Bitcoin Forum

I received this email from user splat44 WHO WAS HACKED

it leads to a faked up Bitcoin.talk password grabber page...

This is the message I received

hey man can you help me?
splat44« Sent to: jubalix on: Today at 06:44:18 AM »


I saw that you know a lot about bitcoins and im kinda new
can you help me with thishttp://phishing/index.php?topic=196179.0 (http://bitcointalk.org (SCAM ).zz.mu/index.php?topic=196179.0)  issue?
Report To Admin
17YatRuTzSpq7eRz2c5EZeFy5B5U82Xt9R (BTC)
Earn btc for view video, logging and solving captcha

be warned....it IS A FAKED UP PAGE ON THE WRONG DOMAIN DO NOT ENTER PASSWORD


faked up page is here
http://phishing/index.php?topic=196179.0 (http://bitcointalk ( SCAM).org.zz.mu/index.php?topic=196179.0)

Yeah - he PM'd me as well, and I reported that to John.

I saw that you know a lot about bitcoins and im kinda new
can you help me with this issue?

https://bitcointalk.org/index.php?topic=196179.0  <----------- this, when you click actually goes to the phishing site mentioned above (not here, but in the original message - the hyperlink is different from the text)

The same for me  >:(
This guy should be banned on the spot.

He's banned.

Do not click links

The user's account was hacked and it seems splat used the same password on Bitcointalk and Rugatu. The hacker managed to steal him ~1.23btc and tame his reputation in both places, like sending phishing PM to Bitcointalk users or asking questions with phishing links on Rugatu.

MODS please revise his account and give him the opportunity to change his password in here, on Rugatu he already managed to recover his account.

http://www.rugatu.com/questions/7406/news-on-bitcoin?page=2&focusedAnswerId=17731#17731


To OP: Please remove his username from thread title. Thank you.



Posting his email:

Done

There is also one that furrycoat on btc-e is spreading:
http://btcetalk.comze.com

Now taken offline after a report.

Thanks for reporting guys! It was fairly obvious and he kind of failed, but well-done!

This is extremely offending, and this alone should keep this user banned! The moderator should "think twice" to ban an account that is trying to steal funds and hack into people's account ? Weird!

If you read it again, you will probably realize English is not Splat's native language. I think he wanted to say the moderator may have to revise, and lift his ban, on this particular issue hence "think twise".

English is not my native language either, and that is not an excuse to write gibberish. It is fine if what you mentioned is correct, but my statement was based on what has been written earlier.

I have been getting angry reports from splat44 wanting to 'suspend that member! If he expect perfect english after reading paraipan post, then there something else coming his way!'.   :-\ I must say that this is quite in par with the angry scammer/spammer PM's I receive on a regular basis. I'll drop a PM to theymos on his opinion here though.

LOL  :D ;D "Splat!"

splat 
Noun
A piece of thin wood in the center of a chair back.
A sound of something soft and wet or heavy striking a surface.

Jokes apart, I would like John to use extreme caution here.

I did a quick search about splat44 (Phil Normand), and the writing style absolutely does not match between his twitter account (https://twitter.com/splat44) and here. Here is his Rugatu account, which mentions same name of Phil Normand (http://www.rugatu.com/users/871/splat44)

The twitter account has perfect American English, where as we can all see what it is here. It is plausible that the hacker himself is still at large faking actual Phil Norman's account.

Yep, that's true. Thanks for pointing that out - this is why we have reservations unbanning the spammers here as we do not know if the actual owner has regained the account or not.

Also, this might be another attempt here to shield himself - he can just claim to be hacked by another non English native speaker.

PS: Be careful outside - that report was for you.  :P Apparently  there's 'something else coming your way!'

 :-\ I remember that I said I will ask theymos to look into this. Your hostility is not helping you here. Also, if the accounts were hijacked, there's no sense why your email wouldn't be hijacked either.

http://bitcoin.stackexchange.com/questions/10928/how-can-ban-be-lifted-from-bitcointalk-after-being-accused-as-scammer

Bad link

Plus don't you people check your url bars?

Some reports I've been seeing (and marked off by other moderators):






Your gibberish and hostility isn't helping your case anyway - I speak more than 5 languages including dialects, and judging from your past twitter posts as Shibaji said, there's still a chance this account is compromised.

Also, as I said before, I've forwarded this issue to theymos for his judgement as only he can lift bans and give tags. His decision was to give you a scammer tag here - probably because you are an alt of a tagged account here, or proof has been found that you were the perpetrator.

He's adorable. You should keep him around. Like a pet monkey.

My goodness!

All this nightmare!

After sending few to theymos, it was the last one that caught his attention!
I simply included what paraipan said by including actuall transaction in proving it was generated from other country!
I also link to this discussion! It did it job. Thank!

I want to express my gratitute towards paraipan and jubalix (for edit his post for removing my user name)

Including moderators I guest!

I also apology toward shijaii to comment made to him!

However, for being accused as "SCAMMER" for first, it took and ugly turn and I don't need apology toward hostility in this regards.

All those suppose PM's were not sent me as paraipan including theymos agreed!

To add few note, it was theymos who unbanned and sent him note for verifcation!

Hey Splat, just calm down dude. I'm sorry to see this has taken a wrong turn but nobody seems to know you very well around here, so just be patient and and your account will be restored like before. This will be a hard lesson for you indeed.


@John and theymos, please restore splat's reputation back as he's no scammer, only made a big mistake and got phished by bitcointalk clone.

Please vouch and guarantee explicitly that if there are any further damage or damage attempt caused by the user account splat44, you will personally replenish the affected users.

Sounds scary.

Guess I have to keep my passphrase "Tiptoe trough the tulips" to myself.

shibaji, remember that it was that phishing link that caused the whole thing!

You can be sure of this, I will always check any link before doing any things!

Now this also leads to another questions:

Which regard those so called PM, I haven't deleted those from my outbox!

Is there a way to view headers that points to an IP?
I know my reward got stolen from hacker from US (98.240.176.30) based on following:
https://blockchain.info/tx/b3bf0878d4dc86bb8e89fd92fd8f2dc91d6bf60ad8fc311525dbd4b8383fd385 (https://blockchain.info/tx/b3bf0878d4dc86bb8e89fd92fd8f2dc91d6bf60ad8fc311525dbd4b8383fd385)

My IP: 70.26.4.142

If the headers shows a different IP then my own, then we can be sure those PM weren't sent my me!

splat44

What are you talking about shibaji? Splat entered his username and password on a bitcointalk clone and his accounts, on here and rugatu, we're accessed and abused because he used the same credentials. I don't think he was the first or last person to have this happen to them, and I'm sure i don't want that to happen to me some day.

After thinking for a bit, did you had something to do with the phishing attack?

Since I am only seeing you are pushing hard this user account (splat44) be made legitimate again, it would not be surprising if you stand behind it, correct ? Why are you being defensive once I ask that ?

So either you know the holder of account splat44 very well - in that case there should not be an issue vouching for him

OR

You do not know him well, and still standing behind the account ? Why ?

I have nothing personal with whoever is splat44, but as I mentioned earlier, I am somehow not convinced the original owner is back into the account - other than you are strongly saying so.

No, I did not have anything to do with the phishing attack - but this very statement puts you in my list of sketchy users.

What is your relationship with splat44 again ? Are we going to lead to a snake hole looking for the earthworm ?

After thinking for a bit, looks like splat44 is probably your alter ego ?

My vested interest in this whole affair is only because I got the phishing PM from the account splat44, and I do not take it lightly when someone tries to screw with me - which involved possibility of financial loss.

You asked paraipan to vouch for me and since He done so, why is that issue?

Just you know, paraipan and I are different person and moderators at rugatu. No more than that thank you very much!

Regarding that PM surpposedly sent me, ask the admin or moderator checking that PM header! Surely an IP should listed and I'm sure is isn't mine! Regardless how convince or not about my account status, your comments doesn't depend on moderator or admin decision! Keep this in mind!

It is not an issue - all I ask is that he stands behind vouching you - if he knows you so well. Again, if you are indeed the original owner of the account, then I have nothing personal with you - but I do have an issue with the scamming PM I have received from the account.

I have not doubted that you and paraipan are same, I was merely replying to the stupid context diverting technique paraipan used by asking me if I had anything to do with hacking splat44 account. I took him for more mature than that, seeing he is a long time member, but looks like I was wrong on that aspect, and may be it is a 12 year old kid behind paraipan's account.

Anyway, if paraipan firmly states he personally knows you and he absolutely supports the fact that splat44 is now on the hands of original owner, I am good.

Best wishes to both of you, and I hope our paths do not cross in future.

@shibaji, I understand your position and will probably do the same if some day I receive a PM on the forum from you with a phishing link in it.

Just take notice the bitcoin community is not only the bitcointalk forum and a few bitcoin faucets, there are many more services out there that revolve around it like Rugatu.com for example, from where I know Splat for more than half a year and he was appointed a moderator there given his helpful answers and participation. That's why I know for sure he would not ruin his reputation with such acts and have full confidence in his person. He speaks a little funny so you probably don't understand him very but you have to have patience and make an effort. I think he learned his lesson because he lost the bitcoins he had in his Rugatu account, around 1.30btc, and reputation in this community but he will probably take better measure in the future to protect his online accounts and not get phished like he did.

Theymos is already informed of this issue and is revising the case.

John (John K), I went through all those PM from my outbox and found lot inconsistencies such title and placement of that supposed link which isn't my writing style

Is there a way that you and the theymos can go through my outbox to check?
Let me what I need to provide and will send you a PM including theymos!

After waiting for few days, theymos completely restored my account with thanks on my part including those who stood with me in this process!

Hi no worries, I was very careful to say you were not a scammer, and that your account could have been hacked!!!!

I always get the facts before makeing claims, and I am passionate about you having the have a right of reply in the open forum!!!!

No problems! In facts, I took note how you edited original post after reading paraipan's post!

While posting any phishing links, I recommend to refrain using "http:", not it will cause any immediate danger but some ignore it!

Kindly regards

Good to know you are not a scammer, but you are still a troll. I hope you were hacked for that troll comments too, maybe you have proof of not being a troll ;)