Author

Topic: Blockchain impersonator scamming people! (Read 2179 times)

hero member
Activity: 812
Merit: 1000
June 01, 2014, 02:11:59 PM
#17
Thank you everyone who reported.  Smiley

The Ad is removed from the google search and It shows warning if someone visits the site.

So we won "for now" but they will be back with new plans so be aware. Cheesy
hero member
Activity: 854
Merit: 500
Nope..
Glad their response was swift.
newbie
Activity: 52
Merit: 0
It looks like put a bit more effort into this site than the normal phishing site.
Good job reporting it Smiley
I would hope most users look at the URL when they go to any sites. Ok ok it is possible to slip up at miss it.
hero member
Activity: 644
Merit: 500
There's so many of these. I actually clicked on one before, except it had somebodies IP for the subdomain. Ran off that site as if it was vermin. Most of them are reported, though.
hero member
Activity: 798
Merit: 1000
Looks like it's marked as a phishing site and it's down already!
hero member
Activity: 854
Merit: 500
Nope..
+1  Thank you for the warning.
legendary
Activity: 3654
Merit: 1217
Is there a way to report these sites to the Kaspersky Internet Security URL Advisor or some other anti-Virus web browsing suite? I am afraid that already it is getting late... hundreds of people might have lost their coins up to now.
newbie
Activity: 40
Merit: 0
is multibit more secure?
full member
Activity: 214
Merit: 100
These phishing sites pop up quite frequently and I'm sure they'll only get more popular.
hero member
Activity: 588
Merit: 500
Reported, the site will be down in little to no time once its noticed.
hero member
Activity: 812
Merit: 1000
Thank you, hopefully with good many people reporting Google will remove the Ad or at-least it will start showing the warning when someone visits that site.
legendary
Activity: 2212
Merit: 1199
Reported.

Very good catch OP.

I hope not many of the people were cheated by this fake phishing site.

Tons of phishing attempts all around.
We must pay attention while surfing the net.
hero member
Activity: 812
Merit: 1000
After entering your email click "Misleading Advertiser Claims" and it will show :

Code:
What type of ad do you have feedback on?
Text/Image Ad
Video/Flash Ad

Chose "Text/Image Ad" and it will show a small input field just before the "Please provide us with additional context for your submission" enter the provided long url in the top post there.

Also report the website for phishing : http://www.google.com/safebrowsing/report_phish/?rd=1
member
Activity: 133
Merit: 10
never used that shit and will never start. But I'm not wondered that some guyz are trying to earn on Bitcoin theme doing sites like that.
hero member
Activity: 812
Merit: 1000
Yes they are impersonating blockchain's wallet page, so I request all to report it to Google AdWords so they remove the Ad, And I also added the Google's report phishing site link to the top post: http://www.google.com/safebrowsing/report_phish/?rd=1

Report it there also, so when people open it they will receive a warning from Google.com
legendary
Activity: 2338
Merit: 1204
The revolution will be digital
http://blockchaln.info.gwyndara.com/ is a scamming site, when people search google for blockchain they see the first ad like this:



And the link is this: http://goo.gl/EMoA9Q and it forwards to http://blockchaln.info.gwyndara.com/ 


Shut down the impersonating scammer's use of adwords:

Go to https://support.google.com/adwords/troubleshooter/4578507?rd=1

1. Enter your email

2. Choose 'Misleading Advertiser Claims'

3. For the next section 'What type of ad do you have feedback on?', choose 'Text/Image Ad'.

4. When you're asked to give the google ad url of the violation, give this url: http://www.google.com/aclk?sa=L&ai=CyFUqrt6KU6-5K4_NswfZyIDIAqKCyo0FgpeZo6sBgY3N8HMIABABUJKNve75_____wFgyb6DjNCk5A_IAQGpArAu9UoVILw-qgQeT9BoFtH12cwnufimjSpbDog3-ptlX8mxKPzV3gRLgAe648AwiAcBkAcC&sig=AOD64_1JHln038X6I7O9n5V0_RTZH7B3YA&rct=j&q=&ved=0CCkQ0Qw&adurl=http://goo.gl/EMoA9Q

5. Put the following in the "Please provide us with additional context for your submission" textbox:

Under the violation details textbox, put this:

http://blockchaln.info.gwyndara.com/ is a phishing site. When you google 'blockchain', a term used in the Bitcoin (a digital currency) ecosystem, that is a sponsored link. It appears as 'blockchain.info', which is a legitimate website. However, upon clicking on the link, you get sent to http://blockchaln.info.gwyndara.com, which impersonates https://blockchain.info/wallet/login and steals your password. Every once in awhile the subdomain is changed. For example, earlier it was http://http-blockchain-info.gwyndara.com, now it's http://blockchaln.info.gwyndara.com. They change the subdomain whenever one of the subdomains is reported for phishing, as http://http-blockchain-info.gwyndara.com currently is.



Nice catch... looks like gwyndara.com is an Irish Setters pet dog provider. Following is the domain owner's details from the domain history...

Martin, Quinlan  [email protected]
    25 Caprella Street
    Heathridge, WA 6027
    AU
    +61.417996945

hero member
Activity: 812
Merit: 1000
http://blockchaln.info.gwyndara.com/ is a scamming site, when people search google for blockchain they see the first ad like this:



And the link is this: http://goo.gl/EMoA9Q and it forwards to http://blockchaln.info.gwyndara.com/  


Shut down the impersonating scammer's use of adwords:

Go to https://support.google.com/adwords/troubleshooter/4578507?rd=1

1. Choose "This is violating other AdWords Policies". Enter your email.

2. Choose 'Misleading Advertiser Claims'

3. For the next section 'What type of ad do you have feedback on?', choose 'Text/Image Ad'.

4. When you're asked to give the google ad url of the violation, give this url: http://www.google.com/aclk?sa=L&ai=CyFUqrt6KU6-5K4_NswfZyIDIAqKCyo0FgpeZo6sBgY3N8HMIABABUJKNve75_____wFgyb6DjNCk5A_IAQGpArAu9UoVILw-qgQeT9BoFtH12cwnufimjSpbDog3-ptlX8mxKPzV3gRLgAe648AwiAcBkAcC&sig=AOD64_1JHln038X6I7O9n5V0_RTZH7B3YA&rct=j&q=&ved=0CCkQ0Qw&adurl=http://goo.gl/EMoA9Q

5. Put the following in the "Please provide us with additional context for your submission" textbox:

Under the violation details textbox, put this:

http://blockchaln.info.gwyndara.com/ is a phishing site. When you google 'blockchain', a term used in the Bitcoin (a digital currency) ecosystem, that is a sponsored link. It appears as 'blockchain.info', which is a legitimate website. However, upon clicking on the link, you get sent to http://blockchaln.info.gwyndara.com, which impersonates https://blockchain.info/wallet/login and steals your password. Every once in awhile the subdomain is changed. For example, earlier it was http://http-blockchain-info.gwyndara.com, now it's http://blockchaln.info.gwyndara.com. They change the subdomain whenever one of the subdomains is reported for phishing, as http://http-blockchain-info.gwyndara.com currently is.


Also report this site here: www.google.com/safebrowsing/report_phish/?rd=1

--
Jump to: