Title: SCAM - Ulord(UT) FAKE ANN and FAKE Wallet to Spread Malware. Post by: JeromeTash on May 10, 2019, 01:59:44 AM What happened: FAKE ANN and FAKE Wallet which is infected with Virus while trying to impersonate an already existing Ulord Project (https://ulord.one/)
Scammers Profile Link: https://bitcointalk.org/index.php?action=profile;u=1301111 ANN: https://bitcointalk.org/index.php?topic=5140680 Archived: http://archive.is/y57pI Real GitHub Profile: https://github.com/UlordChain Fake GitHub Profile: https://github.com/Ulord-UT Archived: http://archive.is/hWyTx FAKE WALLET Code: https://github.com/Ulord-UT/UlordChain/releases https://talkimg.com/images/2023/05/14/blob979bfa2124efbce6.png (https://talkimg.com/images/2023/05/14/blob979bfa2124efbce6.png) Virustotal results 13 Engines detected the presence of a malware in the windows zipped folder https://www.virustotal.com/gui/file/3045df425295d637b2e1a5678885c0bcf4b22ecbec292454bf1280e8f3a872df/detection https://talkimg.com/images/2023/05/14/blob5146c4749e371328.png Additional Notes - The original Ulord Project has no ANN in bitcointalk forum. - The scammer is not affiliated with the original project and therefore he is trying to impersonate them to spread malware Github profile and Ann reported Title: Re: SCAM - Ulord(UT) FAKE ANN and FAKE Wallet to Spread Malware. Post by: morvillz7z on May 10, 2019, 04:12:04 PM Good find.
I'm almost 100% sure this one is connected with HyperCash [HC] the one that I exposed yesterday. There are 3 more projects like this one currently being posted in Announcements (Altcoins). I'm just waiting for someone to safely VPS test these wallets, all GitHub profiles are fake, created in the last 3-4 days. [ANN] [PoW] V-Dimension (VOLLAR) (https://bitcointalk.org/index.php?topic=5141557.0) [ANN] [ERC20] DUO Network Token (https://bitcointalk.org/index.php?topic=5141552.0) [ANN] [PoW/PoS] Nasdacoin (NSD) (https://bitcointalk.org/index.php?topic=5141546.0) Title: Re: SCAM - Ulord(UT) FAKE ANN and FAKE Wallet to Spread Malware. Post by: ICOEthics on May 10, 2019, 04:32:47 PM Good find. I'm almost 100% sure this one is connected with HyperCash [HC] the one that I exposed yesterday. There are 3 more projects like this one currently being posted in Announcements (Altcoins). I'm just waiting for someone to safely VPS test these wallets, all GitHub profiles are fake, created in the last 3-4 days. [ANN] [PoW] V-Dimension (VOLLAR) (https://bitcointalk.org/index.php?topic=5141557.0) [ANN] [ERC20] DUO Network Token (https://bitcointalk.org/index.php?topic=5141552.0) [ANN] [PoW/PoS] Nasdacoin (NSD) (https://bitcointalk.org/index.php?topic=5141546.0) I noticed an increase in those type of fake projects with malicious/virus wallets, etc. Maybe it is a way of scammers to retaliate because their projects were caught. (?) This person (https://bitcointalk.org/index.php?topic=5141208.0)was caught copying another project, he deleted the thread and opened a new one. Now someone just posted that there is a virus - I didnt find - maybe you can double check. Title: Re: SCAM - Ulord(UT) FAKE ANN and FAKE Wallet to Spread Malware. Post by: morvillz7z on May 10, 2019, 04:44:02 PM I noticed an increase in those type of fake projects with malicious/virus wallets, etc. Maybe it is a way of scammers to retaliate because their projects were caught. (?) This could very well be the reason behind all these fake ANN. It almost feels as like forum is under attack. :-\ Just look at recently created ones, all 5 of them... https://i.ibb.co/NYsjjXX/sds.jpg @OP they have created another topic: https://bitcointalk.org/index.php?topic=5141572.0 HyperCash just got brand new ann, I wish theymos could go after those idiots and wipe them out. Title: Re: SCAM - Ulord(UT) FAKE ANN and FAKE Wallet to Spread Malware. Post by: ICOEthics on May 10, 2019, 04:59:12 PM I noticed an increase in those type of fake projects with malicious/virus wallets, etc. Maybe it is a way of scammers to retaliate because their projects were caught. (?) This could very well be the reason behind all these fake ANN. It almost feels as like forum is under attack. :-\ Just look at recently created ones, all 5 of them... https://i.ibb.co/NYsjjXX/sds.jpg @OP they have created another topic: https://bitcointalk.org/index.php?topic=5141572.0 HyperCash just got brand new ann, I wish theymos could go after those idiots and wipe them out. Here, another one: W3Coin ($ 32.6 million sales) (maybe copying the real project?) https://bitcointalk.org/index.php?topic=5141391.0 ~snip And malware mining soft https://www.virustotal.com/#/file/d6c56aae9df1a0d1c7fcb2eeb9f13b69d8714afe1baa5d5c6f8c8c49e76ed86d/detection Title: Re: SCAM - Ulord(UT) FAKE ANN and FAKE Wallet to Spread Malware. Post by: morvillz7z on May 10, 2019, 06:36:37 PM Here, another one: W3Coin ($ 32.6 million sales) (maybe copying the real project?) https://bitcointalk.org/index.php?topic=5141391.0 They most certainly are using someone's project to inject malicious wallets, just like all other projects mentioned in this topic. Fake GitHub is created just 9 hours ago: https://github.com/W3Coin-Software Real one: https://github.com/w3coin They are throwing one account after another, a third ANN thread opened for Ulord(UT). https://bitcointalk.org/index.php?topic=5141597.0 (archived (http://archive.fo/v6I8y)) This time it's started by a senior member, I guess they have unlimited number of accounts to do this. Well, I can promise them I have unlimited time and desire to -ve tag each one of them. EDIT; [ANN] [PoW] V-Dimension (VOLLAR) (https://bitcointalk.org/index.php?topic=5141557.0) [ANN] [ERC20] DUO Network Token (https://bitcointalk.org/index.php?topic=5141552.0) [ANN] [PoW/PoS] Nasdacoin (NSD) (https://bitcointalk.org/index.php?topic=5141546.0) All three, as expected, tested positive for malware: Nasdacoin (ann archive (http://archive.fo/HBrVf)) https://www.virustotal.com/gui/file/3950c6c2894d019f182eef6164a9382a6c9b8130b71000646e78c56858413dd2/detection DUO Network Token (ann archive (http://archive.fo/LL5X1)) https://www.virustotal.com/gui/file/8bb61f5e397529a5601f551eeb481d28f19200076f9380d31e354e212a1b3fff/detection V-Dimension (VOLLAR) (ann archive (http://archive.fo/rl4B8)) https://www.virustotal.com/gui/file/698a22b8225034a79e00c05d924f92da054c493a56e1adae5d858835f665c440/detection Big thanks to TakeItEasy, I will tag and report them all tomorrow. EDIT2; I can pretty much confirm all these ANNs are started by the same Russian scammers I've been chasing for over a month now. Look which image hosting websites they use to upload their stolen screens at: https://i.ibb.co/mbtxBYL/cleb-v-dimension.jpg https://i.ibb.co/VqCvLMM/Daglo-Nasda.jpg https://i.ibb.co/44mtmgQ/james-HCash.jpg https://i.ibb.co/khnmps7/nonontech-DUO-Network-Token.jpg https://i.ibb.co/YbTDd7j/yey09-Ulord.jpg Title: Re: SCAM - Ulord(UT) FAKE ANN and FAKE Wallet to Spread Malware. Post by: hugeblack on May 11, 2019, 09:42:17 AM I noticed an increase in those type of fake projects with malicious/virus wallets, etc. Maybe it is a way of scammers to retaliate because their projects were caught. (?) I think that's because many people trust by default the files coming from Github.Also, even if most of the file is compressed, an "Open Source" word is used to gain some trust. There are some tips from the forum about this topic -----> Just because It’s on GitHub. It doesn’t mean it’s safe> (https://bitcointalk.org/index.php?topic=5139034.msg50883025#msg50883025) I hope that others report these pages to Gihub and Bitcointalk staff (malicious/virus wallets.) Title: Re: SCAM - Ulord(UT) FAKE ANN and FAKE Wallet to Spread Malware. Post by: ICOEthics on May 11, 2019, 08:58:38 PM [ANN] [PoW] V-Dimension (VOLLAR) (https://bitcointalk.org/index.php?topic=5141557.0) the OP for that ANN above (V-Dimension) deleted all his post, and opened a new thread here: https://bitcointalk.org/index.php?topic=5141978.0 https://archive.is/scRz7 That person knows what he is doing - spreading virus/malicious software. Title: Re: SCAM - Ulord(UT) FAKE ANN and FAKE Wallet to Spread Malware. Post by: morvillz7z on May 11, 2019, 09:01:11 PM ^ Yeah, I know...I will use this thread to report the rest of the fake ANN/GitHubs, there are 4-5 of them left.
I will update my post shortly! [ANN] [POW/POS] Ulord (UT) Pre-Mine 50% (https://bitcointalk.org/index.php?topic=5141960.0) (archived (http://archive.fo/4VONp)) I lost count how many threads they have started for Ulord, user pushkarmore (https://bitcointalk.org/index.php?action=trust;u=936226) has been tagged, thread reported. [ANN] [PoW] V-Dimension (VOLLAR) (https://bitcointalk.org/index.php?topic=5141978.0) (archived (http://archive.fo/xmDHo)) v-dimension GitHub (https://github.com/v-dimension) - original V-Dimension GitHub (https://github.com/V-Dimension-VDS?tab=repositories) - fake Proof: https://www.virustotal.com/gui/file/698a22b8225034a79e00c05d924f92da054c493a56e1adae5d858835f665c440/detection https://www.virustotal.com/#/file/e4f7802967dca0e72aa4f2f95cce954a13465ab73f6e7d9b3804a8f55d4b993a/detection User cleberw3b (https://bitcointalk.org/index.php?action=trust;u=916466) has been tagged, thread reported! [ANN] [PoW/PoS] Nasdacoin (NSD) Wallet+Mining Software (https://bitcointalk.org/index.php?topic=5141965.0) (archived (http://archive.fo/EWenv)) Nasdacoin GitHub (https://github.com/Nasdacoin) - original NasdaCoin-NSD GitHub (https://github.com/NasdaCoin-NSD) - fake Proof: https://www.virustotal.com/gui/file/3950c6c2894d019f182eef6164a9382a6c9b8130b71000646e78c56858413dd2/detection User Daglo99 (https://bitcointalk.org/index.php?action=profile;u=1169515) has been tagged, thread reported! [ANN] [ERC20] DUO Network Token (https://bitcointalk.org/index.php?topic=5141971.0) - (archived (http://archive.fo/qAalX)) DUO Network Github (https://github.com/FinBook/duo-app) - original DUONetworkToken GitHub (https://github.com/DUONetworkToken) - fake Proof: https://www.virustotal.com/gui/file/8bb61f5e397529a5601f551eeb481d28f19200076f9380d31e354e212a1b3fff/detection User nonontech (https://bitcointalk.org/index.php?action=profile;u=642862) has been tagged, thread reported! There are two new fake ANNs posted by the same Russian scammers, I just need someone to safely test wallets first. [ANN][ERC20] MultiVAC (MTV) (https://bitcointalk.org/index.php?topic=5141976.0) - (archived (http://archive.fo/AY0ZN)) [ANN] [Proof of Work] MIR COIN (https://bitcointalk.org/index.php?topic=5141968.0) - (archived (http://archive.fo/Tsb7V)) Fake MIR-COIN GitHub created just 12 hours ago - https://github.com/MIR-COIN MultiVAC fake GitHub - https://github.com/MultiVAC https://i.ibb.co/NTTgRhR/hcahs2.jpg Title: Re: SCAM - Ulord(UT) FAKE ANN and FAKE Wallet to Spread Malware. Post by: JeromeTash on May 11, 2019, 09:16:22 PM Good job fellas.
Their new Ann are invalid now. Sorry I wasn't so much only for the past 36 hours but i am now back. By the way looks like the person behind this kind of scam really farmed so many accounts before or hacked them because the accounts used are mostly member accounts and now we are seeing senior member accounts. Very rarely have i seen a newbie account being used lately. I am going to create a thread to track all these kind of fake Ann scams starting this coming week. I will also dedicate my time to fight off this malware scammer. Title: Re: SCAM - Ulord(UT) FAKE ANN and FAKE Wallet to Spread Malware. Post by: Mrengage on May 11, 2019, 10:02:19 PM Good job but why giving me a red trust when I haven't took part in any thing of GitHub viruses on the system.
Title: Re: SCAM - Ulord(UT) FAKE ANN and FAKE Wallet to Spread Malware. Post by: morvillz7z on May 11, 2019, 10:12:28 PM Good job but why giving me a red trust when I haven't took part in any thing of GitHub viruses on the system. You posted ANN thread for Ulord and links to fake GitHub with infected wallets. I believe this is the thread, which is now deleted: https://bitcointalk.org/index.php?topic=5141572.0 Does anyone have it archived somewhere? https://i.ibb.co/NYsjjXX/sds.jpg https://i.ibb.co/TWBmrGG/ulord2.jpg Title: Re: SCAM - Ulord(UT) FAKE ANN and FAKE Wallet to Spread Malware. Post by: Mrengage on May 11, 2019, 10:20:31 PM Dam that was a long ago it happen due to this ACC was hacked, I just got it back and getting to see all this
Title: Re: SCAM - Ulord(UT) FAKE ANN and FAKE Wallet to Spread Malware. Post by: Mrengage on May 11, 2019, 10:22:32 PM I can repeat my self this ACC was hacked I was even logout completely.
Title: Re: SCAM - Ulord(UT) FAKE ANN and FAKE Wallet to Spread Malware. Post by: Bitcoin_Arena on May 11, 2019, 10:24:49 PM Good job but why giving me a red trust when I haven't took part in any thing of GitHub viruses on the system. You think you are a smart?You deleted the topic and then came here claiming you never announced it On the screenshot your name is clearly there on the Fake Ann. Dam that was a long ago it happen due to this ACC was hacked, I just got it back and getting to see all this For starters 1. When was your account hacked? 2. How did you get it back? 3. When did you regain control of your account? Title: Re: SCAM - Ulord(UT) FAKE ANN and FAKE Wallet to Spread Malware. Post by: morvillz7z on May 11, 2019, 10:29:32 PM You think you are a smart? You deleted the topic and then came here claiming you never announced it. On the screenshot your name is clearly there on the Fake Ann. I'm not trying to defend him but there is another user who earlier today reported that he was temporarily hacked: https://bitcointalk.org/index.php?topic=5141746 I was due to send theymos a msg tomorrow and see if there is indeed unusual activity (as in different IP logs) around both accounts. Title: Re: SCAM - Ulord(UT) FAKE ANN and FAKE Wallet to Spread Malware. Post by: Mrengage on May 11, 2019, 10:30:06 PM At first I wasn't able to login this account it was showing wrong password and when I finally get in I got to see this I wasn't even online yesterday to make a post I can't even make a post and get it of so quickly. Check this account well sir.
Title: Re: SCAM - Ulord(UT) FAKE ANN and FAKE Wallet to Spread Malware. Post by: Mrengage on May 11, 2019, 10:33:10 PM You think you are a smart? You deleted the topic and then came here claiming you never announced it. On the screenshot your name is clearly there on the Fake Ann. I'm not trying to defend him but there is another user who earlier today reported that he was temporarily hacked: https://bitcointalk.org/index.php?topic=5141746 I was due to send theymos a msg tomorrow and see if there is indeed unusual activity (as in different IP logs) around both accounts. Title: Re: SCAM - Ulord(UT) FAKE ANN and FAKE Wallet to Spread Malware. Post by: Mrengage on May 11, 2019, 10:37:05 PM Good job but why giving me a red trust when I haven't took part in any thing of GitHub viruses on the system. You think you are a smart?You deleted the topic and then came here claiming you never announced it On the screenshot your name is clearly there on the Fake Ann. Dam that was a long ago it happen due to this ACC was hacked, I just got it back and getting to see all this For starters 1. When was your account hacked? 2. How did you get it back? 3. When did you regain control of your account? Title: Re: SCAM - Ulord(UT) FAKE ANN and FAKE Wallet to Spread Malware. Post by: Bitcoin_Arena on May 11, 2019, 10:47:21 PM I was unable to login this account today that this INCIDENT took place and its still today that the post was made. Definitely this ACCOUNT WAS HACKED! Let me give you a benefit of doubt. Assuming you were not able to login, that means your password was changed right?Why is it that on the seclog, there is nothing to show that your password was change? BPIP too has no information showing that your password was changed recently Look I am no hater or anything like that, I am just trying to reason I'm not trying to defend him but there is another user who earlier today reported that he was temporarily hacked: https://bitcointalk.org/index.php?topic=5141746 Maybe that could work too.I was due to send theymos a msg tomorrow and see if there is indeed unusual activity (as in different IP logs) around both accounts. By the way i don't know much Spanish yet, so i don't know what really happened on that other guy's story but what i see on BPIP and Seclog is only one passowrd change that happened today Quote Today at 09:26:50 AM - bbvedf - password changed And by change, it's just "password change" so i am wondering how he could have been able to access his account to change the password if he already wasn't able to log in. Title: Re: SCAM - Ulord(UT) FAKE ANN and FAKE Wallet to Spread Malware. Post by: Mrengage on May 11, 2019, 10:53:57 PM I noticed an increase in those type of fake projects with malicious/virus wallets, etc. Maybe it is a way of scammers to retaliate because their projects were caught. (?) This could very well be the reason behind all these fake ANN. It almost feels as like forum is under attack. :-\ Just look at recently created ones, all 5 of them... https://i.ibb.co/NYsjjXX/sds.jpg @OP they have created another topic: https://bitcointalk.org/index.php?topic=5141572.0 HyperCash just got brand new ann, I wish theymos could go after those idiots and wipe them out. I believe this proof will let you know that those 5 ACCs where HACKED and used to make those post in a roll. Please sir look in this issues. I know nothing about this and if I was to post that topic definitely I will reply to those who replied the post. For example I would have in courage them to invest. Now look at the other hand the post I didn't even see it and secondly it was deleted at that moment. Title: Re: SCAM - Ulord(UT) FAKE ANN and FAKE Wallet to Spread Malware. Post by: Mrengage on May 11, 2019, 11:05:57 PM I was unable to login this account today that this INCIDENT took place and its still today that the post was made. Definitely this ACCOUNT WAS HACKED! Let me give you a benefit of doubt. Assuming you were not able to login, that means your password was changed right?Why is it that on the seclog, there is nothing to show that your password was change? BPIP too has no information showing that your password was changed recently Look I am no hater or anything like that, I am just trying to reason I'm not trying to defend him but there is another user who earlier today reported that he was temporarily hacked: https://bitcointalk.org/index.php?topic=5141746 Maybe that could work too.I was due to send theymos a msg tomorrow and see if there is indeed unusual activity (as in different IP logs) around both accounts. By the way i don't know much Spanish yet, so i don't know what really happened on that other guy's story but what i see on BPIP and Seclog is only one passowrd change that happened today Quote Today at 09:26:50 AM - bbvedf - password changed And by change, it's just "password change" so i am wondering how he could have been able to access his account to change the password if he already wasn't able to log in. And secondly I don't logout my account from my browser It's always login but was surprised when I opened my browser and the ACC was logged out. Title: Re: SCAM - Ulord(UT) FAKE ANN and FAKE Wallet to Spread Malware. Post by: Mrengage on May 11, 2019, 11:12:29 PM I was unable to login this account today that this INCIDENT took place and its still today that the post was made. Definitely this ACCOUNT WAS HACKED! Let me give you a benefit of doubt. Assuming you were not able to login, that means your password was changed right?Why is it that on the seclog, there is nothing to show that your password was change? BPIP too has no information showing that your password was changed recently Look I am no hater or anything like that, I am just trying to reason I'm not trying to defend him but there is another user who earlier today reported that he was temporarily hacked: https://bitcointalk.org/index.php?topic=5141746 Maybe that could work too.I was due to send theymos a msg tomorrow and see if there is indeed unusual activity (as in different IP logs) around both accounts. By the way i don't know much Spanish yet, so i don't know what really happened on that other guy's story but what i see on BPIP and Seclog is only one passowrd change that happened today Quote Today at 09:26:50 AM - bbvedf - password changed And by change, it's just "password change" so i am wondering how he could have been able to access his account to change the password if he already wasn't able to log in. Title: Re: SCAM - Ulord(UT) FAKE ANN and FAKE Wallet to Spread Malware. Post by: morvillz7z on May 11, 2019, 11:19:59 PM I get it you are basically doing your job to get scammers. Which is a good thing to know but right here sir I didn't make that post and this ACC was hacked I don't logout my account from my browser. But was surprised when I opened my browser what I saw was BITCOINTALK HOME PAGE. AND THE ACCOUNT WAS LOGOUT I've sent theymos a PM about your case and bbvedf. If I get a confirmation from him that there was indeed an unusual activity surrounding your account (as in login from different IPs / devices), I will remove my negative tag, until then there is nothing much you can do. We have to wait. :) Title: Re: SCAM - Ulord(UT) FAKE ANN and FAKE Wallet to Spread Malware. Post by: Mrengage on May 11, 2019, 11:23:01 PM No problem... I will be waiting
Title: Re: SCAM - Ulord(UT) FAKE ANN and FAKE Wallet to Spread Malware. Post by: Bitcoin_Arena on May 12, 2019, 06:12:30 AM I get it you are basically doing your job to get scammers. Which is a good thing to know but right here sir I didn't make that post and this ACC was hacked I don't logout my account from my browser. But was surprised when I opened my browser what I saw was BITCOINTALK HOME PAGE. AND THE ACCOUNT WAS LOGOUT Alright, let's wait for Theymos' response.If, you account was hacked then you really need to secure it and that starts with changing passwords which you haven't done up to now since the said hack. Title: Re: SCAM - Ulord(UT) FAKE ANN and FAKE Wallet to Spread Malware. Post by: DdmrDdmr on May 12, 2019, 02:52:35 PM <…> @bbvedf is from my local board, and has opened a thread there to try to get some help on the matter (see Ayuda con mi cuenta de BCT (https://bitcointalk.org/index.php?topic=5141746.msg51002572#msg51002572) – it’s in Spanish though). The way he’s depicting the events, he claims that he was “silently hacked”. That is to say, someone gained access to his account, using his same credentials (not changing them), and published the fake Ann thread from his account. If true, that would be the best way to use an account for wrong doing, although it does constitute a very difficult case to prove. Quote Today at 09:26:50 AM - bbvedf - password changed And by change, it's just "password change" so i am wondering how he could have been able to access his account to change the password if he already wasn't able to log in.It also likely denotes a weak password management, as for this to happen without brute force, he would have to have used the same password in a crypto related site and have the password leaked from there. That alone is arguably irresponsible to some extent, but I’m pretty sure there are thousands of users here that use the same password on a couple of sites. The only possible way to move on with trying to clear @bbvedf’s claims (which are very similar to @Mrengage’s) would be for both of the to ask @theymos for their access logs for the date of events, and see what that may show. It certainly will not be conclusive, but may show something interesting (i.e. common IPs from Russia for example – again not conclusive, but opens a door to suspicion). Looking at the archived thread (http://archive.fo/yfa4D), I believe tagging the accounts is correct (how not to, seeing the evidence), but it would be good to know if we are facing a couple of more intelligent account hacks here, where the accounts are only taken temporarily without changing the credentials. It’s likely nearly impossible to prove this were it to be true, but the IP logs could help to raise suspicion or drown it altogether. Of course making IP log retrieval a general habit would be a pain in the back side, and likely won’t be done except on an rare occasions, but perhaps it’s worth a go here to see what it may lead to. Title: Re: SCAM - Ulord(UT) FAKE ANN and FAKE Wallet to Spread Malware. Post by: Mrengage on May 12, 2019, 05:34:20 PM I get it you are basically doing your job to get scammers. Which is a good thing to know but right here sir I didn't make that post and this ACC was hacked I don't logout my account from my browser. But was surprised when I opened my browser what I saw was BITCOINTALK HOME PAGE. AND THE ACCOUNT WAS LOGOUT Alright, let's wait for Theymos' response.If, you account was hacked then you really need to secure it and that starts with changing passwords which you haven't done up to now since the said hack. Title: Re: SCAM - Ulord(UT) FAKE ANN and FAKE Wallet to Spread Malware. Post by: Mrengage on May 12, 2019, 05:39:43 PM <…> @bbvedf is from my local board, and has opened a thread there to try to get some help on the matter (see Ayuda con mi cuenta de BCT (https://bitcointalk.org/index.php?topic=5141746.msg51002572#msg51002572) – it’s in Spanish though). The way he’s depicting the events, he claims that he was “silently hacked”. That is to say, someone gained access to his account, using his same credentials (not changing them), and published the fake Ann thread from his account. If true, that would be the best way to use an account for wrong doing, although it does constitute a very difficult case to prove. Quote Today at 09:26:50 AM - bbvedf - password changed And by change, it's just "password change" so i am wondering how he could have been able to access his account to change the password if he already wasn't able to log in.It also likely denotes a weak password management, as for this to happen without brute force, he would have to have used the same password in a crypto related site and have the password leaked from there. That alone is arguably irresponsible to some extent, but I’m pretty sure there are thousands of users here that use the same password on a couple of sites. The only possible way to move on with trying to clear @bbvedf’s claims (which are very similar to @Mrengage’s) would be for both of the to ask @theymos for their access logs for the date of events, and see what that may show. It certainly will not be conclusive, but may show something interesting (i.e. common IPs from Russia for example – again not conclusive, but opens a door to suspicion). Looking at the archived thread (http://archive.fo/yfa4D), I believe tagging the accounts is correct (how not to, seeing the evidence), but it would be good to know if we are facing a couple of more intelligent account hacks here, where the accounts are only taken temporarily without changing the credentials. It’s likely nearly impossible to prove this were it to be true, but the IP logs could help to raise suspicion or drown it altogether. Of course making IP log retrieval a general habit would be a pain in the back side, and likely won’t be done except on an rare occasions, but perhaps it’s worth a go here to see what it may lead to. Title: Re: SCAM - Ulord(UT) FAKE ANN and FAKE Wallet to Spread Malware. Post by: Mrengage on May 12, 2019, 05:42:41 PM Where I suspected this account was slightly hacked and used to make that post is where I open my browser and the account wasn't login rather it was just the normal bitcointalk.org interface I saw. I was surprised.
Title: Re: SCAM - Ulord(UT) FAKE ANN and FAKE Wallet to Spread Malware. Post by: morvillz7z on May 13, 2019, 01:57:59 PM I don't want to start a new thread for every fake ANN with malicious wallets so I will be making a MEGA thread by the end of the week. Will list every single one of them in chronological order and update it daily. In my estimation, there are +30 already (all created in the past 30 days).
Ones I've spotted today (will tag and report whenever I get more info about wallets): [ANN] [Masternode] [POS] FYD Coin (https://bitcointalk.org/index.php?topic=5142492.0) - (archived (http://archive.fo/ojMkR)) Fake Github, created 5 hours ago - https://github.com/Fyd-Coin Original FydCoin - https://github.com/Fydcoin/FYD and their ANN (https://bitcointalk.org/index.php?topic=5125538.0) Proof: https://www.virustotal.com/#/file/b4cc9f85f184cffe882d2c56993d03fc1f38de338e838d40f26d884725b4a7c2/detection [RSIN] Roketsin (https://bitcointalk.org/index.php?topic=5141953.0) - (archived (http://archive.fo/ySSfq)) Fake ann with links to bitbucket. Original announcement thread for Roketsin - [RSIN] Roketsin (https://bitcointalk.org/index.php?topic=4265612.0) Proof: https://www.virustotal.com/#/file/e92d4760a0d1736821cdbccc8bfb195274acce9f1d6080b318ce09523ecfa3c4/detection MultiVAC (MTV) (https://bitcointalk.org/index.php?topic=5141976.0) Proof: Rig software https://www.virustotal.com/#/file/7a60731b74243daeebf7e675c1c19beaf37f8514d0b72add822730c1d19a765b/detection Wallet https://www.virustotal.com/#/file/40a7e731b9aadca0f29cd1c25f90ac30f4df4765bfe6d2bb3c79fc53e6730b93/detection MIR COIN (https://bitcointalk.org/index.php?topic=5141969.0) https://github.com/MIR-COIN Proof: https://www.virustotal.com/#/file/7a45aae25028d287fd4d1efac5671ccb6c61635e38931d8fc76c238e2463a0d1/detection Again, special thanks to TakeItEasy (https://bitcointalk.org/index.php?action=profile;u=375097) for wallet testing! These two are very likely to be fake as well, having links to mega.nz wallets (self-moderated) opposed to the original project having their own GitHub. Fakes: [ANN] ONLINE-LEAGUE [OLC] | LoL | CS:GO | THE GAME IS YOUR's | PoS | PoW | MN (https://bitcointalk.org/index.php?topic=5142502.0) - (archived (http://archive.fo/4UEwz)) Original - https://bitcointalk.org/index.php?topic=5141278.0 and their GitHub - https://github.com/ProjectOnlineLeague EDIT; One of the topics was just edited...and replaced lol https://bitcointalk.org/index.php?topic=5142590.0 - (archived (http://archive.fo/Qwtt4)) EDIT2; ONLINE-LEAGUE impersonators tagged and reported. Proof: https://www.virustotal.com/gui/file-analysis/MzBjYjNlODljYzQ2ZWFhYjVmNWEzNWFlOTBlNmQxNmU6MTU1Nzc2MDM0Mw==/detection EDIT3; :D Yet another fake ANN (6 total for today), possibly comprised account as well (judging by mipari's post history). :-\ [ANN] [Stellar] Stellar Gold XLMG Pre-Mine (https://bitcointalk.org/index.php?topic=5142656.0) - (archived (http://archive.fo/BfbBT)) Wallet straight from fake DUO NETWORK Github: https://i.ibb.co/KbzCTx0/wallet.jpg Title: Re: SCAM - Ulord(UT) FAKE ANN and FAKE Wallet to Spread Malware. Post by: Mrengage on May 13, 2019, 03:37:17 PM I don't want to start a new thread for every fake ANN with malicious wallets so I will be making a MEGA thread by the end of the week. Will list every single one of them in chronological order and update it daily. In my estimation, there are +30 already (all created in the past 30 days). Good work sir definitely this will just keep helping the community on not to encounter losses in future. Ones I've spotted today (will tag and report whenever I get more info about wallets): [ANN] [Masternode] [POS] FYD Coin (https://bitcointalk.org/index.php?topic=5142492.0) - (archived (http://archive.fo/ojMkR)) Fake Github, created 5 hours ago - https://github.com/Fyd-Coin Original FydCoin - https://github.com/Fydcoin/FYD and their ANN (https://bitcointalk.org/index.php?topic=5125538.0) [RSIN] Roketsin (https://bitcointalk.org/index.php?topic=5141953.0) - (archived (http://archive.fo/ySSfq)) Fake ann with links to bitbucket. Original announcement thread for Roketsin - [RSIN] Roketsin (https://bitcointalk.org/index.php?topic=4265612.0) These two are very likely to be fake as well, having links to mega.nz wallets (self-moderated) opposed to the original project having their own GitHub. Fakes: [ANN] ONLINE-LEAGUE [OLC] | LoL | CS:GO | THE GAME IS YOUR's | PoS | PoW | MN (https://bitcointalk.org/index.php?topic=5142502.0) - (archived (http://archive.fo/4UEwz)) Original - https://bitcointalk.org/index.php?topic=5141278.0 and their GitHub - https://github.com/ProjectOnlineLeague EDIT; One of the topics was just edited...and replaced lol https://bitcointalk.org/index.php?topic=5142590.0 - (archived (http://archive.fo/Qwtt4)) EDIT2; ONLINE-LEAGUE impersonators tagged and reported. Proof: https://www.virustotal.com/gui/file-analysis/MzBjYjNlODljYzQ2ZWFhYjVmNWEzNWFlOTBlNmQxNmU6MTU1Nzc2MDM0Mw==/detection Title: Re: SCAM - Ulord(UT) FAKE ANN and FAKE Wallet to Spread Malware. Post by: morvillz7z on May 13, 2019, 07:47:21 PM I don't want to edit my previous post the 4th time, so I'll post my new findings here:
It's pretty much a game of cat and mouse at this point: https://i.ibb.co/d7CXG3J/lol.jpg With the exception of ChanceBetCoin and Tampa Bay Token all other ANN seems to be fake. There are all posted within the last hour or so and have a link to the same GitHub (which is created also an hour ago). https://github.com/Core-Wallet/ I will update this post, tag and report users involved later...that's close to 20 fake topics today, a good/productive start of the week. :-\ [ANN] Halcyon v1.1.0.3 ~ NeoScrypt PoW and up to 100% PoS (https://bitcointalk.org/index.php?topic=5142677.0) - (archived (http://archive.fo/bCeud)) https://github.com/Core-Wallet/ - fake GitHub (infected wallets inside?) Original Halcyon thread - https://bitcointalk.org/index.php?topic=895829.0 ANN] ONEROOT NETWORK (https://bitcointalk.org/index.php?topic=5142686.0) - (archived (http://archive.fo/mVgk7)) https://github.com/Core-Wallet/ - fake GitHub (infected wallets inside?) Original ONEROOT thread - https://bitcointalk.org/index.php?topic=3121006.0 [ANN][XCP] Counterparty (https://bitcointalk.org/index.php?topic=5142687.0) - (archived (http://archive.fo/IdHqY)) https://github.com/Core-Wallet/ - fake GitHub (infected wallets inside?) Original Counterparty thread - https://bitcointalk.org/index.php?topic=395761.0 ANN] MNPR coin (https://bitcointalk.org/index.php?topic=5142689.0) - (archived (http://archive.fo/tsb0x)) https://github.com/Core-Wallet/ - fake GitHub (infected wallets inside?) Original MNPR coin thread - https://bitcointalk.org/index.php?topic=5113359.0 [ANN] [BSV] [Bitcoin SV] Original Satoshi Vision (https://bitcointalk.org/index.php?topic=5142691.0) - (archived (http://archive.fo/MX19m)) https://github.com/Core-Wallet/ - fake GitHub (infected wallets inside?) Original BSV thread - https://bitcointalk.org/index.php?topic=4985868.0 [ANN] [BCRM] Bitcoin RM: A new Bitcoin Fork is now LIVE (https://bitcointalk.org/index.php?topic=5142695.0) - (archived (http://archive.fo/QmYMH)) https://github.com/Core-Wallet/ - fake GitHub (infected wallets inside?) Original [BCRM] Bitcoin RM thread - https://bitcointalk.org/index.php?topic=4735005.0 [ANN] Lytix - PoS Maxnode (https://bitcointalk.org/index.php?topic=5142697.0) - (archived] (http://archive.fo/xqPju)) https://github.com/Core-Wallet/ - fake GitHub (infected wallets inside?) Original Lytix thread - https://bitcointalk.org/index.php?topic=5066344 [ANN] BitGrin (XBG) (https://bitcointalk.org/index.php?topic=5142699.0) - (archived (http://archive.fo/Brd5x)) https://github.com/Core-Wallet/ - fake GitHub (infected wallets inside?) Original BitGrin thread - https://bitcointalk.org/index.php?topic=5104608.0 [ANN] Bitcoin Confidential (https://bitcointalk.org/index.php?topic=5142701.0) - (archived (http://archive.fo/X43gr)) https://github.com/Core-Wallet/ - fake GitHub (infected wallets inside?) Original Bitcoin Confidential thread - https://bitcointalk.org/index.php?topic=5135251.0 [ANN][POW]🥇DeroGold🥇 (https://bitcointalk.org/index.php?topic=5142703.0) - (archived (http://archive.fo/zCRFp)) https://github.com/Core-Wallet/ - fake GitHub (infected wallets inside?) Original DeroGold thread - https://bitcointalk.org/index.php?topic=5088519.0 [ANN][POW][HARDFORK] MicroBitcoin (https://bitcointalk.org/index.php?topic=5142704.0) - (archived (http://archive.fo/0rkS5)) https://github.com/Core-Wallet/ - fake GitHub (infected wallets inside?) Original MicroBitcoin thread - https://bitcointalk.org/index.php?topic=3982489.0 [XVC] Vcash Official Community Thread ▱ Zerotime ▱ Anon ▱ Auto Block Size (https://bitcointalk.org/index.php?topic=5142706.0) - (archived (http://archive.fo/AWuhm)) https://github.com/Core-Wallet/ - fake GitHub (infected wallets inside?) Original Vcash thread - https://bitcointalk.org/index.php?topic=1504342.0 Title: Re: SCAM - Ulord(UT) FAKE ANN and FAKE Wallet to Spread Malware. Post by: Lafu on May 13, 2019, 08:42:57 PM And another one !
User : OLC Team (https://bitcointalk.org/index.php?action=profile;u=2600628) [ANN] ONLINE-LEAGUE [OLC] | LoL | CS:GO | THE GAME IS YOUR's | PoS | PoW | MN (https://bitcointalk.org/index.php?topic=5142690.0) Now self moderated ! Archive: https://archive.fo/ed3MS (https://archive.fo/ed3MS) The Original for Ann for ONLINE-LEAGUE is here : https://bitcointalk.org/index.php?topic=5141278.0 (https://bitcointalk.org/index.php?topic=5141278.0) Title: Re: SCAM - Ulord(UT) FAKE ANN and FAKE Wallet to Spread Malware. Post by: morvillz7z on May 13, 2019, 10:22:12 PM They might have a bot to post all these threads. Take a look at my recent tags vs. newbie accounts who woke on April 28th.
https://i.ibb.co/qFbJVZT/feedback2.jpg https://i.ibb.co/0ZpYy5K/wake-up.jpg If that's true, I won't be able to keep up with all these fake threads, the Night King has won. ;D Title: Re: SCAM - Ulord(UT) FAKE ANN and FAKE Wallet to Spread Malware. Post by: morvillz7z on May 15, 2019, 06:46:22 PM At least 10 new fake ANN posted in the last two hours, good grief ;D All using MultiVAC's malware wallet/GitHub.
I will update this post shortly: [ANN] BitGrin (XBG) – MimbleWimble with Bitcoin economics – Windows wallet! (https://bitcointalk.org/index.php?topic=5143579.0) - (archived (http://archive.fo/W22VE)) Original BitGrin thread: https://bitcointalk.org/index.php?topic=5104608.0 Proof: Rig software https://www.virustotal.com/#/file/7a60731b74243daeebf7e675c1c19beaf37f8514d0b72add822730c1d19a765b/detection Wallet https://www.virustotal.com/#/file/40a7e731b9aadca0f29cd1c25f90ac30f4df4765bfe6d2bb3c79fc53e6730b93/detection [ANN][CLAM] CLAMs, Proof-Of-Chain, Proof-Of-Working-Stake, a.k.a. "Clamcoin" (https://bitcointalk.org/index.php?topic=5143580.0) - (archived (http://archive.fo/SpqxN)) Original CLAMs thread: https://bitcointalk.org/index.php?topic=623147.0 Proof: MultiVAC's malware wallet/GitHub (see BitGrin links) [ANN][TZC] TrezarCoin Super-Secure-PoW/PoS (https://bitcointalk.org/index.php?topic=5143584.0) - (archived (http://archive.fo/t5IKo)) Original TrezarCoin thread: https://bitcointalk.org/index.php?topic=2140812.0 Proof: MultiVAC's malware wallet/GitHub (see BitGrin links) [ANN] [SPN] SpartanCoin (https://bitcointalk.org/index.php?topic=5143585.0) - (archived (http://archive.fo/SXlKj)) Original SpartanCoin thread: https://bitcointalk.org/index.php?topic=5119179.0 https://bitcointalk.org/index.php?topic=491637.0 Proof: MultiVAC's malware wallet/GitHub (see BitGrin links) [ANN] Ravencoin [RVN] PoW GPU Mining | Asset Transfer Blockchain (Updated ANN) (https://bitcointalk.org/index.php?topic=5143586.0) - (archived (http://archive.fo/jUiLC)) Original Ravencoin thread: https://bitcointalk.org/index.php?topic=3238497 Proof: MultiVAC's malware wallet/GitHub (see BitGrin links) [ANN]SwiftCash - Decentralized Governance and Economy (https://bitcointalk.org/index.php?topic=5143587.0) - (http://archive.fo/6Void) Original SwiftCash thread: https://bitcointalk.org/index.php?topic=5062453.0 Proof: MultiVAC's malware wallet/GitHub (see BitGrin links) eXperience Points [XP] ENGLISH (https://bitcointalk.org/index.php?topic=5143589.0) - (archived (http://archive.fo/Mk7FB)) Original eXperience Points thread: https://bitcointalk.org/index.php?topic=2313170.0 Proof: MultiVAC's malware wallet/GitHub (see BitGrin links) [ANN] Denarius [D] - Originator "Tribus" PoW/PoS Hybrid Masternodes (https://bitcointalk.org/index.php?topic=5143590.0) - (archived (http://archive.fo/WiLrs)) Original Denarius thread: https://bitcointalk.org/index.php?topic=1967207.0 Proof: MultiVAC's malware wallet/GitHub (see BitGrin links) [ANN] [VBK] [PoP/PoW] VeriBlock: Securing the World's Blockchains Using Bitcoin (https://bitcointalk.org/index.php?topic=5143591.0) - (archived (http://archive.fo/EQtQV)) Original VeriBlock thread: https://bitcointalk.org/index.php?topic=3133450.0 Proof: MultiVAC's malware wallet/GitHub (see BitGrin links) [ANN][POS/MN] [Bounties] Coin2Play - Gambling and Casino online (https://bitcointalk.org/index.php?topic=5143592.0) - (archived (http://archive.fo/d8IXM)) Original Coin2Play thread:https://bitcointalk.org/index.php?topic=4849316 Proof: MultiVAC's malware wallet/GitHub (see BitGrin links) [EAC] EarthCoin (EAC) !!! RELOADED !!! (https://bitcointalk.org/index.php?topic=5143594.0) - (archived (http://archive.fo/qM8TJ)) Original EarthCoin thread: https://bitcointalk.org/index.php?topic=2161853.0 Proof: MultiVAC's malware wallet/GitHub (see BitGrin links) [ANN][POS/MN] ⭐ SafeGames [SGS] - Build your own Game ⭐ CryptoBridge paid (https://bitcointalk.org/index.php?topic=5143595.0) - (archived (http://archive.fo/OUPXj)) Original SafeGames [SGS] thread: https://bitcointalk.org/index.php?topic=5111563.0 Proof: MultiVAC's malware wallet/GitHub (see BitGrin links) [ANN][TLRM] - Tellurium Official - RELEASE 17/04/19 14:00 GMT+2 !!! (https://bitcointalk.org/index.php?topic=5143598.0) - (archived (http://archive.fo/ewoTz)) Original Tellurium thread: https://bitcointalk.org/index.php?topic=5132724.0 Proof: MultiVAC's malware wallet/GitHub (see BitGrin links) ❤️[ANN] Surfcoin SURF❤️Only Browser Mining❤️Ad Platform❤️POS❤️Mobile Mining❤ (https://bitcointalk.org/index.php?topic=5143600.0) - (archived (http://archive.fo/0b6k7)) Original Surfcoin thread: https://bitcointalk.org/index.php?topic=5078617.0 Proof: MultiVAC's malware wallet/GitHub (see BitGrin links) Title: Re: SCAM - Ulord(UT) FAKE ANN and FAKE Wallet to Spread Malware. Post by: morvillz7z on May 17, 2019, 02:37:15 PM These guys had a field day yesterday with all-time high in created fake announcement threads. I counted 28. :o
Way more relaxed today as I found just one (there could be more) but this one was way too obvious. [ANN][PoW][X16R] Zyrk - Pushing the boundaries of blockchain technology (https://bitcointalk.org/index.php?topic=5144229.0) - (archived (http://archive.fo/7o221)) And their fake GitHub created just a few hours ago: https://github.com/release-coin Original Zyrk thread: https://bitcointalk.org/index.php?topic=5139507.0 https://github.com/ZyrkProject/zyrk-core They even tried to hide/mask it: https://i.ibb.co/SmhggJ6/hide.jpg Interesting to point out, account (https://bitcointalk.org/index.php?action=profile;u=55960) posting their thread is from 2012 (woke up May 16th), I suppose a brand new batch of compromised accounts. Title: Re: SCAM - Ulord(UT) FAKE ANN and FAKE Wallet to Spread Malware. Post by: blurryeyed on May 17, 2019, 03:28:18 PM Tagged & reported. These fake ANNs are becoming a bit of a problem....
Title: Re: SCAM - Ulord(UT) FAKE ANN and FAKE Wallet to Spread Malware. Post by: morvillz7z on May 17, 2019, 03:40:01 PM Tagged & reported. These fake ANNs are becoming a bit of a problem.... Yes, they've been a problem for a while now...and it's not just fake ANN, these people use compromised accounts which appears to be the bigger issue here. I honestly have no problem reporting a few of those every day, but not 20+, that's just crazy and takes way too much time and energy. Forum administration seems to be aware of the problem though, that's a positive sign! We're on it, thanks for tagging and reporting them while they run out of accounts. I've been locking a lot of these hacked accounts, a part of them are active accounts which the hacker silently used. We'll handle account recoveries as they come in. Curious how they picked the altcoin threads, seems pretty random. Title: Re: SCAM - Ulord(UT) FAKE ANN and FAKE Wallet to Spread Malware. Post by: JeromeTash on May 17, 2019, 11:06:03 PM Good work @Morvillz7z, looks like the mods are doing a good job right now and also responding in time to delete the scammer's threads once they are reported.
I did try to report their GitHub profiles too including this one; https://github.com/MultiVAC but for some reason, it is not getting removed, I don't know why? I did include information about the scammer trying to spread malware alongside the virus total results. Does the process take a long time before the account gets removed? Title: Re: SCAM - Ulord(UT) FAKE ANN and FAKE Wallet to Spread Malware. Post by: morvillz7z on May 17, 2019, 11:29:57 PM Does the process take a long time before the account gets removed? I would say anywhere between one to three days. My experience with GitHub support has been quite good so far, I think I have taken down 3 or 4 of those fake ones. HyperCash-HC was removed within 24hrs of my report. Make sure your report has all the details, you need to include links to both infected wallet and virustotal. As for MultiVAC, ask TakeItEasy to test their latest two repository uploads - "Core" and "Release". Report these two. Edit; Update: May 21, 2019, GitHub is taken down! https://i.ibb.co/FYK6r1t/multivac.jpg Title: Re: SCAM - Ulord(UT) FAKE ANN and FAKE Wallet to Spread Malware. Post by: JollyGood on July 01, 2019, 12:07:17 AM Great work. They are added to my scam list too.
As a community we need to weed out these thieves no matter how big or small their scam operation is and no matter what their ultimate goal or plan is. If we all get together to keep posting about the scammers then they have less and less chance of succeeding by ripping people off. Unfortunately somewhere along the line a newbie or gullible person will invest and lose out but by far the majority of people will be protected. Title: Re: SCAM - Ulord(UT) FAKE ANN and FAKE Wallet to Spread Malware. Post by: morvillz7z on July 01, 2019, 11:05:25 AM They are added to my scam list too. What do you mean added to your list? The real Ulord (UT) project/team has nothing to do with this scam accusations. The ANN in the OP was posted from a hacked account with fake GitHub and everything, simply impersonating their project. There were hundreds of those fake announcement threads for the last couple of months. Title: Re: SCAM - Ulord(UT) FAKE ANN and FAKE Wallet to Spread Malware. Post by: FYDcoin Official on September 21, 2019, 05:56:42 AM I don't want to start a new thread for every fake ANN with malicious wallets so I will be making a MEGA thread by the end of the week. Will list every single one of them in chronological order and update it daily. In my estimation, there are +30 already (all created in the past 30 days). Good work sir definitely this will just keep helping the community on not to encounter losses in future. Ones I've spotted today (will tag and report whenever I get more info about wallets): [ANN] [Masternode] [POS] FYD Coin (https://bitcointalk.org/index.php?topic=5142492.0) - (archived (http://archive.fo/ojMkR)) Fake Github, created 5 hours ago - https://github.com/Fyd-Coin Original FydCoin - https://github.com/Fydcoin/FYD and their ANN (https://bitcointalk.org/index.php?topic=5125538.0) [RSIN] Roketsin (https://bitcointalk.org/index.php?topic=5141953.0) - (archived (http://archive.fo/ySSfq)) Fake ann with links to bitbucket. Original announcement thread for Roketsin - [RSIN] Roketsin (https://bitcointalk.org/index.php?topic=4265612.0) These two are very likely to be fake as well, having links to mega.nz wallets (self-moderated) opposed to the original project having their own GitHub. Fakes: [ANN] ONLINE-LEAGUE [OLC] | LoL | CS:GO | THE GAME IS YOUR's | PoS | PoW | MN (https://bitcointalk.org/index.php?topic=5142502.0) - (archived (http://archive.fo/4UEwz)) Original - https://bitcointalk.org/index.php?topic=5141278.0 and their GitHub - https://github.com/ProjectOnlineLeague EDIT; One of the topics was just edited...and replaced lol https://bitcointalk.org/index.php?topic=5142590.0 - (archived (http://archive.fo/Qwtt4)) EDIT2; ONLINE-LEAGUE impersonators tagged and reported. Proof: https://www.virustotal.com/gui/file-analysis/MzBjYjNlODljYzQ2ZWFhYjVmNWEzNWFlOTBlNmQxNmU6MTU1Nzc2MDM0Mw==/detection Great job thank you for keeping us all safe |