bitbaby (OP)
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
June 01, 2014, 08:07:12 AM Last edit: June 01, 2014, 08:58:38 AM by bitbaby |
|
http://blockchaln.info.gwyndara.com/ is a scamming site, when people search google for blockchain they see the first ad like this: ![](https://ip.bitcointalk.org/?u=http%3A%2F%2Fi59.tinypic.com%2F11wgioj.png&t=665&c=MWwB__2clWOu9A) And the link is this: http://goo.gl/EMoA9Q and it forwards to http://blockchaln.info.gwyndara.com/ Shut down the impersonating scammer's use of adwords: Go to https://support.google.com/adwords/troubleshooter/4578507?rd=11. Choose "This is violating other AdWords Policies". Enter your email. 2. Choose 'Misleading Advertiser Claims' 3. For the next section 'What type of ad do you have feedback on?', choose 'Text/Image Ad'. 4. When you're asked to give the google ad url of the violation, give this url: http://www.google.com/aclk?sa=L&ai=CyFUqrt6KU6-5K4_NswfZyIDIAqKCyo0FgpeZo6sBgY3N8HMIABABUJKNve75_____wFgyb6DjNCk5A_IAQGpArAu9UoVILw-qgQeT9BoFtH12cwnufimjSpbDog3-ptlX8mxKPzV3gRLgAe648AwiAcBkAcC&sig=AOD64_1JHln038X6I7O9n5V0_RTZH7B3YA&rct=j&q=&ved=0CCkQ0Qw&adurl=http://goo.gl/EMoA9Q5. Put the following in the "Please provide us with additional context for your submission" textbox: Under the violation details textbox, put this:http://blockchaln.info.gwyndara.com/ is a phishing site. When you google 'blockchain', a term used in the Bitcoin (a digital currency) ecosystem, that is a sponsored link. It appears as 'blockchain.info', which is a legitimate website. However, upon clicking on the link, you get sent to http://blockchaln.info.gwyndara.com, which impersonates https://blockchain.info/wallet/login and steals your password. Every once in awhile the subdomain is changed. For example, earlier it was http://http-blockchain-info.gwyndara.com, now it's http://blockchaln.info.gwyndara.com. They change the subdomain whenever one of the subdomains is reported for phishing, as http://http-blockchain-info.gwyndara.com currently is. Also report this site here: www.google.com/safebrowsing/report_phish/?rd=1--
|
|
|
|
BitCoinDream
Legendary
Offline
Activity: 2366
Merit: 1204
The revolution will be digital
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
June 01, 2014, 08:47:34 AM |
|
http://blockchaln.info.gwyndara.com/ is a scamming site, when people search google for blockchain they see the first ad like this: ![](https://ip.bitcointalk.org/?u=http%3A%2F%2Fi59.tinypic.com%2F11wgioj.png&t=665&c=MWwB__2clWOu9A) And the link is this: http://goo.gl/EMoA9Q and it forwards to http://blockchaln.info.gwyndara.com/ Shut down the impersonating scammer's use of adwords: Go to https://support.google.com/adwords/troubleshooter/4578507?rd=11. Enter your email 2. Choose 'Misleading Advertiser Claims' 3. For the next section 'What type of ad do you have feedback on?', choose 'Text/Image Ad'. 4. When you're asked to give the google ad url of the violation, give this url: http://www.google.com/aclk?sa=L&ai=CyFUqrt6KU6-5K4_NswfZyIDIAqKCyo0FgpeZo6sBgY3N8HMIABABUJKNve75_____wFgyb6DjNCk5A_IAQGpArAu9UoVILw-qgQeT9BoFtH12cwnufimjSpbDog3-ptlX8mxKPzV3gRLgAe648AwiAcBkAcC&sig=AOD64_1JHln038X6I7O9n5V0_RTZH7B3YA&rct=j&q=&ved=0CCkQ0Qw&adurl=http://goo.gl/EMoA9Q5. Put the following in the "Please provide us with additional context for your submission" textbox: Under the violation details textbox, put this:http://blockchaln.info.gwyndara.com/ is a phishing site. When you google 'blockchain', a term used in the Bitcoin (a digital currency) ecosystem, that is a sponsored link. It appears as 'blockchain.info', which is a legitimate website. However, upon clicking on the link, you get sent to http://blockchaln.info.gwyndara.com, which impersonates https://blockchain.info/wallet/login and steals your password. Every once in awhile the subdomain is changed. For example, earlier it was http://http-blockchain-info.gwyndara.com, now it's http://blockchaln.info.gwyndara.com. They change the subdomain whenever one of the subdomains is reported for phishing, as http://http-blockchain-info.gwyndara.com currently is. Nice catch... looks like gwyndara.com is an Irish Setters pet dog provider. Following is the domain owner's details from the domain history... Martin, Quinlan martyq@bigpond.com 25 Caprella Street Heathridge, WA 6027 AU +61.417996945
|
|
|
|
bitbaby (OP)
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
June 01, 2014, 08:53:29 AM |
|
Yes they are impersonating blockchain's wallet page, so I request all to report it to Google AdWords so they remove the Ad, And I also added the Google's report phishing site link to the top post: http://www.google.com/safebrowsing/report_phish/?rd=1Report it there also, so when people open it they will receive a warning from Google.com
|
|
|
|
illymoka
Member
![*](https://bitcointalk.org/Themes/custom1/images/star.gif)
Offline
Activity: 133
Merit: 10
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
June 01, 2014, 08:55:40 AM |
|
never used that shit and will never start. But I'm not wondered that some guyz are trying to earn on Bitcoin theme doing sites like that.
|
|
|
|
bitbaby (OP)
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
June 01, 2014, 12:24:36 PM |
|
After entering your email click "Misleading Advertiser Claims" and it will show : What type of ad do you have feedback on? Text/Image Ad Video/Flash Ad Chose "Text/Image Ad" and it will show a small input field just before the "Please provide us with additional context for your submission" enter the provided long url in the top post there. Also report the website for phishing : http://www.google.com/safebrowsing/report_phish/?rd=1
|
|
|
|
roslinpl
Legendary
Offline
Activity: 2212
Merit: 1199
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
June 01, 2014, 12:32:08 PM |
|
Reported.
Very good catch OP.
I hope not many of the people were cheated by this fake phishing site.
Tons of phishing attempts all around. We must pay attention while surfing the net.
|
|
|
|
bitbaby (OP)
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
June 01, 2014, 12:40:59 PM |
|
Thank you, hopefully with good many people reporting Google will remove the Ad or at-least it will start showing the warning when someone visits that site.
|
|
|
|
DeboraMeeks
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
June 01, 2014, 12:57:01 PM |
|
Reported, the site will be down in little to no time once its noticed.
|
|
|
|
Yeezus
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
June 01, 2014, 12:59:37 PM |
|
These phishing sites pop up quite frequently and I'm sure they'll only get more popular.
|
|
|
|
f12ej57kk
Newbie
Offline
Activity: 40
Merit: 0
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
June 01, 2014, 01:40:44 PM |
|
is multibit more secure?
|
|
|
|
bryant.coleman
Legendary
Offline
Activity: 3724
Merit: 1217
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
June 01, 2014, 01:46:17 PM |
|
Is there a way to report these sites to the Kaspersky Internet Security URL Advisor or some other anti-Virus web browsing suite? I am afraid that already it is getting late... hundreds of people might have lost their coins up to now.
|
|
|
|
jc01480
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
June 01, 2014, 02:21:59 PM |
|
+1 Thank you for the warning.
|
|
|
|
byt411
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
June 01, 2014, 02:24:37 PM |
|
Looks like it's marked as a phishing site and it's down already!
|
|
|
|
acs267
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
June 01, 2014, 02:27:42 PM |
|
There's so many of these. I actually clicked on one before, except it had somebodies IP for the subdomain. Ran off that site as if it was vermin. Most of them are reported, though.
|
|
|
|
kellzy
Newbie
Offline
Activity: 52
Merit: 0
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
June 01, 2014, 02:30:45 PM |
|
It looks like put a bit more effort into this site than the normal phishing site. Good job reporting it ![Smiley](https://bitcointalk.org/Smileys/default/smiley.gif) I would hope most users look at the URL when they go to any sites. Ok ok it is possible to slip up at miss it.
|
|
|
|
jc01480
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
June 01, 2014, 02:35:36 PM |
|
Glad their response was swift.
|
|
|
|
bitbaby (OP)
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
June 01, 2014, 06:11:59 PM |
|
Thank you everyone who reported. ![Smiley](https://bitcointalk.org/Smileys/default/smiley.gif) The Ad is removed from the google search and It shows warning if someone visits the site. So we won "for now" but they will be back with new plans so be aware. ![Cheesy](https://bitcointalk.org/Smileys/default/cheesy.gif)
|
|
|
|
|