Bitcoin Forum
December 13, 2017, 10:27:24 AM *
News: Latest stable version of Bitcoin Core: 0.15.1  [Torrent].
 
   Home   Help Search Donate Login Register  
Pages: [1]
  Print  
Author Topic: Phishing Link.....is it possible to get an ip check on my logins  (Read 243 times)
andre_9
Newbie
*
Offline Offline

Activity: 18


View Profile
April 01, 2017, 12:02:12 AM
 #1

I was sent a suspicious link via PM that looked like
Code:
https://bitcointalk.org/index.php?topic=.....
but when hovering over or clicking on it went to
Code:
http://saberplan.com/l/index.php?action=[forum_username_goes_here]
looking at chrome dev tools this looks like a simple redirect to
Code:
https://bitcointalk.org/index.php?topic=1822011.0

However the redirect that happens now might be different that the initial one as it might be username/referral database specific because not long after I got an email from coinbase "Please Verify Your Email Address".
The email is in fact from coinbase:
DKIM:   PASS with domain coinbase.com
DMARC:   PASS

Therefore, they create a coinbase account with my email, why...I don't know... thoughts?

The email address linked to this bitcointalk account is unique (only used for this forum).
Is it possible to check IP logins for my account?  If they logged in then I was phished, if they didn't login there is some kind of injection that they can get your email address.

I googled and was about to find this discussion about similar links being sent out.  I reported the PM to mods.
https://bitcointalk.org/index.php?topic=1823854.0
1513160844
Hero Member
*
Offline Offline

Posts: 1513160844

View Profile Personal Message (Offline)

Ignore
1513160844
Reply with quote  #2

1513160844
Report to moderator
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
unamis76
Legendary
*
Offline Offline

Activity: 1386


View Profile
April 01, 2017, 12:06:04 AM
 #2

I guess we have something new to watch for in our hands... Very strange that "coinbase signup", maybe they use it for referral signups? Not sure if they win anything with that...

You can't check IP activity. Let's see what mods have to say about this, they're probably well aware and trying to fight the issue...
andre_9
Newbie
*
Offline Offline

Activity: 18


View Profile
April 01, 2017, 12:20:28 AM
 #3

The coinbase verification email says click to confirm or "If you did not sign up for this account you can ignore this email and the account will be deleted."

Curious that I am, after making sure the link went to coinbase and verifying the headers of the email, I clicked to verify the link in an incognito window.  Then immediately proceeded to reset the password on the account and poke around the account. I did find a session login from an Ipad and unknown IP in the security section, obv the creator of the account. 

I'm surprised coinbase does NOT  kill all sessions after verification for security.  Nothing else of interest in the account so I deleted/closed the account. But not sure what they were expecting....to keep his session open endlessly while I magically buy some bitcoin on an coinbase account I didn't intend to create, even then doesn't coinbase send confirmation links to email to withdraw...

 I know I can't check IP login on the forum I was hoping a mod can.



Pages: [1]
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!