Bitcoin Forum

Other => Meta => Topic started by: sujonali1819 on January 14, 2021, 02:49:20 PM



Title: Is it another phishing of bitcointalk.org ?
Post by: sujonali1819 on January 14, 2021, 02:49:20 PM
Today I found a post here (https://bitcointalk.org/index.php?topic=5309218.msg56088848#msg56088848). The user said someone promoting a miner and shared a link which. I curiously visit the link and see I am redirected to other site which is totally looked as bitcointalk.org. So what do you think is this a phishing or a archive version of a post? I can not understand it and I also see any response there. For why I come here to discuss it. :)

Site url Don't input your login infor there.
Code:
https://bitcointalk.org-indexphp-topic-14358523.online/

https://i.postimg.cc/5t1Fh9xD/Screenshot-28.png


Title: Re: Is it another phishing of bitcointalk.org ?
Post by: Indymoney on January 14, 2021, 02:54:39 PM
This is very strange because as I click on topic its loging out for me but as I am clicking on bowser its bringing me back on here I think something fishy is going on with this thread even its part of this forum.


Title: Re: Is it another phishing of bitcointalk.org ?
Post by: jackg on January 14, 2021, 03:07:44 PM
This is very strange because as I click on topic its loging out for me but as I am clicking on bowser its bringing me back on here I think something fishy is going on with this thread even its part of this forum.

It is currently non malicious. That's not to say it won't be or that it's not tracking you.
It looks like a copy of bitcointalk which you can do yourself on a desktop browser by clicking control+s/command+s.


Title: Re: Is it another phishing of bitcointalk.org ?
Post by: AB de Royse777 on January 14, 2021, 03:09:20 PM
Today I found a post here (https://bitcointalk.org/index.php?topic=5309218.msg56088848#msg56088848). The user said someone promoting a miner and shared a link which. I curiously visit the link and see I am redirected to other site which is totally looked as bitcointalk.org. So what do you think is this a phishing or a archive version of a post? I can not understand it and I also see any response there. For why I come here to discuss it. :)

Site url Don't input your login infor there.
Code:
https://bitcointalk.org-indexphp-topic-14358523.online/

Interesting! LOL

Someone bought this domain
Code:
org-indexphp-topic-14358523.online

Pretty smart!

It is currently non malicious. That's not to say it won't be or that it's not tracking you.
It looks like a copy of bitcointalk which you can do yourself on a desktop browser by clicking control+s/command+s.
I have not browsed the URL also don't want to. But I would say there must be some bad intention of doing this.

Edit:
Domain details:

Code:
Name: org-indexphp-topic-14358523.online
Registry Domain ID: D216667713-CNIC
Domain Status:
serverTransferProhibited
clientTransferProhibited
Nameservers:
ns2.dns-parking.com
ns1.dns-parking.comDates
Registry Expiration: 2022-01-08 23:59:59 UTC
Updated: 2021-01-08 05:54:20 UTC
Created: 2021-01-08 05:54:19 UTC
It has been created a few days ago.


Title: Re: Is it another phishing of bitcointalk.org ?
Post by: sheenshane on January 14, 2021, 03:14:20 PM
Interesting!

I did research the title thread on Trading Discussion as you can see on the link, but I didn't find it.

It is currently non malicious.
If not, why it requires per user to log in if you will visit the thread.

It seems the suspicious and malicious link to me.


Title: Re: Is it another phishing of bitcointalk.org ?
Post by: shield132 on January 14, 2021, 03:24:22 PM
Did quick research and topic with these numbers 14358523 (i.e. https://bitcointalk.org/index.php?topic=14358523) doesn't exist.

That user mentioned correctly, "org-indexphp-topic-14358523.online" is the original domain and bitcointalk's page is uploaded on a subdomain. Website isn't currently dangerous to visit but at the same time creating such URL looks scammy for me. Maybe not today but in future, they scam people.

Also, seems that there was originally no topic about bitminers.asia (after searching on bitcointalk and google).


Title: Re: Is it another phishing of bitcointalk.org ?
Post by: AB de Royse777 on January 14, 2021, 03:28:12 PM
Did quick research and topic with these numbers 14358523 (i.e. https://bitcointalk.org/index.php?topic=14358523) doesn't exist.
Obviously it was reported by someone and the mods deleted it. However, it's strange that I do not see any scraped version on ninjastic.space. I hope My search was valid there: https://ninjastic.space/topic/14358523.0

Edit:
Wrong category. This was supposed to be a message number not topic number. So, here it is:
https://ninjastic.space/post/14358522
https://loyce.club/archive/oldposts/143/143585xx.html#msg14358523


Title: Re: Is it another phishing of bitcointalk.org ?
Post by: shield132 on January 14, 2021, 03:33:15 PM
Did quick research and topic with these numbers 14358523 (i.e. https://bitcointalk.org/index.php?topic=14358523) doesn't exist.
Obviously it was reported by someone and the mods deleted it. However, it's strange that I do not see any scraped version on ninjastic.space. I hope My search was valid there: https://ninjastic.space/topic/14358523.0

Why do you think that there was an actual thread? You can type any number after "topic=" and you'll get the following text:
Quote
The topic or board you are looking for appears to be either missing or off limits to you.


Title: Re: Is it another phishing of bitcointalk.org ?
Post by: AB de Royse777 on January 14, 2021, 03:37:12 PM
Why do you think that there was an actual thread? You can type any number after "topic=" and you'll get the following text:
Quote
The topic or board you are looking for appears to be either missing or off limits to you.
When mods send topic to the trashcan or delete it then you will see this message. There are few users who scrap the forum almost in less than 1 second once anything posted, if you do to their sites and search then you will see what was the topic/message that posted.


Title: Re: Is it another phishing of bitcointalk.org ?
Post by: shield132 on January 14, 2021, 03:52:19 PM
Edit:
Wrong category. This was supposed to be a message number not topic number. So, here it is:
https://ninjastic.space/post/14358522
https://loyce.club/archive/oldposts/143/143585xx.html#msg14358523
It still means nothing, there are so much posts on bitcointalk, without doubt, such number would fit it but it has nothing to do with the bitminers.asia

From screenshot it's obvious that Bitcoin Core version is outdated:
Quote
2019-11-24

Bitcoin Core version 0.19.0.1 released

Still a mystic number :D

When mods send topic to the trashcan or delete it then you will see this message. There are few users who scrap the forum almost in less than 1 second once anything posted, if you do to their sites and search then you will see what was the topic/message that posted.
You'll see that message on every topic URL that did never existed, for example: https://bitcointalk.org/index.php?topic=53123123121231231241241209428.0




Title: Re: Is it another phishing of bitcointalk.org ?
Post by: DdmrDdmr on January 14, 2021, 04:41:00 PM
There are a couple of similar URLs constructed in the same manner (different Id), although they are currently off-line:

May 2020: https://bitcointalk.org/index.php?topic=5246949.msg54390734#msg54390734
April 2020: https://bitcointalk.org/index.php?topic=5242643.msg54284700#msg54284700

Same guy (@Socram) reported it on a French forum (https://cryptofr.com/topic/25184/arnaque-scam-4mining-store)

Perhaps the catch here is that these links are being posted on social media, other forums, and such, to pretend being something recommended on Bitcointalk. The potentially fake hardware seller site is clickable, and that is likely the intent (page/site acting as a dummy bridge).

Edit:
<...>
And where did he see the (fake) thread, which moved him to inquire?


Title: Re: Is it another phishing of bitcointalk.org ?
Post by: stompix on January 14, 2021, 05:35:19 PM
I was just going to open a scam accusation topic about bitminers.asia.

Yesterday I received a PM from a newbie asking me that he wants to buy a miner from "that page" and if I can show him proof the site is legit and I really got the gear I've ordered. I checked my history and I've never mentioned bitminers.asia ever, let alone buying gear as the price per kwh in my country is prohibitive, I've searched and searched and finally got to that page from an archived post and saw this crap:

https://i.imgur.com/W6XcqHv.png

LE:
And where did he see the (fake) thread, which moved him to inquire?

Unfortunately, he has logged out before I managed to send him the message back (he was online for like 20 mins) warning that is a scam and he hasn't logged in back since. So, no idea where he got it but most importantly I pray he will log in back to check my message before trying to buy and getting scammed.







Title: Re: Is it another phishing of bitcointalk.org ?
Post by: Lafu on January 14, 2021, 05:49:24 PM
Damn this freaks getting smarter every time they creating a new fake website with there domain.
And looks for me also like DdmrDdmr has written already that it was only created for the fake miner hardware selling.
If you logged in to the real Bitcointalk and clicked a link and it asking you to login again it should be a warning for you.


Title: Re: Is it another phishing of bitcointalk.org ?
Post by: BITCOIN4X on January 14, 2021, 08:09:52 PM
Great find @Sujonali1819. This is the first time I've seen the bitcointalk.org site also have a phishing site. I am not sure it will be safe to log in, which obviously I think this person has bad intentions towards bitcointalk.org users mainly because of the increase in the price of bitcoin.

Damn this freaks getting smarter every time they creating a new fake website with there domain.
And looks for me also like DdmrDdmr has written already that it was only created for the fake miner hardware selling.
If you logged in to the real Bitcointalk and clicked a link and it asking you to login again it should be a warning for you.

Scammers will continue to look for loopholes and ways to get coffers of money from these innocent people, especially users of bitcointalk.org. Users of the bitcointalk.org forums should be aware of this and continue to be vigilant.


Title: Re: Is it another phishing of bitcointalk.org ?
Post by: notblox1 on January 14, 2021, 08:34:21 PM
Someone should make a list of all bitcointalk forum phishing websites because I think this is not the only one.

Safest thing we can do is not to reply to any strange private messages you receive from unknown people, don't click on sent links and double check address bar before you log in to forum.


Title: Re: Is it another phishing of bitcointalk.org ?
Post by: iamsheikhadil on January 15, 2021, 05:20:08 AM
These scammers are improving their scamming techniques every second. One day I hope we can bring enough awareness that they can't scam anyone and end up spending all their stolen money purchasing domains and other scamming tricks only to find no victims and then cry on their spent money. Gotta be more careful on the internet, and follow strict rules.


Title: Re: Is it another phishing of bitcointalk.org ?
Post by: Kittygalore on January 15, 2021, 05:38:06 AM
This is very strange because as I click on topic its loging out for me but as I am clicking on bowser its bringing me back on here I think something fishy is going on with this thread even its part of this forum.
Be careful what you are clicking, links like that tend to install some type of Remote Access Tool(RAT). Or it could be a duplicate or spoof website that keylogs your password and your username.


Title: Re: Is it another phishing of bitcointalk.org ?
Post by: sujonali1819 on January 15, 2021, 12:51:03 PM
Great find @Sujonali1819. This is the first time I've seen the bitcointalk.org site also have a phishing site.
This is not actually my credit. someone post it on scam accusation and I move that to here :)

Someone should make a list of all bitcointalk forum phishing websites because I think this is not the only one.
As I have seen there is a thread by someone already here in this forum about the list of fake bitcointalk sites. and the topic now locked :) So yeah if someone want to list them he can.
   
List of scam / fake bitcointalk sites (https://bitcointalk.org/index.php?topic=5130480.msg50551779#msg50551779)