Jating (OP)
|
|
January 14, 2021, 05:19:53 PM |
|
What happened: Yearn Finance fake site Website: Archived: https://archive.is/p6O4eWhois Record for YEaNr.finance How does this work? Domain Profile Registrant REDACTED FOR PRIVACY Registrant Org WhoisGuard, Inc. Registrant Country pa Registrar NameCheap, Inc. IANA ID: 1068 URL: https://www.namecheap.com/Whois Server: whois.namecheap.com (p) Registrar Status clientTransferProhibited Dates 18 days old Created on 2020-12-27 Expires on 2021-12-27 Updated on 2021-01-01 Name Servers DNS1.NAMECHEAPHOSTING.COM (has 1,008,481 domains) DNS2.NAMECHEAPHOSTING.COM (has 1,008,481 domains) Tech Contact REDACTED FOR PRIVACY REDACTED FOR PRIVACY, REDACTED FOR PRIVACY, REDACTED FOR PRIVACY, REDACTED FOR PRIVACY, REDACTED FOR PRIVACY (p) (f) IP Address 162.0.209.74 - 82 other sites hosted on this server So they took advantage of the mis spelling and created this malicious website. If you directly type it to your browser, and make the mistake, you will surely fall for this trap. So bookmark it and check even the spelling just to make sure.
|
|
|
|
|
|
Be very wary of relying on JavaScript for security on crypto sites. The site can change the JavaScript at any time unless you take unusual precautions, and browsers are not generally known for their airtight security.
|
|
|
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
|
|
|
|
Furious 7
|
|
January 14, 2021, 05:38:27 PM |
|
At first glance the domain looks similar except that the letter "R" is at the end and it should be able to distinguish the spelling so that it doesn't go wrong on the website.
In such a way they will make even the UI display the same, there is no difference in the catch and I just make sure this needs to be careful in spelling we need to pay attention that the domain we are visiting is correct.
Good catch.
|
| . .Duelbits. | │ | | │ | ▄▄█▄▄░░▄▄█▄▄░░▄▄█▄▄ ███░░░░███░░░░███ ▀░░░▀░░▀░░░▀░░▀░░░▀ ▄░░░░░░░░░░░░ ▀██████████ ░░░░░███░░░░▀ ░░█░░░███▄█░░░█ ░░██▌░░███░▀░░██▌ ░█░██░░███░░░█░██ ░█▀▀▀█▌░███░░█▀▀▀█▌ ▄█▄░░░██▄███▄█▄░░▄██▄ ▄███▄ ░░░░▀██▄▀ | . REGIONAL SPONSOR | | ███▀██▀███▀█▀▀▀▀██▀▀▀██ ██░▀░██░█░███░▀██░███▄█ █▄███▄██▄████▄████▄▄▄██ ██▀ ▀███▀▀░▀██▀▀▀██████ ███▄███░▄▀██████▀█▀█▀▀█ ████▀▀██▄▀█████▄█▀███▄█ ███▄▄▄████████▄█▄▀█████ ███▀▀▀████████████▄▀███ ███▄░▄█▀▀▀██████▀▀▀▄███ ███████▄██▄▌████▀▀█████ ▀██▄███▀██▄█▄▄▄██▄████▀ ▀▀██████████▄▄███▀▀ ▀▀▀▀█▀▀▀▀ | . EUROPEAN BETTING PARTNER | |
|
|
|
ScamViruS
|
|
January 14, 2021, 05:46:19 PM |
|
When a project is popular in the market, a group of scammers use the name of the project to create a fake website. They are busy coming up with new scam ideas every day. These scammers create websites in such a way that new crypto users get confused and fall prey to scammers.
So be extra careful now because lots of new fake websites are being created by scammers.
|
|
|
|
Jating (OP)
|
|
January 16, 2021, 12:19:11 PM |
|
[..snip..]
Good catch.
Thanks, yeah that's the trick that these scammers are trying to pull off, if you are not very careful, it's hard to see the difference, because the look and UI display is the same. [..snip..]
So be extra careful now because lots of new fake websites are being created by scammers.
Yes, lots of fake site are being created by cyber actors like mushrooms, if one site gets remove, they are ready with a fresh new site.
Unfortunately, the site is still up, we need more people to report it ASAP.
|
|
|
|
TalkStar
|
|
January 16, 2021, 12:56:23 PM |
|
So they took advantage of the mis spelling and created this malicious website. If you directly type it to your browser, and make the mistake, you will surely fall for this trap. So bookmark it and check even the spelling just to make sure.
Just same like other phishing sites they are trying to make investors fool through similar looking domain. Actually they are targeting a specific group of people who are existing user of yearn finance or planning to invest in this project. In a situation like this its always safer to make the habit of bookmarking real websites which will keep you far from getting scammed. I have checked their domain and on first look its really hard to detect the difference between "yearn" & "yeanr". I will suggest our forum newbies to double check any domain before clicking on the link and its the only way by which we can keep distance from phishing related incidents. When a project is popular in the market, a group of scammers use the name of the project to create a fake website. They are busy coming up with new scam ideas every day.
Most phishing sites build their platform by following a popular site and its nothing new. They know well its the key fact of their money stealing trap.
|
|
|
|
Jating (OP)
|
|
January 22, 2021, 01:37:50 PM |
|
Another of this fake website created by criminals. This is being spread in Youtube video, so if you find one, report it right away. And yes, the strategy here is to create as many fake sites using yearn.finance so this won't simply stop as they are targeting crypto website that is in the hot topic right now and making a good pump. Archive: https://archive.is/Dg09NRegistrant Org WhoisGuard, Inc. Registrant Country pa Registrar NameCheap, Inc. IANA ID: 1068 URL: https://www.namecheap.com/Whois Server: whois.namecheap.com (p) Registrar Status addPeriod, clientTransferProhibited Dates 4 days old Created on 2021-01-17 Expires on 2022-01-17 Updated on 2021-01-17 IP Address 104.21.34.35 - 7 other sites hosted on this server
|
|
|
|
Baofeng
Legendary
Offline
Activity: 2590
Merit: 1658
|
|
January 22, 2021, 02:34:32 PM |
|
You may add to add this to your list of fake yearn.finance. What's funny is the name of the website though, Lol, it's supposedly coinomi fake site, but perhaps they've change their mind. Do not give your 24 mnemonic seed here as this is a very obviously phishing site. https://www.pros-coinomi.com/ Archived: https://archive.is/Xydac
|
| │ | ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███▀▀▀█████████████████ ███▄▄▄█████████████████ ███████████████████████ ███████████████████████ ███████████████████████ █████████████████████ ███████████████████ ███████████████ ████████████████████████ | ███████████████████████████ ███████████████████████████ ███████████████████████████ █████████▀▀██▀██▀▀█████████ █████████████▄█████████████ ████████▄█████████▄████████ █████████████▄█████████████ █████████████▄█▄███████████ ██████████▀▀█████████████ ██████████▀█▀██████████ ▀███████████████████▀ ▀███████████████▀ █████████████████████████ | | | O F F I C I A L P A R T N E R S ▬▬▬▬▬▬▬▬▬▬ ASTON VILLA FC BURNLEY FC | | | BK8? | | | . ..PLAY NOW.. |
|
|
|
Dave1
|
|
January 23, 2021, 03:19:40 AM |
|
Speaking of fake yearn.finance and similar to what @Baofeng uncovered, here is a not so related domain name but it bear the same fake and phishing style, https://www.trust-ebook.com/ Perhaps this is a recycle website by these criminals.
|
R |
▀▀▀▀▀▀▀██████▄▄ ████████████████ ▀▀▀▀█████▀▀▀█████ ████████▌███▐████ ▄▄▄▄█████▄▄▄█████ ████████████████ ▄▄▄▄▄▄▄██████▀▀ | LLBIT | │ | CRYPTO FUTURES | | | | | | | │ | 1,000x LEVERAGE | │ | COMPETITIVE FEES | │ | INSTANT EXECUTION | │ | . TRADE NOW |
|
|
|
zanezane
Full Member
Offline
Activity: 868
Merit: 150
★Bitvest.io★ Play Plinko or Invest!
|
|
January 23, 2021, 06:04:47 AM |
|
When a project is popular in the market, a group of scammers use the name of the project to create a fake website. They are busy coming up with new scam ideas every day. These scammers create websites in such a way that new crypto users get confused and fall prey to scammers.
So be extra careful now because lots of new fake websites are being created by scammers.
This will always hold true as long as we use the Internet, fakes will pop-up to dupe those unaware. My first encounter of this phishing websites are the ones that are created by scam call center agencies, some even use a demo of a legitimate bank to make it look like they were doing a real money transfer to the victims. Some dead giveaways that a website scams that I have noticed over the years is that they seem to not bother with making the website pleasing to the eye and grammar is the least of their worries and they even sell products that seems legit at first glance but when you take a close look, it is just a picture taken from Google Images.
|
|
|
|
cryptomaniac_xxx
|
|
January 23, 2021, 09:28:41 AM |
|
Very interesting take by scammers here, the fake site are now not related to the name of the original site? Lol, and yes, there could be recycling their old website to continue duping crypto enthusiast specially newbies. That's why we need to verify first.
Yearn finance is in the top 42, with a price close to bitcoin at $31k, it's really going to be a prime target by criminals.
|
|
|
|
Furious 7
|
|
January 25, 2021, 02:07:16 PM |
|
Very interesting take by scammers here, the fake site are now not related to the name of the original site? Lol, and yes, there could be recycling their old website to continue duping crypto enthusiast specially newbies. That's why we need to verify first.
Yearn finance is in the top 42, with a price close to bitcoin at $31k, it's really going to be a prime target by criminals.
I don't know why there are so many domains and after checking in whois it was only registered a few days later was it really recycled the domain? Criminals are still criminals they will definitely target big company names in crypto by inserting a few letters to distinguish them so that is very important in verification, especially in the url. The new doin name will appear again. Lol like her, we are used to it to immediately report it.
|
| . .Duelbits. | │ | | │ | ▄▄█▄▄░░▄▄█▄▄░░▄▄█▄▄ ███░░░░███░░░░███ ▀░░░▀░░▀░░░▀░░▀░░░▀ ▄░░░░░░░░░░░░ ▀██████████ ░░░░░███░░░░▀ ░░█░░░███▄█░░░█ ░░██▌░░███░▀░░██▌ ░█░██░░███░░░█░██ ░█▀▀▀█▌░███░░█▀▀▀█▌ ▄█▄░░░██▄███▄█▄░░▄██▄ ▄███▄ ░░░░▀██▄▀ | . REGIONAL SPONSOR | | ███▀██▀███▀█▀▀▀▀██▀▀▀██ ██░▀░██░█░███░▀██░███▄█ █▄███▄██▄████▄████▄▄▄██ ██▀ ▀███▀▀░▀██▀▀▀██████ ███▄███░▄▀██████▀█▀█▀▀█ ████▀▀██▄▀█████▄█▀███▄█ ███▄▄▄████████▄█▄▀█████ ███▀▀▀████████████▄▀███ ███▄░▄█▀▀▀██████▀▀▀▄███ ███████▄██▄▌████▀▀█████ ▀██▄███▀██▄█▄▄▄██▄████▀ ▀▀██████████▄▄███▀▀ ▀▀▀▀█▀▀▀▀ | . EUROPEAN BETTING PARTNER | |
|
|
|
|