AWARE PHISHING BITCOINTALK.ORG SITE BY USER gvuandrew

[Joel_Jantsen]

Not sure if this belongs here ,mods are free to move. Everyone must be aware of the phishing bitcointalk.org where L is replace by I and its difficult to make out in the browser.

This user  gvuandrew is spreading the link to the phishing site (maybe he owns it too).Today gurre got the PM from gvuandrew which was ,

!!! WARNING: This user is a newbie. If you are expecting a message from a more veteran member, then this is an imposter !!!
Yes, Jason Boyko is a big scammer check this thread:


https://bitcointalk.org/index.php?topic=1314653.0

You can't easily make out in the quotes that link is fake but once you edit it ,this is what you'll see



Ignore all the PM's by him.

[Lutpin]

This user gvuandrew is spreading the link to the phishing site.
Today gurre got the PM from gvuandrew which was
-snip-

gurre should report the PM to any Mod.


This is nothing new, there are already several alike threads in this section.
https://bitcointalk.org/index.php?topic=1386622.0 (a bit longer thread, the bitcointaIk part gets dropped a little later)
https://bitcointalk.org/index.php?topic=1389494.0 (straightup thread about the same thing)
https://bitcointalk.org/index.php?topic=1393737.0 (same scheme, sent via mail)

[gurre]

This user gvuandrew is spreading the link to the phishing site.
Today gurre got the PM from gvuandrew which was
-snip-

gurre should report the PM to any Mod.

Reported!

[Joel_Jantsen]

This is nothing new, there are already several alike threads in this section.
https://bitcointalk.org/index.php?topic=1386622.0 (a bit longer thread, the bitcointaIk part gets dropped a little later)
https://bitcointalk.org/index.php?topic=1389494.0 (straightup thread about the same thing)
https://bitcointalk.org/index.php?topic=1393737.0 (same scheme, sent via mail)

True but I never knew who was behind it.Or maybe the best thing I thought we could do is negative rep the user ?

[vodaljepa]

He tried to do it to me as well https://bitcointalk.org/index.php?topic=1394360.0

[Joel_Jantsen]

He tried to do it to me as well https://bitcointalk.org/index.php?topic=1394360.0

As said by Lutpin,report it to one of the mods right away.

[Lutpin]

True but I never knew who was behind it.Or maybe the best thing I thought we could do is negative rep the user ?

If the PM is real, he probably gets banned for it.

He tried to do it to me as well https://bitcointalk.org/index.php?topic=1394360.0

Same goes to you, report that PM straigth to a mod.


I've left a negative feedback for now.
Don't really think it's gonna make a big difference (newbies already get those big red warnings over their PMs), but anything that might help.

[suchmoon]

Someone put quite a bit of effort into that bitcointaik site so I think we're doomed to see a lot of spam like that. Would be nice if theymos could make those links unclickable or just kill those messages outright.

[Lutpin]

Would be nice if theymos could make those links unclickable or just kill those messages outright.

We have those "[suspicious link removed]" boxes for some links, I think those bitcointaIk.org links should be added to that list.
A meta discussion about this exact subject was already started by SebastianJu over here.

[electronicash]

christ this seems to be common these days, there are lots of them in these forum and they are just waiting for users who aren't savvy enough to click those links and login.

Someone put quite a bit of effort into that bitcointaik site so I think we're doomed to see a lot of spam like that. Would be nice if theymos could make those links unclickable or just kill those messages outright.

its going to be a good solution but should only applies to members below.. it should be clickable for full to legendary members.

[mexxer-2]

Best course of action is to report it to Cyrus and using the following comment "Sending links to phishing sites via unsolicited PMs". He should have the ability to perma-ban the user.

[bleachedno]

Did anyone try to send some abuse report to the hoster of the fake website i think this could help and get it suspended because this is very bad and dangerous.

[Lutpin]

Did anyone try to send some abuse report to the host of the fake website i think this could help and get it suspended because this is very bad and dangerous.

Like escrow.ms tired to do back in May 2014? You can try to, good luck with it.

I just got this email delivered to my inbox with title "Changing your forum password is recommended."
Domain was registered 2 days ago.

http://who.is/whois/bitcointaik.org
Email headers : http://pastebin.com/ZTXKGh82


Please use these website to report this domain.

http://www.google.com/safebrowsing/report_phish/?rd=1
http://www.phishtank.com/
https://submit.symantec.com/antifraud/phish.cgi
http://phishing.eset.com/report
http://toolbar.netcraft.com/report_url