A phishing site for all kinds of wallets

[yhiaali3]

A phishing site for all kinds of wallets

The story in short I bought an LTE token and entered the telegram group for this token to ask some questions. Suddenly I got a private message from "@listentoearn_officialsupport" he told me that he was here to help me.
I told him how? He said I'll give you the link, go in there and connect your wallet and activation
Although I already knew it was scam but I told him ok to see what happens
He sent me this link: "chainsyncfix.surge.sh"

 The site describes itself (lies of course):

 

(Decentralized Platform Wallet)
Our Services
Dapp Walletnode is a decentralized protocol. dConnect create an innovative open-source software ecosystem that is both secure and resilient. And it allows developers to create new online tools, many of which have piqued the interest of global business markets. Validation of wallet will be completed below as follows

The site has many types of services (all scams of course) such as VALIDATION, RECOVERY, Harvest and stakings for a large list of different wallet.

           

At first I pressed VALIDATION , a long list of different wallets appeared to me
Then I chose the Metamask wallet and clicked on it.
An error appeared as in the picture and asked me to manually connect

         
       

 I clicked on "Connect Manually" and a message appeared asking me to enter the recovery phrase

           

Of course, if anyone puts his phrase down, he will lose his wallet forever.

There are many services on the site as you can see:
         

I tried clicking on the "Stacking pool" service and got the same result. The same message appeared before, asking me to enter the recovery phrase.

After that, I went back to Telegram and told the person that it was a scam and that I exposed his fraud, so he deleted the conversation and blocked me immediately.

I ask everyone to be careful not to write the SEED phrase or the private key on this site or any other site on the Internet for whatever reason.

[Husires]

Scammers are evolving as when you click on the link to the wallet all the tokens in your address are automatically withdrawn so it is always better to use an empty wallet when you want to link to an unknown wallets.
The method you mentioned is old but seems to work for beginners.

I'm starting to see more interest in fighting phishing sites, so maybe browsers have some artificial intelligence to track them or monitoring and tracking systems.

[yhiaali3]

I'm starting to see more interest in fighting phishing sites, so maybe browsers have some artificial intelligence to track them or monitoring and tracking systems.

This is really very important, I remember that the Metamask wallet used to tag these sites and give a warning message when you want to access them through the browser that has the Metamask extension on it, I don't know if this feature still exists or if the phishing sites use advanced techniques to prevent them from being detected by Metamask.

[Saisher]

Remember in every group you are in there's always a pinned warning that the developers or the admins will not pm you first, so consider all those who pm you offering to assist you with your concern with the intention to scam you.
I experience the same thing when I have an issue on the exchange where I'm trading at least 10 people sending me messages asking for support, where in fact the admin stated that they will not PM first, so always consider those who pm you offering to assist you as scammers.

[yhiaali3]

Remember in every group you are in there's always a pinned warning that the developers or the admins will not pm you first, so consider all those who pm you offering to assist you with your concern with the intention to scam you.
I experience the same thing when I have an issue on the exchange where I'm trading at least 10 people sending me messages asking for support, where in fact the admin stated that they will not PM first, so always consider those who pm you offering to assist you as scammers.

Thank you for the reminder, yes I know this perfectly. All currency groups, exchanges or trusted wallets always put this warning, so I was sure that he is a scammer, but I just wanted to know the method he uses in fraud, so I decided to respond to his requests, and I verified that he is a scammer in the end, knowing the scammer's methods Very important to warn people of them.

[SFR10]

The site describes itself (lies of course):
~Snipped~

Did plagiarism check on that part and it led to another similar website (syncconnect.org), but it asks users to scan a certain QR code instead... After that, I did the same for all of their offered services and that led to a bunch of other scam platforms (reconnectmyapp.com ^{[their scam page isn't configured properly]}, daapreconnect.com and hrouvr.com ^{[it also shows an error that forces users to connect manually]})!

[yhiaali3]

Did plagiarism check on that part and it led to another similar website (syncconnect.org), but it asks users to scan a certain QR code instead... After that, I did the same for all of their offered services and that led to a bunch of other scam platforms (reconnectmyapp.com ^{[their scam page isn't configured properly]}, daapreconnect.com and hrouvr.com ^{[it also shows an error that forces users to connect manually]})!

Yes, it is true, there are several phishing sites, all of them work in the same way, all the services there lead to the same page, the principle of its work shows an error in connection or synchronization and then asks users to connect manually through Seed or Private Key, when a connection error appears, beginners think that There is a problem with the automatic connection and it is no problem to manually enter the Seed until the connection is made. A simple psychological trick based primarily on beginners who have no experience.

[abel1337]

There are so many red flags in this phishing site that is pretty obvious. Domain name is very unproper for a website like this, Their are a lot of unorganized buttons that makes it bad and Even simple things on design like capitalization of text is very shady. It seems that the owner of this phishing site doesn't put a lot of efforts in making it and trying to look it professionally.

If a site ask you for a seed phrase, manual sign-in, private key or anything that will let them access your wallet internally is basically a typical sign of a scam. Remember that no professional website owner will message you first especially on common messaging apps that involves so many scammers like telegram, It's the first indication that it is a scam. I hope newbies doesn't fall for them or the lucrative offer they are proposing.