Bitcoin Forum

I was going through the internet and got a scam bitcointalk site. Be safe from these sites as it may contain a virus and snatch your data.




You can see it is not even detected by McAfee antivirus. It is showing a green tick mark.




You will not find any differences in both of it but if you look closely on it check out the ending fake one ends with ( .to ) and the real one ends with ( .org ). IF you have installed metamask then probably you will not be fooled as these sites are in the blacklist of metamask.

Fortunately, the .to version of this forum you reference has been down for a couple of months. Although it is just an example case, it was likely one of the main reasons people were getting their accounts hacked here, after feeding their legit credentials on the .to site, and thus handing them over to the hackers behind the site.

Metamask is useful for this (although classifying the .to version of this site as a Ethereum relate Phising site is a bit weird), and some ISPs are offering their own phishing site blocking solutions for their network subscribers for free, with no installation requirements (at least in my country), which is an inherent protection mechanism.

Good thing the advertiser forgot his credits are being wasted on a non-functioning site. But still, gotta report that ad to Google.

I agree with you, you should be careful when clicking on any link even if it was the first result appears when doing a Google search.
Prevention is better than cure. Checking the site, installing extensions"metamask," visiting websites using official links will save you from scammers.

As for the site you mentioned"bitcointalk.TO," it does not seem to be a scam site, though I do not recommend visiting it and staying away from it.

There are a lot of discussions about that site you can find some here:[1][2]

[1] Request: add bitcointalk.TO to [phishing] list (https://bitcointalk.org/index.php?topic=3765354.0)
[2] Is Bitcointalk.to same of Bitcointalk.org ? (https://bitcointalk.org/index.php?topic=2302330.0)

The quickest and easiest way to forever avoid getting phished by this site is to add it to your hosts file. By doing this, your browser will refuse to open the fake site.

See the following site for instructions on how to open your hosts file on Windows, Mac or Linux: https://support.rackspace.com/how-to/modify-your-hosts-file/

Add the following line to the bottom of your hosts file:

This bitcointalk.to is really dangerous. The site looks the same.

What I do is to use Bitcointalk only in trusted devices, and I use the option"always logged in", so I don't need to login again.
When I visit this Bitcointalk.to I see that I am not logged in, so I easily identify the phishing.

Whoever created that ".to" looks like the hacker of most of those complains that their accounts were hacked.

Don't log in your details there, thanks for reminding everyone here.

That website is offline for now but it used to be active back in the day and I have  very much belief my account details got phished through that domain before I started using some useful anti-phishing extensions.
MetaMask and cryptonite proved very useful later on as the prevented me from getting onto the website a half a dozen times

If you are using a browsers a simple bitcointalk.org should direct you to the original site.
One thing that needs to be known is that always check the site letters correct a small mistake like bitcointalk. com or bitcoin. org  would redirect you to some where else

Oh, I haven't noticed it, great. I'm not sure, but I think that recently I see much less threads about hacked accounts in Meta, looks that number of hacked accounts and offsite being offline are directly related. It's not big surprise that .to website was a reason of huge number of hacked accounts. It's often been shown high in Google search results, sometimes even above original Bitcointalk website. There are some other Bitcointalk clone websites, but it's that popular as .to website was.

Worst part of the .to site was that the URLs for threads and such were exactly the same IIRC except for the fact that the prefix was bitcointalk. to/index.php instead of bitcointalk. org/index.php there wasn't any significant difference between this site and the fake one on the surface except for the URL.

This is also a good reason to always check the URL of a site before you log into it, whether it's this forum or even an exchange as people have been hacked on exchanges in a similar way as the .to version of this site. 2FA's also good to have on any site like an exchange where money is at risk, though if you're not careful and input your 2FA details into a phishing site, the operator could still hack your account.

I keep seeing this bitcointalk clone when searching some mining-related in google with site:bitcointalk.org added from the search bar.

But most of the result is from a bitcointalk.to clone If I check some thread here in the original forum the result is nothing compared to bitcointalk.to some of the posts have still existed unlike bitcointalk.org some of the posts are off limit or deleted.

I think they use some auto repost plugin where they can copy the posts from the real bitcointalk.org and I noticed that the website is temporarily down because yesterday the site is fine but right now its down.

It seems someone trying to take the website down by a DDOS attack that is why the site is down.

That's why all browser added bookmark menu. That can help to save any website if you forgot any site or clear your history searching

bookmarking is a good practice, but remember that it's possible for hacker to attack you with dns hijacking. in its simplest sense, they can redirect you from visiting the legit site if they control your dns query. read more about it here https://en.wikipedia.org/wiki/DNS_hijacking.

Also hacker can use  Keylogger Trojan  which easily can log every key log that you pressed on keyboard. After collecting enough data there are various tools for getting required data included login,passwords,coin seed and more vulnerable personal information.

Visited the website myself when LoyceV have posted this phishing site, I even posted my observations (https://bitcointalk.org/index.php?topic=3765354.msg37585725#msg37585725) in the thread on how I noticed it was fake. The first thing I notice was when I am going to the .to website it will instantly redirect me to satoshi's post and tried entering fake log-in usernames and password it will only refresh itself, I don't know if they are receiving what we inputted but the BCT copy isn't really working if you tested it out.

I come acrossed that site before and I always input my information as it's pretty similar to our site. Maybe everyone should consider staking their address in  Stake your Bitcoin address here (https://bitcointalk.org/index.php?topic=996318.new#new) so in case your account is hacked you have a chance a chance to recover it.

Not only scam Bitcointalk, there were scam myetherwallet, coinbase and on each and every crypto based forums and service providers. It is our responsibility to keep ourselves secure finding the right url. As one of the user suggested it is always good to keep a bookmark on the websites and forums that we use quite often. This ensures security.

That would be dangerous to get your data. About keylogger trojan, is it some sort of like a keylogger app but as a virus that will send the data collected from your computer?.

The annoying thing is that I always get the .to clone website in the first page of Google search results.
Fortunately it is down. I would be one of their victims since I open many tabs for websites I get from Google search results without checking the URL.
Bookmarking and adding suspecious websites to a block list is a good practice.

I try to search with my own google and the result showing the right Bitcointalk site. the reason why OP got result went he search with Google because he already visits the phishing site after that his browser save the Cookies that's why the site keeps showing on the first place. Bookmarking always a good recommendation for an important link but sometimes the hacker can make hack the DNS and redirect us to the fake site ( This also happen on MEW ). I have some other method for making different between real Bitcointalk with fake Bitcointalk. My bitcointalk account always Login Forever went i visit bitcointalk and my account not on Login Phase thats mean i visiting the fake Bitcointalk, and make me checking first for the site before i login. these methods always help me.

Beware!!!!

It seems that the .to phishing version of Bitcointalk is back online today, after being down for a few months. That is likely one of the main sources for hacked accounts around here.
The crazy thing is that it now displays a gambling site popup screen, which is obviously not forum policy. Data is nearly up-to-date with forum, and is barely a day off.

I never ventured to try to log onto the .to site before, but for the sake of it, I tried now with fake data. What it does is capture your login/password, and then immediately redirect you to the proper .org version of the forum, where you are back to the login screen. The impression you get is that you are on the correct site, but suffered a connection glitch that made the site ask you for your credentials twice. The fuckers …

That ".to" almost make me a victim, someone PMed me here and idk what's on me, I clicked that link and it direct me to log in details that me get suspicious since my account never got log out here. I checked that url bar and boom, I quickly deleted the message. Damn that person, he almost got me.

It's really important to double check the link especially it's from stranger.

I suggest you implement this changes to your host file as stated in the first reply which help block the site and cannot be access anymore by simply following the guide provided in this quote below.

I guess it can be a virus, because keylogger is a computer program that can record every stroke by the user of the computer and aside from that this app can access your password and other personal information.