[Scam]: MyEtherWallet (MEW) Phishing Site

[Dave1]

What Happened: MyEtherWallet Phishing Site
Website:

Code:

https://myetherwallet.comim.org/

Archived:  https://archive.is/Fdw5W


Whois Info:

Registrant Org    yangxue
Registrant Country    cn
Registrar    Xin Net Technology Corporation
IANA ID: 120
URL: http://whois.xinnet.com/domain/whois_login.jsp
Whois Server: whois.xinnet.com

(p)
Registrar Status    addPeriod, serverTransferProhibited
Dates    2 days old
Created on 2021-01-02
Expires on 2022-01-02

Do not try to click access my wallet:

[1714079019]

1714079019

[1714079019]

1714079019

[1714079019]

1714079019

[witcher_sense]

Do not try to click access my wallet:

I tried to click, actually. The only available option to connect is the last one, which is through keystore file, mnemonic phrase, or private key. All these methods are not recommended even if you are using a legitimate website. If you are trying to connect using your hardware wallet or via Metamask, this kind of phishing won't steal anything from you. That is why it always important to remember: your seed phrase is your money, your private key is your money. You should never share the keys to your money with anyone, even legitimate websites. It is, therefore, wiser to use hardware wallets designed to never reveal any sensitive information. Humans should act the same way hardware wallets do - keep your keys offline, never show them to others, sign your transaction on air-gapped devices.

[Raflesia]

Good catch @Dave

I tried to access the link and indeed everything looks very similar to the original there is no difference at all except the URL which must be checked more carefully.

Even if it's safer Boorkmark the real link so it doesn't lead to this alleged phishing site.
The new website was created 2 days ago and is now caught hoping the newbies are aware of this to verify in more detail.

Maybe because the effect of ETH has reached a new ATH that scamers are making this way to get ETH.

[stadus]

They are back again because there's a bull run. 

If you are not really careful with visiting the site or you are clicking a link, you'll likely fall victim to this phishing site.
the only way to ensure you'll not be a victim is to bookmarked the site, easy and safe.

Thanks for sharing OP. should be helpful especially for the newbies.

[Baofeng]

Again, another good find.

I agree with what most of the posters have said, ETH just crossed $1k, so it is one of the hottest crypto again and criminals take advantage by creating a very similar look. There could be more out there, and for newbies, never enter your seed and check everything first.

[TalkStar]

You did impressive work bu detecting this phishing site and i wish atleast our community users will be aware after seeing the topic.

I agree with what most of the posters have said, ETH just crossed $1k, so it is one of the hottest crypto again and criminals take advantage by creating a very similar look. There could be more out there, and for newbies, never enter your seed and check everything first.

Exactly,,,,Due to Eth massive price pump most crypto asset holders are planning to buy and hold some on their wallet and scammers are taking the advantage like they always do. Although MEW related phishing sites are nothing new but for a long time we haven’t seen phishing sites like this. Again scammers prove that they are ready to take every single chances when its a matter of earning easy money.

 

[TravelMug]

The website is still up so. I reported it immediately to Google to remove them ASAP as this is very very dangerous for beginners and even not so newbies because they might find it for many reasons, like in Twitter or other other social media platforms.

Yes, this is nothing new but I can't remember when we have the last time a MEW phishing site was reported in this community.

[TheUltraElite]

The scammers are taking advantage of the upward rise in price on bitcoin and altcoins. Seeing this old method after some time now.

However I would like to know where the OP came across the link in the first place. Most advanced and cautious users who know about these methods of loss will have already bookmarked the correct URLs on different browsers and only use those to visit the site.

Possible that the site domain is getting SEO and being spread on emails, social media - the usual modes of spreading scams.