the simplest way, which is also free - install something like uBlock Origin, and there will no longer be scam ads as search results.

https://addons.mozilla.org/en-US/firefox/addon/ublock-origin/
https://chrome.google.com/webstore/detail/ublock-origin/cjpalhdlnbpafiamejdnhcphjbkeiagm?hl=en

[tranthidung]

In my perspective, it is superb easy to detect those scam sites and scam wallets. They tend to use prefix or suffix (wallet, official) and some special characters in their domain names: dash, dot, etc. Or they use uncommon domain like .xyz, and local languages, .it, .fr for example. Official websites don't have such things, generally.

Another risky type is Punny code: Punycode and how to protect yourself from Homograph Phishing attacks?

[adzino]

cryptomaniac_xxx, Anyone who doesn't have AdBlock installed in their browser will see these ads, and it's known that Google can't control the content of these ads - or rather, they don't care too much about anything but profit. Therefore, everyone should protect themselves in the simplest way, which is also free - install something like uBlock Origin, and there will no longer be scam ads as search results.

https://addons.mozilla.org/en-US/firefox/addon/ublock-origin/
https://chrome.google.com/webstore/detail/ublock-origin/cjpalhdlnbpafiamejdnhcphjbkeiagm?hl=en

Most websites that you access rely on the revenue they generate from advertisements. They provide you with free contents and you should support them. Using ad blocker will not help your favorite websites to survive. Make sure you whitelist websites that you frequently visit, or sites that you think doesn't have intrusive and annoying advertisement.
The way most of the websites are starting to advertise, no wonder everyone is using adblockers.

I just try to search for XMR wallet in Google using this keywords:

xmr wallet
xmr wallets

And Google display a fake and phishing site thru their Ads.
-snip-

Nothing new over here. People will just have to be careful when clicking anything. I remember the other day when I googled malwarebytes, the top ad result was mulwarebytes! Hilarious.

[Baofeng]

I try to used Google with Adblock off and it's redirect me to this website, not on the fake website as pointed by OP.

Code:

https://magnumwallet.link

Dates   11 days old
Created on 2020-08-18
Expires on 2021-08-18
Updated on 2020-08-23

And now it is impersonating this wallet: https://magnumwallet.co/, so these criminals have a back up website to constantly shifting/rotating to mislead potential victims, very tricky indeed.

[Harlot]

I'm wondering why ads like this from a scam website cam have ads from Google? Since I know they have been strict with regards to crypto related ads in particular these type of scam websites shouldn't be shown in the first place. Are they fooling Google here by showing a legot service and then after a few hours they wilk tranform their website into a phishing website or Google simply just don't care when it comes to their viewer's protection? Because from what I see Google can be liable here by promoting an ad of a pishing website.

[btc_angela]

I'm wondering why ads like this from a scam website cam have ads from Google? Since I know they have been strict with regards to crypto related ads in particular these type of scam websites shouldn't be shown in the first place. Are they fooling Google here by showing a legot service and then after a few hours they wilk tranform their website into a phishing website or Google simply just don't care when it comes to their viewer's protection? Because from what I see Google can be liable here by promoting an ad of a pishing website.

Perhaps scammers are trying to hide or cloak their ads in Google that's why they're able to get around and this ads keeps popping on Google. There are even Youtube videos instructions on how to do it. So I think the ball is really on Google, but since they are generating revenues as well, so it might take some time for them to take this out, without people actually reporting it.

[Oasisman]

I'm wondering why ads like this from a scam website cam have ads from Google? Since I know they have been strict with regards to crypto related ads in particular these type of scam websites shouldn't be shown in the first place. Are they fooling Google here by showing a legot service and then after a few hours they wilk tranform their website into a phishing website or Google simply just don't care when it comes to their viewer's protection? Because from what I see Google can be liable here by promoting an ad of a pishing website.

Google may not be strict in terms of website content as long as the companies that wants to have an ad space will pay. These scammers can fake their contents in the beginning and proceed with the dark plan on the latter.
This is just another lesson not to trust anything in the internet that even Google, Facebook, YouTube are displaying a lot of ads about the scam companies. Note that these are reliable platforms, but they I guess they have no control over these website's content. Least thing to do is to report, so Google will take this ads off from their platform.

[Rengga Jati]

Currently, there are many fake websites or applications that are very similar to the original. And this deceives a lot of people.
Moreover, scammers make it on Google searches and in applications such as the Playstore. This will convince a lot of people.
But again, I agree with you, we have to be more careful.
If you find fake websites or applications like this, let us report it to Google so that Google will immediately shut down the sites and also advertisement.

In this case, I prefer to download or signup via the website first. In order not to be mistaken, do not do a search on google search. If it's crypto-related, open crypto trackers like CMC and CoinGecko. They must have provided their real website address.
When it comes to blockchain in general, make sure we crosscheck the URL link address and check repeatedly, matching it with information from other sources such as official Telegram and others.

[sheenshane]

It's a good catch, have you already reported this?

Avoid searching on google because there are various phishing ads there that not yet reported by google. As mentioned above, just simply report this to google and they will eliminate quickly these phishing link ads. The problem is that they aren't able to filter their ads which is a scam/phishing site or not. So we have nothing to do with this, just to have extra carefull and be vigilant upon searching in google because they aren't safe at all.

I heard that Google has a plan of crypto adoption, but if this will not fix them, I dont think how many victims from scam.

[seoincorporation]

A local friend was a victim of this scam 2 weeks ago, he forgets about the 'my monero wallet', and try the first recommendation from google, and he hit that scam. I can't believe google allows this kind of scams because the hackers only have to pay for a cheap campaign to get tons of users. Is like if google helps with the scam, they should feel guilty for this.

Never trust Google or Youtube when we are talking about cryptos.

[Lucius]

Most websites that you access rely on the revenue they generate from advertisements. They provide you with free contents and you should support them. Using ad blocker will not help your favorite websites to survive. Make sure you whitelist websites that you frequently visit, or sites that you think doesn't have intrusive and annoying advertisement.

What most will advise is that AdBlock is always turned on search pages, and of course everyone can decide whether or not to use it on a particular site. If everyone block Google Ads, then maybe the company's attitude towards scam would change, so they would hire a number of people who have knowledge of crypto to filter the good from the bad. I do not live in the illusion that this would prevent 100% of scams, but a certain percentage of such advertising campaigns would be stopped before they do any harm.

Until that attitude changes, we have satisfied scammers, satisfied Google and deceived users who become victims of bad people and greedy companies.

[acroman08]

Does not google ad check the site before posting it on the sites as their ads or they are just concern with the money which they get from publishing these ads 

knowing that I've seen a lot of it being advertised in google over the years? I guess not, because if they do we or I wouldn't be seeing that many phishing site beings advertise on their search engine/web browser.

[stompix]

I try to used Google with Adblock off and it's redirect me to this website, not on the fake website as pointed by OP.

OP got the websites mixed up a bit, probably because of the same redirect

The ad is for

Monero Wallet - Monero Web Wallet
www.xrmwallet org/

The website he got the screenshot and whois data is

xmrwallet org

One is with RM the other MR but both are pretty new and 33 and 46 days old.
Also the xrm version seems to have a geo-ip redirect in it, probably that's what's happening to you

Anyhow, browsing these days without adblock is similar to flogging oneself.

[virasog]

It's a good catch, have you already reported this?

Avoid searching on google because there are various phishing ads there that not yet reported by google. As mentioned above, just simply report this to google and they will eliminate quickly these phishing link ads. The problem is that they aren't able to filter their ads which is a scam/phishing site or not. So we have nothing to do with this, just to have extra carefull and be vigilant upon searching in google because they aren't safe at all.

I heard that Google has a plan of crypto adoption, but if this will not fix them, I dont think how many victims from scam.

First of all why do we need to use google and see all those google ads 
I think we should shift to https://duckduckgo.com/ as it is a much decent search engine.

Secondly, we become victim of these scams because we behave careless. If we pay attention to what wallet and site we are opening, we will never be scammed.

[Asuspawer09]

~

I guess this is common because as long as you paid google you could probably promote anything in ads when someone searches something like a keyword they will recommend your website easily. Google doesn't filter this kind of concern so having a scam or fake websites is not a problem since anyone could just pay google, you could even promote cheat codes, fake websites, or some porn things, etc.

That is already a thing in google but a lot of people already know it, does anyone trusting advertisement by google here? I guess not for sure only newbies or someone that don't really have the knowledge or just new on the internet is going to trust ads on google.

I try to used Google with Adblock off and it's redirect me to this website, not on the fake website as pointed by OP.

Code:

https://magnumwallet.link

Dates   11 days old
Created on 2020-08-18
Expires on 2021-08-18
Updated on 2020-08-23

And now it is impersonating this wallet: https://magnumwallet.co/, so these criminals have a back up website to constantly shifting/rotating to mislead potential victims, very tricky indeed.

I guess blocking the advertisement is a good move since you might misclick an ads.

[khaled0111]

Does not google ad check the site before posting it on the sites as their ads or they are just concern with the money which they get from publishing these ads 

No, they don't. Apparently, they don't care about the security of their visitors as long as they get a good revenue from those ads.
They say that they rely on their customers reports to detect phishing ads but this doesn't seem to be true either. I reported many phishing ads but none of them got removed.

[Harlot]

I'm wondering why ads like this from a scam website cam have ads from Google? Since I know they have been strict with regards to crypto related ads in particular these type of scam websites shouldn't be shown in the first place. Are they fooling Google here by showing a legot service and then after a few hours they wilk tranform their website into a phishing website or Google simply just don't care when it comes to their viewer's protection? Because from what I see Google can be liable here by promoting an ad of a pishing website.

Google may not be strict in terms of website content as long as the companies that wants to have an ad space will pay. These scammers can fake their contents in the beginning and proceed with the dark plan on the latter.
This is just another lesson not to trust anything in the internet that even Google, Facebook, YouTube are displaying a lot of ads about the scam companies. Note that these are reliable platforms, but they I guess they have no control over these website's content. Least thing to do is to report, so Google will take this ads off from their platform.

If this is the case where Google only initially views the website for any kind of illegal activity I think the best thing for them to do is to actively screen/monitor websites that they have ads on as they are seriously endangering their own customers of being scammed. This only should also be applied to social media giants and other ad networks as they may partly be at blame here if their users got fooled by them somehow with the ads they are publishing. This websites could easily be avoided without receiving any kind of exposure from the use of these websites promoting their content.