livecoin.net invasion

[examplens]

the influx of new accounts is noticeable who's talk about how they got a return of 50% of the captured funds on livecoin exchange.

the current owner of livecoin.net domain and using 301 redirects trying to boosts rankings of his second domain. In this case, it's oceantogames.com
Using an expired (in this case hacked) domain is the well-known SEO technique that will bring 100% traffic and SEO rank to the new website. No matter what happened with livecoin, are they scam or not, his domain has some authority, a lot of created backlinks and even if this service is dead, there is still significant traffic to that address.

Apparently, the one who manages that domain now uses it for this purpose. He creates several new accounts here and states something quite different, using the current problem with robbered funds. but without setting up direct links.
this has nothing to do with recovering funds from livecoin, it's only an indirect way of promoting another website.

For example

Hello!
I followed the instructions and I confirm I have received 50% of my assets in USDT ERC-20 2 days ago to myetherwallet address: https://etherscan.io/tx/0xba02308632b0d949388bbcf54381fe8e8ea6f850c795e49620249d4d7bfd9464

Hi. I have received 50% of my funds from Livecoin. I followed the instruction and look forward to receiving the rest

I followed the instructions of livecoin and received 50% of my assets.
Thank you!

Adress: 0xc0f8b21164f12072af95ce671b01a903e06344f4
TxID: 0x6ae5d5ac56ae2fd1ee08619c49f7e911e4bdf8e1cd7e166eef7b50f9f3db01cd

Just received half of the money I had on Livecoin by following their instruction.

Transaction Hash:
0x2cd53aca3f043cd7e96c0c458bf3be8824dbca0fa224b9cd5d331c3e32697d9e

Hi, just to inform that http://livecoin.net has paid me the 50% of the amount that i have on his platform and they will transfer the balance after my posts!!

mods probably can delete all of these fake posts.

[1713264511]

1713264511

[1713264511]

1713264511

[1713264511]

1713264511

[1713264511]

1713264511

[1713264511]

1713264511

[The Cryptovator]

Oops! I forgot that Livecoin was hacked and closed. But seems the domain has been pointed to some other site. I thought Livecoin forcing users to post about refunds to get the remaining 50% balance. After reading your post wondering I was wrong. It seems the domain's own who controlling lately just musking another site behind Livecoin and promoting it on the forum. If continue shilling with new accounts, then most probably moderators would take action, but I am not sure if the report button work for them.

[The Sceptical Chymist]

Wait a sec....in one of those threads it was stated that one of the requirements to get that 50% back that all those posts are claiming was that you had to make a post here saying exactly that--that you'd gotten the refund.  I still think those posts are nonsense spam, and I don't believe there really was a hack, but there certainly was an explanation for why those posts exist (and there is, I suppose, the tiniest of possibilities that it could be true).

That whole thing was a fuckin' debacle.  I just barely missed getting scammed by a day or so, and I feel badly for anyone who kept any significant amount of crypto on their exchange. 

[stompix]

Using an expired (in this case hacked) domain is the well-known SEO technique that will bring 100% traffic and SEO rank to the new website. No matter what happened with livecoin, are they scam or not, his domain has some authority, a lot of created backlinks and even if this service is dead, there is still significant traffic to that address.
Apparently, the one who manages that domain now uses it for this purpose. He creates several new accounts here and states something quite different, using the current problem with robbered funds. but without setting up direct links.

I don't think it's that simple.

I've been looking for a while at their former Twitter account which by the way displays this message when you try to visit the main profile

Caution: This account is temporarily restricted
You’re seeing this warning because there has been some unusual activity from this account. Do you still want to view it?

And there are a lot of people who post there the same message, while the announcement link is livecoin (dot) news and not (dot) net.

I think there is a phishing campaign going around with people trying to steal documents and private information, not just some attempt to boost a SEO score for a game site that can get penalized more by Google by a simple DMCA takedown notice getting registered.

Here is one of the replies to those tweets that makes me wonder what emails are circulating around right now

So we must post that we get paid, before we have the money?
'Requests with balances up to $10000 are paid in full after complete of verification and posting proper messages about getting payment from us.'

[nutildah]

Wait a sec....in one of those threads it was stated that one of the requirements to get that 50% back that all those posts are claiming was that you had to make a post here saying exactly that--that you'd gotten the refund.  I still think those posts are nonsense spam, and I don't believe there really was a hack, but there certainly was an explanation for why those posts exist (and there is, I suppose, the tiniest of possibilities that it could be true).

I've looked into the ETH transactions and it's all fake. They will send the same amount of USDT two or three times, and each time a new account will say "look, I just received my refund." They don't always post the transaction ID but when they do the transaction looks fake AF.

They stopped accepting KYC materials for "refunds" last month, don't understand what the purpose of Livecoin wanting to make it look like they refunded customers is. Not a single member with a post history said they got their refund.

[hugeblack]

Is getting 50% of my hacked balance is a good advertising strategy? I didn't think of it like that, and I don't think your knowledge that a site that has re-funded money is ideal for experimentation.
does posting here and spam achieve real visits with depositing money? Many signature campaigns don't get good results in the first few weeks.
In general, what happens is spam and should be removed accordingly.

[The Sceptical Chymist]

They stopped accepting KYC materials for "refunds" last month, don't understand what the purpose of Livecoin wanting to make it look like they refunded customers is. Not a single member with a post history said they got their refund.

Yeah, I don't doubt any of that and I think in one of the threads about the hack I asked if any member with any reputation here had gotten a refund, but it was just all those newbie accounts posting.  The whole thing stunk of an exit scam anyway, and the story they told just didn't make sense.  Ah well.

Is getting 50% of my hacked balance is a good advertising strategy?

Lol, no.  It definitely isn't, but that's apparently just part of their exit scam strategy for appearances--totally cock-brained, but that shows you who you're dealing with.

[NotATether]

Is getting 50% of my hacked balance is a good advertising strategy?

Lol, no.  It definitely isn't, but that's apparently just part of their exit scam strategy for appearances--totally cock-brained, but that shows you who you're dealing with.

I think this, more than anything, shows what kind of crooks we are dealing with:

I think there is a phishing campaign going around with people trying to steal documents and private information, not just some attempt to boost a SEO score for a game site that can get penalized more by Google by a simple DMCA takedown notice getting registered.

So now we have a bunch of organized criminals running around and stealing everybody's passports and drivers licenses. See how exchanges like these help with identity theft? It's not even about the stolen money anymore, all someone has to do is collect a bunch of KYC and they can sell that for thousands of dollars on the black market (Tor darknet).

And then you might get suspicious drugs or weapons registered to your name and have some intelligence agency literally knocking on your front door with a search warrant.

[Viscore]

I thought livecoin.net is gone?

I tried to access the site but it prompt me with this "Your connection is not private"...
So I'm just curious where are these guys making transaction if livecoin.net is not accessible anymore?

Sorry, not so good on technical aspect, could someone explain to me.
I have a feeling that I still have some coins in my livecoin account.

[BitMaxz]

I thought livecoin.net is gone?

Have you tried it with incognito mode or try it with firefox browser or use this redirect checker https://www.redirect-checker.org/

I tried to access the site but it prompt me with this "Your connection is not private"...
So I'm just curious where are these guys making transaction if livecoin.net is not accessible anymore?

All of those transactions they made are fake they just copy them from ethereum explorer and paste it here as proof.

Sorry, not so good on technical aspect, could someone explain to me.
I have a feeling that I still have some coins in my livecoin account.

Have you read the OP?
The website might be hacked or exit scam and they make the website redirect to another website.

And actually, I already check the archive from here https://web.archive.org/web/20201001000000*/livecoin.net
It seems it's not hacked for me it's was sold by someone last December and make some count down if the old owner of livecoin domain will contact them.

I see these count down from archive

- https://web.archive.org/web/20201230023945/https://livecoin.net/
- https://web.archive.org/web/20210113010226/https://www.livecoin.net/

And the website turn to this
- https://web.archive.org/web/20210325120740/https://www.livecoin.net/cgi-sys/defaultwebpage.cgi

This means that the hosting might be expired and trying to host it to another hosting service or in Namecheap according to this website DNS.

I tried to use called "Reverse IP domain check" and saw many websites connected on the same IP but the oceantogames is not connected which means that oceantogames is a dedicated website compared to Livecoin he might be using shared hosting.

So I believe that the Livecoin domain was sold and bought by someone who owns oceantogames website and the Livecoin website redirects to his website to get SEO benefits(traffic and rankings) just like what examplens pointing.

[nutildah]

This is still going on and its insane, dozens of brand new accounts posting daily about how they received 50% of their Livecoin balance. The ones that leave transaction IDs are from transactions that are days or weeks old...

This is definitely incentivized posting.

With most of these account I don't believe they actually are getting money from Livecoin but rather being paid to spam the forum. They post this task to be done on Telegram, people do it, and they pay them.

Ah... Here, I found it. From the LivecoinEng Telegram group, 2/15/21:



Oh and then there's this cute gem:

I'm not a boot actually. Posting here is a part of deal and payment programme  

Regardless of whether or not these are actual Livecoin customers, it doesn't matter because its incentivized posting either way.

The Livecoin thread should therefore be closed.

It would be helpful if you could please report a comment by a 1-post newbie that is obviously following the Telegram instructions:

https://bitcointalk.org/index.php?topic=1151791.1580

You can use this post as a reference. Thanks.

[Timelord2067]

If it were true that livecoin dot net users are being compelled to post a disclaimer stating they had "received 50% of their claim", then it begs the question why are those users then posting evidently fake transaction details that can and are being proved to be compellingly fraudulent ??

Clearly none of us would engage in any transactions with these users given that we don't trust them, so, it is perfectly rational to argue that these users should be slapped with negative trust feedback.

[stompix]

Nothing in this make any sense
Let's  assume these claims are legit
- why is livecoin sending the rest 50% only after those posts, they could have easily just say we have paid everyone, the people with claims come forward with proof we haven't paid you, too much emphasis put on a topic on a forum to clean up the reputation of an exchange with only 1% of the users having an account here
- why they would even care about what people think if they have really paid up and they certainly plan on not operating again?
- why is nobody else doing those posts, why aren't veteran members receiving those payments, isn't there a single case?

The only purpose I see in this crap is trying to get legit customers through some kind of recovery procedure that for sure will get you scammed, but again if this was their plan (I strongly believe so) why this amateurish way of doing things?

The Livecoin thread should therefore be closed.

Definitely!

[nutildah]

why this amateurish way of doing things?

Because they're amateurs dude.



Meanwhile the thread is still open, mod hasn't acted on my reports, if anyone wants to help me report those accounts and get the thread closed that'd be great thanks.

[DireWolfM14]

Nothing in this make any sense

I know it doesn't take much to confuse me, so I'm glad I'm not the only one.  The livecoin site isn't up anymore, but the domain is still there.  Back in April I would have agreed that this was some backhanded tactic to drive up the stats for the site to which the livecoin domain was forwarding.  But there's no meta redirect anymore, what's the endgame now?

In the last 24 hours there have been 15 posts claiming to have received their 50% reimbursement, and a single one by an account with more that 2 posts total.  They're obviously sock puppet shills.  What's the point of shilling for a defunct exchange that has no web presence?  Maybe they're still trying to drive traffic to the domain in hopes of selling it to some unsuspecting noob.

if anyone wants to help me report those accounts and get the thread closed that'd be great thanks.

I'm not sure if reporting the posts will help, so I started a thread in Meta: https://bitcointalk.org/index.php?topic=5348543.0
Hopefully that attract attention from Theymos or other admins, and we'll get some results.