[Nettspend]

I know of a very reliable site Omni mentioned to me. give me a convo I’ll show u the site. I use it for my xmr

[Roberto Scorpius Malfoy]

That's a pretty good scam, maybe it's another type of drainer somehow.

Is everything up to date on your computer & browser etc?

Yes everything is up to date.

[Prawnster]

Yes everything is up to date.

Strange then, if anyone figures out how it works lmk cuz that's pretty cool.

[Jamika]

I was looking for a dblookup website, someone on HF mentioned weleakinfo.io
This website I logged in to it and on the payment page It was a qr code with the BTC payment code, I copy the BTC code and I pasted it on my BTC wallet and I sent the payment, for some reason this BTC code on their website was some kind of a contract so basically I paid the amount I was suppose to pay and on the other side they took everything I had on my wallet same second I sent the first payment.

I have never heard of this scam before but I just wanted to warn you guys before sending a payment dont send it from your original wallet send it from a separate wallet.

I was online yesterday when u were asking , sad for your loss bro , hope u compensate this later

[StuffSneak]

Well. This is something strange really. How can sending a transaction to an address can give them access? It doesn't make any sense tbh.

[SUI-3183372]

There's another element to this scam that hasn't been discovered yet. Every Bitcoin transaction has to be signed, a second transaction cannot take place without it being signed. This means either you or someone else had to approve a second transaction, meaning if you didn't, then somebody has full access to your wallet.

Did the draining occur as a part of your initial send or as a part of a second followup transaction?

If it was just a singular transaction, then the other possibility is the websites front end told you that you were only sending $x amount of dollars, but the transaction was actually set up to be a much larger $y amount of dollars, and that wasn't caught when approving the transaction. (Although this doesn't sound right either based on your description and how BTC transactions normally take place). Edit: Not correct based on my interaction with the website. The website simply gives you an address to deposit any dollar amount to.

I'll look at the site later when I'm near a PC.

Edit: I don't see a trend of depositors having their entire balance taken, the vast majority of depositors have balance remaining in their wallets after depositing funds to this site. I'd rather not deposit my own funds to the site as I don't want to get mixed up in a sketchy leaked data site, but I'm not seeing anything here that indicates an exploit that leads to wallet compromise or draining is taking place.

I've scanned the QR code to see if maybe the QR code leads to a separate address or links to something sketchy, but the QR is simply a copy of the address provided in plaintext.

With that being said, the website is most certainly a scam site. The deposit address given to me is the same deposit address given to all users, aka they have no way to correlate what account a deposit is coming from. It's a scam, but so far I don't see any evidence of exploit.

[Chrome]

I was looking for a dblookup website, someone on HF mentioned weleakinfo.io
This website I logged in to it and on the payment page It was a qr code with the BTC payment code, I copy the BTC code and I pasted it on my BTC wallet and I sent the payment, for some reason this BTC code on their website was some kind of a contract so basically I paid the amount I was suppose to pay and on the other side they took everything I had on my wallet same second I sent the first payment.

I have never heard of this scam before but I just wanted to warn you guys before sending a payment dont send it from your original wallet send it from a separate wallet.

Didn't even know that this is possible. How much did you lose from this scam?

[Hopsin]

Seems a mirror of the original website. How much did you lost ?

[Mewtwo]

What must of happened is you connected your wallet through their website. They’ll instantly drain your wallet the moment you connect it.


Since you stated this:
“website was some kind of a contract“

You can learn more about it here:
https://www.chainalysis.com/blog/crypto-drainers/

[TWIXX]

What must of happened is you connected your wallet through their website. They’ll instantly drain your wallet the moment you connect it.


Since you stated this:
“website was some kind of a contract“

You can learn more about it here:
https://www.chainalysis.com/blog/crypto-drainers/

True

[SUI-3183372]

What must of happened is you connected your wallet through their website. They’ll instantly drain your wallet the moment you connect it.


Since you stated this:
“website was some kind of a contract“

You can learn more about it here:
https://www.chainalysis.com/blog/crypto-drainers/

There's no wallet connect.

It gives you an address to copy and paste, and you send any amount of funds to it.

[Omniscient]

Strange is what I'm thinking.

Copy/Paste of an address should not do this. Unless the copy is a full payment URL like bitcoin:1A1zP1eP5QGefi2DMPTfTL5SLmv7DivfNa?amount=0.01&label=Payment%20Request

And why are you using Blockchain wallet? It's horrible.

Everyone also curious about how much funds were stolen.

Are you sure you don't have some type of RAT or clipper that because you initiated a transaction was able to initiate two of them?

Any chance we can see the TXN for both?

[SUI-3183372]

Copy/Paste of an address should not do this. Unless the copy is a full payment URL like bitcoin:1A1zP1eP5QGefi2DMPTfTL5SLmv7DivfNa?amount=0.01&label=Payment%20Request

Nothing like this, both the QR code and copying the address from the site provide you with nothing more than a plaintext address with no additional data or parameters appended.

[Roberto Scorpius Malfoy]

Strange is what I'm thinking.

Copy/Paste of an address should not do this. Unless the copy is a full payment URL like bitcoin:1A1zP1eP5QGefi2DMPTfTL5SLmv7DivfNa?amount=0.01&label=Payment%20Request

And why are you using Blockchain wallet? It's horrible.

Everyone also curious about how much funds were stolen.

Are you sure you don't have some type of RAT or clipper that because you initiated a transaction was able to initiate two of them?

Any chance we can see the TXN for both?

I have been using Blockchain since day 1 never had any issues with it.

Im 100% sure that I dont have any RAT, This is a pretty new PC havent downloaded anything to it except of some tools for school which is Microsoft programs.

When I sent the transaction I remember that I had to sign it two times which I found a little bit confusing and I think thats where the scam comes, when I sign it the second time it was some kind of a contract initiated.

I didnt lose much it was around 300 USD

https://www.blockchain.com/explorer/tran...bb39ffa5e2

[Omniscient]

I have been using Blockchain since day 1 never had any issues with it.

Im 100% sure that I dont have any RAT, This is a pretty new PC havent downloaded anything to it except of some tools for school which is Microsoft programs.

When I sent the transaction I remember that I had to sign it two times which I found a little bit confusing and I think thats where the scam comes, when I sign it the second time it was some kind of a contract initiated.

I didnt lose much it was around 300 USD

https://www.blockchain.com/explorer/tran...bb39ffa5e2

Um...this is weird. But did you send $11 as the initial payment then that other $287 was the stolen funds?

Because I think I know what's happened. Blockchain sent from a legacy wallet to a new wallet for you. Especially since you say this is a day 1 Blockchain wallet. If that balance was old, that's what happened. It's possible you're just being silly. Or maybe I am. :) Let's see.