http://i.cubeupload.com/d1Dr28.png # Never give your password and double check on which website you really are! I already warned you about several (potential) scam attempts (see bottom of this post for a list of them). Here is a new one. Thanks to @ace108 for catching my attention and notifying about this new scam. ### Scam Description The scammer publish the following comment on user’s post http://i.cubeupload.com/XQqihM.png or http://i.cubeupload.com/S8g4AT.png If you click on the link in the comment, you will be redirected to the following site: http://i.cubeupload.com/iUa6Pt.png If you go down the website page, you will see 3 links that invite you to order for a “service” http://i.cubeupload.com/JHztiM.png If you carefully look at the underlying links, you will see that clicking on the “Order Now” buttons will bring you to another site: http://i.cubeupload.com/JJCWUj.png ### The site is a **fake SteemConnect login page** The goal of the creator of this website is clearly to steal your credentials to hack your account! ### Preventive action activated I will add any account sending phishing links to the black list of my Warning-Bot and it will issue warnings with a link to this post, notifying users of the malicious activity of those accounts. If you find similiar pishing attemps, contact me on [steem.chat](https://steem.chat/direct/arcange) To protect yourself, you can: * always double check before clicking on a link, especially if this links take you away from steemit.com. * verify the reputation of people writing comments on your posts. A user with a low reputation shoud trigger you attention. ### Previous threat alerts If you missed them, please find here the previous alerts I published: * [Scam alert and white hat counter-strike](https://steemit.com/steemit/@arcange/scam-alert-and-white-hat-counter-strike) * [Phishing exploit has been stopped - Scammers thwarted!](https://steemit.com/steemit/@arcange/phishing-exploit-has-been-stopped-scammers-thwarted) * [Potential scammer reported- @jones420](https://steemit.com/steemit/@arcange/potential-scammer-reported) * [Fake Steemit website try to steal your password!](https://steemit.com/steemit/@arcange/scam-alert-fake-steemit-website-try-to-steal-your-password) * [Phishing attack to steal your active key](https://steemit.com/steemit/@arcange/scam-alert-steemitsecurity) * [Potential scammer reported - @minnowpond](https://steemit.com/steemit/@arcange/potential-scammer-reported-minnowpond) * [Scammer reported - @russiann](https://steemit.com/steemit/@arcange/potential-scammer-reported-russiann) * [Scammer reported - @steemitrobot](https://steemit.com/steemit/@arcange/scammer-reported-steemitrobot) * [Scammer reported - @tripadvisor.com](https://steemit.com/steemit/@arcange/scammer-reported-tripadvisor-com) * [Scammer reported - @harquick](https://steemit.com/steemit/@arcange/scammer-reported-tripadvisor-com) * [Scammer reported - @gtg.witnesses](https://steemit.com/steemit/@arcange/scammer-reported-gtg-witnesses) * [Phishing site reported - sleemit(dot)com](https://steemit.com/steemit/@arcange/phishing-site-reported-sleemit-com) * [Phishing site reported - www.steemitfollowup(dot)ml](https://steemit.com/steemit/@arcange/phishing-site-reported-www-steemitfollowup-ml) * [Phishing site reported - www.steemitfollowup(dot)cf](https://steemit.com/steemit/@arcange/phishing-site-reported-www-steemitfollowup-dot-cf) * [Phishing site reported - www.autosteemer(dot)com](https://steemit.com/steemit/@arcange/phishing-site-reported-autosteemer-dot-com) * [Phishing site reported - www.autosteemer(dot)club](https://steemit.com/steemit/@arcange/phishing-site-reported-autosteemer-dot-club) * [Phishing site reported - upperwhale](https://steemit.com/steemit/@arcange/phishing-site-reported-upperwhale) * [Phishing site reported - steamit(dot)ga](https://steemit.com/steemit/@arcange/phishing-site-reported-steamit-dot-ga) * [Phishing site reported - steenit(dot)cf](https://steemit.com/steemit/@arcange/phishing-site-reported-steenit-dot-cf) ### reminder A bit of paranoia is the basis of security. There are a few simple rules to follow in order to avoid having your account hacked: **Rule 1:** NEVER, I repeat, NEVER use or give your **owner key** or password! **Rule 2:** Use your **posting key** to **login, post and vote** on **trusted websites** like steemit.com or busy.org. **Rule 3:** NEVER give your **active key** as this key allows to control your funds! Only use your **active key** for special operation like money transfer or account update on **trusted websites** like steemit.com. **Rule 4**: Anywhere else, if you are requested to provide any of the above key: **RUN AWAY!!!** 4 simple rules. It's not much to remember. Follow them scrupulously, and you will only have to laugh at unsuccessful attempts from scammers. Spread the words, **resteem this post to your friends**, and you will make the platform safer. Thanks for reading! --- If you notice any new suspect activity like the one described above, drop a comment on this post, contact me on [steem.chat](https://steem.chat/direct/arcange) --- [![](http://i.cubeupload.com/yIQqSC.png)](http://steemitboard.com/@arcange) ###### _footer created with **[steemitboard](steemitboard.com)** - click any award to see my board of honor_ ### Support me and my work to protect the Steemit platform. ### [Vote for my witness ](https://v2.steemconnect.com/sign/account-witness-vote?witness=arcange&approve=1)