Beware: fraudulent domain names

[Shift Crypto security announcements]

Beware of fraudulent domain names and the websites they may host.

We've recently come across bitbox02-dot-com domain which has metadata of the BitBox02 product page but embeds a ColdCard wallet by Coinkite website in an iframe which clearly shows unfriendly intentions. See the attached screenshots. We do not know who the owner of the fraudulent domain is and are currently investigating this case.

Note that it isn't limited to a website hosting. Fraudulent domain owners may also be sending phishing emails or show up as misleading search results. We have not seen phishing reports in connection to the aforementioned domain so far.

Shift Crypto will never ask you to provide confidential information, passwords, seeds or other such secrets and private key material. If you encounter a case of this kind, please do notify us at secu...@shiftcrypto.ch.