Bitcoin Forum
May 07, 2024, 07:01:27 AM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: Blockchain.info phishing attempt!  (Read 1638 times)
Remember remember the 5th of November (OP)
Legendary
*
Offline Offline

Activity: 1862
Merit: 1011

Reverse engineer from time to time


View Profile
March 29, 2014, 06:24:36 AM
 #1

Looked at my spam folder and saw this bc.i scam e-mail with super broken english

Quote
                                                                                                                                                                                                                                                             
                                                                                                                                                                                                                                                              
Delivered-To: ***************
Received: by 10.112.1.72 with SMTP id 8csp66660lbk;
        Fri, 28 Mar 2014 20:33:39 -0700 (PDT)
X-Received: by 10.66.21.7 with SMTP id r7mr543434pae.135.1396064018900;
        Fri, 28 Mar 2014 20:33:38 -0700 (PDT)
Return-Path: <enginnv@server1.lotusproxy.com>
Received: from server1.lotusproxy.com ([192.184.9.147])
        by mx.google.com with ESMTPS id j4si4797401pad.186.2014.03.28.20.33.38
        for <***************>
        (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
        Fri, 28 Mar 2014 20:33:38 -0700 (PDT)
Received-SPF: neutral (google.com: 192.184.9.147 is neither permitted nor denied by best guess record for domain of enginnv@server1.lotusproxy.com) client-ip=192.184.9.147;
Authentication-Results: mx.google.com;
       spf=neutral (google.com: 192.184.9.147 is neither permitted nor denied by best guess record for domain of enginnv@server1.lotusproxy.com) smtp.mail=enginnv@server1.lotusproxy.com
Received: from enginnv by server1.lotusproxy.com with local (Exim 4.82)
   (envelope-from <enginnv@server1.lotusproxy.com>)
   id 1WTk1Y-000XFR-AW
   for ***************; Fri, 28 Mar 2014 20:33:36 -0700
To: ***************
Subject: You need to confirm your wallet
X-PHP-Script: engineer-inv.com/a.php for 69.60.116.154
From: Blockchain <no-reply@blockchain.info >
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: 8bit
Message-Id: <E1WTk1Y-000XFR-AW@server1.lotusproxy.com>
Date: Fri, 28 Mar 2014 20:33:36 -0700
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server1.lotusproxy.com
X-AntiAbuse: Original Domain - *****
X-AntiAbuse: Originator/Caller UID/GID - [514 526] / [47 12]
X-AntiAbuse: Sender Address Domain - server1.lotusproxy.com
X-Get-Message-Sender-Via: server1.lotusproxy.com: authenticated_id: enginnv/only user confirmed/virtual account not confirmed

<body>

<p>** If you see a mensage that a risk page ignore it.</p>
<p>** If your already enter the correct details, you don't need to insert it
again.</p>
<p>Since our last update on our servers, we worried about the size of wallets.
And many of these wallets are no funds, no movement and no logins.<br>
<br>
Because to avoid future problems with our servers, we are requesting that all
users wishing to continue with their wallets to make a brief confirmation.<br>
<br>
If you want to continue using your account on Blockchain, please click the link
below and confirm your wallet:</p>
<p>
<a href="hxxp://xz-fiannce.biz/wallet_5454dffe2982jke7447confirm_step1_45455465rtg23544555213f2ge23454ewj4hj45566gheehj4535hjgjd_activate457eweyu4234234jhf_id=3ybnj4555sddf3442237.htm">
https://blockchain.info/wallet/confirm/</a><br>
<br>
If within 48 hours we do not receive your confirmation, your wallet will be
erased and all their bitcoins will be reset.</p>

</body>

</html>



BTC:1AiCRMxgf1ptVQwx6hDuKMu4f7F27QmJC2
1715065287
Hero Member
*
Offline Offline

Posts: 1715065287

View Profile Personal Message (Offline)

Ignore
1715065287
Reply with quote  #2

1715065287
Report to moderator
1715065287
Hero Member
*
Offline Offline

Posts: 1715065287

View Profile Personal Message (Offline)

Ignore
1715065287
Reply with quote  #2

1715065287
Report to moderator
1715065287
Hero Member
*
Offline Offline

Posts: 1715065287

View Profile Personal Message (Offline)

Ignore
1715065287
Reply with quote  #2

1715065287
Report to moderator
"Bitcoin: mining our own business since 2009" -- Pieter Wuille
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
1715065287
Hero Member
*
Offline Offline

Posts: 1715065287

View Profile Personal Message (Offline)

Ignore
1715065287
Reply with quote  #2

1715065287
Report to moderator
Jacksquere
Member
**
Offline Offline

Activity: 70
Merit: 10


View Profile
March 29, 2014, 06:27:08 AM
 #2

Thanks for Info ,

BitcoinexchangeGuide.com - List and Review of Best Places to Buy, Sell and Trade Bitcoins!
cococoin
Newbie
*
Offline Offline

Activity: 42
Merit: 0


View Profile
March 29, 2014, 02:31:46 PM
 #3

After reading, feel useful. Thank you.
hilariousandco
Global Moderator
Legendary
*
Online Online

Activity: 3794
Merit: 2616


Join the world-leading crypto sportsbook NOW!


View Profile
March 29, 2014, 04:04:48 PM
 #4

If people fall for a phishing email, especially with broken English, then I have no sympathy.

  ▄▄███████▄███████▄▄▄
 █████████████
▀▀▀▀▀▀████▄▄
███████████████
       ▀▀███▄
███████████████
          ▀███
 █████████████
             ███
███████████▀▀               ███
███                         ███
███                         ███
 ███                       ███
  ███▄                   ▄███
   ▀███▄▄             ▄▄███▀
     ▀▀████▄▄▄▄▄▄▄▄▄████▀▀
         ▀▀▀███████▀▀▀
░░░████▄▄▄▄
░▄▄░
▄▄███████▄▀█████▄▄
██▄████▌▐█▌█████▄██
████▀▄▄▄▌███░▄▄▄▀████
██████▄▄▄█▄▄▄██████
█░███████░▐█▌░███████░█
▀▀██▀░██░▐█▌░██░▀██▀▀
▄▄▄░█▀░█░██░▐█▌░██░█░▀█░▄▄▄
██▀░░░░▀██░▐█▌░██▀░░░░▀██
▀██
█████▄███▀▀██▀▀███▄███████▀
▀███████████████████████▀
▀▀▀▀███████████▀▀▀▀
▄▄██████▄▄
▀█▀
█  █▀█▀
  ▄█  ██  █▄  ▄
█ ▄█ █▀█▄▄█▀█ █▄ █
▀▄█ █ ███▄▄▄▄███ █ █▄▀
▀▀ █    ▄▄▄▄    █ ▀▀
   ██████   █
█     ▀▀     █
▀▄▀▄▀▄▀▄▀▄▀▄
▄ ██████▀▀██████ ▄
▄████████ ██ ████████▄
▀▀███████▄▄███████▀▀
▀▀▀████████▀▀▀
█████████████LEADING CRYPTO SPORTSBOOK & CASINO█████████████
MULTI
CURRENCY
1500+
CASINO GAMES
CRYPTO EXCLUSIVE
CLUBHOUSE
FAST & SECURE
PAYMENTS
.
..PLAY NOW!..
innocent93
Legendary
*
Offline Offline

Activity: 896
Merit: 1000



View Profile
March 29, 2014, 04:39:11 PM
 #5

A good solution ,set up a two factor authentication and be sure your private key is safe.
rohnearner
Sr. Member
****
Offline Offline

Activity: 350
Merit: 252

REAL-EYES || REAL-IZE || REAL-LIES||


View Profile WWW
March 29, 2014, 04:41:10 PM
 #6

I read this story yesterday and thanks for sharing your concerns with this community..! I just want to know what services you are registered to with the mailing address in which you got the phishing mail.

Sindelar1938
Hero Member
*****
Offline Offline

Activity: 490
Merit: 500


View Profile
March 29, 2014, 07:18:54 PM
 #7

Would like to believe I wouldn't have fallen for it, but thanks!

principalg1
Newbie
*
Offline Offline

Activity: 42
Merit: 0


View Profile
March 29, 2014, 07:45:34 PM
 #8

After reading, feel useful. Thank you.
I have the same feeling with you, very useful
Bit_Happy
Legendary
*
Offline Offline

Activity: 2100
Merit: 1040


A Great Time to Start Something!


View Profile
March 29, 2014, 07:46:51 PM
 #9

Most phishing attempts are really easy to spot.
Thanks for warning people who need it.

escrow.ms
Legendary
*
Offline Offline

Activity: 1274
Merit: 1004


View Profile
March 29, 2014, 08:00:04 PM
 #10

Code:
<!--webbot bot="SaveResults" S-Email-Format="TEXT/PRE" S-Email-Address="makemoneystuff@gmail.com" B-Email-Label-Fields="TRUE" S-Builtin-Fields U-Confirmation-Url="https://blockchain.info/wallet/login" startspan --><input TYPE="hidden" NAME="VTI-GROUP" VALUE="0"><!--webbot bot="SaveResults" endspan i-checksum="43374" -->
            <div class="page-header">

makemoneystuff@gmail.com
http://www.dreamteammoney.com/index.php?showtopic=173982


No sure why but it was in that page, looks like a identifier.. ;P
Code:
<body data-guid="772cde95-0db7-4008-98c5-bb7515fa4a14" data-war-checksum="d472a1eb0f3b5f0a" data-extra-seed="9f6e175daae3b7c5c7719e38ad018e98a679785fa7868c0681bb2e4c02b7436d" data-language="en">
BTCLotto
Member
**
Offline Offline

Activity: 98
Merit: 10


View Profile WWW
March 29, 2014, 08:00:42 PM
 #11

Thanks for the warning.

http://BitcoinValue.net-Bitcoin Price Calculator and in-depth blog on Bitcoin Economics/Value.
dream22
Newbie
*
Offline Offline

Activity: 14
Merit: 0


View Profile
March 29, 2014, 08:06:01 PM
 #12

thanks this is very usual information especially for new people like me
Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!