So I was looking at some combos in pastebin I can try to play with a combolist verifier and found this “leak” https://pastebin.com/u22HxdhG.
Then I opened this website called Hitcoin.ml but I cannot find any information about the company and this website isn’t legitimate at all. And using one of the “leaked” accounts in the above pastebin, I am able to login and see the user’s balance. And the Send and Receive buttons are conveniently placed once you logged in. If you attempt to Send, it will say you have to verify the recipient wallet first. How to verify? You will have to send exactly 0.001 BTC to the address they gave in the pop up message first.
I just think this is really good idea to scam people who wants hack accounts easy. What do you guys think?