Bitcoin Forum
November 13, 2024, 10:43:30 AM *
News: Latest Bitcoin Core release: 28.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: @theymos and admins: Have a look at this  (Read 214 times)
Pmalek (OP)
Legendary
*
Offline Offline

Activity: 2940
Merit: 7552


Playgram - The Telegram Casino


View Profile
January 15, 2021, 01:47:54 PM
Last edit: November 12, 2023, 10:04:27 AM by Pmalek
Merited by Daniel91 (2)
 #1

I tried to copy/paste a phishing email on the forum, but I ran into a weird bug. For some reason that addresses in the email can't be pasted into a block explorer. The explorer doesn't recognize the pasted address as a valid address.

The other problem is previewing the message on Bitcointalk. When I copy/pasted the content in a new post and clicked on preview, this is what I get:



The address isn't visible in either the code or quote tags, even though it's there. And look at the email content. Is the message encoded in some way that causes this glitch? Has anyone experienced this before?

Once I made the post, it became visible just fine. But you still can't look up the address on a block explorer after removing the special characters. What kind of sorcery is this?
Here is the link to the post: https://bitcointalk.org/index.php?topic=5284407.msg56102812#msg56102812

▄▄███████▄▄███████
▄███████████████▄▄▄▄▄
▄████████████████████▀░
▄█████████████████████▄░
▄█████████▀▀████████████▄
██████████████▀▀█████████
████████████████████████
██████████████▄▄█████████
▀█████████▄▄████████████▀
▀█████████████████████▀░
▀████████████████████▄░
▀███████████████▀▀▀▀▀
▀▀███████▀▀███████

▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
 
Playgram.io
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀

▄▄▄░░
▀▄







▄▀
▀▀▀░░
▄▄▄███████▄▄▄
▄▄███████████████▄▄
▄███████████████████▄
▄██████████████▀▀█████▄
▄██████████▀▀█████▐████▄
██████▀▀████▄▄▀▀█████████
████▄▄███▄██▀█████▐██████
█████████▀██████████████
▀███████▌▐██████▐██████▀
▀███████▄▄███▄████████▀
▀███████████████████▀
▀▀███████████████▀▀
▀▀▀███████▀▀▀
██████▄▄███████▄▄████████
███▄███████████████▄░░▀█▀
███████████░█████████░░
░█████▀██▄▄░▄▄██▀█████░
█████▄░▄███▄███▄░▄█████
███████████████████████
███████████████████████
██░▄▄▄░██░▄▄▄░██░▄▄▄░██
██░░░░██░░░░██░░░░████
██░░░░██░░░░██░░░░████
██▄▄▄▄▄██▄▄▄▄▄██▄▄▄▄▄████
███████████████████████
███████████████████████
 
PLAY NOW

on Telegram
[/
actmyname
Copper Member
Legendary
*
Offline Offline

Activity: 2562
Merit: 2510


Spear the bees


View Profile WWW
January 15, 2021, 01:54:24 PM
Merited by shield132 (1)
 #2

In reality, the text you copied is no different from me doing something with this kind of font.

Sᴏᴍᴇ ᴄʜᴀʀᴀᴄᴛᴇʀs ᴀʀᴇ ʙʟᴏᴄᴋᴇᴅ ᴏɴ ᴛʜᴇ ғᴏʀᴜᴍ, sᴏ ɪᴛ ᴡᴏɴ'ᴛ ᴅɪsᴘʟᴀʏ ᴛʜᴇᴍ.

I believe this was to remove the effectiveness of using unicode confusables: examples here

Pmalek (OP)
Legendary
*
Offline Offline

Activity: 2940
Merit: 7552


Playgram - The Telegram Casino


View Profile
January 16, 2021, 08:01:38 AM
 #3

It's unicode, noted.

Here is the funny part. Let's assume someone falls for this phishing attempt and wants to pay the 0.3 bitcoin to the suggested address. He can't do it. Grin Because the address doesn't get recognized when pasted into a block explorer. I wonder if it would be recognized by a wallet software like Electrum? I don't have it installed on this device to try out.

If it doesn't get recognized, the question is why use Unicode?
Was the scammer not aware of what he is doing or was it intentionally done this way?

▄▄███████▄▄███████
▄███████████████▄▄▄▄▄
▄████████████████████▀░
▄█████████████████████▄░
▄█████████▀▀████████████▄
██████████████▀▀█████████
████████████████████████
██████████████▄▄█████████
▀█████████▄▄████████████▀
▀█████████████████████▀░
▀████████████████████▄░
▀███████████████▀▀▀▀▀
▀▀███████▀▀███████

▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
 
Playgram.io
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀

▄▄▄░░
▀▄







▄▀
▀▀▀░░
▄▄▄███████▄▄▄
▄▄███████████████▄▄
▄███████████████████▄
▄██████████████▀▀█████▄
▄██████████▀▀█████▐████▄
██████▀▀████▄▄▀▀█████████
████▄▄███▄██▀█████▐██████
█████████▀██████████████
▀███████▌▐██████▐██████▀
▀███████▄▄███▄████████▀
▀███████████████████▀
▀▀███████████████▀▀
▀▀▀███████▀▀▀
██████▄▄███████▄▄████████
███▄███████████████▄░░▀█▀
███████████░█████████░░
░█████▀██▄▄░▄▄██▀█████░
█████▄░▄███▄███▄░▄█████
███████████████████████
███████████████████████
██░▄▄▄░██░▄▄▄░██░▄▄▄░██
██░░░░██░░░░██░░░░████
██░░░░██░░░░██░░░░████
██▄▄▄▄▄██▄▄▄▄▄██▄▄▄▄▄████
███████████████████████
███████████████████████
 
PLAY NOW

on Telegram
[/
LoyceV
Legendary
*
Offline Offline

Activity: 3486
Merit: 17669


Thick-Skinned Gang Leader and Golden Feather 2021


View Profile WWW
January 16, 2021, 08:41:08 AM
 #4

was it intentionally done this way?
They're probably trying to get around spam filters by doing this. Kinda like the homograph attack to avoid plagiarism detection (which doesn't work anymore on Bitcointalk).

▄▄███████████████████▄▄
▄█████████▀█████████████▄
███████████▄▐▀▄██████████
███████▀▀███████▀▀███████
██████▀███▄▄████████████
█████████▐█████████▐█████
█████████▐█████████▐█████
██████████▀███▀███▄██████
████████████████▄▄███████
███████████▄▄▄███████████
█████████████████████████
▀█████▄▄████████████████▀
▀▀███████████████████▀▀
Peach
BTC bitcoin
Buy and Sell
Bitcoin P2P
.
.
▄▄███████▄▄
▄████████
██████▄
▄██
█████████████████▄
▄███████
██████████████▄
███████████████████████
█████████████████████████
████████████████████████
█████████████████████████
▀███████████████████████▀
▀█████████████████████▀
▀██████████████████▀
▀███████████████▀
▀▀███████▀▀

▀▀▀▀███▀▀▀▀
EUROPE | AFRICA
LATIN AMERICA
▄▀▀▀











▀▄▄▄


███████▄█
███████▀
██▄▄▄▄▄░▄▄▄▄▄
████████████▀
▐███████████▌
▐███████████▌
████████████▄
██████████████
███▀███▀▀███▀
.
Download on the
App Store
▀▀▀▄











▄▄▄▀
▄▀▀▀











▀▄▄▄


▄██▄
██████▄
█████████▄
████████████▄
███████████████
████████████▀
█████████▀
██████▀
▀██▀
.
GET IT ON
Google Play
▀▀▀▄











▄▄▄▀
Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!