Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Unblock Legitimate Site] #21455

Closed
1 task
Boomchange opened this issue Feb 19, 2024 · 0 comments
Closed
1 task

[Unblock Legitimate Site] #21455

Boomchange opened this issue Feb 19, 2024 · 0 comments
Assignees
@409H
Labels
blocklist removal Issue or PR requesting removal of a domain from the blocklist

Comments

@Boomchange
Copy link

Boomchange.com

Details: Please unblock our legitimate website boomchange.com ,Our website was ublocked among other platforms and now it is in whitelist everywhere, except Eth-phishing-detect. We work more than 2 years. And there is no reasonable reason to add our website into blacklist.Thank you
@Boomchange Boomchange added the blocklist removal Issue or PR requesting removal of a domain from the blocklist label Feb 19, 2024
@AlexHerman1 AlexHerman1 closed this as not planned Won't fix, can't repro, duplicate, stale Feb 19, 2024
Jackofusu80 added a commit to Jackofusu80/blocklist that referenced this issue Feb 20, 2024
@Jackofusu80
Update blocklist.yaml
081254a 
**Details:**
Boomchange is a fake cryptocurrency exchange website that also offers a lot of crypto options which is a risk for Phantom users and operates under two domains, "boomchange.io" and "boomchange.com". Boomchange pretends to be a cryptocurrency exchange but is actually a scam site that aims to trick people and scam their money in the form of cryptocurrency. The website is promoted through social media, such as YouTube, and search engine optimization.

The boomchange.com website is static and has a .php script on it that generates the same crypto addresses that belong to the domain holders. The phishing domains are "boomchange.io" and "boomchange.com". The end-order page always shows the same fraudsters' crypto address.

The website had a domain before under "boomchange.com", which was suspended for fraudulent activity. Currently, the domain "boomchange.com" is back online under the NICENIC Chinese Registrar, and people keep getting scammed there. Victims from all over the world reported against "boomchange.io" and the hosting provider of the scam exchange is Amarutu Technology/Koddos.net offshore hosting. More report links can be found here: 
https://bitcointalk.org/index.php?topic=5454622.0

The scamming site promotes their fake services with search engine optimization and also buying positive online reviews on sites like Trustpilot and Sitejabber. The scammer promotes the fraudulent exchange via YouTube channels, Facebook page, TikTok, Reddit, and Twitter.

Reports of the scam exchange can be found on Chainabuse, Bitcoin Abuse sites, Cryptscam, and Scam-Alert (https://scam-alert.io/scam/bc1qgwx3z59thekwcmp92arrvf4s2yg4ystsr9k2tt). Furthermore, "Boomchange" creates multiple accounts to unblock themselves from MetaMask phishing protection systems (MetaMask/eth-phishing-detect#21455). It is recommended that Phantom should add these dangerous websites to its phishing block detecting system.

Added to blacklist:
  - url: boomchange.com
  - url: boomchange.io
@Jackofusu80 Jackofusu80 mentioned this issue Feb 20, 2024
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@409H 409H

Labels
blocklist removal Issue or PR requesting removal of a domain from the blocklist
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
3 participants
@409H @AlexHerman1 @Boomchange