Bitcoin Forum

I received this message from an email address which starts with "ntradingbot" the message contain Stellar airdrop announcement
Note : I covered the scammer email in other not to break the doxing rules (https://bitcointalk.org/index.php?topic=1576015.msg15823315#msg15823315) stated by Theymos.

https://i.imgur.com/4UldJRN.jpg

I did some few background check and I find out that 35% of the words wrote by the scammer behind the airdrop are draft from previous Stellar airdrop organized by blockchain.com which is clarified in the below image.

https://i.imgur.com/qIJwwRy.jpg

https://i.imgur.com/T4OnXIx.jpg



Went through their site, they didn't request for any fund but they ask people to download a Stellar rar app which is not from a trusted source and purposely to steal from people.



Scammer website : https://stellar-limited.com/
Archived link : http://archive.is/vrbCd

Link the scam spreadsheet : https://docs.google.com/forms/d/e/1FAIpQLScf0GbjEW7iDDA3Igm1W-SZ2VFpFrgtdCwpdRJxkI_PAC8w1g/viewform
Archived link : http://archive.is/ToDo4


Link to blockchain.com previous airdrop which was plagiarized :
https://support.blockchain.com/hc/en-us/articles/360019105951-How-to-participate-in-the-Stellar-airdrop

Scammer site domain age :
https://i.imgur.com/J1LCTlD.jpg


I later wrote the stellar admin on twitter about the airdrop to be assured if my detection is right and this is he said

https://i.imgur.com/I8Ul4zc.jpg

I thought that every e-mail user and especially the crypto enthusiast knows that 99.9% of emails coming from strangers to his or her email box are fraudulent. It's very strange that you still believe in spam mailings in 2020.

I wanted to visit the scammer's website to download the app and scan it (despite being 100% sure it's a malware) but it seems to be down. Not sure whether it was temporarily disabled or someone reported it and was removed for good!

From the email used by the scammer, it looks like airdrops is not his only scamming technique. I wouldn't be surprised if he sends you another email asking you to download a trading bot  ;)

It is good that they are already down to prevent naive users or newbies from being a victim of this scam site. If only people that found a specific site a scam will report it immediately, we will lessen these scammers from further screwing users of their dirty tactics.

I am a little bit curious that how they were able to get your email address in the first place?
Rather if you did not share your email address to anyone especially those some cryptocurrency airdrops that required an email address to participate or subscribing to some newsletter of cryptocurrency news providers or any.
Because for me, this kind of email becomes normal, I also received this kind of email.

I never trust personal emails that I never opt to subscribe, it's bad marketing and unethical, that is why Gmail is flagging these kinds of mass email services, I never bother to read the whole content I just move it to spam if it landed in my main folder and I never read anything that is on my spam unless I expect email coming from sites that I trust.

My guess is that op must have use an email on different platform many timdes and might have been used to some site that is scam unless the op use a dummy email or the site that op visited before might get compromised because of hacking due to lack in security of the site. I agree with ETFbitcoin that your email is already exposed to scammers.

Oh my.. scammer/frauders will not stopping their activities to get money by scamming people.
I receive that kind of email around 4-5 months ago. But not from Tradingbot news.. i got an email from shady exchange, sorry i forgot the name. Coz when i receive that kind of email, 100% i will send it to trash folder immediately.

Getting a message from email came from unknown users it is just quite suspicious because you do not expect a message came from other users or businesses. This kind of action must not need to click it because we want to avoid getting troublesome of the emails when open triggers access to your account. Also, one thing I got curious is how they know your email or you fill up some form that's why they get your information like your email. It is better if we are avoiding using our main email because it may cause of spam to your inbox even we have a report thread on our email to mark as spam.

Getting email into unknown source is absolutely scam. If you want to know it is better we search first to identify because of lacking information.

Why did you even tried to visit the the scammer site ? Do you know they might have trogans or malwares on their sites/app which can affect your system or mobile. They may be able to hijack your system or your coins. I never visit any unknown site specially if i get such an email to visit the site and get $$$$.

Seem was reported, No IP and no DNS found. Check it here https://mxtoolbox.com/SuperTool.aspx?action=a%3astellar-limited.com&run=toolpage#

No problem if using a virtual machine or Sandboxie.

I don't even move such e-mails to spam, it's a waste of time because it won't eradicate cheaters. Tomorrow they will register new mail, change the text of the letter a little and continue their dirty business.

Thanks a lot for the info! Almost became victim of it.

You guys are both right about not trusting emails sent from strangers but if you're used to Stellar network you'll know that there's a chance for a lot of people to believe in the airdrop message because Stellar belong to more than 5 wallets/main net exchange providers and i believe there's a chance that this will increase in future. However, if I'm aware of the necessary precaution steps what about the newbies?
This is the reason why i shared this message on this board and #15 post should be enough to make you understand.

As for me, even if I want to claim airdrop, I will like it to be from the exchange i am using which is regulated. As for airdrops through email, I would have known it is fake, I will not even check the email not to talk of clicking on any malware a link in the email may contain.

thank you for the link DroomieChikito, I was too lazy to check it myself.
Now let's see how much time it will take him before he registers a new domain. (at least this will slow him down)

Exactly, I either use a VM or my old PC which I use as an experimental box. I would never open a suspecious link on my main computer.

I also received a mail like this a few days ago. I also posted after receiving the mail. I thought it was important to warn others. They intend to hack the wallet by showing the greed of this huge airdrop. Those who do not know about this and are always in airdrop hunting can be the victims of such scams. Because they have arranged it in such a way that it is dangerous for those who do not know how to verify scams. And the scams are mostly targeted at newbies.

[Warning] Stellar (XLM) phishing website and virus file on the website. (https://bitcointalk.org/index.php?topic=5233056.msg54035285#msg54035285)

Why do you quote the entire post if you say thank you and tell us that you almost became a victim. Please edit your post.

---

OP, for some things I just want to suggest that you can disable sitelinks like using code like a phishing site reporter did. This can help users prevent and improve their security if the scam site has been compromised by a virus or malware.

My email inbox is also full of fraudulent attacks that keep sending me links. My preventive step is never to click on any link even if I am just curious. This is a step to improve the security of your assets and account. We don't need to trust the people who send us emails except only if they are the people we contacted before.

I receive this almost everytime(on of my temporary email), yesterday it was ETH, today it's XLM. I don't know what's going to be tomorrow, maybe Satoshi himself will send me an email or something.

Best thing to do is to create a different email address for filling, don't send any funds to any projects that asks you for funds for you to receive your reward, ignore links in your email that look like spam.

Sometimes, the scammer makes emails as close as possible to the original project. I often get emails like that in the name of one of the top exchanges. After I checked the exchange, there wasn't any information about airdrop or giveaway like in the email. For newbie, getting an email like that would be considered legit. We should first verify the truth by visiting the official website of the project.

That's the best way so that the main email that we use for important activities doesn't appear publicly. I made several emails with their respective functions.

Broken English should be first red flag.

Exactly right. I love how the person who wrote it is a completely illiterate scumbag. He claims to be part of the support and ends the email by thanking himself and his support team. "Thank you for your attention Stellar Support!" 

Unfortunately, many people don't have the required language skills to notice anything wrong in this ripoff attempt. But they should at least ask themselves: Hey, why is a legit company emailing me about their airdrop? Wouldn't they already be neck deep in checking applications?     

This is a stale scam for professionals but novice with little or no knowledge about airdrop scam can fall for this, the email could contain malware and can be used to collect personal details which can lead to other scam attacks like impersonations. We should always avoid such email scam and it is getting common in today's world.

It saddens my heart when people falls for airdrop scam through unverified email address. We shouldn't open a link that we're not sure of the source just for a few bucks, whether legit airdrop or not. Airdrop worth no such risk at all

The new airdrops are now considered scams but if we verify the sites properly the number of scams is less There are a lot of new airdrops that are very good but we need to check the mails well Try to stay away from KYC. In the case of the airdrop it is necessary to analyze the information of the person well and know its source Never click on referral links. These links are more scammed  Only then will we be able to survive the scams from the new airdrops.

This is the new method for scammers to fish some information to their participant to hack their exchanger accounts and other important details so new people take extra precautionary measure about this since this is serious matters, Airdrop scam creates many victims for the past years so we should be more aware on this schemes.

The writing makes me laugh, idk how people fall for it. Oh wait, greed blinds I guess.

Scammers and their ways of thinking baffles me. They don't seems to relent, always looking for new ways to carryout their plans and I wonder what makes them think that people will easily fall for such email scam. However, whether through email, untrusted apps or not the things still remains that everyone should be careful of the type of messages they receives and how they approach it. Also, one fact about airdrops is that, the platform in question confirms of it while having trusted hands who will manage it.

This is the consequence of using email to sign up for airdrops and bounty. I personally am in the same situation, every day I receive more than 20 spam emails about investments and new projects in this market. It was my mistake to use the main email to sign up for previous airdrop campaigns

good job my friend, i also receive emails like that and many more junk emails about airdrop using the names stellar, libra, covid19, binance, and send eth cashback 2x. I ignored them because it included a spam attack or a scam project.

Obviously our information has been stolen or sold when participating in a previous bounty or airdrop. I also get hundreds of emails like this every day, spam and scammer are always with us, so we need to be really careful with every activity in this market.

It is getting worse by the day. Too many scam airdrop in the space now. So many scammers trying to take advantage of a good project to scam innocent people. My advice is that everyone should be very careful about jumping to everything that look like an opportunity.

this is not a new way because it's been a long time since the airdrop scam sent us emails, even when they didn't participate in the airdrop they sometimes wrote that if we were the first winner, it was very strange and absurd. therefore I have never trusted the message received via email

this is good information for us all, but frankly I never respond to the arrival of the email, if indeed I have never followed program from the sender of email. because based on information from a number of friends in this forum, precisely scamer sometimes takes information from the email that we click

i always receive this kind of email and it came from different email address so I automatically mark it as spam and but of course, if someone is just new and doesn't know that it is a scam, for sure, many users will be scammed by these people so good thing that there is a thread like this so that newbies will be aware of it.

In cryptocurrencies there are lots of scam airdrops coming these days. If you don't have added your email id in a group then there are some people who add and then give airdrops to your email id. Some airdrops are charging some eth to receive their coin. If you received that coin then their market price will be lower then you paid fees to them. some bots airdrops have not recovered their data properly. In that regard L2L coin airdrop has not paid everbody their coin even I don't get coin after working all activities.so it is very difficult to find legit airdrops These days. Be aware of these scammers.

actually the way to send reports to participants via email by providing a link has often been done not only by airdrop, but is often used by people who often take our data that can eventually drain the assets in wallet. Don't open any of the links provided via email because most are scams. airdrops now can not be trusted because it can drag us to the worst until we are finally considered violating the rules set at BTT. it's better to be more careful following the airdrop.

Now many airdrop scamer through sending from e-mails and I often get messages like that, obviously this is an airdrop scamer that continues to spam e-mails that they have chosen to send so that beginners will be stuck with the seduction.

I almost called in one recently, it was a fake stellar telegram group with almost 20k of users inside and the server was promoting afake xlm airdrop bot, I think only to steal some data, a few days after I join it the server was officially market as fake.

Good point on posting this new airdrop scam warnings especially to those new to crypto industry. These scammers never given up to find people to victimize in this industry and i find them very hard working in a bad way of course.  ;D I assumed they got emails from fake airdrops they made and start sending to people thru emails in another way to scam people again. Without a doubt, i also received these kinds of spam and scam emails until now and they only wasting their time because i am not easy to be fooled no more.  8)

I have not opened letters for a long time if they come from those projects in which I did not participate. It’s clear that this is a fake. Everyone is trying to deceive, the main thing here is not to start reading, otherwise you can believe it, they speak too fluently.

Of course it's a scam, I like the fact that you contacted the team yourself, I hope newbies can learn from this strategy of yours, its life saving, I guess OP uses his email address in airdrops and bounties that's why spammers send scam mails to you

And this is where question comes that does our kyc information safe?
Second, I don't really give much importance to airdrops. We should be care of such ponzi schemes.
Thanks for your research and everyone should do the same to avoid losses.

I also do the same thing as you do, if we think the site/link is not important then don't bother reading it, because it will take time and make you fooled, right now there are lots of spam links sent to hunter's bounty emails.

So do you know or use any site related to ntradingbot and how did they know your personal email? I know as long you don't click suspicion link or spam then you're safe but letting your personal email exposed to scammers and their network is still worrisome.

good that you detected a new airdrop scam, for sure many crypto users will fall for this scam because it looks legitimate stellar airdrop. I hope that they do research first before to join airdrop because 90% airdrops are scam nowadays.

The current airdrops are mostly scams and bullshit, I get a lot of emails similar to yours., I will ignore them and create a filter to stop them.

Its not actually new, all of these scam airdrops done by google forms (plus with ID verification) are here since 2016-2017 when many newcomers join the market looking for free earnings opportunities.  :)

As other mates told I also receive so many mails but i just ignore those. I never open those mails even. Newbie should be more careful about such things. I never click on those sites even, they scam so just open the trusted sites

Scammers always doing this kind of shit.. they will use a project to scam people.. sending emails,, mentioning you on social media..

I have not open an email in years. All the email addresses I use today are just throw away emails, unless I take the exchange seriously ten I will use my personal email. The scammer must have sent his email to a real email that is checked and its Op's email.  Somehow this scammer is very traditional because normally these days they all are just using social media accounts.

It's wise to create separate emails for Airdrops and bounties just because of scammers and spammers, sometimes you will promote the wrong projects that only aim to get your email address so that thy can start sending you trap mails and phishing mails too, be careful, I don't bother reading such mails

Not all of it is a scam. I also get a lot of spam email but I always check them because it's interesting, they only look for referrals for them. I checked the project they were informed about and it turned out to be true, they really did hold an airdrop campaign and others. But never visit the url they send to avoid phishing.

It's better not to use your main email for airdrops and other freebies shits or you'll keep spam mails like this one. And also try to verify any airdrop from official group before joining.

do not pay attention to messages sent to emails like that, because it will make you dissolve in the delusion by the urge of spam email, I get emails like that but I ignored it and immediately put it in the trash because now a variety of ways are done in order to reap the benefits from us.

You can easily recognize the scam, all of these hot emails or telegram aggresive spam messages are promoting only scams. The real and valuable projects are listed on airdrop websites like: airdrops.io, airdropking or airdropbob.  ;)

yes, and that is indeed one of the new airdrop scams today. as we have seen about how scamers launch their actions through gmail bot attacks or telegram bots. on the other hand not only with them, but for us all especially for crypto users more thoroughly and selectively before joining any project.

It is a smart decision, never to participate in any airdrop and bounty promoted via email. Most likely those are fake airdrops and scams, don't waste time with it. Just ignore those emails and continue to do research here to choose good campaigns to join

Attempts at scams are very widespread and scammers are resourceful. The first information is a questionable email and then of course the other steps. Mostly they want to get an privkey from you that scammers want to abuse.
You need to be careful not to give such information to anyone, especially not to a third party you don't know.

The number of scammy airdrops just seems to increase on a daily with these people inventing new ways to defraud unsuspecting victims. It's truly appaling, there are fewer legitimate airdrops with most just farming people's details to use for malicious purposes.

As long as we do research before participating in airdrop and bounty, I believe you will avoid scam projects like that. Everyday I also get a lot of promotional emails like OP, but just ignore it and everything will be fine

Why do you think they are legal ? if you stay in this market long enough, just look at their website, you will know if they are scam or not. To me this is one of the bullshit airdrops and can easily identify them as scams right from the first check

Yes, I completely agree with your opinion on this topic, nowadays many people have been doing such kind of scams on a daily basis. That's why we have to keep a distance from such malicious mail, we simply have to ignore such kind of mail to avoid being part of their scammy airdrops. And if anybody wants to join airdrop then they have to join their official group before joining the airdrop.

I got countless of Airdrops like that in my email address but I don't bother to check them out because I've know about spammers and scammers since 2010, I knew what phishing mails looks like, I only click on mails I am expecting to land in my email

It good to hear that but it will be very kind of you if you can open a thread and share your experience about how to identify phish email in the beginners and help section because there still some people out there who are a victim of this activity everyday which is the reason why i create this thread in the first place.
Meanwhile, I'm locking this thread since there's nothing much to talk about here.