Bitcoin Forum

Economy => Scam Accusations => Topic started by: Joel_Jantsen on March 11, 2016, 03:46:08 AM



Title: AWARE PHISHING BITCOINTALK.ORG SITE BY USER gvuandrew
Post by: Joel_Jantsen on March 11, 2016, 03:46:08 AM
Not sure if this belongs here ,mods are free to move. Everyone must be aware of the phishing bitcointalk.org where L is replace by I and its difficult to make out in the browser.

This user  gvuandrew  (https://bitcointalk.org/index.php?action=profile;u=790016) is spreading the link to the phishing site (maybe he owns it too).Today gurre (https://bitcointalk.org/index.php?action=profile;u=558677) got the PM from gvuandrew which was ,

!!! WARNING: This user is a newbie. If you are expecting a message from a more veteran member, then this is an imposter !!!

Yes, Jason Boyko is a big scammer check this thread:


https://bitcointalk.org/index.php?topic=1314653.0
 (http://bitcointaIk.org/index.php?topic=1325758.0)



You can't easily make out in the quotes that link is fake but once you edit it ,this is what you'll see

https://i.imgur.com/j08NApj.png

Ignore all the PM's by him.


Title: Re: AWARE PHISHING BITCOINTALK.ORG SITE BY USER gvuandrew
Post by: Lutpin on March 11, 2016, 03:48:28 AM
This user gvuandrew (https://bitcointalk.org/index.php?action=profile;u=790016) is spreading the link to the phishing site.
Today gurre (https://bitcointalk.org/index.php?action=profile;u=558677) got the PM from gvuandrew which was
-snip-
gurre should report the PM to any Mod.



This is nothing new, there are already several alike threads in this section.
https://bitcointalk.org/index.php?topic=1386622.0 (a bit longer thread, the bitcointaIk part gets dropped a little later)
https://bitcointalk.org/index.php?topic=1389494.0 (straightup thread about the same thing)
https://bitcointalk.org/index.php?topic=1393737.0 (same scheme, sent via mail)


Title: Re: AWARE PHISHING BITCOINTALK.ORG SITE BY USER gvuandrew
Post by: gurre on March 11, 2016, 03:52:03 AM
This user gvuandrew (https://bitcointalk.org/index.php?action=profile;u=790016) is spreading the link to the phishing site.
Today gurre (https://bitcointalk.org/index.php?action=profile;u=558677) got the PM from gvuandrew which was
-snip-
gurre should report the PM to any Mod.

Reported!


Title: Re: AWARE PHISHING BITCOINTALK.ORG SITE BY USER gvuandrew
Post by: Joel_Jantsen on March 11, 2016, 03:58:53 AM
This is nothing new, there are already several alike threads in this section.
https://bitcointalk.org/index.php?topic=1386622.0 (a bit longer thread, the bitcointaIk part gets dropped a little later)
https://bitcointalk.org/index.php?topic=1389494.0 (straightup thread about the same thing)
https://bitcointalk.org/index.php?topic=1393737.0 (same scheme, sent via mail)

True but I never knew who was behind it.Or maybe the best thing I thought we could do is negative rep the user ?


Title: Re: AWARE PHISHING BITCOINTALK.ORG SITE BY USER gvuandrew
Post by: vodaljepa on March 11, 2016, 04:07:49 AM
He tried to do it to me as well https://bitcointalk.org/index.php?topic=1394360.0


Title: Re: AWARE PHISHING BITCOINTALK.ORG SITE BY USER gvuandrew
Post by: Joel_Jantsen on March 11, 2016, 04:09:51 AM
He tried to do it to me as well https://bitcointalk.org/index.php?topic=1394360.0

As said by Lutpin,report it to one of the mods right away.


Title: Re: AWARE PHISHING BITCOINTALK.ORG SITE BY USER gvuandrew
Post by: Lutpin on March 11, 2016, 04:10:35 AM
True but I never knew who was behind it.Or maybe the best thing I thought we could do is negative rep the user ?
If the PM is real, he probably gets banned for it.

He tried to do it to me as well https://bitcointalk.org/index.php?topic=1394360.0
Same goes to you, report that PM straigth to a mod.



I've left a negative feedback for now.
Don't really think it's gonna make a big difference (newbies already get those big red warnings over their PMs), but anything that might help.


Title: Re: AWARE PHISHING BITCOINTALK.ORG SITE BY USER gvuandrew
Post by: suchmoon on March 11, 2016, 04:25:45 AM
Someone put quite a bit of effort into that bitcointaik site so I think we're doomed to see a lot of spam like that. Would be nice if theymos could make those links unclickable or just kill those messages outright.


Title: Re: AWARE PHISHING BITCOINTALK.ORG SITE BY USER gvuandrew
Post by: Lutpin on March 11, 2016, 04:29:35 AM
Would be nice if theymos could make those links unclickable or just kill those messages outright.
We have those "[suspicious link removed]" boxes for some links, I think those bitcointaIk.org links should be added to that list.
A meta discussion about this exact subject was already started by SebastianJu over here (https://bitcointalk.org/index.php?topic=1390905.msg14128711#msg14128711).


Title: Re: AWARE PHISHING BITCOINTALK.ORG SITE BY USER gvuandrew
Post by: electronicash on March 11, 2016, 04:38:03 AM
christ this seems to be common these days, there are lots of them in these forum and they are just waiting for users who aren't savvy enough to click those links and login.

Someone put quite a bit of effort into that bitcointaik site so I think we're doomed to see a lot of spam like that. Would be nice if theymos could make those links unclickable or just kill those messages outright.

its going to be a good solution but should only applies to members below.. it should be clickable for full to legendary members.


Title: Re: AWARE PHISHING BITCOINTALK.ORG SITE BY USER gvuandrew
Post by: mexxer-2 on March 11, 2016, 06:50:27 AM
Best course of action is to report it to Cyrus and using the following comment "Sending links to phishing sites via unsolicited PMs". He should have the ability to perma-ban the user.


Title: Re: AWARE PHISHING BITCOINTALK.ORG SITE BY USER gvuandrew
Post by: bleachedno on March 11, 2016, 10:44:32 AM
Did anyone try to send some abuse report to the hoster of the fake website i think this could help and get it suspended because this is very bad and dangerous.


Title: Re: AWARE PHISHING BITCOINTALK.ORG SITE BY USER gvuandrew
Post by: Lutpin on March 11, 2016, 10:47:40 AM
Did anyone try to send some abuse report to the host of the fake website i think this could help and get it suspended because this is very bad and dangerous.
Like escrow.ms tired to do back in May 2014? You can try to, good luck with it.

I just got this email delivered to my inbox with title "Changing your forum password is recommended."
Domain was registered 2 days ago.

http://who.is/whois/bitcointaik.org
Email headers : http://pastebin.com/ZTXKGh82


Please use these website to report this domain.

http://www.google.com/safebrowsing/report_phish/?rd=1
http://www.phishtank.com/
https://submit.symantec.com/antifraud/phish.cgi
http://phishing.eset.com/report
http://toolbar.netcraft.com/report_url