Bitcoin Forum

I didn't follow their announcements etc. so I don't know much about them. But just by looking at 5 of their top 8 ads:



deals.bitcoinblackfriday.info/offer/primedice-deposit-at-least-1-btc-and-receive-1-btc-for-free/
links to primedice.io instead of https://primedice.com

deals.bitcoinblackfriday.info/offer/trezor-the-hardware-bitcoin-wallet/
links to buy-trezor.com instead of http://buytrezor.com

deals.bitcoinblackfriday.info/offer/spondoolies-tech-sp50/
links to sqondoolies-tech.com instead of http://www.spondoolies-tech.com

deals.bitcoinblackfriday.info/offer/gyft-25-discount-for-all-gift-cards/
links to appgyft.com instead of https://app.gyft.com


Obvious scam is obvious.


Owner at forums: https://bitcointalk.org/index.php?action=profile;u=525055

And promoted by ~50 ppl in his signature campaign, PM-ed them.

edit: seems like they also have 1 ad on this forum... - but gone now.

Good call, some of those are really close to the real thing and could trick someone.  I am sad to admit that this time last year I fell for a scam where someone impersonated Bitmaintech and I ordered a C1 that obviously never arrived.  Glad there are others out there who help spot this stuff and report it to the masses.

Good Job and Thank You

Sent PM to 48 signature campaign users and theymos. Sorry to PM spam, I just really hate scams.

I was one step left to make a purchase of total amount of few bitcoins, in the "gyft" website.
Thanks for letting us know this, i really appreciate it.
Yes they have an ad here, this could be the source of winning auction https://bitcointalk.org/index.php?topic=1234407.msg13001474#msg13001474

Just send a PM to all participants as well.

Good to hear.

Yeh, also some of the ads are legit btw (like mixed legit and scams to make it look more "right".) Obviously better use http://bitcoinblackfriday.com instead.




I didn't follow the black friday thing at all so I don't know much details and it's actually 3:20am here so too late to research who the .info owner is etc. I hope this "last minute" warning could prevent at least some victims.

I guess they are gone now ,every page has a 404 error .They made some ROI or a lot is the question .
edit: It's still on.

Thanks for your information, i removed the signature.

I was a part of signature campaign and never thought it would turn out to be this bad they way it was arranged.Op paid highest rates every 2 days for our posts and we all received the funds as well since he had escrowed them.We had promised a bonus of 0.1 btc if participated in the campaign for atleast 8 days.Op hasnt sent payments for last 2 days time frame neither the bonus as for now .

I'll change back my signature when I get my pc back damn I didn't know it would turn out like this it's the first time this was tried out it could have been amazing if it was true

Figures the first signature campagin I try in months is for a scam. Should have looked at it closer before registering.

Good looking out NLNico

I received pm and got the shocked of my life when I learnt that the signature I am wearing and promoting turned out to be a scam.I am very disappointed that bitcointalk do not do any kind of investigation before allowing such campaigns.Now on the last day of campaign when we were expecting payouts,we come to know that it is a scam.Who is going to be at loss?obviously the members of this forum who were promoting it.All their efforts,time and energy gone wasted :(

Even theymos has been deceived, I hope you can forgive the members of the signature campaign

I don't think its completely fault of the members as the main event just got launched today and after which we came to know it was a scam, had we known before it'll turn out into something like this we wouldn't have but anyway we have changed our signatures.I doubt we're getting any payouts even though there are 1btc still in that wallet address.

i got the PM and really shocked because i don't know bitcoinblackfriday.info is scam site
and thank you for the warning

Can't believe i missed this; their rates and everything (xcept maybe for that bonus) was not really overpriced so i didn't even bother looking further into it.

1H8Pm29JPzX3KjjapjmgpYSCUySVnHKfWT
likely controls 47 addresses as per https://bitiodine.net/cluster/1H8Pm29JPzX3KjjapjmgpYSCUySVnHKfWT

Those associated with bitcointalk accounts are: (cant guarantee it's all 100% correct, or even at all)








All this info is based on bitiodine cluster search. I can't guarantee it's correct in binding addresses, and don't know if accounts changed ownerships..
Someone with a bit more time on their hands should explore this to make a definite conclusion.

Update:

---

Great work!


Confirmed. smith coins is an alt account of GotaPauj
This TX (https://insight.bitpay.com/tx/90653e413bc02bd1241e8cff4be764bfeb1e4ff02cd23130915aabbe5772d72e) was signed by both 1H8Pm (https://bitcointalk.org/index.php?topic=996318.msg11864253#msg11864253) and 1DfJHn (https://bitcointalk.org/index.php?topic=996318.msg11960405#msg11960405) and only 2 others so it's definitely not a mix service.


Couldn't verify. Still checking.
Confirmed. prodigy8 is an alt account of GotaPauj
This TX (https://insight.bitpay.com/tx/90653e413bc02bd1241e8cff4be764bfeb1e4ff02cd23130915aabbe5772d72e) was signed by both 1H8Pm (https://bitcointalk.org/index.php?topic=996318.msg11864253#msg11864253) and 18SvVi (https://insight.bitpay.com/address/18SvViXzBoKURr9FPecVjYGvFjZZeZiPAg) AND this TX (https://insight.bitpay.com/tx/9f90f46396e8e200a215abb0555a2a208cecfb3e4138838595cba4ef205c0a37) was signed by both 18SvVi (https://insight.bitpay.com/address/18SvViXzBoKURr9FPecVjYGvFjZZeZiPAg) and 1NiwP (https://bitcointalk.org/index.php?topic=996318.msg11960429#msg11960429).


Confirmed. lorylore is an alt account of GotaPauj
This TX (https://insight.bitpay.com/tx/90653e413bc02bd1241e8cff4be764bfeb1e4ff02cd23130915aabbe5772d72e) is signed by both 1H8Pm (https://bitcointalk.org/index.php?topic=996318.msg11864253#msg11864253) and 18SvV (https://bitcointalk.org/index.php?topic=996318.msg11833050#msg11833050). Also signed by only 2 other addresses.


Could not verify. Still checking...
Confirmed. This TX (https://insight.bitpay.com/tx/bb607bad7b04970f4966ef8f52f22702409c11531d0ff8ac77a673ba141ab467) was signed by both 18SvVi (https://insight.bitpay.com/address/18SvViXzBoKURr9FPecVjYGvFjZZeZiPAg) and 1GrmY (https://bitcointalk.org/index.php?topic=996318.msg11912042#msg11912042), therefore jt byte is an alt of lorylore and GotaPauj.


Could not verify. Still checking...
Confirmed. This TX (https://insight.bitpay.com/tx/95dd12d325b314fa37e0143e08c3aeaa5234b587cc37cd3da96b227a24c1bc00) was signed by both 18SvVi (https://insight.bitpay.com/address/18SvViXzBoKURr9FPecVjYGvFjZZeZiPAg) and 1BJGYUVd (https://bitcointalk.org/index.php?topic=1126158.msg11901093#msg11901093), therefore Prasmatic is an alt of lorylore and GotaPauj.

Walletexplorer.com confirms (https://www.walletexplorer.com/wallet/0192897337d528ff/addresses) and even got 53 addresses.

Edit:
Checked all addresses walletexplorer.com gave me, couldn't find any more accounts than you did.

There was a guy that said something like "is there enough funds in the address where funds for the campaign are held" - but not exaclty in those words
If someone can find me that quot , it would help, because i think i linked him as well (can't be sure, i'm really tired and sleepy  :'( , but would like to check it out later on)

I'm guessing there are many more, i was "on this case" just 1hour or so. If more of us helps search, i'm sure we will find more affiliations.
btw i only checked by cluster search, there's much more work to be done , my dear Watson  ;)

EcuaMobi picked it up, I'm sure he'll smoke out everyone affiliated.
I might also try to help.

All payments[1-4] for the signature campaign came from 17vpc25zimcjzprk7aSfgUhoiassyZefU6 (#1)

The address is tied to:

via this[5] transaction and was funded 1.4 BTC by 19V2BodsD7gVYorvdCBWbY7trysJTyai7y (#6) via this[6] TX. #6 was most likely funded via CoinJoin[7].

#2 was most likely funded via CoinJoin[8]

#3 was funded by 15wh8kG2JbtE14g41LqN7Xzm27EqS1hgk3 (#7)

#4 was most likely funded via CoinJoin[9]

#5 was funded by 1tMiHns9E4eTb27nA1t3unKbpyD5Z2qk5 (#8) which looks like it is part of a highly used wallet, probably a mixer.

[1] https://www.blocktrail.com/BTC/tx/7cec8047ea88b8391b1e7dafae2bcf4d34115e3f53b3c437cb961e3073ceb7a4
[2] https://www.blocktrail.com/BTC/tx/e5862a056fb941dc68bb83d51da25805f8dcbf735229c7c1fe66bb788a3ae3bb
[3] https://www.blocktrail.com/BTC/tx/5c82462022c847d64ede50df355069e45cd227939bab6498e2720ee5b7e1ffdc
[4] https://www.blocktrail.com/BTC/tx/f61e3dc620c34e6dbd12f86c66cf0fc3f26ebd0c7f033e9e9e7f518477bdc520
[5] https://www.blocktrail.com/BTC/tx/f380c6ab16bc17de8166f8523aa965ddab94b45b60e21a62e8b2b899c8b45227
[6] https://www.blocktrail.com/BTC/tx/68aefe1678fd6077357f358b9786b8930289135d2ec83ec4c2c02cb82835cbdd
[7] https://www.blocktrail.com/BTC/tx/03306767ea58545f8972e5853fb02b052c3686f8b7494b5ad1eddae5057625d2
[8] https://www.blocktrail.com/BTC/tx/84ba884e55bcbd038533b9a830d7341220db34c8050e4e2bff77fa44681e0a73
[9] https://www.blocktrail.com/BTC/tx/03306767ea58545f8972e5853fb02b052c3686f8b7494b5ad1eddae5057625d2

Again all addresses:

Is this the guy?

A Full Member called SmartIphone queried the insufficient funds in the address where funds for the campaign are held. I had to post a link and quote it because the black Friday campaign thread's locked now.


https://bitcointalk.org/index.php?topic=1253069.msg13082279#msg13082279


This is the bitcoin address he used in his black Friday signature campaign application.

https://bitcointalk.org/index.php?topic=1253069.msg12999019#msg12999019

Raging, thank you for the pm I obviously had no idea that this was the case, I decided not to join another campaign because I felt if was a scam, feel quite stupid having promoted this thing and I hope that nobody got burned, thought it was legit as they had a signature contest last week and it all seemed legit.

https://www.walletexplorer.com/wallet/2bb84171251c925a/addresses

Walletexplorer found two more address:

Ok, just saw my account red lol, i can confirm that GotaPauj account is not my alt account and will find now the deal details with the guy which i dealt here.

Everything will be explained.

Stay tuned.

Where should i send the proof. or should i make all of them public ? Someone please guide me.

You can try and post proof here, but EquaMobi already provided solid proof that you indeed are an alt, so in order to be believed, you might wanna explain this:

Updated my signature campaign thread as well. Sorry that it took so long. It seems that guys behind bitcoinblackfriday.com were right all along when they said that bitcoinblackfriday.info was a cheap copy of their website.

Looks like there is a bit of downvote manipulation going on over at /r/Bitcoin too in order to hide the posts calling it out as a scam (check the new/controversial tabs). Very shady stuff.

Great catch NLNico. It's a shame that so many people have probably been hit by this, this was a really clever and elaborate scam. I actually remember calling the idea of a clone site shitty when they announced it on Reddit, looks like it was shitty in more than one way. ;)

(Separate reddit post) One of their posts got quite high up too. (https://www.reddit.com/r/Bitcoin/comments/3tyuug/bitcoin_black_friday_is_3_days_away_check_out_the/)

i just changed my signature campaign, its really shocking me, the owner of bitcoinblackfriday.info really want to get/earn much money from making so much scam website, such an asshole

thanks for the OP for letting me know

Account GotaPauj was sold to thriftshopping on: November 02, 2015

Profile link is: https://bitcointalk.org/index.php?action=profile;u=357577

Below i am posting 3 pic:

The first one contains the deal details and when thriftshopping sent the bitcoins.

https://i.imgur.com/gpv6yj0.jpg

The second one is the signed message that the account was sold to thriftshopping

https://i.imgur.com/8Dy0qjp.jpg

The third one is the seclog when the user changed the password

https://i.imgur.com/rgZjhBj.jpg

If someone want to go through teamviewer let me know i can show to a trusted member, also can send the PM/msg #id to mod/admin.

If i missed anything please let me know.

Just remove my signature. Thanks for warning me.

Never thought this could be happen. Dammit !!

Please post the PMs as text too. And reporting them to an admin would probably help.

How did you get those PMs? Are you SmartIphone? If so, any chance you can allow me temporary access to that account to confirm the PMs?

Yes Yes.

I sent the credentials to EcuaMobi so he can confirm.

I have confirmed the authenticity of all the posted PMs.
thriftshopping (https://bitcointalk.org/index.php?action=profile;u=357577) bought the account GotaPauj (https://bitcointalk.org/index.php?action=profile;u=525055) from SmartIphone (https://bitcointalk.org/index.php?action=profile;u=374823) on November 02, 2015 and therefore while smith coins, prodigy8, lorylore, jt byte and Prasmatic were alt accounts of GotaPauj they're no longer alts when the scam happened (or at least there's no proofs of that).

Thank you.

P.S Lutpin i don't know why does he ignores my messages but i think i will give him negative feedback for leaving invalid feedback.

thankyou for the scam bust ! changed my signature

Looks like theymos changed forum advertisement as well, now it says :
"Warning: bitcoinblackfriday​｡​info (previously advertised here) is a scam site linking to phishing versions of several notable websites. See here for more info."

Freaking scammers! Thanks guys for catching this one out! Many people could have lost their money! I can't believe this s**t!

We made the news.

Shoot, that really sucks. I removed the ad and added some warnings.

This sort of thing unfortunately can't really be prevented. Even if anyone had the time to exhaustively check a site for phishing links (etc.) before advertising them, the website could just change the links later. The only solution is for Web users to be constantly vigilant.

Thank you for the announcement i removed the signature now.

Yes, and on the advertising spot it sometimes shows that warning with big red letters.
I hate phising sites, I once logged in to a fake facebook, but I realised it was faje so quickly change passwords.

Good job mods/admins/scam busters!

Thanks for the PM... I removed the signature.  I guess I should have spent a bit more time researching the signature provider and the links in their ads.  Hopefully nobody fell prey by clicking on it when I was advertising for them :(.

Good work OP and everyone else involved for bringing this scam to light.

Good catch NLNico. Although I am sure a ton of people signed up for their newsletter and could have possibly fell for the scam if they didn't check the website addresses. Fortunately it seems like gmail is blocking their e-mails and sending them straight to SPAM so hopefully that will help reduce the amount of victims and give them enough time to find this thread and other warnings. Also it's great that theymos added the announcement on the forum header, I would not have found this otherwise.

Yes, thank you for notifying me by PM.

I removed my signature offcourse, will not help such a miserable human being.

For what's it worth, thanks everyone to alert the signature members. This kind of shit has to stopped.

It isn't your fault.
They changed the links today, so you wouldn't have noted it even if you would have checked them when you joined.

Because of this signature campaign(bitcoinblackfriday) I found at that black friday existed, so I was very happy because I found out something new and cool. I signed up with my email, so I looked today for an email, but could not find it. Why did gmail,block it, did they know they were a scam? If it was not went to spam, I would have bought some stuff, I am very lucky that I have not checked my spam box :)

Thanks for discovering this scam Nico, and save some people from being scammed!

That really sucks. I hope nobody falls for it ughh  :(

Gmail blocks these newsletter type e-mails quite frequently. I only ever check my spam folder when I am specifically looking for something that might've been sent there instead of my inbox. Gmail blocking them could be due to any of the following: poorly configured mail servers, mail servers/IPs are blacklisted, Gmail detected spam-like behaviour from the sender, etc.

I was strongly interested in this site both as seller and as buyer, I have also talk with some collegues about this site that on the paper sound well.
Thank you for the good work (also for how detect the alt count).

You can always contact bitcoinblackfriday.com? They are the real deal.

Thanks for the info. I removed the signature now

From what is coming out of this is smith coins is the alt of the signature campaign's admin GotaPauj.
Luptin has confronted him with accusation here:
http://bitcointalk.org/index.php?topic=1267751

it is still in the process but if his findings are solid then Smith coins should release those funds in escrow and pay the participants including the ending days bonus that is yet to be paid to them.

I think the site was just offering paid adverts. They should really moderate the adverts, otherwise the leader will lose his neutral status on an established account. Fel free to give the accounts connected to these scams a minus activity with the risked-amount stated and refrenced from an image of a screenshot of the website!

This is what happens when people don't put disclosures on their websites
That's gotta hurt (6 minus trusts already)

No. He was initially linked to the scammer here (https://bitcointalk.org/index.php?topic=1266987.msg13087385#msg13087385). But he proved (https://bitcointalk.org/index.php?topic=1266987.msg13087993#msg13087993) he sold the scammer's account before he committed the scam. So AFAIK smith coins is not an alt of the scammer.
thriftshopping (https://bitcointalk.org/index.php?action=profile;u=357577) is an alt of the scammer GotaPauj (https://bitcointalk.org/index.php?action=profile;u=525055).

shit. i guess that is their mistake, but i am now believing that that people submitted those stuff is scammer.

Thanks for the PM's
I did not know nor could I as the list was not given until the last minute I'm glad someone was monitoring it and I hope that the damage is minimal.
BBF Removed with prejudice

Thanks for your helpful advice. If wouldn't have checked this post out, I would have fallen for the same scam too. I was about to spend some of my BTC on one of the listed sites there but to be on the safe side, I guess I will just hold them for some time.  ;D

I've left a warning on multiple news website, reported a few posts (and even tweeted at a news website) to warn people about this. Let's hope it helps.

EDIT: I also tweeted a warning (https://twitter.com/BitcoinMitchell/status/670383176896946177) to my Twitter followers, if anyone (or everyone) could retweet it, that would be great.

Thank you for the Info ,i did not know i'm promoting scam site
I removed the signature.

I've delete my previous tweet about promoting their site and make new tweet
Here is : My tweet warning (https://twitter.com/anshartokk/status/670384491114930177)

i did only submitted a few of the stuff to sell, but now it is a ripoff. though i didn't get into those phishing website. duh it is a waste of time; i would wish to get to bitcoinblackfriday.com , not .info

gonna spread this thread throughout the facebook! stand by.

Folks from Gyft reached out to me and I sent out a newsletter warning people not to use .info.

So,

The 'founder' of .info is 'Thomas Silva'

No prior history in Bitcoin, released a couple press releases. Used some really shady shit to downvote almost all of my social media posts and upvote his own.

Listed this as his phone number: +1 (424) 241-3613

Listed his first address on his press release as 3370 E Pershing Ave, Orlando, Florida, 32806 which was up for rent some time ago, you can get the property owner's info if you look for it, I didn't bother calling and verifying if a Thomas Silva lives there.

The next address he put up was in his newsletters:

Bloomspring Avenue 122
Seattle, Wa 98144

Which just doesn't exist.

Whois is privacy protected, we're sending in a request to namecheap to take down the website.

"Thomas" sent me an email on November 12th:

"Hello Jon,

My name is Thomas Silva and I'm the owner of bitcoinblackfriday.info. I
have seen a hostile reaction from you in some of our posts so I would like
to reach out to you and offer my apologies regarding the similarity
between our two domains and to express my sincere regret that you are
upset with us offering our expertise to help bitcoiners reach the best
bitcoin black friday deals on November 27th. Me and my team have the
utmost respect for you and your website, it has been of great help so far
but please understand that we feel we can do a great job also and we do
not want to compete with your website. We only want to help Bitcoin and
advertise this big day for the greater good of the community and spread
the word as best as possible.

I hope you understand that we do not want to hold grudges and maybe we can
work togheter to make Bitcoin Black Friday as successful as possible.

Sincerely,

Thomas Silva
BitcoinBlackFriday.info
contact@bitcoinblackfriday.info"

I have the headers information if someone who's trusted in the community wants to take a look at it and parse out the relevant bits so I don't give out my IP.

I'm mad that this happened, I knew he was shady since people who actually exist aren't that hard to find, but I just thought he was going to sell people's emails or some crap, never expected it to go so bad.

for lucky i don't have accepted his promotional twitter campaign because the rate are low for me. Very bad man

Thanks 4 the warning.
I got a email from the site and deleted it.
Best regards
Christian

I sent in a couple emails to the guys at Namecheap and they will hopefully be able to do something, but it's a legal process so it'll take some time.

I sent a tweet warning to my followers.

well that was far obvious :D
as soon as you clicked on get that deal for primedice it opened with .io and not with .com good thing im carefull about that :)

Woah... What a time to scam people. How is it possible that this guy thought he could get away with this?

well, although he didn't, I do believe that he probably scammed for a good amount... and honestly it was a pretty smart (although obvious for some) idea, especially for those new bitcoin users.

Fu****g scamer
also retweet your warning tweet and delete all of my tweets about that scam site

"The domain you have come from has been banned from CoinPayments.net - it is not recommended you do business with them at this time.
Ban category: Known scams / product non-delivery"

CoinPayments have banned them. Good to know.

I really hop not many people have been affected by them :/

How can you guys conclude that this is a scam? All i see are links :-/ isnt primedice's url primedice.com? I was almost thinking of depositing when I saw the alert at the top of the forum. Could you guys give me more info of what would happen if I actually deposited a few BTC?

Go back to OP, read again please.
In case you miss it, I will highlight it for you:

EDIT:
Sad to see people fell for it.
https://bitcointalk.org/index.php?topic=1267954.msg13088826#msg13088826

already done,
damn, two day tweeted scam site >:(

I can't believe it since they having massive expensive.
I'm wonder how can we prevent this kind of advertisement for the future

The deal for genopro software seems legit. https://www.genopro.com/buy/default.aspx?coupon=BitcoinBlackFriday I ordered with my card (not bitcoin because their bitpay was down) and got the activation code, etc. I also emailed them asking about their bitcoin payment option being down and they replied professionally, although requesting bitcoin be sent to an address. I decided a card was safer in this situation.

I just emailed them back warning them they are being advertised on a scam site.

Looks like a very soptisticated scam, they bought all websites , setup all the phising sites, and spend a lot on advertising.

They probably stolen much money too. Damnit, and I wanted to buy something from that site.

i just tried to buy 2 miners, and sent the f@#$%# 5.716 bitcoin , to 1NbA3NtMtt39mQxSEr55Ai1VhHWehNukj5
how can these people have an exact copy of their website, this is so messed up. i have been with bitcoin for 2 years, and am so into it, and have slowly saved as much as i could which this was nearly all of it,yet something like this happens, and now their is no reason for me to care about it, or tell my friends about it. this is the reason they all stay away from it. this is terrible, me and my family are now in trouble because of this, and at a terrible time of year.


let alone my bitcointalk account was stolen and the hacker got my NEM when it was worth something, i tried to get it back, to no avail. now i see why people stay away from this industry rather than welcome it. i have been as safe as possible for 2 years, with multiple backups, differant accounts, all a waste, none of it matters anymore

Tell me about it...
I hope not to many were affected, lucky OP has pointed it out when he did.

is www.bitcoinblackfriday.com legit??!

Thanks for the warning...
Luckily i change my mind to buy some of their stuffs.
or else im one of the victims.
Just thinking... is there a way for their victims to get back their money?
or for the owner to be punished by doing this? because if not.
more likely in the future .. this will happen again.

who is this person or can we find out, trace his websites, he had a twitter, facebook, all promoting, and he bought all these domains...
we need to do something to prove that this is not so easy to do to people. because if i can get tricked, an ordinary user will never have a chance with using bitcoin. i have been tricked many times before, and know most everything to look for by now. i literally realized 5 seconds after i sent my bitcoins, that the website had a - in it...

Certainly.
https://bitcointalk.org/index.php?topic=1244329.0
Edit: Jon Holmquist confirms below.


Someone's already on it.

Hi, this is my real name. I founded and run BitcoinBlackFriday.com. I am legit, 4 years in business and I've never scammed anyone.

thank you. i already filed a report to IC3, and am thinking of going to the local police tomorow, as this is a huge hurt to me and my family even tho 6 BTC is not alot to some people. i will do anything to find out who this person is and get them arrested and hopefully some victims money back

i will gladly give a 15% of my loss~(1BTC) reward, to anyone and everyone who can help me identify this person and get them arrested/get my money back. let me know any info i can help with.

Easy! He read somewhere that Leroy Fodor's StakeMiners Ponze enjoys over 900 Investards so he felt he could at least get them retards to fall for his scheme in spite of being warned beforehand to stay away. HAHAHA

Read his posts. The dude's not even in the US.

The warning posted by theymos in the header was really helpful.
This would have helped people who rarely check scam accusations board.
Thankfully, I was not looking at the offers on this site.

unfortunately, because i had used bitmain so many times before, and the first link i clicked everything seemed exactly the same, it was too late before i realized. i did not see any scam info/accusations, until after i started posting myself about it, unfortunately.

Sorry for your lost dude, i almost fell for it too then i stumbled upon this thread and the forum news warning. Hope you will get your losses recuperated. Excellent job OP in pointing it out.

I remember 1 year ago. Have a guy want to promo his site in blackfriday by facebook/twitter. Begin the guy paid some persons after he also scam.

unfortunately, im that guy who tells all his friends about bitcoin and how cool it is and how it will change the world, but has no money to really do anything. but their is no way of re-cooping these losses. and i have nothing else to start with, i started with 1 GPU mining rig 2 years ago, now its just a lot of wasted time.
thank you for the well wishes

Well done NLNico!

Sad to see scammer waste no chance to cheat crypto users. Sites like this one don't help giving BTC a better reputation. Try to explain to crypto-newbies that BTC is not a paradise for scammers and cheaters.

Re-tweeted your tweet, thankfully I was not involved in any of their promotions, I did offer to promote them on twitter/reddit but Gotapauj refused it and offered to buy my reddit account, which I refused to do. I don't have a facebook but they were promoting it their too I think, so if someone is active on facebook, post and spread the warning there please.

I added one more warning tweet, this one with more hashtags, so everyone sees it. Kindly re-tweet this one too : https://twitter.com/thebitbaby/status/670437794519654400

Also, people who were involved in the Sig campaign, Kindly carry a message that it was a scam for at-least today, so people can know about it.

they take 100% diehards like me and ruin their love for crypto by taking away everything ive saved
its hard enough to explain anything crypto to people in real life, and now their is no way i will want to talk about it or even be involved in it at all anymore.
i am extremely sad at the moment

Don't let a scammer ruin things for you. I know this is difficult to deal with for now but you will be alright. :)
For example many people lost everything because of Mt. Gox. Some committed suicide but luckily most survived.

There are far more important things in life than ~6 bitcoin.

If something like BIP 47 (Reusable Payment Codes) was used, then your wallet could warn you every time you're sending money to someone new. This'd probably make phishing a lot more difficult. (I think that probably the particulars of BIP 47 are not quite optimal, though.)

The payment protocol already uses HTTPS to some extent. Does it handle EV certs very well? I'm not sure (I haven't looked into it a lot). Though I don't like the CA architecture too much.

Also, Sirius created identifi.org for helping with the trust issue. Dunno how popular/useful it is.

In general, it'd be good to add more trust/identity features to the Bitcoin ecosystem at the wallet level. Though this should be done in a way that doesn't compromise anonymity, fungibility, censorship-resistance, etc.

Bitcoinblackfriday.info is also trying to promote all sorts of "confirmed" scummy cloud mining websites and other HYIP ponzis, one such example as shown below... (cross-posted from this thread (https://bitcointalk.org/index.php?topic=1183862.msg13087707#msg13087707))

most survived, but probably will never feel right about bitcoin again, because at one point, they possibly had tons of money, enough to retire on or whatever. and possibly later on, it could have been a STUPID amount of moneys(If BTC is to rise in price alot from where it is again.)  why would they want to buy a bitcoin now, when they had 20,000 that dissapeared from MT GOX.
I do think it is amazing, the community got together and figured this out really quickly, that this was an elaborate scam. that is awesome, and how it should be, im just the lone idiot whos stuck with that differant feeling about bitcoin now, that one where, if it were to go up alot again, just like every mt gox customer, makes you feel the opposite passion of what you did before for bitcoin. now its just annoying to even hear of...i would have been fine, and done my usual research, double checked the site address, btc address creation of the order, and other things before sending the transaction, like i always do, but i was in between busy times with family and holidays and in a hurry, so my mistake.

This CALL is great and it has also been taken into consideration by the admins .. and staffs...
I can see in the top of bitcointalk's Forum..
News : Warning: bitcoinblackfriday​｡​info is a scam. More info
So this program wont be able to scam anymore as it is now publicly posted on the Header of this forum that it is a scammm!!!

Was tempted but not tempted enough for their signature campaign and buying stuff so happy I did not buy anything from them. Even with a lot of attractive offers like other people in here promoting cloud mining services and other stuff that I did see gave alarm bells so stuck well away from it. I wonder if going to setup a cyber Monday site up for Monday coming going to be staying away from it also if it does arise.

@theymos I think you should look into preventing scams happening or being allowed to post stuff without first been authenticated and other places that promote business need verification first before being allowed to be shown. Too many scams happen on here and am more than prepared to step up to the task of approving and disallowing or even getting a team in place to crack down on scams and preventing future cases happen and to crack down on it, and to prevent.

it is not theymos fault, he cannot control everything. my issue is i had not checked these boards in a month or 2, and never saw a warning about scams like this. i got a link from twitter from what i thought was a bitmain related account..most scams are obvious and the general btc userbase recognizes them before, i bet this forum made alot of smarter people realize that this upcoming special from this guy seemed too good to be true and let them avoid it. unfortunately, for me, i have not been paying enough attention lately and jumped the gun.

I woke up and got two warnings in my pm ( thanks guys )
Anyway, i didn't expect for them to be a scam, their sig campaign looks pretty legit :(
Guess we are not gonna get our 0.05 bonus :(

I am aware it is not his fault but he should look into the matter in more detail of how many have been going on and how to prevent it or make more stronger for the future. It is indeed not his fault that this has happened but would be far better if put things into place to prevent stuff like this happening and continue to happen and scammers get away with it all the time and then come back with another account and post more scams. If their was things in place to check for or even to carry out some checks before hand then a team in place to allow or disallowed sure would stop stuff like this from happening in future or stop a lot of scams from being posted.

It seems like Firefox is already blocking appgyft.com so that is pretty good/fast:

https://i.imgur.com/MyKlo9W.png

I hope the others will be blocked soon too. I reported some to https://www.google.com/safebrowsing/report_phish/ too (FF uses that too AFAIK.)

here are the known addresses i could get while generating fake invoices on the fake website

18jXhWToqix3jybpCNGTB75gFQULuV6guX
16kLWoe8yab4dbTR3h26d9eJARBfueC3cY
14Jgcr7wWx2C9nmTW5jLSasVrgFvsHrvjt
18jP3xv6cEx3nvf3bdnVVm4tXHNzyAYyju
1Nx7m1q2DuPtA6ZtuhcDxBJa2CPfBEErDx
1HyVFLUewenfqkKkaMkQE2wuqSHkvw5AyE
1NbA3NtMtt39mQxSEr55Ai1VhHWehNukj5

Just checked it, yes, Firefox uses googles list.
That being said, obviously my google chrome also is blocking appgyft.com already.
ndnhc confirms.



None of the addresses moved funds yet, but sadly some are holding funds (I'd asume those are the profits made from this).


Addresses to watch.

I'm surprised that theymos issued warnings about this, I thought the forum doesn't moderate scams or does anything about them.

Are you able to post all of the headers and just scrub out your ip address? Just replace all instances of your ip with an xxx.xxx.xxx.xxx

1NbA3NtMtt39mQxSEr55Ai1VhHWehNukj5 has over 6 btc. 5.716 of which was my stupid :-\ self

18jXhWToqix3jybpCNGTB75gFQULuV6guX has near 3 BTC

16kLWoe8yab4dbTR3h26d9eJARBfueC3cY is the same. near 3 BTC, both must be for 1 miner order

14Jgcr7wWx2C9nmTW5jLSasVrgFvsHrvjt has none

18jP3xv6cEx3nvf3bdnVVm4tXHNzyAYyju has near 3 BTC, another 1 miner order

1Nx7m1q2DuPtA6ZtuhcDxBJa2CPfBEErDx has none

1HyVFLUewenfqkKkaMkQE2wuqSHkvw5AyE has none


so 12 btc total in the "known " addressess
not very succesful because of the help of all of you guys, thank you very much. i am such an idiot  :'(

This is/was a nasty little scam no wasn't it.  ???

Sorry for your loss.

How did you find these addresses? Were you just creating orders but not paying and these were the addresses that came up? Was this across all of the fake sites or just one of them?

Nice work. :)


Cool. Chrome blocked it too. :)



Edit: Looks like I am subscribed to .info emails too. ;D
Found them in the spam folder lol.

Never done much work with headers so I honestly don't know which ones are related to my email. I can probably look into it tomorrow and post it.

yes that is exactly what i did. i did it for a good 20 minutes so those were the only ones that came up. i also screen capped them all just in case for evidence. if you create an invoice, you dont even have to fill out your name or anything and it still gives you an address(obvious sign of scam) but i was in such a hurry. i did not notice any of this until after. i know nobody really cares, but if you are feeling sympathetic for my stupidity(which you shouldnt be) here is my address, where you can see me send my 5 BTC into OBLIVION  :-\

1EMCsaEGYet55Eu7mFv9BMPHXjyMNx2Qp

thank you for everybodys help

The only ones related to your email are the ip for your server. It shouldn't have any sensitive information anyways so I think it would be safe to post the whole thing. Your ip address for the email server should already be public anyways.

I will also take a look and look for the other sites.

i am hoping a cpl of the other ppl who sent the 3 BTC can come and join the conversation. im guessing they do not realize yet it is a scam.  >:(

Bitmain
https://blockchain.info/address/1NbA3NtMtt39mQxSEr55Ai1VhHWehNukj5   6.43370775
https://blockchain.info/address/18jXhWToqix3jybpCNGTB75gFQULuV6guX   2.941
https://blockchain.info/address/16kLWoe8yab4dbTR3h26d9eJARBfueC3cY   2.941
https://blockchain.info/address/18jP3xv6cEx3nvf3bdnVVm4tXHNzyAYyju   2.941
https://blockchain.info/address/14Jgcr7wWx2C9nmTW5jLSasVrgFvsHrvjt   0
https://blockchain.info/address/1Nx7m1q2DuPtA6ZtuhcDxBJa2CPfBEErDx   0
https://blockchain.info/address/1HyVFLUewenfqkKkaMkQE2wuqSHkvw5AyE   0


Gyft
https://blockchain.info/address/1NTxoRjw5TkjTz268f5UZy1qnAcQ4tsFnW   2.33645
https://blockchain.info/address/1by1bz5gMe7Bprz2hMDQK3YibvjscjaxP   1.16822
https://blockchain.info/address/1GSsawawzuzdUj8EkAoa16i3qNro9WxCup 1.16822
https://blockchain.info/address/1Egkp39fM2NPnD5d1MhTRTHgpC4ybfzyx6  1.07196
https://blockchain.info/address/1K3cJFmCb2NJ7UnxF75Q4b71YoUmyWrP3h 0.23364
https://blockchain.info/address/15ePGqNtSibc9gnubJnSigQxdPp9bTjkYq   0
https://blockchain.info/address/14Dk3WffwCc3f5km8np2EcsFHdo8dFq5ts 0
https://blockchain.info/address/13yefnodG4ykWCRGXkdbX6N1zXcg4cuGZE 0

Primedice
https://blockchain.info/address/1DLUj39TFwPhEsvZLdAE7mXQVW6TXNx7VY    0
https://blockchain.info/address/1EeKpzVDPygc5wSPSRJp1Ra3anVo4dJRY7   0
https://blockchain.info/address/1MTnmDsajxLjsJ5CH3zcRTWgZAXoujM5wT   0
https://blockchain.info/address/1oigkZNjaSocPVY9VUgN1v1v7PKzrLJUW   0
https://blockchain.info/address/12rzdeuaAtBThVi6ZDXPjdvVfumWCLoou5   0
https://blockchain.info/address/1CMpZDNfAdhV6LZ1dCkmrPHLfP6qemATUC   0
https://blockchain.info/address/1A8At7MSthUmt1cWfSGS35UvwHY5KcTEjv   0
https://blockchain.info/address/1NNaeZwb4Jz5A4bwVKgvQBd6VEdjgNeU7g    0
https://blockchain.info/address/1DTZdAZWMy7wXoGmG1txF3sbaL8QJvaBmd     0
https://blockchain.info/address/18GHPQ81vw2WmMCXMGwQJh5DoNWBjpHGtH   0
https://blockchain.info/address/14kMnWT8a7hRAHF29VQPCRRu1GXz5KwMzM   0

Spondoolies
CoinPayments - blocked

BuyTrezor
CoinPayments - blocked

Block-C
CoinPayments - not blocked

Donations :X bitcoinblackfriday.info/donate/
https://blockchain.info/address/18a9ZqieA4wpwxJFLmBs6BxkG7Kc54irpW 0.035


6.43370775+2.941+2.941+2.941+2.33645 +1.16822+1.16822+1.07196+0.23364 = total 21.23

Potentially more with CoinPayments. Maybe one can mail CoinPayments too to block that Block-C one (real is without dash.)


edit: added the gyft ones, thanks Lutpin & saturn643.

You should also check all of the other "deals" on that site and try to find the addresses for the payments. Some of them are legit though, like Newegg (I think it was based on the URL) so double check the site whether it is a scam or legit.

https://blockchain.info/address/1by1bz5gMe7Bprz2hMDQK3YibvjscjaxP   1.16822
https://blockchain.info/address/1NTxoRjw5TkjTz268f5UZy1qnAcQ4tsFnW   2.33645
https://blockchain.info/address/15ePGqNtSibc9gnubJnSigQxdPp9bTjkYq   0
https://blockchain.info/address/14Dk3WffwCc3f5km8np2EcsFHdo8dFq5ts   0
https://blockchain.info/address/1K3cJFmCb2NJ7UnxF75Q4b71YoUmyWrP3h   0.23364
https://blockchain.info/address/13yefnodG4ykWCRGXkdbX6N1zXcg4cuGZE   0
https://blockchain.info/address/1GSsawawzuzdUj8EkAoa16i3qNro9WxCup   1.16822
might be more out there, those are all I've found yet.
Edit:
thanks saturn, just found them myself :D
16.32+4.91=21.23

https://blockchain.info/address/14Dk3WffwCc3f5km8np2EcsFHdo8dFq5ts 0
https://blockchain.info/address/1GSsawawzuzdUj8EkAoa16i3qNro9WxCup 1.16822
https://blockchain.info/address/13yefnodG4ykWCRGXkdbX6N1zXcg4cuGZE 0
https://blockchain.info/address/1K3cJFmCb2NJ7UnxF75Q4b71YoUmyWrP3h 0.23364

nvm working again, i tried with the only other one it will let me, the PSU, and it generates same addressess

 :o what da shit, my deal here (http://deals.bitcoinblackfriday.info/search-page/deal/522/), luckily this guy did not send 'customers' to a scam site, after visiting the link, i proven it.

Really great catch, but I'm afraid it was a little too late. The campaign ends tomorrow (or today considering your time zone). They did spend around 4BTC for their signature campaign, so I guess they earned a little bit less than anticipated. Anyways, I guess it's better to know now rather than never. Again good catch!

Additional batch of primedice.io addresses I've found:

https://blockchain.info/address/1DTZdAZWMy7wXoGmG1txF3sbaL8QJvaBmd     0
https://blockchain.info/address/18GHPQ81vw2WmMCXMGwQJh5DoNWBjpHGtH   0
https://blockchain.info/address/14kMnWT8a7hRAHF29VQPCRRu1GXz5KwMzM   0

all zeroes for pd.io so far (the site is set up pretty bad/good no one fell for this patricular one),
three more addresses.
Now checking for bitmain, will update once/if I've found more than NLN. couldn't find any undiscovered addresses.

I don't think this scam is going to be all that obvious to a lot of newer users to Bitcoin.

Unless you are very familiar with how provable fairness works (or at least have a general understanding of it), then you will not understand why it would be a very bad idea for an already established casino to be offering a 1BTC deposit bonus without any kind of (posted) rollover requirement. I would be willing to say there is a fairly good percentage of the people who regularly gamble on PD that do not understand this, let alone the general public.

Based on the posts that I have read, many people do not understand the business side of things when dealing with mining manufacturers, and why they are unlikely to offer their equipment at such a deep discount (they always have the option of simply mining on their own then slowly lower the price until their inventory sells).

Ironically, trezor offered a blackfriday special that is not all that more expensive then what the phishing site was offering. Other then the fact that people are being directed to a fake domain, I do not see any glaring red flags that this is a scam (I can say 100% that it is a scam though). So unless you already know specifically what domain that trezor is selling their trezors on, and are paying close attention, then you will not realize this is a scam.

---

From what I can see, it appears that this scam was targeted largely towards newer, and less experienced users of Bitcoin. He also was using a good amount of advertising on the forum (and potentially elsewhere as well).

It is for these reasons that I believe I know who is behind this scam. Although the advertising was not exactly where I would expect this person to advertise, and the end result was not exactly what I would expect, then general MO does match this person and he would have the general ability to clone all those websites. If I am right about this, then this person's first name starts with a "D" and was in the US (more specifically California) last summer (based on US seasons - it was winter where he lives). I would need to consult with someone prior to making this claim with more certainty.

If I am incorrect about the above person being behind this scam, then this scam was almost certainly the work of moriartybitcoin. Actually now that I think about this a little bit more, I think the chances of this being moriartybitcoin actually might be greater then the person above.

I will need to find out the txid's of the forum advertisements and of the purchase of the account that ran the signature campaign. The BTC in the signature campaign appears to be a dead end as it seems to have been funded via coinjoin transactions.

Fixed..


How did you not notice this?
They were advertising your site, what everyone thought was your site but rather a clone of, all this time, you had nothing to do with it, and you didn't notice them doing it or find it suspicious that they were advertising your site for you and paying to do it themselves?

I'm confused..

I think this would be fairly difficult if bitcoin is used properly, eg a new address for every transaction. Also if you use a SPV client then you will want to create a new wallet every so often as the number of addresses your client is monitoring grows large enough. Plus some people keep their wallets/private keys completely off the internet. 

I can help with the account purchase.

https://i.imgur.com/gpv6yj0.jpg

quickly typed it into blockchain (https://blockchain.info/address/1HdDQrQpVJRKLs7mJZ8Z49tcXNavbAjFiq)

here's our transaction (https://blockchain.info/tx/25797cf570d34fe9d436438a6f70f652a555491c845863cb13282359c690f162)

Address used to pay is 14W5d8JNXhc68g3rWpyYQSsKS3sX4iH1tN (https://blockchain.info/address/14W5d8JNXhc68g3rWpyYQSsKS3sX4iH1tN)

Further digging I leave to you.

How do you know this is an all-inclusive list of addresses? Are you visiting each phishing site until you see a single address multiple times?

that is what i did, but only for bitmain site.

I sent dozens to houndreds requests to primedice.io, finding three more addresses than NLN.
Same I did for gyft, uncovering 6 more (together with saturn).
For Bitmain I'm currently searching, couldnt find any more yet.
The list might not be complete, but its getting better and better.

Yes, F5 on https://bitmain-tech.com/user/orderDelivery.php a lot and you can be pretty sure. But my internet sucks so if others can find more thats only good :)



Oh yes, agree, I can't blame anyone for falling for this. I mean it's obvious if you realize those domains are fake. But the setup (including ads/paying for social media/news-sites , etc) was pretty "good" so def tricky to recognize.

Unfortunately, it appears that the BTC most likely came from LocalBitcoins, which means it is pretty much a dead end.

There was BTC later sent out of that address via a CJ transaction, however I do not have the tools necessary to track them further.

Requiring people to manually generate a unique address per transaction is an annoying quirk of Bitcoin that can and should be fixed. With BIP 47, for example, the recipient publishes a single BIP 47 address, and using this the sender and recipient can negotiate a unique long-term shared secret which allows them to generate very large number of one-use addresses for all future transactions between these two people.


ffb0cf99d315417d6c26feb7fc4916ecfda93384a18a7904429a82a3ac2e8ab5

This is a very clear-cut case, so I'm willing to release his IPs to reputable people who are going to investigate the issue. I don't want the IPs to become public, though, since that could lead to witch-hunting and potentially violence. It seems that the IPs were all proxies, though I haven't carefully checked to see if he slipped up at any point.

e-coin
https://bitcointalk.org/index.php?topic=917350.0;topicseen
sent out an email 16 hours ago that included a link:

i have filed a complaint with the IC3  http://www.ic3.gov/default.aspx


i am honestly thinking of going to the police with all of my screenshots of his fake bitmain website along with screenshots of all the bitmain addresses. i am just not sure it would do me any good, i wouldnt know where to begin to explain to them what happened.

its so obvious now, i am so pissed at myself. it makes it even more frustrating  >:( , you always end up fucking up shit when you are in a hurry. :/

Wouldn't hurt, at least. One time I worked with some police in Germany who actually managed to catch a scammer. If the police want the person's IPs, you can give them my email address (theymos <at> mm.st) and I'll give them the info.

thank you very much. i will keep the post updated. thanks again for everyones help, you are all awesome!

hi i am lorylore and i am sorry that people got hurt by the scammer. i bought this account from SmartIphone and i would be glad to provide more evidence if there is a need arises. hope no more victim will surface.

I guess they didn't mean any harm.
They also listed a deal themselves:
http://deals.bitcoinblackfriday.info/offer/e-coin-io-bitcoin-debit-card/

I have been watching them closely but until today they didn't do anything that would have allowed me to raise a red flag.

Every time I brought up how shady they were people claimed that 'competition was healthy'

I've mentioned multiple times, over and over again that they are a copy cat site and that I had nothing to do with them. They repeatedly brigaded my reddit posts and made it extremely difficult for me to run the campaign this year.

But, past shady marketing, they didn't show their hand until today, when it was too late.

Thankyou nico, thankyou shorena for pm me regarding this issue.
It was shocked everyone even theymos.
Glad to catch that scammer user before its too late.
Removed the signature. Thanks once again.

The txid appears to be a dead end unfortunately. The smaller input to the address/wallet that paid for the forum ad was most likely from a mixer (I would guess bitmixer considering they are the only company that I know that actually uses Bitcoin properly, uses exactly one input for every transaction and has >100 transactions over the course of ~20 hours). The larger input to the address that paid for the forum ad was likely from some kind of exchange/service, although I am not sure which one - it would be one that has had at least 127k transactions since July https://www.walletexplorer.com/wallet/0000903c384305d7/addresses

Based on how well this person has covered his tracks so far, I would be doubtful that anything could be found with his IP addresses, although I don't think it would hurt anything to look into them. Unfortunately looking into his IP addresses would be beyond my expertise.

Regarding BIP 47, the only concern about this would be that it would force the receiver to protect their wallet file even if it does not contain any Bitcoin, and it would be easy to continue to lose money after your wallet is somehow compromised.

Sent you a PM with the full headers, I'm assuming it's ok to post publicly since it's through gmail, but please confirm then post it.

Oh, damn...  :o First i really liked the atractive concept but afterwards u really see what this good Egine brings to you..
Really sorry for the Guyss out there lost a Coin or more.. When thoose scammers will do something helpfull for the Community. Then they can also earn Money i dont get it...
Anyways dont be mad Guys and become also One of thoose People.. Shame for thoose souls and there family.. its the same like isis..  little bit..


regards
lama-hunter

BadNews Maybe :'(

Thank you to send me pm and drawing my attention towards this campaign.You work to disclose this scam is appreciable.If work like this will continue this will help to minimize scams and fraudlent schemes in future too.

Anyone got scammed?

Judging from the bitcoinaddresses the copy-sites provided, NLNico made a rough calculation:

All address used by fake bitmain site are stored at /add.txt directory path. Can anyone check if this is the case with the fake gyft and other sites?
http://www.bitmain-tech.com/add.txt (http://www.bitmain-tech.com/add.txt)

http://primedice.io/add.txt
https://appgyft.com/bitcoin-black-friday/add.txt


This list is complete regarding the addresses from bitmain, gyft and primedice fake sites.

@AhmedAshraf: Balances are already checked, click the quote from NLN or check first post on site 7.
As just confirmed, NLNico already provided a complete list there.

So here are all the addresses used by the scammer.
Bitmain:
1HyVFLUewenfqkKkaMkQE2wuqSHkvw5AyE
18jXhWToqix3jybpCNGTB75gFQULuV6guX
1NbA3NtMtt39mQxSEr55Ai1VhHWehNukj5
18jP3xv6cEx3nvf3bdnVVm4tXHNzyAYyju
14Jgcr7wWx2C9nmTW5jLSasVrgFvsHrvjt
16kLWoe8yab4dbTR3h26d9eJARBfueC3cY
1Nx7m1q2DuPtA6ZtuhcDxBJa2CPfBEErDx

Primedice:
1A8At7MSthUmt1cWfSGS35UvwHY5KcTEjv
1EeKpzVDPygc5wSPSRJp1Ra3anVo4dJRY7
1NNaeZwb4Jz5A4bwVKgvQBd6VEdjgNeU7g
18GHPQ81vw2WmMCXMGwQJh5DoNWBjpHGtH
1CMpZDNfAdhV6LZ1dCkmrPHLfP6qemATUC
1DLUj39TFwPhEsvZLdAE7mXQVW6TXNx7VY
1oigkZNjaSocPVY9VUgN1v1v7PKzrLJUW
14kMnWT8a7hRAHF29VQPCRRu1GXz5KwMzM
1MTnmDsajxLjsJ5CH3zcRTWgZAXoujM5wT
1DTZdAZWMy7wXoGmG1txF3sbaL8QJvaBmd
12rzdeuaAtBThVi6ZDXPjdvVfumWCLoou5

Appgyft:
1K3cJFmCb2NJ7UnxF75Q4b71YoUmyWrP3h
1NTxoRjw5TkjTz268f5UZy1qnAcQ4tsFnW
13yefnodG4ykWCRGXkdbX6N1zXcg4cuGZE
14Dk3WffwCc3f5km8np2EcsFHdo8dFq5ts
1by1bz5gMe7Bprz2hMDQK3YibvjscjaxP
15ePGqNtSibc9gnubJnSigQxdPp9bTjkYq
1GSsawawzuzdUj8EkAoa16i3qNro9WxCup
1Egkp39fM2NPnD5d1MhTRTHgpC4ybfzyx6

Can someone make a spreadsheet with all the addresses balances and report them to all BTC-USD Exchanges?

This whole story should be used as a reference: I can't believe they managed to run this so smoothly. It's good that there are some very clever users around who tagged this scam. I'm sorry for you guys who got basically scammed by these criminals. Another lesson learned.

I am drinking my morning coffee, reading through the thread and I can't believe this crap! 21 BTCs scammed as we are speaking and probably even more!

Are we ever gonna move past the stuff like this as a community? Or will ever gonna be this easy to scam the people around here?

Guess scamming will never end. As time passes by, more and more schemes will pop up, some more evolved than the other rendering some of us blind. All we can do is be more vigilant and i guess now triple check any sale.

Thanks for the warning, i did not know that i'm promoting scam site,It was shocked me, i've changed my signature btw, thanks for NLNico especially for this best investigation
best regards

Did you PM the guys from their social campaign (https://bitcointalk.org/index.php?topic=1265005.0) aswell?


First one is already known/provided by shorena.
Second one was also already posted.

EDIT:

Agreed.

In the campaign thread I smelled and posted warning that the funds in his address aren not enough even for bonuses, after that as i said before here i was going to purchase in "appgyft" but i saw that the bitcoin price is not being updated and i though that probably would be a bug or a scam.

At 24 November GotaPauj(thriftshopping (https://bitcointalk.org/index.php?action=profile;u=357577)) sent me 0.02 for twitter service which we discussed via PM and this the transaction ID

https://blockchain.info/tx/38fbd8b2bc1194501d8d69d7674cb08cfef2001f8e34c7a1f50c42376721ab5e

So these are the addresses:
1Fgtsy33W7W9LBU7SnQNQvTeisfy9VMkmt
1L4ovA5WCkaegnREVkJABRqmgWWhTA8paP

We don't, but since they bought an advertisement from us, we should take at least some responsibility as we "promoted" their website. Theymos has done this perfectly in my opinion.

Came to this thread from the advertising space at Bitcointalk. Well, I think I visit the site yesterday or today. I actually wanted to buy some Amazon.com Giftcards from Gyft. Luckily, I still have a deal with francisdean so I did not buy any giftcard. That was the closest scam I ever encounter using Bitcoin.

Look like the site is down now.

The Signature Campaign payment yet?

Total shitty scammer if he had just worked this hard to earn Bitcoin without scamming it would be better.

The last round (27th)
Hasn't been paid yet and it looks like he won't pay it :(
I was really looking the 0.05 bonus for this christmas
Oh well, guess im just not in luck today ;)

yes, i lost all my 6 btc savings.
1EMCsaEGYet55Eu7mFv9BMPHXjyMNx2Qp
sent to
1NbA3NtMtt39mQxSEr55Ai1VhHWehNukj5

he is moving some funds now

oh i am so sorry for you signature people who wont recieve your .05 BTC...
lost every savings i have. and now i will be done with bitcoin

17eCUiF63nm1qftNhoCneRobadCzP8XhdR
final address quite a few coins move to. is this an exchange address?

https://blockchain.info/address/17eCUiF63nm1qftNhoCneRobadCzP8XhdR   6.89987BTC
https://blockchain.info/address/1ES58ejNFRDjFvdLB9nZKZNeQFea4zgBhD   5.4824345BTC

we cannot expect this shit to be able to be so easy, and expect anybody to pickup and adopt this technology. i have just suffered the biggest lost possible, as i am young, and have no money save because i  have a crappy job, so i slowly mined/bought bitcoin for 2 years. i will still be able to pay my bills, but bitcoin gave me hope of better days.. i had worked 2 years, slowly mining and buying some when i could. i have been scammed before, i know what to look for.
but sometimes, when you are in a bit of a hurry, you skip a detail or 2. for that to cost someone their whole savings, or possibly, much much more than i lost, is rediculous, and this is exactly what turns away user from bitcoin day to day. i am very depressed  >:(

my dad, brother, friend, aquantaince, is never doing to understand when i tell them "well, the website i went to was an exact fake copy and scammed my money"...they say OMG I TOLD YOU BITCOIN IS A SCAM.
its because of bullshit like this EVERYONE misconcieves bitcoin
shrug

how can we tell if these are exchange addressess??

i wish these companies involved IE GYFT, bitmain, would come in and say something to us customers who "were" loyal to them, buying their products before and trying to by more now, but now, obviously we will not be using any of their products...

i dont know where to start again. i have 1 BTC left in my address. it is hard to make up for 2 years of work/saving.

was anyone able to get the ip of http://btclive.net/bitmain-joins-bitcoin-black-friday-with-limited-stock-of-antminer-s7s-at-999/
before it went down? that was the fake site linking to the fake bitmain site.

go to police faster as you can!
because they can make more powerful search and maybe you can find the scammer.
for what I have understood reading this topic, the scammer come from south asia (like wise India?!?) and him can have a link with some one in EU/USA ... what you can do with an IP ? Only a legal cause can be helpful for you!

another namecheap domain, again whois protected.
They have already been contacted regarding the issue by JonHolmquist IIRC.

https://twitter.com/thebitcoin_news

the twitter used to advertise the scam sites, opened a month or so ago, and innitially talking about neucoin...im sure twitter will have to hand over all info to law inforcement, what i am worried about is law enforcement not giving a shit, because its only a cpl thousand dollars

the police can do nothing with all my picture evidence of the websites, if he used a proxy, its a dead end. their was a facebook up advertising these specials along with this twitter. POSSIBLY these are connected and the authorities could get relevant info from them, i dont know, again, i dont think they will care about my stupid 2000$

I was thinking about buying some gift cards from there before, I am glad I didn't. This is a well planned scam, deceiving the most experienced bitcoin users. Characteristics of bitcoin do make scamming easy. I was close to loosing some coins. I am lucky this time, will be extra careful in the future.

Thank you for busting the scam.

coins on the move

it would be nice for some protocol, if we could get with exchanges to watch as we follow the transfer of coins, and for exchanges to work with the public in situations like this. that could help create some more trust in the system.


1ES58ejNFRDjFvdLB9nZKZNeQFea4zgBhD to 1J4jAy3HDteKqJqsz3tZUrahkSWAqDpQNZ 4.9BTC

i dont think he'll pay the campaign sign after getting caught by user from scamming
i believe he's running away with some bitcoin

https://www.facebook.com/thebitcoinnews101  was the facebook, so i will report these 2 sites to police as well ass all other evidence.

We can do that by contacting the exchange and tell them to hold the fund if they received any coins from the his address
I believe he will use a major exchange like bitfinex, ecoin.etc
We can get the coins back if we work quickly
Anyone here can contact the exchange?

Good find op, good thing I found this thread before I bought something there

that is the issue, i dont think exchanges care/and or have the extra ppl/resources to have somebody ready to help in all of these situations. however i do know alot of exchanges check on these forums, maybe somebody high up like theymos could contact a few of the major exchanges as we watch the coins move.

Yeah, he put a bit of effort in creating all the sites etc. I'm wondering how much they actually made profit? It could have been a lot worse and 20btc isn't that much considering how much he could have gotten away with had it not been rumbled sooner.


What's been moderated? The threads haven't been trashed or removed nor the user banned. As Mitchell said this is an appropriate warning considering they were promoted via the advertisments here. We also usually remove obvious phising or links to fake sites etc which this obviously was.


There's nothing much you can do other than hope people learn from others mistakes. Anyone can get taken in a scam but this is why I personally double/triple/quadruple check any links I click on or before I send payments as things like this are all too common sadly.


Investing all your bitcoins in miners was a risky move if you were concerned about losing them all but you can start to recoup the funds if you join a signature campaign. It will require some effort in making constructive posts but at least it's for free and you could probably recoup the amount you lost within a year if you were determined.


There's no way to fully verify everything but there is a warning under each advert: Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Scammers could just make things appear legit at first then change links etc. People just need to do their own due dilligence but the community will act appropriately when things like this happen.

i am gloud you found it. if only i was so lucky.

Well time is ticking, we will lose the coins if we don't act quickly ::)
I agree that watching all of the transactions made can be a bit tedious especially on major exchanges, but i think they can do it if they wanted to ;)

Investing all your bitcoins in miners was a risky move if you were concerned about losing them all but you can start to recoup the funds if you join a signature campaign. It will require some effort in making constructive posts but at least it's for free and you could probably recoup the amount you lost within a year if you were determined.

 i understand, i did the same thing with spoondoolies sp20 last year, bought 2, and i was scared to death thinking i got scammed, but they turned out legit, and i slowly built up some BTC. the issue here, is, it was black firday and i was with family all day. i saw the link from twitter on my phone, and rushed through the process the 5 minutes i was home, instead of my normal quadruple checking of everything. i am a pretty experienced user, and have been scammed so far for so much more BTC than i have saved up total, in just 2 differant times. this and my first bitcointalk forum account got hacked and he claimed my NEM, which was worth 3BTC at the time. if a user like me can get tricked so easily, how can we expect average joe to trust their day to day business of 100,000$+ in transactions, it will never happen. i work 60 hours a week at a shitty job and it will be hard for me to keep up with these campaigns you speak of, to make back a little bit of coin, but i guess i will give it my best. where do i check for the best of those campaign deals?

Well that's how a lot of scams work making you try to send them money asap for a good deal whilst you let your guard down but these sorts of scams aren't limited to bitcoin. I can gurantree you there will be millions scammed in fiat by people trying to get good black friday deals from dodgy sites.

You can view all the signature campaigns here: https://bitcointalk.org/index.php?topic=615953.0

You might not make it all back but you can certainly earn a bit of it back and it's better than nothing.

ya, with my member status, i have no chance. my old account was hero member, jdh015232, until it got hacked.
i will be out of the industry for a good long time

Well, your potential activity is 168.
You can become a full member in no time, and earn back a part of the coins you lost.

SITE IS NOW OFFLINE!
Either they have finished it because it was NO LONGER BLACK FRIDAY!
They sold the site, or they are under a cyber attack.
Hoping it is the latter!

I was going to try to take it down but it has already gone!

(thought the site would remain open until at least Monday!)

I think that the website is undergoing a ddos attack by the scammed people or just loyal people that hate scammers.  We need to act quickly before the funds are lost, where are the coins atm?

You can get it back by pming theymos with the relevant details but it looks like your other account was a scammer account: https://bitcointalk.org/index.php?action=profile;u=168706

https://bitcointalk.org/index.php?topic=462118.0

Seems a few accounts were giving fake vouches to a scammer and a couple claimed they were hacked.

JonHolmquist sent me the full email with headers and I checked them for his personal information that could be revealing (there wasn't any). Here is the full thing for people to analyze.

Delivered-To: contact@bitcoinblackfriday.com
Received: (qmail 13170 invoked by uid 30297); 12 Nov 2015 12:32:51 -0000
Received: from unknown (HELO p3plibsmtp01-05.prod.phx3.secureserver.net) ([72.167.238.73])
          (envelope-sender <contact@bitcoinblackfriday.info>)
          by p3plsmtp22-03.prod.phx3.secureserver.net (qmail-1.03) with SMTP
          for <contact@bitcoinblackfriday.com>; 12 Nov 2015 12:32:51 -0000
Received: from s104.web-hosting.com ([68.65.122.235])
   by p3plibsmtp01-05.prod.phx3.secureserver.net with bizsmtp
   id gcYq1r01u54q4xg01cYrKD; Thu, 12 Nov 2015 05:32:51 -0700
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=bitcoinblackfriday.info; s=default;
   h=Content-Transfer-Encoding:Content-Type:MIME-Version:To:From:Subject:Date:Message-ID; bh=xEtOrfBjVdx2VjbyKgFY8GPqBgxlw5Fb5j3a4zKmGms=;
   b=RUjFrACkDUyRZCtLXFwmQrRx99ygUJ840FxYEc2aVnVTyx/jtqewibVnR6S4TyLz8mgHWRyA/5Cgchyd3Cg1jyhAtLIIsKvPtfPgAGqW3lHA8TvP9WyfZJLIyWRI4sbtgi7Hzwpau1I2Qz+Qp8Z6BTtzLxRc7qPYaWMMbydkKW8=;
Received: from localhost ([::1]:58708 helo=server104.web-hosting.com)
   by server104.web-hosting.com with esmtpa (Exim 4.85)
   (envelope-from <contact@bitcoinblackfriday.info>)
   id 1Zwr3a-000mA5-BP
   for contact@bitcoinblackfriday.com; Thu, 12 Nov 2015 07:32:50 -0500
Received: from 172.98.67.28 ([172.98.67.28])
        (SquirrelMail authenticated user contact@bitcoinblackfriday.info)
        by server104.web-hosting.com with HTTP;
        Thu, 12 Nov 2015 07:32:50 -0500
Message-ID: <32c5ecc74c4728ccf3f6f3f3a8315d37.squirrel@server104.web-hosting.com>
Date: Thu, 12 Nov 2015 07:32:50 -0500
Subject: Bitcoin Black Friday
From: "Bitcoin Black Friday 2015" <contact@bitcoinblackfriday.info>
To: contact@bitcoinblackfriday.com
User-Agent: SquirrelMail/1.5.2 [SVN]
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-OutGoing-Spam-Status: No, score=-1.0
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server104.web-hosting.com
X-AntiAbuse: Original Domain - bitcoinblackfriday.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - bitcoinblackfriday.info
X-Get-Message-Sender-Via: server104.web-hosting.com: authenticated_id: contact@bitcoinblackfriday.info
X-Source:
X-Source-Args:
X-Source-Dir:
X-From-Rewrite: unmodified, already matched

Hello Jon,

My name is Thomas Silva and I'm the owner of bitcoinblackfriday.info. I
have seen a hostile reaction from you in some of our posts so I would like
to reach out to you and offer my apologies regarding the similarity
between our two domains and to express my sincere regret that you are
upset with us offering our expertise to help bitcoiners reach the best
bitcoin black friday deals on November 27th. Me and my team have the
utmost respect for you and your website, it has been of great help so far
but please understand that we feel we can do a great job also and we do
not want to compete with your website. We only want to help Bitcoin and
advertise this big day for the greater good of the community and spread
the word as best as possible.

I hope you understand that we do not want to hold grudges and maybe we can
work togheter to make Bitcoin Black Friday as successful as possible.

Sincerely,

Thomas Silva
BitcoinBlackFriday.info
contact@bitcoinblackfriday.info

i wish their was a way for theymos to combine my old activity from jdh015232 into this account, i tried to get my old account back after the hack, but i know it is hard on your end as their is no way to really do it and i could not verify the BTC address that i had back then. but if that were the case  i could have a shot at reecouping some losses

Isn't bitcointalk admin allowed to look through all PM's in these kind of situations? Or list his IP address where he signed up here with, or was it a bought account?

I want to get this bastard and bring him to justice(jail) :)
All together we can catch this motherfucka.

it was not a scammer account, i got hacked, and the last few post from the guy he may have tried to scam someone. also, he hacked my account to get my NEM stake, which i told the NEM guys when it happened, and they reported my old account as a scam account so nobody else would fall for him.    originally i used that account for a million differant things. to first learn about bitcoin and altcoins

theymos can and has done that in the past. See here for details on recovering your account: https://bitcointalk.org/index.php?topic=497545.0


Well I can only go by what I see and your word really so can't comment further on whether you're telling the truth or not but people have often used the excuse of being hacked in the past after a failed scam attempt (though accounts being hacked to try scam from isn't impossible either).

http://tools.tracemyip.org/lookup/172.98.67.28
http://www.ip-adress.com/whois/172.98.67.28

is that the email senders ip?

theymos took down the forum ad that they had up and he put up a warning in the news section of the forum.

That is the ip of the mail service, which is hosted it seems, so it doesn't tell us too much unfortunately.

These type of elaborate scams always leave a bad taste in my mouth, especially since this is an event to highlight the good part of Bitcoin not the well darker aspects of it. It reminds me of when I first joined the forums and entered a raffle for Anyroll and was sent a phishing link from a PM in 2013.  Only this scam was far more sophisticated and required a lot more work, perhaps someone can dig into the host domains for each of the fake domains and registrants although that is assuming they are the same person.

I do wish that their were ways to prevent these type of attacks but well executed zero day ones still get through and this was a case where there was a reason to keep the merchant list till the last minute even for malicious intent, it's times like this that I'm glad some in the community caught it quickly and limited the spread.

The main issue is for those who are outside the forums and as long as the site is up (down now) and the domain active it remains a risk google reporting it and nuking the heck out of it seems the best way to address that so people will be given a redirection warning on most browsers, that said I was happy the real bitcoinblackfriday sent users a message and a warning users about the impostor site.
(For those who signed up an e-mail with the fake site it makes sense to unsubscribe from that e-mail list if you have not already, unless you want to keep it for tracking malicious spam sent through the mailing network.)
Web of Trust Rating sent in gave it a Red needs a few more for a status change to kick in for those that use WOT

OP posted about it 6 hours before i sent my order. i immediately realized it was bullshit like 5 seconds after i clicked send BTC, i dont know how i didnt catch it 5 seconds before, but i didnt. so i posted here https://bitcointalk.org/index.php?topic=1267954.0  6 hours after your forum post had started. so we got it figured out and stopped within 12 hours, which is pretty amazing work by the community. im just the idiot who got the worst of it
unfortunately i had not been very active as of late, and did not see your post, but i tried to immediately allert anyone else to not use the site.

Ah so Litecoinguy was right after all.  

https://bitcointalk.org/index.php?topic=1262512.msg13064892#msg13064892 (https://bitcointalk.org/index.php?topic=1262512.msg13064892#msg13064892)

Actually he was complaining just for the lack of answers and once he recieved one he closed the case and locked the thread. It was hard to see this coming before they posted those links to phishing sites yesterday. But with this precedent hopefully people will pay more attention in the future.

Thank you, For this kind of warnings in the news section of the forum. Really a very good idea.

https://bitcointalk.org/index.php?action=profile;u=525055

Here's the sad excuse for human flesh's profile now.

Wow I was looking through the offers the other day and was going to engage but thankfully I saw this in the last minute.

everyone but me

and jynger so far

That thread made me stay away actually and never looked back at that thread again.  I was suprised when it was indeed really a scam.

every website should have a date of when it was created, so like https:/06/11/2009/www.blahblahblah.com
this would make it obvious if its a phishing site which was just created

so even though theymos has the IP of the guy logged into the bitcointalk account to scam, it was through a proxy, 100%, so theirs no chance of identifying anything?

even tho if you had his ip you could not do anything about it.
people are too naive and they lost money. :( move on and research before you want to buy/trade something.

I analyzed the email headers that I posted earlier and it looks like the scammer was using godaddy for email, so he probably used it for domain registering as well. Do you think it will be possible to contact godaddy and ask them if they can provide information about that guy?

IIRC most domains affiliated with this have been registred with namespace, and they have been already contacted.
You can take a shot on godaddy though, if you want to.

I'm glad you found out that this was a scam I have been scam once by mintpal then hashra they scam me good I had ordered 6 miners never got them the last one was about a month ago  I downloaded a wallet and I guess it had a Trojan virus  key logger  and they stold all my coin that I had on my computer that was over 5btc  even stold the coin I had sent to local bitcoins to sell to go buy food for my family that was 0.75 btc and this how I been living off what I make so yes I hate scammers .........

Good looking out for the community,  Mr. Nico.  Fuck these bastards and the holidays they celebrate.

whois information is self provided and might as well be gibberish. When a registrar is made aware of a fake registration, they will simply cancel the domain, however whois guard prevents this because it is difficult to see that there is a fake registration behind the whois guard. The only thing getting past whois guard will do is allow whatever self-provided information is on the domain's registration.

Hilariousandco, does the server keep a record of all of the IPs that have been running on it, if it does and this person has not changed his internet provider, then he will be able to get his account back! Alternatively, this user may have logged the IP he was running it on and protect it from this! If not, then this bit of information (i realise) is now useless!

Thank you
jack g


Also: Was Gotapauj account (i think that was correct) suspected to be a hacked one!)
What was the username of the account, or its UID?

If you want me to recover a hacked/lost account, you need to prove that you own it. Typically, the only acceptable method of proving ownership is by signing a message (including current date and desired new email address) using a Bitcoin address or PGP key associated with the account. A Bitcoin address or PGP key is associated with the account only if the account posted the key/address, sent it in a PM, or if it is still listed in the account's profile.

I very rarely recover accounts if you can't prove ownership as described above. There are alternative ways of proving ownership, but they take too much time. If I point you to this thread, you can't prove ownership properly, and then I ignore your future PMs, this means that I'm not going to recover your account. Create a new one.


this  is my issue, i do not have control of any original bitcoin account i used to connect me to that forum account, so it is just my word vs whatever and i understand why i cannot get it back. i tried to go back through some of my old posts, and find an address that i still have control over that i mentioned somewhere on a post, and i beleive i found one(would have to do this research again) but last time they told me sorry, it wasnt enough info.

jdh0152322 and hilariousandco, please take your off topic discussion about recovering accounts to meta. hilariousandco, you should know better, after all you are a global mod  ::)

About the whois info, since the guy is using whoisguard and the information doesn't have to be real, it is not entirely reliable. Instead we need to contact the hosting and domain registrar that he used and ask them if they will give up information to help us find the guy.

sorry
i notice coins have not moved anymore since early morning....i am waiting.

hey guys, theymos and i worked it out, and i got my old account back!!! thanks for your help, i am very grateful. so i see funds have not moved still..i will be watching closely. what is the best way to tell if it is an exchange address?

If that address held a bunch of coins from hundreds of addresses then it might be the exchange address
Because many people deposited their coins to that address
or the easiest way, contact the exchange and ask for list of their address ;)

Very sad to see this scam...  :-[

I think the small possibility that hosting and domain registar you will give an information about owner of this domain.
certainly it would be good to save somewhere whois info, I noticed a couple scamers always use the same method of operation

Lol, what kind of weird, twisted view do you have?

First, you should be shocked that you didn't do any research before participating in this campaign. You cannot just hand over responsibilities that conveniently.
Second: who will be at a loss? Those who were promoting? Are you fuckin kidding me? At a loss are those who clicked the links which you  fuckin promoted.

I really hope that your post was full of sarcasm, otherwise people like you are the reason scams like this one actually work.

so i see funds have moved, he is obviously running them through a mixer. so it will be hard to trace now. does anyone have access to better tools than myself and blockchain.info??
thanks

either that or he sent it to an exchange, can anyone identify? i cannot

Oh clam up man, don't be a wanna-be. The discussion is perfectly fine and hilariousandco a) isn't even derailing the thread and b) knows what he's doing.


They should give the information if a scammer/fraudster was using their services, they'd have to via a subpoena anyway.

i beleive the scammer is the owner of this wallet
3NcGhGBrRV4ZdGPTbNNYtJ8ef4PgBCggGi
but could be wrong idk
or 3Ai62ehTuGDcssLCVXkD51rZ2uYkHqxh8V is where the proceeds from this scam have ended up. not sure

seems it will be a dead end. oh well  :-[

Anyone taking the lead on tracking this guy down?

Through some quick research, I found that this account was bought when it was a member account! It may not have the same owner as the one who bought it, but if anyone could tell us who bought it that would be useful. Meanwhile, I will try to find this information from the "marketplace" "digital goods" section!

I think he has a facebook^tm and twitter^tm account, as I can track a GOTAPAUJ account linked with CRYPTO CURRENCIES on that Site!

Did people seriously send BTC to the fake ripoffs advertised there?

Yes, ofcourse people were scammed. The site looked so real and stuff that you would not even think it was directing you to phising sites. I wanted to buy some stuff on bitcoin black friday, but i don't know why I did not do it. I think I am lucky that I haven't been scammed by the fake website.

When I saw the signature campaign, a little bell was ringing because only casino's and that kind of buisinnes would promote themselves, not a simple website with links...

ERM...
I think you may have got the website wrong...
They simply produced a website and allowed traders to sign up with them!
They FOOLISHLY didn't check the legality of these sites, which means that they are now being condemned as spammers, when they were just selling advertising space from their site!
They FOOLISHLY didn't realise that SCAMMERS HAVE MORE MONEY to spend as they DON'T ACTUALLY HAVE TO MAKE THE PRODUCTS THEY ARE SELLING!

Hope this helps for a better analysis of the site and its develoopers.

Jack G

That could be true too but is there any proof the site owner didn't make those links?

YES!!!!!!!!!!!!!!!!!!!!
If he did make this site, and manipulated everything in his favour, It wouldn't have run so smoothly!
Also, those are basic phishing sites. (did he create localbircoins.com, localbiecoins.com... ETC! You cannot pin all of the fishing sites related to that on him (though it would be easy to carry out!) PEOPLE SHOULD BE MORE CLEVER WITH THEIR BITCOINS! I find it a good idea to log into an account, on the official site, remembering me, clicking on the other link and if I am still logged in on the other link in the same browser site, then (to me) it appears slightly more legit!

#1 thats not proof.
#2 how come the site went offline so quickly after the scam was discovered if its legit?
#3 how come the person running the campaign was never seen again if its legit?

All of the phishing sites were registered with Namecheap just like .info was.

Once the sites went up in the middle of the day .info sent out a spammy 'TOP RATED BBF DEALS' newsletter linking to all of the phishing sites.

.info astroturfed all the phishing sites that went up in the middle of the day to have a higher rating and be listed at the very top of his website.

.info has failed to pay out the signature campaign on this forum.

Not a peep from has been heard from .info.

The website, and all of the phishing sites went down at the same time.

.info has used a fictitious alias and fake addresses to hide his identity.

It was a scam run by the same guy. Period.

that's not true actually. the merkle runs a signature campaign too here, and that's a news site

i sat on Cryptsy chat years ago and watched as a guy was cleaned out.
he said he went to a similar url.. phishing site.

what that site did was steal his Cryptsy cookie somehow
the guy never put his login details in on the phishing site.

he was logged in with the attacker as the guy cleaned him out.

all of it was confirmed and checked and Cryptsy mod's said what i just did.

it was a session hijacking.

so uhhh boys want to review that click on the bad link idea ?
whether the fishing site says your logged in or not they still may be able to steal cookies.. it happens !

and by the way the guy said he got to the URL by using Google then clicking as he always did.
avoid Google searching for URL's
Find the proper URL from the correct source and bookmark or it something.

That was exactly what I was hinting at. I dont know why jackg claims that .info could not be involved when everything points at them.

Oops, did mean to quote jack on that one, sorry.

Badly Quoted!
Anyway, you think he created over 50 clones, and tried to sell them on their webpage, thinking they wouldn't be found!
Has the community gone mad? Has anyone checked if the scammng sites (the ones on the bitcoin black friday widgets NOT bitcoinblackfriday.info itself! Are they still live?
I think they woudn't be able to create all of these and go undetected until now! The domains woudl already have been taken too so they would be harder to get.

I may have got this wrong, but mine seems more believable!

Jack G

What are you talking about? Obviously the .info owner was the owner of the scam sites. Anyone who can calculate 1+1 can figure that out.

Read the post of JonHolmquist a few times extra if you need some arguments for it.

Thanks for pointing out the scam. I had a deal of $10 with him and deal went totally smooth. Don't know much or had any idea that he was a scammer .

WHAT ABOUT YOBIT?
True:that does havegamb.ing parts. But it is mainly known for trading, and it has a signature campaign on this forum!
The origionaly post was wrong!

OKAY! YOU WANT PROOF?
The site went down, because, Black Friday had ENDED!
Why keep it up!
We have not heard of him because HE GOT NEGATIVE TRUST on the forum and so would have not used his account again as he would have been bullied by the community!
WHERE IS YOUR PROOF NOW?
ALSO: the site was supposed to go down after black friday, hence the signature campaign; it said FRIDAY 27TH NOVEMBER! Not FRIDAY 27TH NOVEMBER (AND ONWARD!)

What about those spoof URL's ?

I am speechless. My paranoia tells me you are involved somehow. At the very least you have a very odd understanding of proof. Also whats with all the yelling?

Anyway. Lets just debunk your "arguments". So blackfriday sites go down the second the day is over? -> http://bitcoinblackfriday.com/

People leave the forum because they got negative trust? -> https://bitcointalk.org/index.php?action=profile;u=138471 (nothing personal, but your post was just above this)

Paid SHILL SOCK. Accomplice to this deviant fraud too??? Your guilty conscience sounds like it.

I have a humming suspicion YOU are the perpetrator of these scam sites, and you are here now trying to clean your name long enough to RUN.

Screw off, scammer. Unless you're here to redeem yourself and give the coins back, then go fuck yourself. You will obviously sleep with a guilty conscience for the rest of your life. Enjoy the scammed coins, you pathetic sack of old douche juice.

I redact my last statement from being directed at jackg. Upon further inspection, the person is 15 years old. Nievety and ignorance can be cumbersome on a young mind. They may have even lost some coinage themselves. All in all, someone please try to dox the scammer (s) associated with bitcoinblackfriday.info

Did they actually charge merchants to get them listed on their site? If not, they had no revenue stream and it should've been obvious that they intended to scam in some way as soon as they started expensive signature campaign/advertising.

Are there any reported victims so far? I hope the scammers have invested more than they've gained and not achieved RO"I".

As far as I know, BitcoinBlackFriday.com (The legit one) also charges no fees for that, and they started a large scale campagin last year if I am not mistaken.
The point is, There are a lot of ways they could have gotten back their investments without charging all merchants like selling banners or even selling the website with the high amount of annual traffic it would've gotten if it turned out to be legit for a huge amount of money.

I don't think that's correct. Original BBF got a lot of free publicity but I'm pretty sure they didn't run any sort of paid-for campaign.


That sort of website is only active for few days/year. There's no way they could've generated enough revenue from banners (which they didn't have iirc) to justify amounts spent on sig campaign and ads.
For the same reason (large traffic but only for few days/year) there's very little chance anyone would buy the domain for any significant amount.

it makes me cringe even coming back to look at this. .../shrug  :-[ :-[
for anyone still wondering, lol, the miners definately...did NOT ever show up :/