Request: add bitcointalk.TO to [phishing] list

[LoyceV]

Yesterday, user Sanya_sun (now banned) was spamming phishing links to Bitcointalk.org spelled with double L ("taLLk"). Most of his posts have been deleted, but there's one left:

Satoshi retrurns!
https://[phishing]/index.php.topic=5.msg28.php

It's very nice to see the phishing link is now automatically replaced by a warning!
My request: please do the same with the phishing link mentioned in the topic title. Those links are often posted, probably because Google keeps showing them.

[athanz88]

Oh my god, i almost opened that thread yesterday, too sleepy to do that, and come back to pc this morning hoping to read it, but i found this thread instead. Maybe, yesterday, i will click to that link because news about satoshi is interesting and intriguing but thanks i didnt. This phishing case should be moderated fastly by moderator or admin, and automation on replacing the link to [phishing] is a great way to deal with this case. Just need a lot of database of phishing link so it will run perfectly.

Thanks LoyceV, you saved my life.

[Jet Cash]

It's great to see the domain is being replaced by the word "phishing" in links. This will help to protect Bitcoin Talk members. At first I thought it would be a good idea to replace all references to the domain, but on reflection, I think it would be better to leave the name intact in warning posts that don't contain an active link. This will help to protect lurkers and Google users who are not members of Bitcoin Talk. If we can make sure that these scams are not profitable, then hopefully we can reduce the number of them in the future.

[jankeman]

I actually believed it, until I checked satoshis real profile and saw that he never was active

Good that she's now banned

[seoincorporation]

Oh my god, i almost opened that thread yesterday, too sleepy to do that, and come back to pc this morning hoping to read it, but i found this thread instead. Maybe, yesterday, i will click to that link because news about satoshi is interesting and intriguing but thanks i didnt. This phishing case should be moderated fastly by moderator or admin, and automation on replacing the link to [phishing] is a great way to deal with this case. Just need a lot of database of phishing link so it will run perfectly.

Thanks LoyceV, you saved my life.

The site is still working, despite the links to it are closed by now:


Also, the scammer has won some dollars by creating this site, taking a look at the BTC address he/she posted on the fake site, the winnings are:



Fortunately, it doesn't seem a phishing site but a static copy in where you can only find this false thread, but you cannot modify in any sense the site, you cannot log in, so your Bitcointalk identity is secure.
I've tried to make a google search regarding the topic and it is not positioned, gladly, in fact, this is really difficult to find if you don't know with precision the name of the fake site.
Nevertheless, this piece of shit, this crap, this scammer, has won something with it, and at the cost of 9 people here...

[Silent26]

Thanks LoyceV, I've been aware about this Phishing site lately when I heard about this rumors that Members of Bitcointalk.org are being hacked and the possible reason is because they might be a victim of Phishing. Although this Sanya_sun is banned, we can't assure that there are no more Accounts/Members spreading this phishing link and trying to scam people around here.

Looks like double checking the link before clicking it is the best solution. But how if we didn't notice it. Links like this https://[phishing]/index.php.topic=5.msg28.php is much easier to find out if its phishing or not but how if the links is hidden in a text like this Phishing (The url provided is a link to Phishing's definition, just an example)
See? We must be double careful in clicking links. It's a relief that phishing sites automatically shows "phishing" so that it can warn people of Bitcointalk.org immediately.

[akishang]

Please beware of those phishing sites. Being cautious on the URL's will not take time and its for our own good. My suggestion is to add bitcointalk.org to our bookmarks so we can typographical error. This is were phishing sites takes advantage. Checking the secure section just beside the URL is also a great practice. Sanya_sun won't stop trying to hack other account using phishing sites so always be cautious guys.

[Theb]

They got the guts to copy the site entirely but any member who is familiar with the site and its members would see this is a fake one. Just by typing the phishing site you instantly get redirected to Satoshi's "post" which is a no-brainer, another thing is when you try to log-in it won't work as it will again redirect you to the post. I just hope that this site will shut off entirely you can even see that this phishing site copied some notable members here in the forum and that is including the theymos.

Edited: Thanks LoyceV I have removed my mistake.

[LoyceV]

Another red flag is 3 members gave more than 50 merits to the user which is not allowed in the forum.

This is incorrect: it's not allowed to give more than 50 merit per month to the same user. But you can give 50 merit again the next month.

Check Satoshi's first post for yourself.

[TheBeardedBaby]

This site has to be closed permanently. I had some links in my guide and in my merit giveaway thread, leading to the .to domain.
Thanks to vlad230 I got them cleaned up, but just wondering how did I end up with the phishing links in the first place?
I started writing my guide back in the autumn last year when I was a newbie so probably they were already circulating in the forum.

[TryNinja]

This site has to be closed permanently. I had some links in my guide and in my merit giveaway thread, leading to the .to domain.
Thanks to vlad230 I got them cleaned up, but just wondering how did I end up with the phishing links in the first place?
I started writing my guide back in the autumn last year when I was a newbie so probably they were already circulating in the forum.

You probably got them on Google. I had a few of them in one of my posts when I was researching an user.

Loyce was the one that warned me. And I see that he didn't mention adding the fake website to your hosts file while it hasn't been blacklisted.

I totally fell for the cloned site, until I realized I couldn't see your trust ratings.
I have added this line to /etc/hosts

Code:

127.0.0.1       bitcointalk.to

Now my computer can't access that phishing site anymore.

[shield132]

Yesterday, user Sanya_sun (now banned) was spamming phishing links to Bitcointalk.org spelled with double L ("taLLk"). Most of his posts have been deleted, but there's one left:

Satoshi retrurns!
https://[phishing]/index.php.topic=5.msg28.php

It's very nice to see the phishing link is now automatically replaced by a warning!
My request: please do the same with the phishing link mentioned in the topic title. Those links are often posted, probably because Google keeps showing them.

Thank you, you just gave me some thoughts.
Not only bitcointalk phishing urls, we have to do the same about mixers and etc.
But since it's impossible to ban all unwanted url, we have to make a list of accepted urls like: bitcointalk.org, bitblender.io, cointelegraph.com and etc websites.
If anyone decides to open ANN thread, there must be someone who will add their url in list.
Maybe it takes some work but crypto is the place where most scammers try their best with different methods to scam people (like mixer, mining, gambling script)...

[BTCeminjas]

***-snip-
Fortunately, it doesn't seem a phishing site but a static copy in where you can only find this false thread, but you cannot modify in any sense the site, you cannot log in, so your Bitcointalk identity is secure.
I've tried to make a google search regarding the topic and it is not positioned, gladly, in fact, this is really difficult to find if you don't know with precision the name of the fake site.
Nevertheless, this piece of shit, this crap, this scammer, has won something with it, and at the cost of 9 people here...

What da, 9 people fooled at this phishing site by the scammer and giving some bitcoin hoping to doubled with and they think that is real Satoshi. I am too curious how scammer make this phishing site looks like real.

Well, thanks to LoyceV we all aware and warn of that phishing site that probably we are the next victim, much better just bookmark the site and then easily to click bookmark site of bitcointalk.org everytime you use.

I totally fell for the cloned site, until I realized I couldn't see your trust ratings.
I have added this line to /etc/hosts

Code:

127.0.0.1       bitcointalk.to

Now my computer can't access that phishing site anymore.

So thanks to this they had to lock this phishing and nobody was fooled anymore.

[LoyceV]

But since it's impossible to ban all unwanted url, we have to make a list of accepted urls like: bitcointalk.org, bitblender.io, cointelegraph.com and etc websites.

A whitelist is very tricky: if one of them would turn into a scam, the forum could be blamed for whitelisting them.

I totally fell for the cloned site, until I realized I couldn't see your trust ratings.
I have added this line to /etc/hosts

Code:

127.0.0.1       bitcointalk.to

Now my computer can't access that phishing site anymore.

So thanks to this they had to lock this phishing and nobody was fooled anymore.

Do you even know what that post is about?

[shield132]

But since it's impossible to ban all unwanted url, we have to make a list of accepted urls like: bitcointalk.org, bitblender.io, cointelegraph.com and etc websites.

A whitelist is very tricky: if one of them would turn into a scam, the forum could be blamed for whitelisting them.

I totally fell for the cloned site, until I realized I couldn't see your trust ratings.
I have added this line to /etc/hosts

Code:

127.0.0.1       bitcointalk.to

Now my computer can't access that phishing site anymore.

So thanks to this they had to lock this phishing and nobody was fooled anymore.

Do you even know what that post is about?

Well, whitelist may sounds risky but look things differently. This whitelist mustn't claim which website is scam or not. I mean it will just collect original URLs of serviced offered on our website and only phishing will be prevented, it has to do nothing with website's trustworthiness.

And what's about user above you, no he doesn't know what that post is about, quoted here blindly  

[TheBeardedBaby]

I totally fell for the cloned site, until I realized I couldn't see your trust ratings.
I have added this line to /etc/hosts

Code:

127.0.0.1       bitcointalk.to

Now my computer can't access that phishing site anymore.

So thanks to this they had to lock this phishing and nobody was fooled anymore.

Let me explain you in a simple way what is this because it looks like you have no Idea.
This method allows you to block any links to this phishing domain locally on your own computer by editing one system file called "hosts". The function of the file is to map an IP address to a web site. Normally all the mapping is done automatically but in some cases you can do it manually.
In the above example the IP address /127.0.0.1/which is mapped to the phishing site is called a localhost /it is assigned to your computer by default/ and all the calls to the site are redirected to it, so they return en error.
This prevent you from opening phishing link from this domain.

Hope is more clear now.

[shahzadafzal]

I will bump this too, because I have fallen once for this .to site. Even though I knew about it but due to it appeared in Google search I open the linked and tried to login also with my correct username and password.
Yes there was captcha error but, I only realized after I tried to login.

If there is such phishing sites list, theymos please ad [bitcointalk].[to] to this list.

[LbtalkL]

I was redirected on that domain last week too, I search some ico on google and it was redirected to that site but it is suspicious because
I am logout and I quickly check the domain and it was different so be attentive guys. Everyone need to see this Thread.
or install Cryptonite by MetaCert this is an extention on chrome it helps to avoid phishing sites.

[ryan1918]

how did they get a copy of the forum database because they have the same exact topics/users/posts

[TheBeardedBaby]

I wonder how the other phishing sites were changed to [phishing] for no time but this sh!t is still unhanded for so many months now.