phishing pm

[Zwei]

shortly after starting a topic on the Bitcoin Technical Support board to get some help fix a problem with a bitcoin node, i got the following PM from a brand new account.

Code:

https://chainrectification-dapps.pages.dev <---- phishing link, do not open
https://chainrectification-dapps.pages.dev/syncwalletnew/secured <---- phishing link, do not open

the link will send you to a fake website hosted on cloudflare pages that appears to offer support for a bunch of crypto stuff.



playing the perfect victim, i started a conversation and sent them the ticket number (also to waste their time playing dumb).
they will ask you a bunch of questions to appear as if they are trying to help you so they can finally suggest their "method" on how you can fix your issue.



following the steps, you will end up on a page asking you to connect your wallet, and you guessed it, they will ask you to manually connect by entering your seed phrase/private keys.



bitcointalk account: GargeTechh

i already reported the PM with this topic as reference, so he will be banned soon.

if you can spare a few minutes, please report the website to cloudflare (they ask for name and email, but you can use fake info): https://abuse.cloudflare.com/phishing
you can use this topic as reference for the evidence field.

stay safe everyone

[Zwei]

damn, cloudflare is fast, they took down the wallet phishing page in just a few minutes of me reporting it.
i also been trolling the scammer for the past hour or so, i bet he is so mad right now, lol

[albon]

damn, cloudflare is fast, they took down the wallet phishing page in just a few minutes of me reporting it.
i also been trolling the scammer for the past hour or so, i bet he is so mad right now, lol

Good job, man!

A cheap scam where they relied on the free subdomain pages.dev provided by Cloudflare, they didn't even bother to buy a paid domain.

Phishing sites have become increasingly common, so it is everyone's responsibility not to trust any link sent by strangers without doing their own research.

I have come across many of these new accounts created by scammers to promote their traps and I usually report them and it is the role of each of us to strive to expose scammers and stop their traps no matter how dangerous they are, to keep the crypto community clean.

[NeuroticFish]

Sadly, on Bitcointalk, like in any other public place, as soon as you complain of a problem, there's a good chance some scammers will come and pretend to help you in order to scam you.

I'm happy to see you didn't fall for it and, even more, knew what to do.

[dkbit98]

bitcointalk account: GargeTechh

This member didn't even create a single post in forum, this is obviously alt account of some scammer
I know this could sound a bit restrictive to some people, but I wouldn't allow brand new accounts to send PM's to other forum members.
Another milder alternative is to get big red warning every time you receive PM from brand new registered members.
This probably won't stop them from scamming, but it's going to slow them a bit.

[Zwei]

bitcointalk account: GargeTechh

This member didn't even create a single post in forum, this is obviously alt account of some scammer

it's obv a throwaway account. the scammers are not going to waste their time posting shit.
they make an account, send two PMs per day, get banned, move on to the next one untill they find someone who would fall for it.

Another milder alternative is to get big red warning every time you receive PM from brand new registered members.

the forum already has a warning for phishing in PMs.



not sure why it didn't catch this one. probably because the link was from cloudflare.