AWARE PHISHING BITCOINTALK.ORG SITE BY USER gvuandrew

Lutpin

copper member

Activity: 1876

Merit: 1874

Goodbye, Z.

Quote from: bleachedno on March 11, 2016, 06:44:32 AM

Did anyone try to send some abuse report to the host of the fake website i think this could help and get it suspended because this is very bad and dangerous.

Like escrow.ms tired to do back in May 2014? You can try to, good luck with it.

Quote from: escrow.ms on May 09, 2014, 05:31:40 AM

I just got this email delivered to my inbox with title "Changing your forum password is recommended."
Domain was registered 2 days ago.

http://who.is/whois/bitcointaik.org
Email headers : http://pastebin.com/ZTXKGh82

Please use these website to report this domain.

http://www.google.com/safebrowsing/report_phish/?rd=1
http://www.phishtank.com/
https://submit.symantec.com/antifraud/phish.cgi
http://phishing.eset.com/report
http://toolbar.netcraft.com/report_url

bleachedno

member

Activity: 112

Merit: 10

★YoBit.Net★ 350+ Coins Exchange & Dice

Did anyone try to send some abuse report to the hoster of the fake website i think this could help and get it suspended because this is very bad and dangerous.

mexxer-2

hero member

Activity: 924

Merit: 1003

4 Mana 7/7

Best course of action is to report it to Cyrus and using the following comment "Sending links to phishing sites via unsolicited PMs". He should have the ability to perma-ban the user.

electronicash

legendary

Activity: 3066

Merit: 1049

Eloncoin.org - Mars, here we come!

christ this seems to be common these days, there are lots of them in these forum and they are just waiting for users who aren't savvy enough to click those links and login.

Quote from: suchmoon on March 11, 2016, 12:25:45 AM

Someone put quite a bit of effort into that bitcointaik site so I think we're doomed to see a lot of spam like that. Would be nice if theymos could make those links unclickable or just kill those messages outright.

its going to be a good solution but should only applies to members below.. it should be clickable for full to legendary members.

Lutpin

copper member

Activity: 1876

Merit: 1874

Goodbye, Z.

Quote from: suchmoon on March 11, 2016, 12:25:45 AM

Would be nice if theymos could make those links unclickable or just kill those messages outright.

We have those "[suspicious link removed]" boxes for some links, I think those bitcointaIk.org links should be added to that list.
A meta discussion about this exact subject was already started by SebastianJu over here.

suchmoon

legendary

Activity: 3654

Merit: 8909

https://bpip.org

Someone put quite a bit of effort into that bitcointaik site so I think we're doomed to see a lot of spam like that. Would be nice if theymos could make those links unclickable or just kill those messages outright.

Lutpin

copper member

Activity: 1876

Merit: 1874

Goodbye, Z.

Quote from: Joel_Jantsen on March 10, 2016, 11:58:53 PM

True but I never knew who was behind it.Or maybe the best thing I thought we could do is negative rep the user ?

If the PM is real, he probably gets banned for it.

Quote from: vodaljepa on March 11, 2016, 12:07:49 AM

He tried to do it to me as well https://bitcointalksearch.org/topic/phishing-attempt-by-gvuandrew-1394360

Same goes to you, report that PM straigth to a mod.

I've left a negative feedback for now.
Don't really think it's gonna make a big difference (newbies already get those big red warnings over their PMs), but anything that might help.

Joel_Jantsen

legendary

Activity: 1876

Merit: 1308

Get your game girl

Quote from: vodaljepa on March 11, 2016, 12:07:49 AM

He tried to do it to me as well https://bitcointalksearch.org/topic/phishing-attempt-by-gvuandrew-1394360

As said by Lutpin,report it to one of the mods right away.

vodaljepa

hero member

Activity: 658

Merit: 500

He tried to do it to me as well https://bitcointalksearch.org/topic/phishing-attempt-by-gvuandrew-1394360

Joel_Jantsen

legendary

Activity: 1876

Merit: 1308

Get your game girl

Quote from: Lutpin on March 10, 2016, 11:48:28 PM

This is nothing new, there are already several alike threads in this section.
https://bitcointalksearch.org/topic/escrow-partner-got-tricked-1386622 (a bit longer thread, the bitcointaIk part gets dropped a little later)
https://bitcointalksearch.org/topic/beaware-ralobotcom-is-a-scammer-trying-to-steal-my-account-password-1389494 (straightup thread about the same thing)
https://bitcointalksearch.org/topic/somone-is-trying-to-hacxk-my-account-1393737 (same scheme, sent via mail)

True but I never knew who was behind it.Or maybe the best thing I thought we could do is negative rep the user ?

gurre

full member

Activity: 157

Merit: 101

Quote from: Lutpin on March 10, 2016, 11:48:28 PM

Quote from: Joel_Jantsen on March 10, 2016, 11:46:08 PM

This user gvuandrew is spreading the link to the phishing site.
Today gurre got the PM from gvuandrew which was
-snip-

gurre should report the PM to any Mod.

Reported!

Lutpin

copper member

Activity: 1876

Merit: 1874

Goodbye, Z.

Quote from: Joel_Jantsen on March 10, 2016, 11:46:08 PM

This user gvuandrew is spreading the link to the phishing site.
Today gurre got the PM from gvuandrew which was
-snip-

gurre should report the PM to any Mod.

This is nothing new, there are already several alike threads in this section.
https://bitcointalksearch.org/topic/escrow-partner-got-tricked-1386622 (a bit longer thread, the bitcointaIk part gets dropped a little later)
https://bitcointalksearch.org/topic/beaware-ralobotcom-is-a-scammer-trying-to-steal-my-account-password-1389494 (straightup thread about the same thing)
https://bitcointalksearch.org/topic/somone-is-trying-to-hacxk-my-account-1393737 (same scheme, sent via mail)

Joel_Jantsen

legendary

Activity: 1876

Merit: 1308

Get your game girl

Not sure if this belongs here ,mods are free to move. Everyone must be aware of the phishing bitcointalk.org where L is replace by I and its difficult to make out in the browser.

This user gvuandrew is spreading the link to the phishing site (maybe he owns it too).Today gurre got the PM from gvuandrew which was ,

Quote from: gurre on March 11, 2016, 03:31:28 AM

Quote from: gvuandrew on March 11, 2016, 02:31:37 AM

!!! WARNING: This user is a newbie. If you are expecting a message from a more veteran member, then this is an imposter !!!

Yes, Jason Boyko is a big scammer check this thread:

https://bitcointalk.org/index.php?topic=1314653.0

You can't easily make out in the quotes that link is fake but once you edit it ,this is what you'll see

Ignore all the PM's by him.

Topic: AWARE PHISHING BITCOINTALK.ORG SITE BY USER gvuandrew (Read 544 times)