PSA: Bots have figured out funcaptcha

[coinableS]

My faucet was emptied in about an hour from a bot. Funcaptcha has been great against bots, but doesn't look like anymore.

The culprit referrer: 35iPaDcjQqViRkXXHnagGYoKGxvCpEmcZk

[Lucius]

Bad news for faucet owners.From what I saw FunCaptcha constantly doing some changes and it seemed to be the safest of all.Have you contacted FunCaptcha owners, what they say about it?

[The Sceptical Chymist]

Oh, so the bots have figured out how to drag a basketball over to the black guy's upraised arms?  How incredibly racist is that.

Thanks for the PSA and I'm sorry your faucet got shanked.

[btc4]

do you can share your faucet link? maybe this user use surfing sites to collecting referrals! the amount stolen is not high.

[coinableS]

do you can share your faucet link? maybe this user use surfing sites to collecting referrals! the amount stolen is not high.

I'm afraid it would have been much higher if I had a larger balance in my faucet.
It was definitely a bot attack.

[Racey]

My faucet was emptied in about an hour from a bot. Funcaptcha has been great against bots, but doesn't look like anymore.

The culprit referrer: 35iPaDcjQqViRkXXHnagGYoKGxvCpEmcZk

The referrer has a you tube account https://www.youtube.com/user/ARAMIC2007

Got his addy from here 35iPaDcjQqViRkXXHnagGYoKGxvCpEmcZk

[coinableS]

My faucet was emptied in about an hour from a bot. Funcaptcha has been great against bots, but doesn't look like anymore.

The culprit referrer: 35iPaDcjQqViRkXXHnagGYoKGxvCpEmcZk

The referrer has a you tube account https://www.youtube.com/user/ARAMIC2007

Got his addy from here 35iPaDcjQqViRkXXHnagGYoKGxvCpEmcZk

Yea I saw that too... What is interesting is that every single account this person "referred" is also a multisig address. Typically I only see a few multisig addresses here and there, then all of a sudden every single person is "referred" by this guy and every single one also has a multisig address. No coincidence.

[Racey]

My faucet was emptied in about an hour from a bot. Funcaptcha has been great against bots, but doesn't look like anymore.

The culprit referrer: 35iPaDcjQqViRkXXHnagGYoKGxvCpEmcZk

The referrer has a you tube account https://www.youtube.com/user/ARAMIC2007

Got his addy from here 35iPaDcjQqViRkXXHnagGYoKGxvCpEmcZk

Yea I saw that too... What is interesting is that every single account this person "referred" is also a multisig address. Typically I only see a few multisig addresses here and there, then all of a sudden every single person is "referred" by this guy and every single one also has a multisig address. No coincidence.

So he is using multiple addresses it seems, are the ips the same, if not he is very clever on changing it.
I could be wrong in my assumption though.

[coinableS]

My faucet was emptied in about an hour from a bot. Funcaptcha has been great against bots, but doesn't look like anymore.

The culprit referrer: 35iPaDcjQqViRkXXHnagGYoKGxvCpEmcZk

The referrer has a you tube account https://www.youtube.com/user/ARAMIC2007

Got his addy from here 35iPaDcjQqViRkXXHnagGYoKGxvCpEmcZk

Yea I saw that too... What is interesting is that every single account this person "referred" is also a multisig address. Typically I only see a few multisig addresses here and there, then all of a sudden every single person is "referred" by this guy and every single one also has a multisig address. No coincidence.

So he is using multiple addresses it seems, are the ips the same, if not he is very clever on changing it.
I could be wrong in my assumption though.

Nope, the script I wrote only allows unique IP's, so it has to be a bot that changes it's IP and address for each claim thus racking up his balance in referral earnings from his fake bot referrals.

[Racey]

I also noted that ARAMAIC 2007 https://www.youtube.com/user/ARAMIC2007   has a bitcoin related website.

http://blog.yosyfovych.te.ua/

[Gifted]

I also noted that ARAMAIC 2007 https://www.youtube.com/user/ARAMIC2007   has a bitcoin related website.

http://blog.yosyfovych.te.ua/

maybe we should do some sql injection on his site  LOL

[ixus]

I also noted that ARAMAIC 2007 https://www.youtube.com/user/ARAMIC2007   has a bitcoin related website.
http://blog.yosyfovych.te.ua/

That guy writes about his big real humans referral network   for the faucets, while he's not hesitates to use bots and proxys for some services. Really sad and educational reading.

[Funny]

My faucet was emptied in about an hour from a bot. Funcaptcha has been great against bots, but doesn't look like anymore.

The culprit referrer: 35iPaDcjQqViRkXXHnagGYoKGxvCpEmcZk

Wow. Never thought that funcaptcha was vulnerable. I had difficulties completing funcaptcha myself.

[Bought]

Fuck the bots. they're ruining all the faucets.

[FaucetRank.com]

That's why I said don't use faucet box script . Create a xapo faucet and force users to claim with only email . A xapo user need to create a verified xapo account in order to withdraw his fund if email doesn't have xapo account then claimed amount will be returned to you after 7days.

[FaucetRank.com]

My faucet was emptied in about an hour from a bot. Funcaptcha has been great against bots, but doesn't look like anymore.

The culprit referrer: 35iPaDcjQqViRkXXHnagGYoKGxvCpEmcZk

As I know your captcha wasn't set to advance security .

[Funny]

That's why I said don't use faucet box script . Create a xapo faucet and force users to claim with only email . A xapo user need to create a verified xapo account in order to withdraw his fund if email doesn't have xapo account then claimed amount will be returned to you after 7days.

Wow.. I never knew that was the case.

I'm might develop my own faucet, now that I see that's the case I'll definitely stick with Xapo if I do open a faucet.

[Gifted]

That's why I said don't use faucet box script . Create a xapo faucet and force users to claim with only email . A xapo user need to create a verified xapo account in order to withdraw his fund if email doesn't have xapo account then claimed amount will be returned to you after 7days.

Not to put xapo down because i own one too,  btc address works too.Xapo cashes them out on the btc address when it reaches 5500 and there is a way to change  when they cash out through their api

[maokoto]

Too bad, as a faucet user, I like funcaptcha. It is easy to complete and fast, and you do not make mistakes easy as with other faucets in which you have to type to complete.

[FaucetRank.com]

That's why I said don't use faucet box script . Create a xapo faucet and force users to claim with only email . A xapo user need to create a verified xapo account in order to withdraw his fund if email doesn't have xapo account then claimed amount will be returned to you after 7days.

Not to put xapo down because i own one too,  btc address works too.Xapo cashes them out on the btc address when it reaches 5500 and there is a way to change  when they cash out through their api

That's why I said force users to enter only email and you can do it by simple coding.