An Email from TradingView claiming they are airdropping $TRADE Tokens

wallet4bitcoin

sr. member

Activity: 980

Merit: 282

Catalog Websites

Quote from: Bitcoin_Arena on November 20, 2023, 09:43:25 AM

A few hours back I received an Email from what seems to be tradingview official communication email channel ([email protected]). It's the same email address that sends me alerts once a price crosses my set alarm price.

Obviously the $TRADE token airdrop is a scam because on visiting the site, they want one to connect your Metamask or one of the wallets and website is domain is brand-new
Suspicious website

Code:

http://www.tradingviewtoken.com/

Code:

Domain: tradingviewtoken.com
Registrar: Tucows Domains Inc.
Registered On: 2023-11-19
Expires On: 2024-11-19
Updated On: 2023-11-19

My question is how the scammers managed to pull this off? I mean using the official email of TradingView to spread their scam.

The advancement of scammers in the tech space seems to be at an increase, most of the time, they break the very defences that you have so armed yourself with and you wouldn't even notice.

Part of the reason why I always keep researching. Initially, once I get this kind of email, I check the sender's address if it has the same domain name as the orginal company url and if it doesn't then its a clear case of scam but for them to have pulled this off, then more research is to be done to stay ahead else one can become a victim.

Tradingview on the other hand has nothing to do with tokenization as a business model, they already have subscribers and their clients are numerous and they are not complaining about it.

Bitcoin_Arena

copper member

Activity: 2114

Merit: 1814

฿itcoin for all, All for ฿itcoin.

Quote from: joniboini on November 21, 2023, 08:23:18 PM

What the, so there is no difference between e-mails sent for the tagging features before or do the scammers use some code to mask the message? If it is the former then it would be really weird. I don't see how difficult it is to provide a template for something like that. Just a quoted message from the members tagging you will do that, including their names or something similar. Really an odd choice imo, good thing they solved it quickly.

Yeah, the sending email address is the same.

Let say Bitcointalk can send you a notification email every time a member mentions you, but in that notification message it displays all the post you were mention in. What the scammer does is to mention you in a post but this time round the post is advertising his malicious airdrop or token. Now, any average user who receives the notification may think it's directly from Bitcointalk because the sending email address is official.

joniboini

legendary

Activity: 2170

Merit: 1789

Quote from: Bitcoin_Arena on November 21, 2023, 04:54:05 PM

In other words, the scammers were taking advantage of the minds/chat feature to send a notification about a fake airdrop to as many tradingview members as possible,

What the, so there is no difference between e-mails sent for the tagging features before or do the scammers use some code to mask the message? If it is the former then it would be really weird. I don't see how difficult it is to provide a template for something like that. Just a quoted message from the members tagging you will do that, including their names or something similar. Really an odd choice imo, good thing they solved it quickly.

Bitcoin_Arena

copper member

Activity: 2114

Merit: 1814

฿itcoin for all, All for ฿itcoin.

Quote from: FinneysTrueVision on November 20, 2023, 11:09:31 PM

>>snip<<

I think your explanation is on point

So I received another email using the same domain ([email protected]) and they said it's an ongoing suspicious activity or scam. Here is their explanation.

Quote

Hi,

We have been notified that some of the users have been tagging a large number of other users in the Minds/Chats posts and comments. As a result, some of you might have received suspicious social notifications from unknown accounts on TradingView. This issue has been addressed. Behind the scenes, our team is continuously working to identify and address your concerns, employing advanced technologies and proactive strategies. We are committed to ensuring your safety on our platform.

While we strive to create a safe space for connection and sharing, it’s vital to be aware of individuals who may try to exploit online platforms. We encourage you to be vigilant against unusual or suspicious communications, especially those claiming to be from us. Remember, we will never ask for your sensitive personal information via email, send you to external websites or offer you to buy / pay for subscriptions via a third party. Any communication received from other members is coming directly from them, not TradingView, and needs to be treated accordingly.

Transparency and open communication are crucial to us. Your feedback is invaluable in helping us enhance our social media platform and related measures.

Thank you for being a part of our community.
TradingView Security Team

470 Olde Worthington Rd., Suite 200
Westerville OH 43082

In other words, the scammers were taking advantage of the minds/chat feature to send a notification about a fake airdrop to as many tradingview members as possible,

rat03gopoh

hero member

Activity: 2212

Merit: 670

Signature designer - start @$10 - PM me!

Quote from: FinneysTrueVision on November 20, 2023, 11:09:31 PM

I don't think it's email spoofing. When you create a TradingView account you are assigned a randomly generated username or you can set a custom one. An impersonator then used the chat feature to tag your username in a comment. This notification was relayed to your email address from the real TradingView domain.

This is a reasonable explanation. My attention was drawn to the header which stated: "Mentioned you in a comment to a mind", I think the scammer created a chat group with the name "mind" and added new members randomly. Notifications will be sent via email when your username is mentioned. This is the setting to turn on/off notifications:

https://www.tradingview.com/support/solutions/43000604448-how-to-use-tradingview-chat/

FinneysTrueVision

sr. member

Activity: 1680

Merit: 379

Top Crypto Casino

I don't think it's email spoofing. When you create a TradingView account you are assigned a randomly generated username or you can set a custom one. An impersonator then used the chat feature to tag your username in a comment. This notification was relayed to your email address from the real TradingView domain.

This would be like if somebody created a forum account with the username BitcoinTalkAirdrop and started replying to comments with links to a scam website and anybody with email notifications enabled would receive that reply as an email from Bitcoin Forum <[email protected]>.

Yamane_Keto

hero member

Activity: 406

Merit: 443

Quote from: Bitcoin_Arena on November 20, 2023, 09:43:25 AM

My question is how the scammers managed to pull this off? I mean using the official email of TradingView to spread their scam.

It's Email spoofing, in short, when you send a Simple Mail Transfer Protocol (SMTP) email. Since there is no second authentication to ensure that the sending system is authorized to send from that address, it is easy for the recipient's address to be headed to any address, but the internal data is different.
Activate the whitelist for specific addresses and move the rest to spam. This way you will be sure that you will not receive phishing messages from a specific address.

https://en.wikipedia.org/wiki/Email_spoofing

Try sending me a message

Code:

[email protected]

You will find that the receiving destination is different

If you open the email page source from the browser (Right-click and select View Page Source), you will find the real data for the sender in x-original-to email header, and then you will know the real email.

EarnOnVictor

hero member

Activity: 882

Merit: 654

Leading Crypto Sports Betting & Casino Platform

Quote from: Bitcoin_Arena on November 20, 2023, 09:43:25 AM

-snip-
My question is how the scammers managed to pull this off? I mean using the official email of TradingView to spread their scam.

TradingView has ever disclaimed all airdrops, but this one coming from their real domain is surprising. Initially, when I saw this, I thought you might have mistakenly not checked the domain email sender, but indeed you did and thanks for putting it across.

On this, my takes are two, and the first is that we shouldn't totally conclude that this is not from TravingView itself. At times, some companies with that reputation take the backseat to observing the situation and mailing their lists might be the first step to the awareness.

For the second take, if this is indeed from scammers, then it's possible that TradeView has been compromised either by an insider or it was hacked. And since there was no such hacking news, it's possible that TradeView insider work is involved or the company itself is involved but just pretending.

Also, the domain "trade.io" that I could find online which matches the $TRADE token doesn't show any information, but just placed the domain name's text there.

PX-Z

hero member

Activity: 1554

Merit: 880

pxzone.online

Here is their related tweet/post^[1] about this although it doesnt mentioned the airdrop scam but the posted time says it all. There are also awareness reply/comment regarding the airdrop.

They mentioned that they wont use any domain other than tradingview.com so this email is probably spoofed and scam.

[1] https://twitter.com/tradingview/status/1726457152506679710?s=19

bittraffic

hero member

Activity: 3038

Merit: 617

Quote from: Beparanf on November 20, 2023, 10:46:58 AM

This surely a scam because they are relying on the subscription to gain profit while they are the number 1 charting company in both crypto and stock market which is why it’s impossible for them to have a tokenized token with a profitable product already.

They also have a current Black Friday sale with their subscription which is a clear indication that they are not interested on token but rather they focus on the subscription. I believe you should report this to tradingview support to make them aware that someone is using their official alert email to send scam.

I didn’t received this kind of mail even though I’m using alert function of this app.

Your email wasn't on the list of the scammer's database. I didn't get any of this either but I was curious to look into this thread whether $TRADE was real.
I can imagine how big this token would be if it's real. almost everyone in crypto I think is in tradingview and if the use case of the token makes demands, that airdrop will be huge.

A careless trader who will be eager to receive an airdrop would probably connect.

Beparanf

hero member

Activity: 2954

Merit: 796

This surely a scam because they are relying on the subscription to gain profit while they are the number 1 charting company in both crypto and stock market which is why it’s impossible for them to have a tokenized token with a profitable product already.

They also have a current Black Friday sale with their subscription which is a clear indication that they are not interested on token but rather they focus on the subscription. I believe you should report this to tradingview support to make them aware that someone is using their official alert email to send scam.

I didn’t received this kind of mail even though I’m using alert function of this app.

Woodie

hero member

Activity: 1834

Merit: 879

Rollbit.com ⚔️Crypto Futures

Tokenizing of its platform is clearly not a tradingview model considering this is an exclusive charting platform and besides if they need money they make it through users wanting pro feature's and they have the clientele for this.

Secondly, I use tradingview quite to often, why would they use another domain... honestly too many red flags here and you are right to call it a scam!!!

Quote from: Bitcoin_Arena on November 20, 2023, 09:43:25 AM

My question is how the scammers managed to pull this off? I mean using the official email of TradingView to spread their scam.

Email spoofing...
And unfortunately they don't need to have access to the official email address as they only need the targets address and good email layout to get to you and they work is done, it's upto the end-users to know this is a phishing attempt / scam not to fall for their tricks.

***
-off topic-
I believe these are the same tactics they use to unlock iCloud locked phones as they send out some nice looking found your phone emails and once script is run its an auto off process **

Bitcoin_Arena

copper member

Activity: 2114

Merit: 1814

฿itcoin for all, All for ฿itcoin.

A few hours back I received an Email from what seems to be tradingview official communication email channel ([email protected]). It's the same email address that sends me alerts once a price crosses my set alarm price.

Obviously the $TRADE token airdrop is a scam because on visiting the site, they want one to connect your Metamask or one of the wallets and website is domain is brand-new
Suspicious website

Code:

http://www.tradingviewtoken.com/

Code:

Domain: tradingviewtoken.com
Registrar: Tucows Domains Inc.
Registered On: 2023-11-19
Expires On: 2024-11-19
Updated On: 2023-11-19

My question is how the scammers managed to pull this off? I mean using the official email of TradingView to spread their scam.

Topic: An Email from TradingView claiming they are airdropping $TRADE Tokens (Read 148 times)