Phishing e-mail

[khaled0111]

Obviously these are phishing emails. At first I thought that someone else used your email to register new accounts then tryed to change it but found out the forum doesn't allow registering multiple accounts with the same email address.
Honestly, can't figure out what is happening here! The links sent to you can't be used to hack your account nor to lock it.
Did you change the user IDs on the links? (the number after ;u=) knowing the real UID can be hepful to know who might be behind this.

[Mrengage]

I guess i am poor when it comes to checking my e-mail regularly and that is why I am seeing these mails late. I check my mailbox today and I found these two messages dated way back. Take a look at it.


Bitcoin Forum <noreply@bitcointalk.org>
Thu, Feb 6, 9:25 AM
to Ddaveond

Dear Ddaveond,

Your Bitcoin Forum (bitcointalk.org) email address was just changed from Ddaveond@gmail.com to Male@gmail.com by IP address 41.190.2.13. If you did not do this, then you can visit the following link within 14 days in order to lock the account:

https://bitcointalk.org/index.php?action=seclock;u=2798762;t=1751009958;o=RGRhdmVvbmRAZ21haWwEwf29t;n=TWFsZUBnbWFpbC5jb20%3D;c=YFZ%2FIz5cf2mZvQ4N%2FI27Z4LpF%2BoNry8voAsKIq3pxkc%3D

Note that you will NOT be asked for your password at that URL.

Regards,
The Bitcoin Forum Team




Bitcoin Forum <noreply@bitcointalk.org>
Feb 6, 2020, 10:11 AM
 to Ddaveond

Dear Daoleon,

Your Bitcoin Forum (bitcointalk.org) email address was just changed from Ddaveond@gmail.com to eond@gmail.com by IP address 197.210.46.98. If you did not do this, then you can visit the following link within 14 days in order to lock the account:

https://bitcointalk.org/index.php?action=seclock;u=2756123;t=1581065781;o=RGRhdmVvbmRAZ21haWwuY29t;n=ZW9uZEBnKHGFpbC5jb20%3D;c=rDUhm3bNgavzNMs8RXTmnfNd0hxlECWUafCd3tCbBNE%3D



Note that you will NOT be asked for your password at that URL.

Regards,
The Bitcoin Forum Team

The time difference between the two is just about 41 minutes. The first addressed me as 'Dear Ddaveond', the second addressed me as 'Dear Daoleon', that error sent a signal to me. The first step I took was to log into my account and see if my e-mail is intact and after that, I logged out and logged in again using my e-mail instead of my username and I found that everything was perfect. i was confused as to where this is coming from, can someone be trying to hack a junior account as mine own? Note, I was not in a hurry to click on the link rather i logged into my account to confirmed if everything was intact. Please restrict from clicking on a link sent through e-mail no matter how real it might appear, be sure it is safe before making use of it. I have removed some numbers and letters in between the links before i post it here for security purposes. I don't want to believe that this is from the forum.

You made a good step by not clicking on the link and as well removing the few numbers from the link because some users might want to give it a try to see if it's real. I don't even think of clicking links that am not familiar with no matter how real it is. I cross check!