One Sr. Member is posting phishing links for the Bitbot project.

[albon]

What happened:: This member, whose account appears to have been hacked as indicated by the following note: [This user recently woke up from a long period of inactivity.], is posting phishing links for the Bitbot project, urging others to claim their airdrop through the malicious link he shared in numerous spam posts.

Scammers Profile Link: https://bitcointalk.org/index.php?action=profile;u=978880 | FLAG

Reference Link: [1] - [2] - [3] - [4] - [5] - [6]

claim-bitbot[.]xyz/

| ARCHIVED

Domain Name: CLAIM-BITBOT.XYZ
Registrar:   Hostinger IANA ID 1636
Status: clientTransferProhibited, ServerTransferProhibited
Creation Date: June 26, 2024 (1 week ago)
Update Date: July 7, 2024 (1 day ago)
Expiration Date:   June 26, 2025
Age:   13 days
SOURCE: https://www.domainiq.com/domain?claim-bitbot.xyz#/whois

Additional Notes:
Airdrop hunters should avoid clicking on the phishing link, connecting their wallets, and should only interact with the official links for the Bitbot project [Website] - [Official X Account].

[ditec_wrogn]

Hey there,

Just wanted to say thanks for sharing this potential scam activity! Your efforts in keeping our community safe from these malicious links are much appreciated. I'm with you on flagging that user.

By the way, I checked out the phishing link, and it looks like claim-bitbot[dot]xyz/ leads to a 403 Forbidden error, but claim-bitbot[dot]xyz/app/ does show a page. To be honest, it looks pretty shady and unprofessional, which is another reason to be suspicious of this website.

[shasan]

The user has come back on the forum after a long period of inactivity so the user might have re-logged into the forum to gather money by un-ethical means. Also, hackers may get access and use the account to misuse the account. Also, the account might have been sold and the buyer may do these unfair things.

[re-start]

Thank you very much, Albon. After I saw your message on my Telegram, I quickly disconnected my wallet and deleted all the cookies related to this site. After entering the site and its strange design, I was a little suspicious of it.

[albon]

By the way, I checked out the phishing link, and it looks like claim-bitbot[dot]xyz/ leads to a 403 Forbidden error, but claim-bitbot[dot]xyz/app/ does show a page. To be honest, it looks pretty shady and unprofessional, which is another reason to be suspicious of this website.

You are welcome. Yes, that's correct. I have archived the phishing site above, which contains a wallet connection button, broken links, and links to redirect visitors to the official domain, which has an interface similar to this unprofessional phishing site. By looking at the official links for Bitbot, you will see that the fraudulent domain, which is only 13 days old, is not affiliated with them.

The user has come back on the forum after a long period of inactivity so the user might have re-logged into the forum to gather money by un-ethical means. Also, hackers may get access and use the account to misuse the account. Also, the account might have been sold and the buyer may do these unfair things.

All the scam posts he published, which I reported, have been removed, and his account has now been banned.

Thank you very much, Albon. After I saw your message on my Telegram, I quickly disconnected my wallet and deleted all the cookies related to this site. After entering the site and its strange design, I was a little suspicious of it.

You're welcome. I'm really glad that you read my messages and warnings in time and were able to secure your assets. Once again, never rush to connect your wallet to any sites, and always do your research.

Thank you all for your contributions here, and thanks to the mods for their quick review of the reports and for taking action on time. We hope that the Bitcointalk community remains a safe place, free from scammers and their malicious traps.

[Davidvictorson]

Additional Notes:
Airdrop hunters should avoid clicking on the phishing link, connecting their wallets, and should only interact with the official links for the Bitbot project [Website] - [Official X Account].

Once again another user has been saved from falling victim to scammers. And this rookie mistake is so costly that with just two clicks one can lose up to a $100. Like one time someone clicked on a cloned site that looked so identical to the airdrop site. It didn't occur to them to double check. They lost about $100 for the two times they tried to connect their wallet to the site and it said didn't connect. My best guess of what happened was that the two times they clicked to connect the website was interpreted as giving permission to the individual's funds from the backend which was showing up as an error in connecting to the wallet.

[NotATether]

Hostinger doesn't allow their web servers to be used for scams. Report it using their abuse email.

[Lafu]

Dont know if that is really a Scam or Phishing attempt as the same Link is mentioned in an article on the Newspage for Crypto called btc-echo.
I checked both Links and as far i dont have overseen something the Links are the same.
But its better to be first to be cautious and question everything.

Here is the Link to btc-echo about that article from 14.5.2024
https://www.btc-echo.de/news/bitbot-so-moechte-dieser-trading-bot-das-ki-potenzial-ausschoepfen-sponsored-183360/

[SamReomo]

Dont know if that is really a Scam or Phishing attempt as the same Link is mentioned in an article on the Newspage for Crypto called btc-echo.

Then in that case it could be a mirror site of Bitbot or maybe a phishing attempt as suggested by the OP. Someone may contact Bitbot team to know that either the link is their own mirror site or a phishing site created by a malicious actor.

I'm not wrong then [urlhttps://t.me/BitbotOfficial]this[/url] is their official support Telegram handle. However, I haven't visited it or contacted them yet as I'm currently having some issues on my Telegram.

[re-start]

Another phishing link from a newbie. This OP shared the exact same message!

• Get Reward
• extra crypto
• Don't miss out

All this is suspected to be a scam!

https://bitcointalk.org/index.php?topic=5502457.new#new

[albon]

Another phishing link from a newbie. This OP shared the exact same message!
[...]

Good catch, man.

I strongly believe this is the alt account of the scammer @bdivrik, whose account was banned yesterday. He used his Newbie account on the forum to continue posting the same phishing link for the Bitbot project. I have also tagged his account and reported his posts to Mods.

Hostinger doesn't allow their web servers to be used for scams. Report it using their abuse email.

I have already filed a complaint and reported this phishing site to the Hostinger team. For those who don't know, you can email them at the following address (abuse@hostinger.com) or fill out the form through this [link].

Dont know if that is really a Scam or Phishing attempt as the same Link is mentioned in an article on the Newspage for Crypto called btc-echo.[...]

The article already mentions the project's official links. Their official website is Bitbot.tg, as I mentioned in the additional notes above, not the phishing link promoted by the scammer, which is claim-bitbot[.]xyz/app.

[Lafu]

The article already mentions the project's official links. Their official website is Bitbot.tg, as I mentioned in the additional notes above,

Yes you are right and whats i wanted to say with that what i have written that the Website Bitbot is legit.
Here you can also read how to claim your tokens and connect your wallet.
https://docs.bitbot.tg/how-to-claim

not the phishing link promoted by the scammer, which is claim-bitbot[.]xyz/app.

I researched a bit and there is no other link as the official one on the Webpage.
Nice catch by the way for that phishing link , +1

[Yaunfitda]

It's also been flagged by virustotal as a Phishing site as well:



https://www.virustotal.com/gui/url/988b39e56496f0797842a374224ef2b9b8fb8402a0902126b6b00cdf7a9a4b26?nocache=1

I also reported it here: https://safebrowsing.google.com/safebrowsing/report_phish/?hl=en

So that Google will not show it to their search engine, and yes, this is a good catch by the OP.

[albon]

The phishing domain has now been suspended, guys. The Hosinger team reviewed the report I submitted, and after confirming that the domain violated their policies, they took action against the scammer and informed me of this in the attached message.



Everything is fine now; I will lock the topic. However, scammers may come back with new phishing domains and accounts, so be cautious and ensure that you are dealing with the official site before trusting any website.