Another fake and phishing Blockchain.com website

[Yaunfitda]

There is another fake blockchain.com, which is just 4 day old, actually it was a redirection from:

Code:

login.bhlockchain.com

to

Code:

https://bıockchainı.com/

Archive: https://archive.is/J3Nyv

Registrant    WhoisGuard Protected
Registrant Org    WhoisGuard, Inc.
Registrant Country    pa
Registrar    NAMECHEAP INC NameCheap, Inc.
IANA ID: 1068
URL: http://www.namecheap.com
Whois Server: whois.namecheap.com

(p)
Registrar Status    addPeriod, clientTransferProhibited
Dates    4 days old
Created on 2020-11-21
Expires on 2021-11-21
Updated on 0000-12-31    
 
IP Address    209.97.129.163 is hosted on a dedicated server

So watch out for this kind of attacks, need to be very careful as the price of bitcoin is almost at a all time high again.

And I need everyone to help me report this website to:

https://safebrowsing.google.com/safebrowsing/report_phish/?hl=en or direct to the domain registrar:

https://support.namecheap.com/index.php?/Tickets/Submit->Abuse Reports->Fraud / Phishing

[Lucius]

Yaunfitda, I made a report to Google, but second link is not working for me, I get Page not found - 404. Either the link is invalid, or user needs to be logged in to make a report?

It is possible that we also have the first victim of this site, although I am sure that at this time they appear as mushrooms after rain.

Again, we can ask the question of who is most to blame for things like this - hosting companies that don't even try to filter sites like this, Google AdWords where it's possible to advertise any scam, or naive users who don't even know what phishing is?

[sujonali1819]

Yaunfitda, I made a report to Google, but second link is not working for me, I get Page not found - 404. Either the link is invalid, or user needs to be logged in to make a report?

Yes, this also does not work for me when I copy and paste it to another tab. But what op wanted to say is when we click on the first link then the link will be redirected to the second one. If you notice the address bar you can see the same link as second one.



And this link also the same

Code:

https://xn--bockchain-vpbi.com/

[abokhalel2]

I do not know how you can fall for such a trick, when even on the search you will not find this scam. In any case, I have never met on my way.

[taufik123]

I do not know how you can fall for such a trick, when even on the search you will not find this scam. In any case, I have never met on my way.

I think what the OP means is a phishing website that he managed to find, it doesn't mean he was fooled by the phishing blockchain website. This is a useful thread to inform all forum members about phishing websites to watch out for. If you still haven't come across a phishing website before you may always be lucky, but your browsing may not be long enough and extensive enough. I almost always come across phishing websites like this. with almost the same domain name.
Always be careful and check whether the domain name is genuine or not.

[DdmrDdmr]

The thing is, there are so many domains out there just ready to be activated, or a few dollars away from being bought and exploited in this manner. Take a look for example at the results returned by dnstwister for blockchain[dot]com:
https://dnstwister.report/search?ed=626c6f636b636861696e2e636f6d

Even having found all those similarly named domains, the site did not encounter the two referenced in the OP, so the possibilities of creating a similarly named domain are pretty wide.

[Lucius]

Yes, this also does not work for me when I copy and paste it to another tab. But what op wanted to say is when we click on the first link then the link will be redirected to the second one. If you notice the address bar you can see the same link as second one.

I didn't mean the link from the phishing site that the OP posted, but the link from namecheap for the abuse report. But I understand where the confusion comes from, since I get error 404 and live site when try to access first link from OP.

Even having found all those similarly named domains, the site did not encounter the two referenced in the OP, so the possibilities of creating a similarly named domain are pretty wide.

It's pretty easy to set a trap, but when we want to remove the threat it's the complete opposite - it's really a shame that the system is set up to suit scammers.