[Warning]: Scam/Fake Binance Word of the Day (WOTD)

[TravelMug]

What Happened: Scam/Fake Binance Word of the Day (WOTD)

Website:

Code:

https://binance-play.com/

Archived: https://archive.md/351qb

Whois information:

Code:

Registrar	Squarespace Domains II LLC
IANA ID: 895
URL: https://domains2.squarespace.com,http://domains2.squarespace.com
Whois Server: whois.squarespace.domains

(p)
Registrar Status	clientTransferProhibited
Dates	2 days old
Created on 2023-10-14
Expires on 2024-10-14
Updated on 2023-10-14

Original site: https://www.binance.com/en/activity/word-of-the-day/entry

Another heads-up for you guys, another phishing websites from the criminals. Just like the rest of newly created website, they will ask you to connect your wallet. We don't want newbies to fall for this kind of trick so just be very cautious.

And for those who are interested to report: I've written this as well, [Guide]: How and Where to Report Phishing Websites..

Also report here: https://safebrowsing.google.com/safebrowsing/report_phish/?hl=en. Thank you for those who are going to do their part here.

[1714797053]

1714797053

[1714797053]

1714797053

[1714797053]

1714797053

[1714797053]

1714797053

[1714797053]

1714797053

[1714797053]

1714797053

[yahoo62278]

I do not trust any of these connect your wallet sites. If I have to connect a wallet, i'll just go elsewhere. I've seen a few times where scammers drain wallets with this method. Good catch here @OP. Better to be safe than sorry and just avoid this crap.

[tabas]

Me either, when a website suddenly asks me to connect a wallet even if I don't have any wallet on a PC that I use or device it actually scares the shit out of me. Like it's gonna pop when you visit them and there goes the icons in front of me like walletconnect, Metamask, etc. Aside from that red flag, the duration of its existence is obviously made just to phish unaware users.

Also report here: https://safebrowsing.google.com/safebrowsing/report_phish/?hl=en. Thank you for those who are going to do their part here.

Done brother.

[Kemarit]

Unfortunately it seems that the numbers is on the rise again, as there are a lot of phishing sites being created day by date. And if one sites goes down because of crypto enthusiast reporting it, another one will pop up.

And maybe the problem lies to this domain registrar though as they are very relax in accepting anyone.

So everyone, we need to just be on the look out. And then report it right away if we find some phishing sites. And don't trust Google if we wanted to search about crypto related things.

[Yamane_Keto]

If the culture spreads that you should not link your wallet to any site that you do not trust, or link a wallet that has zero balance if you are skeptical, then the number of scammers will decrease significantly. You need to deposit the lowest fees possible in order to confirm whether Airdrop is real or a scam, although I believe that most of the industry is a scam. Indirectly injecting false values

[Gladitorcomeback]

Nice catch OP ,Hacker are so fast ,, As i know the new Word of the day program has just been launched and they are taking advantage of this program because many newbies generally taking parts in it and most if them unaware of wallet connect risk.

I used three wallet for safety purpose. One hard wallet for just holding purpose and never connecting with online dapps. The other one I used for airdrops which needed wallet connect but I am holding only small fee in some chains. I connect only to those site I remembered that I did airdrop. The third one is empty wallet used to check new sites for connecting wallet. If we doesn't connect our main wallet then no worry about these phising sites.

[TheUltraElite]

Sites like these get flagged by MetaMask extension if you have that installed. I havent checked the same myself though, being an extension it still works both the roles of a Ethereum wallet and a Security guard.

It might be difficult for a newbie to understand this type of scam because its new and seems benign and they might connect their wallet to this website. So anybody reading this should be warned from doing the same.

Websites which look like/sound like popular websites should be double-triple checked for legitimacy.

[rohang]

TravelMug 

How  did  you  come across this phishing site?

Im curious to know how its being spread, through emails/twitter/telegram or any other channel etc

As that might also help to stay more vigilant on such channels

[albon]

What Happened: Scam/Fake Binance Word of the Day (WOTD)

I have seen many Binance users on social media and communication applications who cannot guess the words of the game. Hence, they search for sites that provide the correct guessed words daily or ask for help from strangers to be eligible to win the game after five wins, and so that they become among the participants who will get a reward for a share of 500K Binance Points. Hence, scammers take advantage of their interest in collecting these words and create phishing sites like the one mentioned by the OP.

I do not see that even a game reward with hundreds of thousands of participants would be of great importance and value for these Binance customers to put their accounts and wallets at significant risk.

[tabas]

TravelMug 

How  did  you  come across this phishing site?

Im curious to know how its being spread, through emails/twitter/telegram or any other channel etc

As that might also help to stay more vigilant on such channels

Not him but I'll give an answer. Usually, you can come across these phishing links if you simply search them through Google. Google is known for not filtering these scam and phishing websites and that's why if you just search for some keywords that they're using for their SEO, they're going to appear in the first result.
I've come across with many of these from search engines and as well as in social medias and that's why they will never stop no matter how we keep up and monitor these. The problem is the platform itself is allowing these to exist because they are getting paid and that's the thing for them and not for the welfare of many of their users that can be potentially a victim of these scams. Anyway, they have come across as well with a solution but we need to cooperate with them by reporting these scam/phishing links.

[Dave1]

TravelMug 

How  did  you  come across this phishing site?

Im curious to know how its being spread, through emails/twitter/telegram or any other channel etc

As that might also help to stay more vigilant on such channels

Not him but I'll give an answer. Usually, you can come across these phishing links if you simply search them through Google. Google is known for not filtering these scam and phishing websites and that's why if you just search for some keywords that they're using for their SEO, they're going to appear in the first result.
I've come across with many of these from search engines and as well as in social medias and that's why they will never stop no matter how we keep up and monitor these. The problem is the platform itself is allowing these to exist because they are getting paid and that's the thing for them and not for the welfare of many of their users that can be potentially a victim of these scams. Anyway, they have come across as well with a solution but we need to cooperate with them by reporting these scam/phishing links.

True, and that's why it is not advisable to really used Google as search engine for crypto related, like looking for exchanges, bitcoin mixer or even gambling platforms because this criminals can exploit Google ads and place their phishing sites on the very first page of Google.

And most likely it is spread to social media as what it was pointed out.

Or even is cases that this scammers are going to used text messages or sms to trick and scam anyone.

[shasan]

I have just checked that the site has been redirected to Meta Mask now it is considered a "Deceptive site ahead". So, now this site can't steal anything and there is no way to hack any funds from this site.

[tabas]

True, and that's why it is not advisable to really used Google as search engine for crypto related, like looking for exchanges, bitcoin mixer or even gambling platforms because this criminals can exploit Google ads and place their phishing sites on the very first page of Google.

And most likely it is spread to social media as what it was pointed out.

Or even is cases that this scammers are going to used text messages or sms to trick and scam anyone.

Yes even casinos as well, almost every service that when you try to search on search engines like Google. You'll see the counterpart of these scams that will be on top of all of the results but Google never gives that warning to the visitors. Too many sources that they are using and in every platform, all of them are also there monitoring and trying to trick everyone, every newbie that they can. It's because they've been always the most vulnerable victims that they are targeting, actually, they are the main targets of them.

[Latviand]

I do not trust any of these connect your wallet sites. If I have to connect a wallet, i'll just go elsewhere. I've seen a few times where scammers drain wallets with this method. Good catch here @OP. Better to be safe than sorry and just avoid this crap.

I think every veteran BCT user has the same instinct as you. I'd rather risk not getting into the airdrop than connecting my wallet to their website.

I like to put myself in the mind of the scammer who's doing this, how did that scammer come up with WOTD as a means to scam people? It's not like there's a person out there that takes crypto this serious that they have to have this on their phone, without knowing how that scammer thinks, I assume that this scammer would probably have an easy time using the most brain dead scam that everyone knows compared to doing this, I can't wrap my head around how they can scam people into putting their wallet in that site.

[Dave1]

True, and that's why it is not advisable to really used Google as search engine for crypto related, like looking for exchanges, bitcoin mixer or even gambling platforms because this criminals can exploit Google ads and place their phishing sites on the very first page of Google.

And most likely it is spread to social media as what it was pointed out.

Or even is cases that this scammers are going to used text messages or sms to trick and scam anyone.

Yes even casinos as well, almost every service that when you try to search on search engines like Google. You'll see the counterpart of these scams that will be on top of all of the results but Google never gives that warning to the visitors. Too many sources that they are using and in every platform, all of them are also there monitoring and trying to trick everyone, every newbie that they can. It's because they've been always the most vulnerable victims that they are targeting, actually, they are the main targets of them.

True, that's why I don't seldom used Google to search, I might as well search the forum first if I'm looking for exchanges and gambling sites as I might fall for this trick.

I do not trust any of these connect your wallet sites. If I have to connect a wallet, i'll just go elsewhere. I've seen a few times where scammers drain wallets with this method. Good catch here @OP. Better to be safe than sorry and just avoid this crap.

I think every veteran BCT user has the same instinct as you. I'd rather risk not getting into the airdrop than connecting my wallet to their website.

I like to put myself in the mind of the scammer who's doing this, how did that scammer come up with WOTD as a means to scam people? It's not like there's a person out there that takes crypto this serious that they have to have this on their phone, without knowing how that scammer thinks, I assume that this scammer would probably have an easy time using the most brain dead scam that everyone knows compared to doing this, I can't wrap my head around how they can scam people into putting their wallet in that site.

If you put your mind of the scammer, they know that maybe someone are still going to be trick by this WOTD because as far as I know, you don't need any money. On the contrary you have the possibility to make some from this contest by Binance. And so it's very easy for scammers to create this website and copy the UI and everything, spread it to their fake social media accounts and just wait for someone to fall and bite.