Bitcoin Forum
July 03, 2024, 04:19:42 PM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: *** Scam Alert *** Clone of Poloniex Site present on Google search  (Read 1282 times)
batesresearch (OP)
Legendary
*
Offline Offline

Activity: 2424
Merit: 1148


View Profile WWW
July 26, 2015, 08:08:37 PM
 #1

I cleared my iPad history earlier today and went to visit Poloniex, after typing it into Google I saw the below.



I clicked the site from my other iPad and it presented my with the Poloniex login screen I just punched some random information in and it said 'Wrong Details' and then forwarded me to the real Poloniex site.

Visit Satoshi's Place, a Bitcoin Hub based in Bury, Manchester, UK.
Website: https://satoshisplace.co.uk
Goals: Educate & Onboard users in to Bitcoin. Lightning network⚡️
iGotSpots
Legendary
*
Offline Offline

Activity: 2548
Merit: 1054


CPU Web Mining 🕸️ on webmining.io


View Profile WWW
July 26, 2015, 08:14:38 PM
 #2

There are several fake Poloniex sites, be very careful. Good catch

bathrobehero
Legendary
*
Offline Offline

Activity: 2002
Merit: 1051


ICO? Not even once.


View Profile
July 26, 2015, 08:17:01 PM
 #3

Since both the 'Login' and the 'Create an account' links on the site point to the legit poloniex.com links I think this site belongs to the legit poloniex exactly to avoid the domain to be used for phising.

Not your keys, not your coins!
iGotSpots
Legendary
*
Offline Offline

Activity: 2548
Merit: 1054


CPU Web Mining 🕸️ on webmining.io


View Profile WWW
July 26, 2015, 08:19:17 PM
 #4

Since both the 'Login' and the 'Create an account' links on the site point to the legit poloniex.com links I think this site belongs to the legit poloniex exactly to avoid the domain to be used for phising.

I hope so, but I would guess it says invalid, then returns you to the normal page, even if it's correct, just to gather data. You would then try logging in again and be logged in fine, thinking nothing is wrong

batesresearch (OP)
Legendary
*
Offline Offline

Activity: 2424
Merit: 1148


View Profile WWW
July 26, 2015, 08:21:19 PM
 #5

When I clicked the link on google search it went direct to a login page (which like I said showed my wrong details when I entered some random data in and then diverted me to the actual site) but on visiting the domain name directly it did link straight to the actual site without asking for any credentials.

Visit Satoshi's Place, a Bitcoin Hub based in Bury, Manchester, UK.
Website: https://satoshisplace.co.uk
Goals: Educate & Onboard users in to Bitcoin. Lightning network⚡️
batesresearch (OP)
Legendary
*
Offline Offline

Activity: 2424
Merit: 1148


View Profile WWW
July 26, 2015, 08:22:02 PM
 #6

Since both the 'Login' and the 'Create an account' links on the site point to the legit poloniex.com links I think this site belongs to the legit poloniex exactly to avoid the domain to be used for phising.

I hope so, but I would guess it says invalid, then returns you to the normal page, even if it's correct, just to gather data. You would then try logging in again and be logged in fine, thinking nothing is wrong

Yeah that's what I was thinking, a prime example of phishing.

Visit Satoshi's Place, a Bitcoin Hub based in Bury, Manchester, UK.
Website: https://satoshisplace.co.uk
Goals: Educate & Onboard users in to Bitcoin. Lightning network⚡️
iGotSpots
Legendary
*
Offline Offline

Activity: 2548
Merit: 1054


CPU Web Mining 🕸️ on webmining.io


View Profile WWW
July 26, 2015, 08:23:24 PM
 #7

Since both the 'Login' and the 'Create an account' links on the site point to the legit poloniex.com links I think this site belongs to the legit poloniex exactly to avoid the domain to be used for phising.

I hope so, but I would guess it says invalid, then returns you to the normal page, even if it's correct, just to gather data. You would then try logging in again and be logged in fine, thinking nothing is wrong

Yeah that's what I was thinking, a prime example of phishing.

It's actually a very smart way to steal data without alarming people to reset passwords. Devious as shit, but clever

rangedriver
Hero Member
*****
Offline Offline

Activity: 714
Merit: 504



View Profile
July 26, 2015, 08:26:46 PM
 #8

Nasty. It appears to be a paid Ad too.
The Bad Guy
Sr. Member
****
Offline Offline

Activity: 280
Merit: 250



View Profile
July 26, 2015, 08:30:02 PM
 #9

( Trading newbie here Tongue ) So, what is the right website? Is it the one with .com domain? I can't believe that it's even worth for them to buy advertisement for this, nobody is that dumb. I always check the domain if I have to send my coins to the website.

batesresearch (OP)
Legendary
*
Offline Offline

Activity: 2424
Merit: 1148


View Profile WWW
July 26, 2015, 08:48:36 PM
 #10

The actual site is https://poloniex.com, one way you can verify this is by viewing their SSL certificate. You can also see the actual site from the Twitter account at https://mobile.twitter.com/poloniex

Visit Satoshi's Place, a Bitcoin Hub based in Bury, Manchester, UK.
Website: https://satoshisplace.co.uk
Goals: Educate & Onboard users in to Bitcoin. Lightning network⚡️
bathrobehero
Legendary
*
Offline Offline

Activity: 2002
Merit: 1051


ICO? Not even once.


View Profile
July 26, 2015, 08:50:30 PM
 #11

Since both the 'Login' and the 'Create an account' links on the site point to the legit poloniex.com links I think this site belongs to the legit poloniex exactly to avoid the domain to be used for phising.

I hope so, but I would guess it says invalid, then returns you to the normal page, even if it's correct, just to gather data. You would then try logging in again and be logged in fine, thinking nothing is wrong

No. When you hover over the Login link it points to https://poloniex.com/login which is the legit link (notice the .com not .co) and poloniex.co/login doesn't exist. In fact, not even https://poloniex.co exists, only the non-SSL version does.
So whatever you click on the site you're going to end up on the legit site. Granted, it might change in the future but as it stands it seems to be harmless.




Not your keys, not your coins!
redonkulous
Newbie
*
Offline Offline

Activity: 6
Merit: 0


View Profile
July 26, 2015, 08:53:17 PM
 #12

Since both the 'Login' and the 'Create an account' links on the site point to the legit poloniex.com links I think this site belongs to the legit poloniex exactly to avoid the domain to be used for phising.

I hope so, but I would guess it says invalid, then returns you to the normal page, even if it's correct, just to gather data. You would then try logging in again and be logged in fine, thinking nothing is wrong

Yeah that's what I was thinking, a prime example of phishing.

It's actually a very smart way to steal data without alarming people to reset passwords. Devious as shit, but clever

This is the perfect setup for phishing. People should stay away from the fake and use confirmed login links or go direct.
Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!