Warning: Bustabit phishing site

[Dave1]

I already got a official response from one of my emails:

Servicedesk (Openprovider)

Dec 12, 2020, 12:23 GMT+1

Dear Sir, Madam,

Thank you for the notification.

We have informed the reseller about your complaint and he will investigate this issue. If we do not receive any update from them, we will suspend the domain after 2020-12-17 12:23:09 CET and it will stop working.

Please, check this article about abuse procedure in order to know more about the responsibilities of the registrar: https://support.openprovider.eu/hc/en-us/articles/360001725008-Reporting-abuse.

Have a nice day.
Kind regards,
Abuse Team

Max day that we will see the site suspended is on December 17. So I do hope that from this time and up to December 17, no one will fall for this trap.

[Raflesia]

Before there was Roobet and now Bustabit, I think scammers are targeting to copy known casino's website and get the credentials. This could be really dangerous for players who are not aware of the website and doesn't bother time checking the URL mostly are newbies luckily the OP managed to spot this website.

For obvious reasons, there could be two set of scammers here, and we have groups that specifically target crypto related online games and perhaps there's also targeted fiat online games as well. And also, there's a lot of money involved that's why scammers will make their way into created similar looking sites to trap their victims.  The Roobet find and this one is just a tip of the iceberg, there could be more that we need to discover and reported.

Well there will be many more phishing sites that will copy well-known gambling sites because the group believes that with the target of big gambling sites they can make more money, therefore we have to be careful, especially in that URL which is very important, because the scamer will infiltrate where I put it the phishing link.
I saw only 2 well-known sites that were plagiarized by scammers so indeed this possibility can continue and increase which we will find later.

[Zackgeno96]

I already got a official response from one of my emails:

Servicedesk (Openprovider)

Dec 12, 2020, 12:23 GMT+1

Dear Sir, Madam,

Thank you for the notification.

We have informed the reseller about your complaint and he will investigate this issue. If we do not receive any update from them, we will suspend the domain after 2020-12-17 12:23:09 CET and it will stop working.

Please, check this article about abuse procedure in order to know more about the responsibilities of the registrar: https://support.openprovider.eu/hc/en-us/articles/360001725008-Reporting-abuse.

Have a nice day.
Kind regards,
Abuse Team

Max day that we will see the site suspended is on December 17. So I do hope that from this time and up to December 17, no one will fall for this trap.

That's great, It was nice to see players cooperating with each other to share this kind of information and help the casinos to report phishing website like this. I've seen a lot of phishing website closed already thanks to the bitcointalk community.

[kamadazje]

What a greedy scammer, they almost copied the name and if the players will not be careful there is a big chance that they will fall to this kind of phishing site especially if they will hurry in logging in without checking carefully the details.

For bustabit players, it will be good if they will bookmark the website link so they can avoid using this phishing site knowing that we are only human and we are prone to mistakes. An extra i is the difference of their website link and if you will not carefully check it you will surely fall to the hands of the scammers. They almost copied everything in the landing page aside from the photo at the bottom of the page that is not displaying correctly in phishing site.

[sunsilk]

What a greedy scammer, they almost copied the name and if the players will not be careful there is a big chance that they will fall to this kind of phishing site especially if they will hurry in logging in without checking carefully the details.

For bustabit players, it will be good if they will bookmark the website link so they can avoid using this phishing site knowing that we are only human and we are prone to mistakes. An extra i is the difference of their website link and if you will not carefully check it you will surely fall to the hands of the scammers. They almost copied everything in the landing page aside from the photo at the bottom of the page that is not displaying correctly in phishing site.

There will be actual victims that would just come out when they just use google search for searching one website. This is a very common strategy of these scammers and targets newbies that are careful how they browse on the web with the popular websites that they visit like bustabit. It also appears that there are phishing exchanges that everyone should be careful of.

I already got a official response from one of my emails:
~snip~
Max day that we will see the site suspended is on December 17. So I do hope that from this time and up to December 17, no one will fall for this trap.

Good job OP! I hope that they'll action on it as soon as possible so that nobody would see the phishing link anymore.

[Harlot]

I already got a official response from one of my emails:

Servicedesk (Openprovider)

Dec 12, 2020, 12:23 GMT+1

Dear Sir, Madam,

Thank you for the notification.

We have informed the reseller about your complaint and he will investigate this issue. If we do not receive any update from them, we will suspend the domain after 2020-12-17 12:23:09 CET and it will stop working.

Please, check this article about abuse procedure in order to know more about the responsibilities of the registrar: https://support.openprovider.eu/hc/en-us/articles/360001725008-Reporting-abuse.

Have a nice day.
Kind regards,
Abuse Team

Max day that we will see the site suspended is on December 17. So I do hope that from this time and up to December 17, no one will fall for this trap.

Wow domain hosters actually do this kind of things? Or maybe it depends on the domain hosting services that depend if they will suspend the website or not. Phishing sites or scam websites are mostly created using namecheap and I haven't seen them do any kind of action when it comes to suspending websites maybe that is why a lot of scammers are using it because aside from the accepting cryptocurrencies I think they don't care what kind of content you have in your website as long as you are paying them.

[tbterryboy]

Good catch and I actually saw a similar one here https://bitcointalk.org/index.php?topic=5295450.0 it is really alarming how many scam sites are there now days and I think the only way to avoid these is either by bookmarking the websites you play or just enter the url directly because these scam sites are on the top of results on google so anyone can fall for it.

Max day that we will see the site suspended is on December 17. So I do hope that from this time and up to December 17, no one will fall for this trap.

I hope that's true and it is removed.

Hopefully no one felt for this scam because players who play at bustabit must enter the url directly I mean why would anyone search google for the sites they already play at and if someone is registering then I think they can't get scammed so hopefully no damage done.

[wxa7115]

This is a very good find and I congratulate the OP for sharing this with the community, sometimes some other users may notice a phishing site and simply ignore it thinking no one is ever going to fall for it, but for the ones that have not been in the market as long as we have there is a real risk of being scammed by these people.

So I urge anyone that finds similar websites to share that with the community as it is the only way we have to reduce the number of scams in the market is by reporting the scammers so they do not get any profits out of this.

[fiulpro]

This is really good what you did right now , since we have a lot of people who might just directly search on the Google instead of going to the real website through the bookmarks or even the signatures. At least this time hackers tried to go through th effort of replicating the whole site , I found something weird on the internet also
https://bustabit.gb.net/

bustabit.gb.net
****whois information****
 
Registrar Info
Name
NAMECHEAP INC
Whois Server
whois.namecheap.com
Referral URL
http://www.namecheap.com
Status
addPeriod https://icann.org/epp#addPeriod
clientTransferProhibited https://icann.org/epp#clientTransferProhibited
serverTransferProhibited https://icann.org/epp#serverTransferProhibited
Important Dates
Expires On
2021-12-08
Registered On
2020-12-08
Updated On
0001-01-01
Name Servers
dns1.namecheaphosting.com
156.154.132.200
dns2.namecheaphosting.com
156.154.133.200

This is really weird , the website is from Germany and apparently registered in panama , wait till you see their email address.



Now the problem is , apparently this website paid for their advertising, therefore they show up at the top whenever you try and search the normal website on google.

Now they are not actually the gaming website but they are trying to get clients through the name bustabit , when you open they have named their website bustta bit ... That's really funny for me , much like adidas and abibas ...



Now I don't know if things like these are allowed.

Much like :


But even though this is not gambling related website they are trying to use company's name.. that's sad tho , is this allowed ??

[Lanatsa]

This is really good what you did right now , since we have a lot of people who might just directly search on the Google instead of going to the real website through the bookmarks or even the signatures. At least this time hackers tried to go through th effort of replicating the whole site , I found something weird on the internet also

Common problem for most people specially who do try to find up things through google search will really most likely experienced these kind of phishing situation.

Ever in my life had victimized with phishing because I always memorize the domain name on a site which I do tend to deal with.When on the times that Im in doubt then
that's the time I do make some verification.

Phishing attempts isn't something new that's why we should really be careful.

[nykka]

Unfortunately phishing sites are often appear in the Internet. In most cases deceivers want to steal our accounts. And it`s very often when we log in the account and don`t check link of the site. To avoid phishing sites I just add trusted sites to the bookmarks starting from wallets and exchnages and ending casinos and sites where I make bets

[Jating]

I already got a official response from one of my emails:

Servicedesk (Openprovider)

Dec 12, 2020, 12:23 GMT+1

Dear Sir, Madam,

Thank you for the notification.

We have informed the reseller about your complaint and he will investigate this issue. If we do not receive any update from them, we will suspend the domain after 2020-12-17 12:23:09 CET and it will stop working.

Please, check this article about abuse procedure in order to know more about the responsibilities of the registrar: https://support.openprovider.eu/hc/en-us/articles/360001725008-Reporting-abuse.

Have a nice day.
Kind regards,
Abuse Team

Max day that we will see the site suspended is on December 17. So I do hope that from this time and up to December 17, no one will fall for this trap.

Why it took too long to make the decision though, it's pretty obvious that this is a phishing and malicious site. Although they have their processes here, I respect that, but they should make this a priority, a 3 day window is already long in my opinion (after you file the case).

Anyhow, both of the sites are still active at this point. Again, it's good that you have posted it here so that everyone should be aware of it and I also found your post in their official ANN thread so they may also something on their side to bring this site down.

[Zackgeno96]

Unfortunately phishing sites are often appear in the Internet. In most cases deceivers want to steal our accounts. And it`s very often when we log in the account and don`t check link of the site. To avoid phishing sites I just add trusted sites to the bookmarks starting from wallets and exchnages and ending casinos and sites where I make bets

That's actually a good practice to bookmark websites or put them in the trusted websites I think this should be a habit of every internet users to avoid landing to phishing websites like this, isn't?

[btc_angela]

Unfortunately phishing sites are often appear in the Internet. In most cases deceivers want to steal our accounts. And it`s very often when we log in the account and don`t check link of the site. To avoid phishing sites I just add trusted sites to the bookmarks starting from wallets and exchnages and ending casinos and sites where I make bets

That's actually a good practice to bookmark websites or put them in the trusted websites I think this should be a habit of every internet users to avoid landing to phishing websites like this, isn't?

Yeah it should be a habit, but we really don't know if majority are really practicing or not, or just typing the site or doing some Google search which is very bad as this criminals might pay Google to pay an ads on top of the real website, thus making someone get phished.

So it's a safety precautions, or shall a say to really do safe practice by bookmarking our favourite sites we visited not just bustabit, but everything related to our crypto activities, i.e online wallets.

[Hippocrypto]

Unfortunately phishing sites are often appear in the Internet. In most cases deceivers want to steal our accounts. And it`s very often when we log in the account and don`t check link of the site. To avoid phishing sites I just add trusted sites to the bookmarks starting from wallets and exchnages and ending casinos and sites where I make bets

That's actually a good practice to bookmark websites or put them in the trusted websites I think this should be a habit of every internet users to avoid landing to phishing websites like this, isn't?

Hopefully most users would think of this mindset, unfortunately only few of them set this up as an optional actions. Precautionary measures is really a safe method of filtration towards unknown and danger sites, particular to phising sites who've used the names of popular gambling sites.
I would recommend users to verify the gambling site before registration, and if confirmed then you're safe to access their services.

[fortunecrypto]

I already got a official response from one of my emails:

Servicedesk (Openprovider)

Dec 12, 2020, 12:23 GMT+1

Dear Sir, Madam,

Thank you for the notification.

We have informed the reseller about your complaint and he will investigate this issue. If we do not receive any update from them, we will suspend the domain after 2020-12-17 12:23:09 CET and it will stop working.

Please, check this article about abuse procedure in order to know more about the responsibilities of the registrar: https://support.openprovider.eu/hc/en-us/articles/360001725008-Reporting-abuse.

Have a nice day.
Kind regards,
Abuse Team

Max day that we will see the site suspended is on December 17. So I do hope that from this time and up to December 17, no one will fall for this trap.

That's still 4 days and if they make aggressive promotion, they can still victimize people, at least we have this thread here, and hopefully, those who are interested to invest in this gambling site they will do research and find this thread so they can save themselves,
it's better to create another one in the scam section for reference.

[Jawhead999]

Unfortunately phishing sites are often appear in the Internet. In most cases deceivers want to steal our accounts. And it`s very often when we log in the account and don`t check link of the site. To avoid phishing sites I just add trusted sites to the bookmarks starting from wallets and exchnages and ending casinos and sites where I make bets

That's actually a good practice to bookmark websites or put them in the trusted websites I think this should be a habit of every internet users to avoid landing to phishing websites like this, isn't?

Bookmarking a website is good option to prevent from phishing, but it will be better if you not use Google and install Adblock. Because if you search any kind service or project using Google, it will show phishing sites first since they paid ads.


IMO this thread should be moved to scam accusations section.

[Fredomago]

Unfortunately phishing sites are often appear in the Internet. In most cases deceivers want to steal our accounts. And it`s very often when we log in the account and don`t check link of the site. To avoid phishing sites I just add trusted sites to the bookmarks starting from wallets and exchnages and ending casinos and sites where I make bets

Hackers always trying to catch up with those people who are un-careful not doing their job in making sure that they are visiting the right sites to deal their business, they mostly being penetrated without their knowledge, stealing their account information and messed up with their assets / belongings online.

Best to always check and be aware of those many phishing sites out there and keep yourself updated, bookmarking
the sites that you always use also helps avoiding those hackers.

[imutlinda]

I also saw this post in the gambling section before. Sad that the circles keep trying. The only question is which thread to post it to, would be best in both, if allowed? Then you can reach people via 2 channels to warn.

[aomakun]

In any case, the domain will be discontinued from 17 December. Yet you can still scam a lot of people in 4 days, unfortunately. Let's hope it will be December 17th soon. It is understandable that they do not just take any domain off the air immediately