Warning: Bustabit phishing site

[Dave1]

I'm just giving the community a heads-up because I've research and found bustabit.com phishing site.

(1)

Code:

https://bustabiit.com/

Archived for reference: https://archive.is/gLCHG

Registrant    GDPR Masked
Registrant Org    GDPR Masked
Registrant Country    nl
Registrar    PDR Ltd. d/b/a PublicDomainRegistry.com
IANA ID: 303
URL: www.publicdomainregistry.com,http://www.publicdomainregistry.com
Whois Server: whois.publicdomainregistry.com

(p)
Registrar Status    clientTransferProhibited
Dates    58 days old
Created on 2020-10-13
Expires on 2021-10-13
Updated on 2020-10-13    
  
Name Servers    NS1.DNS-PARKING.COM (has 760,763 domains)
NS2.DNS-PARKING.COM (has 760,763 domains)
   
  
Tech Contact    GDPR Masked
GDPR Masked,
GDPR Masked, GDPR Masked, GDPR Masked, GDPR Masked

IP Address    2.57.89.12 - 167 other sites hosted on this server

(2)

Code:

https://bùstabit.com/
xn--bstabit-y1a.com

Archive for reference: https://archive.is/FuLTY

Registrant    REDACTED FOR PRIVACY
Registrant Country    nl
Registrar    Hosting Concepts B.V. d/b/a Openprovider
IANA ID: 1647
URL: http://www.registrar.eu,http://www.openprovider.com
Whois Server: whois.registrar.eu

(p)
Registrar Status    clientTransferProhibited, ok
Dates    39 days old
Created on 2020-11-01
Expires on 2021-11-01
Updated on 2020-11-01    
  
Name Servers    NS1.DNS-PARKING.COM (has 760,763 domains)
NS2.DNS-PARKING.COM (has 760,763 domains)
   
  
Tech Contact    REDACTED FOR PRIVACY
REDACTED FOR PRIVACY,
REDACTED FOR PRIVACY, REDACTED FOR PRIVACY, REDACTED FOR PRIVACY, REDACTED FOR PRIVACY
(p) (f)
IP Address    185.224.138.89 - 153 other sites hosted on this server

So please be careful with this kind of malicious sites specially for us gamblers.

[Jating]

Good find, I myself has seen gambling phishing sites, FAKE dice2.win. And then we have, @DroomieChikito, Be Aware Phishing Roobet.com.

Bustabit is one of the most popular crash games so I'm not surprised that cyber criminals are baiting with this kind of phishing sites. So it's better to bookmark online gambling sites that we frequented so as not to fall for this kind of traps.

[Kemarit]

Did you report it already?

This is very dangerous site because the look and the feel is 100% perfect. And I'm sure this criminals are going to spread this through PM's in telegram and other social media sites that gamblers are frequented so we don't to have an consensus effort to bring this site very quick.

[acroman08]

great find! both phishing is most likely created by the same person there is no difference between the two phishing site. it's a little worrying that this phishing site home page looks almost exactly identical to the original one except for a few differences.

the fake one shows you a login pop up with wrong icons when you click "play now", doesn't redirect you to the crash game and has a much thinner font on their house edge, wagered, bankroll and different amount of bankroll and wagered


orginal bustabit:
thicker fonts


redirect you to the crash game when you click "play now" and has the correct icons when you pressed login after getting redirected to their crash game.



just like what keramit said I suggest reporting or let the bustabit staff know about this phishing site.

[michellee]

People who do not bookmark the site will get a trap from the site, and they will not be suspicious since the domain is almost similar to bustabit. If we do not check or not thorough when we visit the site, we will get a scam by them and maybe the site will steal our money. It is important to be careful when we visit every site, not just the gambling websites.

[msarro]

Nice catch op! This is indeed a phishing website and it looks like the same as the real bustabit I tried to access it through my browser luckily it detects that it is a risky website.

Deceptive site ahead

Attackers on www.bustabiit.com may trick you into doing something dangerous like installing software or revealing your personal information (for example, passwords, phone numbers, or credit cards). Learn more

[arwin100]

Its easy to recognize if we look closely to the url but it can deceive  those users who use google  search and didn't pay close attention to the link they are clicking to. And this kind of warning posted here is a good warning for users who almost  forgot to check the site they mostly visit since  these phising site are just here waiting for the victims to locate and victimized them.

[Yaunfitda]

Its easy to recognize if we look closely to the url but it can deceive  those users who use google  search and didn't pay close attention to the link they are clicking to. And this kind of warning posted here is a good warning for users who almost  forgot to check the site they mostly visit since  these phising site are just here waiting for the victims to locate and victimized them.

Even the URL of one of those phishing site is really hard to recognized because it is a homograph attack, so it's not that easy in the beginning.

Yeah, we have to take users who posted this kind of warning because we will never know if we are going to see this phishing site if we search bustabit through Google, (although not advisable, but still maybe there are some members who get get away with that practice because that's what we used to do).

[bekti3]

ven though the Bustabit site is very popular and known in various pretty good game lists. There is no denying that there has been an influx of phishing which is very vulnerable to leaks. the criminals were able to outsmart to trap many people inside. This must be followed up, so that all members immediately withdraw and their assets .. before losing more.

[Lavander]

Before there was Roobet and now Bustabit, I think scammers are targeting to copy known casino's website and get the credentials. This could be really dangerous for players who are not aware of the website and doesn't bother time checking the URL mostly are newbies luckily the OP managed to spot this website.

[Baofeng]

Before there was Roobet and now Bustabit, I think scammers are targeting to copy known casino's website and get the credentials. This could be really dangerous for players who are not aware of the website and doesn't bother time checking the URL mostly are newbies luckily the OP managed to spot this website.

For obvious reasons, there could be two set of scammers here, and we have groups that specifically target crypto related online games and perhaps there's also targeted fiat online games as well. And also, there's a lot of money involved that's why scammers will make their way into created similar looking sites to trap their victims.  The Roobet find and this one is just a tip of the iceberg, there could be more that we need to discover and reported.

[Chikito]

(1)

Code:

https://bustabiit.com/

(2)

Code:

https://bùstabit.com/
xn--bstabit-y1a.com

both site already listed on dnstwister; https://dnstwister.report/search?ed=62757374616269742e636f6d

I suggest to the owner to subscribing, so when a scammer creates a new similar, the sounds will alerting to take and look immediately. ( I don't a part of dnstwister)

IP Address    2.57.89.12 - 167 other sites hosted on this server

IP Relationship; https://www.virustotal.com/gui/ip-address/2.57.89.12/relations



Fake BNB Giveaway.

IP Address    185.224.138.89 - 153 other sites hosted on this server

IP Relationship; https://www.virustotal.com/gui/ip-address/185.224.138.89/relations



phishing Buslabiit

Both IP should be tagged as a scammer

..I think scammers are targeting to copy known casino's website and get the credentials. .

For sure, to take over your Bitcoin.

[msarro]

Was the website already down? If not what could be the ways or things we can do to turn down the website? Is there a way we could report it to the domain provider or the likes? I think as a player of Bustabit I have a responsibility to report this kind of website so it won't deceive others.

[imutlinda]

You see nowadays that more and more criminals engage in this type of practice. It is very good that people are alert and report this quickly on the site so that users can be warned.

[Chikito]

Was the website already down? If not what could be the ways or things we can do to turn down the website? Is there a way we could report it to the domain provider or the likes?

need much time to take down the phishing, I was reported into https://safebrowsing.google.com/safebrowsing/report_phish/?hl=en you should also do that for quick response by Google.

Another way to take down the phishing is reporting into the provider domain, in this case, first phishing uses the public domain register, so report it to https://publicdomainregistry.com/phishing/.

It is very good that people are alert and report this quickly on the site so that users can be warned.

you should report it also, it will be fast to take down if many people also report it.

[Dave1]

Was the website already down? If not what could be the ways or things we can do to turn down the website? Is there a way we could report it to the domain provider or the likes? I think as a player of Bustabit I have a responsibility to report this kind of website so it won't deceive others.

I have reported it to their respective domain registrar.

PublicDomainRegistry.com <donotreply@publicdomainregistry.com>
   
Thank you for reaching out to us. Our Team is working on your request and will get back to you within 48 hours.

Subject: Phishing - https://bustabiit.com/

Case Number : 28084354

If others wanted to report, here is the link:

https://publicdomainregistry.com/phishing/
https://abuse.registrar.eu/

[msarro]

Was the website already down? If not what could be the ways or things we can do to turn down the website? Is there a way we could report it to the domain provider or the likes? I think as a player of Bustabit I have a responsibility to report this kind of website so it won't deceive others.

I have reported it to their respective domain registrar.

PublicDomainRegistry.com <donotreply@publicdomainregistry.com>
   
Thank you for reaching out to us. Our Team is working on your request and will get back to you within 48 hours.

Subject: Phishing - https://bustabiit.com/

Case Number : 28084354

If others wanted to report, here is the link:

https://publicdomainregistry.com/phishing/
https://abuse.registrar.eu/

This is a big help thanks for sharing! I'll report them too so they would know that it's an important case.

[virasog]

I'm just giving the community a heads-up because I've research and found bustabit.com phishing site.

Good finding. Other then reporting here can we also report somewhere else so that the site is taken down ?
We know that this site is scam but many who do not follow bitcointalk or gamblers who directly visits the site may get scammed. Maybe its  time that trusted gambling site start to introduce 2fa.

[coin-investor]

It's ok to have a thread about Bustabit here and another one in the scam section, this is for gamblers awareness, here, Bustabit is a very popular gambling site and every popular gambling site are targeted for phishing we will see more phishing site on popular gambling site so we should be aware of it and be knowledgeable on the difference between a true site and a phishing site.

[ufaiz50]

Thanks for reporting here, credits. I am not an active player on the site myself, but now others can be prevented from playing there.
You really see a lot of those phishing sites. That's the official name if I am not mistaken?