this post was submitted on 03 Jul 2023
15 points (100.0% liked)

Bitwarden

799 readers
11 users here now

Discuss the Paswordmanager Bitwarden.

founded 2 years ago
MODERATORS
[email protected]
15
Phishing-Website: bitwarden[.]net (feddit.de)
submitted 2 years ago* (last edited 2 years ago) by [email protected] to c/[email protected]
7 comments fedilink hide all child comments
 

Edit (Update/Correction):

It looks like I was very likely wrong (a good thing in this case!).

According to this entry in the official Bitwarden Help Center bitwarden[.]net is official too!

Its still weired that the login failed multiple times and bitwarden[.]net doesn't redirect to the homepage, as the other official domains do, and so on.

Nonetheless, all seems to be fine, gladly. Thanks for your input.

I've tried to log into Bitwarden and used vault.bitwarden[.]net, it failed. Also, this page is the only one on this domain (nothing on bitwarden[.]net) and the SSL Certificate differs.

vault.bitwarden.com (and bitwarden.com) behaves as expected.

I think I've actually used a phishing site. 2FA probably safed me pretty hard. Changed creds.

top 5 comments
sorted by: hot top controversial new old
[–] [email protected] 3 points 2 years ago* (last edited 2 years ago) (1 children)

Might be a testing/beta website, note the version number displayed at the bottom:

  • .net is at Version 2023.5.1
  • .com is at Version 2023.5.0

Also, the login form definitely does behave like the original site (given that Bitwarden is open-source, that is extremely easy to accomplish, however).

[–] [email protected] 2 points 2 years ago* (last edited 2 years ago)

Interesting. I've updated my post, .net is official according to their help center (linked in post).

[–] conversationkiller7 3 points 2 years ago (1 children)

Thanks mate, just updated 2FA on mine

[–] [email protected] 1 points 2 years ago

I've updated my post. Seems to be legit, regarless my issues with this webpage. Still a good thing that you uodates your 2FA!

[–] [email protected] 1 points 2 years ago

whois data is redacted for privacy in both cases, but given that the domain is registered since 2018 I guess it's benign or somebody is in it for the long con.

load more comments
view more: next ›