Bitcoin Forum
July 20, 2019, 07:03:16 PM *
News: Latest Bitcoin Core release: 0.18.0 [Torrent] (New!)
 
   Home   Help Search Login Register More  
Pages: [1] 2 3 »  All
  Print  
Author Topic: Request: add bitcointalk.TO to [phishing] list  (Read 662 times)
LoyceV
Legendary
*
Online Online

Activity: 1554
Merit: 4312


Self-made Legendary outside Meta!


View Profile WWW
May 13, 2018, 06:58:44 AM
Merited by mprep (1), DireWolfM14 (1), Eclipse2021 (1)
 #1

Yesterday, user Sanya_sun (now banned) was spamming phishing links to Bitcointalk.org spelled with double L ("taLLk"). Most of his posts have been deleted, but there's one left:
Satoshi retrurns! Shocked Shocked Shocked
https://[phishing]/index.php.topic=5.msg28.php
It's very nice to see the phishing link is now automatically replaced by a warning!
My request: please do the same with the phishing link mentioned in the topic title. Those links are often posted, probably because Google keeps showing them.

1563649396
Hero Member
*
Offline Offline

Posts: 1563649396

View Profile Personal Message (Offline)

Ignore
1563649396
Reply with quote  #2

1563649396
Report to moderator
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
athanz88
Sr. Member
****
Offline Offline

Activity: 476
Merit: 355


View Profile
May 13, 2018, 07:14:12 AM
 #2

Oh my god, i almost opened that thread yesterday, too sleepy to do that, and come back to pc this morning hoping to read it, but i found this thread instead. Maybe, yesterday, i will click to that link because news about satoshi is interesting and intriguing but thanks i didnt. This phishing case should be moderated fastly by moderator or admin, and automation on replacing the link to [phishing] is a great way to deal with this case. Just need a lot of database of phishing link so it will run perfectly.

Thanks LoyceV, you saved my life.
Jet Cash
Legendary
*
Offline Offline

Activity: 1316
Merit: 1699


TEMP and VOM member and monderator.


View Profile WWW
May 13, 2018, 07:55:10 AM
 #3

It's great to see the domain is being replaced by the word "phishing" in links. This will help to protect Bitcoin Talk members. At first I thought it would be a good idea to replace all references to the domain, but on reflection, I think it would be better to leave the name intact in warning posts that don't contain an active link. This will help to protect lurkers and Google users who are not members of Bitcoin Talk. If we can make sure that these scams are not profitable, then hopefully we can reduce the number of them in the future.

££&$$>  Find out about rail biking in the Jet Cash coffee lounge thread on the Ivory Tower board. <££&$$.
jankeman
Member
**
Offline Offline

Activity: 309
Merit: 13

★Adconity.com★


View Profile WWW
May 13, 2018, 09:22:41 AM
 #4

I actually believed it, until I checked satoshis real profile and saw that he never was active

Good that she's now banned
seoincorporation
Legendary
*
Offline Offline

Activity: 1414
Merit: 1397


BtcBoss


View Profile
May 13, 2018, 03:02:25 PM
 #5

Oh my god, i almost opened that thread yesterday, too sleepy to do that, and come back to pc this morning hoping to read it, but i found this thread instead. Maybe, yesterday, i will click to that link because news about satoshi is interesting and intriguing but thanks i didnt. This phishing case should be moderated fastly by moderator or admin, and automation on replacing the link to [phishing] is a great way to deal with this case. Just need a lot of database of phishing link so it will run perfectly.

Thanks LoyceV, you saved my life.

The site is still working, despite the links to it are closed by now:


Also, the scammer has won some dollars by creating this site, taking a look at the BTC address he/she posted on the fake site, the winnings are:



Fortunately, it doesn't seem a phishing site but a static copy in where you can only find this false thread, but you cannot modify in any sense the site, you cannot log in, so your Bitcointalk identity is secure.
I've tried to make a google search regarding the topic and it is not positioned, gladly, in fact, this is really difficult to find if you don't know with precision the name of the fake site.
Nevertheless, this piece of shit, this crap, this scammer, has won something with it, and at the cost of 9 people here...

.BitDice.               ▄▄███▄▄
           ▄▄██▀▀ ▄ ▀▀██▄▄
      ▄▄█ ▀▀  ▄▄█████▄▄  ▀▀ █▄▄
  ▄▄██▀▀     ▀▀ █████ ▀▀     ▀▀██▄▄
██▀▀ ▄▄██▀      ▀███▀      ▀██▄▄ ▀▀██
██  ████▄▄       ███       ▄▄████  ██
██  █▀▀████▄▄  ▄█████▄  ▄▄████▀▀█  ██
██  ▀     ▀▀▀███████████▀▀▀     ▀  ██
             ███████████
██  ▄     ▄▄▄███████████▄▄▄     ▄  ██
██  █▄▄████▀▀  ▀█████▀  ▀▀████▄▄█  ██
██  ████▀▀       ███       ▀▀████  ██
██▄▄ ▀▀██▄      ▄███▄      ▄██▀▀ ▄▄██
  ▀▀██▄▄     ▄▄ █████ ▄▄     ▄▄██▀▀
      ▀▀█ ▄▄  ▀▀█████▀▀  ▄▄ █▀▀
           ▀▀██▄▄ ▀ ▄▄██▀▀
               ▀▀███▀▀
        ▄▄███████▄▄
     ▄███████████████▄
    ████▀▀       ▀▀████
   ████▀           ▀████
   ████             ████
   ████ ▄▄▄▄▄▄▄▄▄▄▄ ████
▄█████████████████████████▄
██████████▀▀▀▀▀▀▀██████████
████                   ████
████                   ████
████                   ████
████                   ████
████                   ████
████▄                 ▄████
████████▄▄▄     ▄▄▄████████
  ▀▀▀█████████████████▀▀▀
        ▀▀▀█████▀▀▀
▄▄████████████████████████████████▄▄
██████████████████████████████████████
█████                            █████
█████                            █████
█████                            █████
█████                            █████
█████                     ▄▄▄▄▄▄▄▄▄▄
█████                   ▄█▀▀▀▀▀▀▀▀▀▀█▄
█████                   ██          ██
█████                   ██          ██
█████                   ██          ██
██████████████████▀▀███ ██          ██
 ████████████████▄  ▄██ ██          ██
   ▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀ ██          ██
             ██████████ ██          ██
           ▄███████████ ██████▀▀██████
          █████████████  ▀████▄▄████▀
[/]
Silent26
Sr. Member
****
Offline Offline

Activity: 518
Merit: 320


Politeness: 1227: - 0 / +1


View Profile
May 13, 2018, 05:17:41 PM
 #6

Thanks LoyceV, I've been aware about this Phishing site lately when I heard about this rumors that Members of Bitcointalk.org are being hacked and the possible reason is because they might be a victim of Phishing. Although this Sanya_sun is banned, we can't assure that there are no more Accounts/Members spreading this phishing link and trying to scam people around here.

Looks like double checking the link before clicking it is the best solution. But how if we didn't notice it. Links like this https://[phishing]/index.php.topic=5.msg28.php is much easier to find out if its phishing or not but how if the links is hidden in a text like this Phishing (The url provided is a link to Phishing's definition, just an example)
See? We must be double careful in clicking links. It's a relief that phishing sites automatically shows "phishing" so that it can warn people of Bitcointalk.org immediately.

404 Not Found
akishang
Member
**
Offline Offline

Activity: 434
Merit: 18

WPP ENERGY - BACKED ASSET GREEN ENERGY TOKEN


View Profile
May 17, 2018, 03:04:26 PM
 #7

Please beware of those phishing sites. Being cautious on the URL's will not take time and its for our own good. My suggestion is to add bitcointalk.org to our bookmarks so we can typographical error. This is were phishing sites takes advantage. Checking the secure section just beside the URL is also a great practice. Sanya_sun won't stop trying to hack other account using phishing sites so always be cautious guys.

           ﹏﹏﹋﹌﹌ WPP ENERGY ﹌﹌﹋﹏﹏
☆═══━┈┈┈┈┈┈┈┈┈┈┈┈┈┈┈━═══☆
≈ WORLD POWER PRODUCTION ≈


【 BACKED ASSET GREEN ENERGY TOKEN 】
☆═━┈┈┈┈┈┈┈┈┈┈┈┈┈┈┈┈┈┈┈┈┈┈┈┈┈━═☆
Theb
Sr. Member
****
Online Online

Activity: 994
Merit: 402



View Profile
May 17, 2018, 03:59:07 PM
Last edit: May 17, 2018, 06:25:31 PM by Theb
 #8

They got the guts to copy the site entirely but any member who is familiar with the site and its members would see this is a fake one. Just by typing the phishing site you instantly get redirected to Satoshi's "post" which is a no-brainer, another thing is when you try to log-in it won't work as it will again redirect you to the post. I just hope that this site will shut off entirely you can even see that this phishing site copied some notable members here in the forum and that is including the theymos.

Edited: Thanks LoyceV I have removed my mistake.

FORTUNEJACK
      ▄▄███████▄▄
   ▄████▀▀ ▄ ██████▄
  ████ ▄▄███ ████████
 █████▌▐███▌ ▀▄ ▀█████
███████▄██▀▀▀▀▄████████
█████▀▄▄▄▄█████████████
████▄▄▄▄ █████████████
 ██████▌ ███▀████████
  ███████▄▀▄████████
   ▀█████▀▀███████▀
      ▀▀██████▀▀
         
         █
...FortuneJack.com                                             
...THE BIGGEST BITCOIN GAMBLING SITE
       ▄▄█████████▄▄
    ▄█████████████████▄
  ▄█████████████████████▄
 ▄██
█████████▀███████████▄
██████████▀   ▀██████████
█████████▀       ▀█████████
████████           ████████
████████▄   ▄ ▄   ▄████████
██████████▀   ▀██████████
 ▀██
█████████████████████▀
  ▀██
███████████████████▀
    ▀█████████████████▀
       ▀▀█████████▀▀
#JACKMATE
WIN 1 BTC
▄█████████████████████████▄
███████████████████████████
███████████████████████████
██████████▀█████▀██████████
███████▀░░▀░░░░░▀░░▀███████
██████▌░░░░░░░░░░░░░▐██████
██████░░░░██░░░██░░░░██████
█████▌░░░░▀▀░░░▀▀░░░░▐█████
██████▄░░▄▄▄░░░▄▄▄░░▄██████
████████▄▄███████▄▄████████
███████████████████████████
███████████████████████████
▀█████████████████████████▀
LoyceV
Legendary
*
Online Online

Activity: 1554
Merit: 4312


Self-made Legendary outside Meta!


View Profile WWW
May 17, 2018, 05:03:45 PM
 #9

Another red flag is 3 members gave more than 50 merits to the user which is not allowed in the forum.
This is incorrect: it's not allowed to give more than 50 merit per month to the same user. But you can give 50 merit again the next month.

Check Satoshi's first post for yourself.

iasenko
Hero Member
*****
Online Online

Activity: 630
Merit: 1138


WYGIWYD


View Profile WWW
May 17, 2018, 05:11:35 PM
 #10

This site has to be closed permanently. I had some links in my guide and in my merit giveaway thread, leading to the .to domain.
Thanks to vlad230 I got them cleaned up, but just wondering how did I end up with the phishing links in the first place?
I started writing my guide back in the autumn last year when I was a newbie so probably they were already circulating in the forum.

TryNinja
Legendary
*
Online Online

Activity: 1078
Merit: 1369


CS <3


View Profile
May 17, 2018, 05:17:16 PM
 #11

This site has to be closed permanently. I had some links in my guide and in my merit giveaway thread, leading to the .to domain.
Thanks to vlad230 I got them cleaned up, but just wondering how did I end up with the phishing links in the first place?
I started writing my guide back in the autumn last year when I was a newbie so probably they were already circulating in the forum.
You probably got them on Google. I had a few of them in one of my posts when I was researching an user.

Loyce was the one that warned me. And I see that he didn't mention adding the fake website to your hosts file while it hasn't been blacklisted.

I totally fell for the cloned site, until I realized I couldn't see your trust ratings.
I have added this line to /etc/hosts
Code:
127.0.0.1       bitcointalk.to
Now my computer can't access that phishing site anymore.

shield132
Hero Member
*****
Offline Offline

Activity: 1176
Merit: 541


In bit we sler, Bitsler


View Profile
May 17, 2018, 05:52:13 PM
 #12

Yesterday, user Sanya_sun (now banned) was spamming phishing links to Bitcointalk.org spelled with double L ("taLLk"). Most of his posts have been deleted, but there's one left:
Satoshi retrurns! Shocked Shocked Shocked
https://[phishing]/index.php.topic=5.msg28.php
It's very nice to see the phishing link is now automatically replaced by a warning!
My request: please do the same with the phishing link mentioned in the topic title. Those links are often posted, probably because Google keeps showing them.
Thank you, you just gave me some thoughts.
Not only bitcointalk phishing urls, we have to do the same about mixers and etc.
But since it's impossible to ban all unwanted url, we have to make a list of accepted urls like: bitcointalk.org, bitblender.io, cointelegraph.com and etc websites.
If anyone decides to open ANN thread, there must be someone who will add their url in list.
Maybe it takes some work but crypto is the place where most scammers try their best with different methods to scam people (like mixer, mining, gambling script)...

BTCeminjas
Member
**
Offline Offline

Activity: 322
Merit: 23


View Profile
May 17, 2018, 06:01:16 PM
 #13

***-snip-
Fortunately, it doesn't seem a phishing site but a static copy in where you can only find this false thread, but you cannot modify in any sense the site, you cannot log in, so your Bitcointalk identity is secure.
I've tried to make a google search regarding the topic and it is not positioned, gladly, in fact, this is really difficult to find if you don't know with precision the name of the fake site.
Nevertheless, this piece of shit, this crap, this scammer, has won something with it, and at the cost of 9 people here...
What da, 9 people fooled at this phishing site by the scammer and giving some bitcoin hoping to doubled with and they think that is real Satoshi. I am too curious how scammer make this phishing site looks like real.

Well, thanks to LoyceV we all aware and warn of that phishing site that probably we are the next victim, much better just bookmark the site and then easily to click bookmark site of bitcointalk.org everytime you use.


I totally fell for the cloned site, until I realized I couldn't see your trust ratings.
I have added this line to /etc/hosts
Code:
127.0.0.1       bitcointalk.to
Now my computer can't access that phishing site anymore.
So thanks to this they had to lock this phishing and nobody was fooled anymore.
LoyceV
Legendary
*
Online Online

Activity: 1554
Merit: 4312


Self-made Legendary outside Meta!


View Profile WWW
May 17, 2018, 06:51:50 PM
 #14

But since it's impossible to ban all unwanted url, we have to make a list of accepted urls like: bitcointalk.org, bitblender.io, cointelegraph.com and etc websites.
A whitelist is very tricky: if one of them would turn into a scam, the forum could be blamed for whitelisting them.

I totally fell for the cloned site, until I realized I couldn't see your trust ratings.
I have added this line to /etc/hosts
Code:
127.0.0.1       bitcointalk.to
Now my computer can't access that phishing site anymore.
So thanks to this they had to lock this phishing and nobody was fooled anymore.
Do you even know what that post is about?

shield132
Hero Member
*****
Offline Offline

Activity: 1176
Merit: 541


In bit we sler, Bitsler


View Profile
May 17, 2018, 07:21:34 PM
 #15

But since it's impossible to ban all unwanted url, we have to make a list of accepted urls like: bitcointalk.org, bitblender.io, cointelegraph.com and etc websites.
A whitelist is very tricky: if one of them would turn into a scam, the forum could be blamed for whitelisting them.

I totally fell for the cloned site, until I realized I couldn't see your trust ratings.
I have added this line to /etc/hosts
Code:
127.0.0.1       bitcointalk.to
Now my computer can't access that phishing site anymore.
So thanks to this they had to lock this phishing and nobody was fooled anymore.
Do you even know what that post is about?
Well, whitelist may sounds risky but look things differently. This whitelist mustn't claim which website is scam or not. I mean it will just collect original URLs of serviced offered on our website and only phishing will be prevented, it has to do nothing with website's trustworthiness.

And what's about user above you, no he doesn't know what that post is about, quoted here blindly  Grin

iasenko
Hero Member
*****
Online Online

Activity: 630
Merit: 1138


WYGIWYD


View Profile WWW
May 17, 2018, 08:30:39 PM
 #16



I totally fell for the cloned site, until I realized I couldn't see your trust ratings.
I have added this line to /etc/hosts
Code:
127.0.0.1       bitcointalk.to
Now my computer can't access that phishing site anymore.
So thanks to this they had to lock this phishing and nobody was fooled anymore.

Let me explain you in a simple way what is this because it looks like you have no Idea.
This method allows you to block any links to this phishing domain locally on your own computer by editing one system file called "hosts". The function of the file is to map an IP address to a web site. Normally all the mapping is done automatically but in some cases you can do it manually.
In the above example the IP address /127.0.0.1/which is mapped to the phishing site is called a localhost /it is assigned to your computer by default/ and all the calls to the site are redirected to it, so they return en error.
This prevent you from opening phishing link from this domain.

Hope is more clear now.

shahzadafzal
Copper Member
Full Member
***
Offline Offline

Activity: 266
Merit: 153


View Profile WWW
May 17, 2018, 09:21:04 PM
 #17

I will bump this too, because I have fallen once for this .to site. Even though I knew about it but due to it appeared in Google search I open the linked and tried to login also with my correct username and password.
Yes there was captcha error but, I only realized after I tried to login.

If there is such phishing sites list, theymos please ad [bitcointalk].[to] to this list.
LbtalkL
Full Member
***
Offline Offline

Activity: 658
Merit: 116



View Profile WWW
May 29, 2018, 03:00:06 AM
 #18

I was redirected on that domain last week too, I search some ico on google and it was redirected to that site but it is suspicious because
I am logout and I quickly check the domain and it was different so be attentive guys. Everyone need to see this Thread.
or install Cryptonite by MetaCert this is an extention on chrome it helps to avoid phishing sites.

ryan1918
Newbie
*
Offline Offline

Activity: 39
Merit: 0


View Profile WWW
May 29, 2018, 03:15:13 PM
 #19

how did they get a copy of the forum database because they have the same exact topics/users/posts
iasenko
Hero Member
*****
Online Online

Activity: 630
Merit: 1138


WYGIWYD


View Profile WWW
May 29, 2018, 03:51:59 PM
 #20

I wonder how the other phishing sites were changed to [phishing] for no time but this sh!t is still unhanded for so many months now.

Pages: [1] 2 3 »  All
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!