Bitcoin Forum
April 25, 2024, 02:18:01 PM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: @theymos and admins: Have a look at this  (Read 189 times)
Pmalek (OP)
Legendary
*
Offline Offline

Activity: 2744
Merit: 7095



View Profile
January 15, 2021, 01:47:54 PM
Last edit: November 12, 2023, 10:04:27 AM by Pmalek
Merited by Daniel91 (2)
 #1

I tried to copy/paste a phishing email on the forum, but I ran into a weird bug. For some reason that addresses in the email can't be pasted into a block explorer. The explorer doesn't recognize the pasted address as a valid address.

The other problem is previewing the message on Bitcointalk. When I copy/pasted the content in a new post and clicked on preview, this is what I get:



The address isn't visible in either the code or quote tags, even though it's there. And look at the email content. Is the message encoded in some way that causes this glitch? Has anyone experienced this before?

Once I made the post, it became visible just fine. But you still can't look up the address on a block explorer after removing the special characters. What kind of sorcery is this?
Here is the link to the post: https://bitcointalk.org/index.php?topic=5284407.msg56102812#msg56102812

.
.BLACKJACK ♠ FUN.
█████████
██████████████
████████████
█████████████████
████████████████▄▄
░█████████████▀░▀▀
██████████████████
░██████████████
████████████████
░██████████████
████████████
███████████████░██
██████████
CRYPTO CASINO &
SPORTS BETTING
▄▄███████▄▄
▄███████████████▄
███████████████████
█████████████████████
███████████████████████
█████████████████████████
█████████████████████████
█████████████████████████
███████████████████████
█████████████████████
███████████████████
▀███████████████▀
█████████
.
1714054681
Hero Member
*
Offline Offline

Posts: 1714054681

View Profile Personal Message (Offline)

Ignore
1714054681
Reply with quote  #2

1714054681
Report to moderator
1714054681
Hero Member
*
Offline Offline

Posts: 1714054681

View Profile Personal Message (Offline)

Ignore
1714054681
Reply with quote  #2

1714054681
Report to moderator
"Bitcoin: the cutting edge of begging technology." -- Giraffe.BTC
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
actmyname
Copper Member
Legendary
*
Offline Offline

Activity: 2562
Merit: 2504


Spear the bees


View Profile WWW
January 15, 2021, 01:54:24 PM
Merited by shield132 (1)
 #2

In reality, the text you copied is no different from me doing something with this kind of font.

Sᴏᴍᴇ ᴄʜᴀʀᴀᴄᴛᴇʀs ᴀʀᴇ ʙʟᴏᴄᴋᴇᴅ ᴏɴ ᴛʜᴇ ғᴏʀᴜᴍ, sᴏ ɪᴛ ᴡᴏɴ'ᴛ ᴅɪsᴘʟᴀʏ ᴛʜᴇᴍ.

I believe this was to remove the effectiveness of using unicode confusables: examples here

Pmalek (OP)
Legendary
*
Offline Offline

Activity: 2744
Merit: 7095



View Profile
January 16, 2021, 08:01:38 AM
 #3

It's unicode, noted.

Here is the funny part. Let's assume someone falls for this phishing attempt and wants to pay the 0.3 bitcoin to the suggested address. He can't do it. Grin Because the address doesn't get recognized when pasted into a block explorer. I wonder if it would be recognized by a wallet software like Electrum? I don't have it installed on this device to try out.

If it doesn't get recognized, the question is why use Unicode?
Was the scammer not aware of what he is doing or was it intentionally done this way?

.
.BLACKJACK ♠ FUN.
█████████
██████████████
████████████
█████████████████
████████████████▄▄
░█████████████▀░▀▀
██████████████████
░██████████████
████████████████
░██████████████
████████████
███████████████░██
██████████
CRYPTO CASINO &
SPORTS BETTING
▄▄███████▄▄
▄███████████████▄
███████████████████
█████████████████████
███████████████████████
█████████████████████████
█████████████████████████
█████████████████████████
███████████████████████
█████████████████████
███████████████████
▀███████████████▀
█████████
.
LoyceV
Legendary
*
Online Online

Activity: 3290
Merit: 16550


Thick-Skinned Gang Leader and Golden Feather 2021


View Profile WWW
January 16, 2021, 08:41:08 AM
 #4

was it intentionally done this way?
They're probably trying to get around spam filters by doing this. Kinda like the homograph attack to avoid plagiarism detection (which doesn't work anymore on Bitcointalk).

█▀▀▀











█▄▄▄
▀▀▀▀▀▀▀▀▀▀▀
e
▄▄▄▄▄▄▄▄▄▄▄
█████████████
████████████▄███
██▐███████▄█████▀
█████████▄████▀
███▐████▄███▀
████▐██████▀
█████▀█████
███████████▄
████████████▄
██▄█████▀█████▄
▄█████████▀█████▀
███████████▀██▀
████▀█████████
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
c.h.
▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
▀▀▀█











▄▄▄█
▄██████▄▄▄
█████████████▄▄
███████████████
███████████████
███████████████
███████████████
███░░█████████
███▌▐█████████
█████████████
███████████▀
██████████▀
████████▀
▀██▀▀
Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!