Topic: FaucetBOX.com Discussion - page 113. (Read 237001 times)

Same in Faucet in a BOX script, if anyone is curious. It doesn't work very well, recent bots can bypass it (just like I predicted a month ago). The only difference is that the honeytraps reports IP addresses for manual verification, that way we can ban whole networks.


Honest question: how does it work and why it haven't stopped the attack?


Add http://nastyhosts.com/ or http://getipintel.net/ or something similar to your list of countermeasures. Also use CloudFlare with Browser integrity enabled. It's not perfect, but it'll help a lot.


I believe we've done a lot by implementing many new anti-bot features to our script. Banning or deleting bot addresses doesn't help, they just create new ones. It has to be done on the script level and has to be based on things like IP network and trying to test the browser.

You write a lot, but you've skipped my question for the second time now. What else you want us to do except for reverting payments or banning addresses, which were discussed a lot before?

Also I hope that bots problem is almost solved for people using Faucet in a BOX script. I haven't got any reports of bots attack on faucets using our script in version r59 or newer (if there was an attack that wasn't reported, please tell me).

Yes, I am a member of a very active Whatsapp group of several <100K Alexa ranked faucets who are all experiencing the same. I was the FIRST person to report LARGE scale hacks to anyone on this forum and have saved admins a LOT. Do you know how many PMs I have replied to regarding anti-botting features?

I pay more than you on your little faucet bro, so I know what it's like to be raped. When you disappeared over the summer I had 4 faucets sitting in the Faucetbox top 10, and all of my faucets have been Top 10 on iFaucet - what are you talking about? Good work on FaucetFM, but personally I could have told YOU where you were getting hacked from. I give a shit if you have sympathy for me or not - your faucets have already been raped by users at TheBotNet and other sites..

Pretty soon we will migrate our users to a direct Xapo payment system, we'll save fees and offer a bonus for the privilege.

I have some of the most advanced anti-bot features around (and unlike most of these idiotic admins, my users don't realize).

1. Random sha-256 has dynamic field and button names (login, cashout, claim, etc)
2. Honeytrap forms with a 'three strikes and you're out' automatic banning system
3. Dynamic placeholder names
4. Email verification
5. Admin verification for large cashouts (just implemented)

Users such as superious from Bitcoinspace, Drey from RainingBitcoin, Mendie from Wonderland and Robotcoingame, Raphael from WeLoveFaucets network, Alex from FreeBet Network along with dozens of other users have PMed me and requested the information I have on bots. Kazuldur knows what I know - AND he also knows I was THE FIRST user to present such large scale evidence of any sort of botting to him at all.

Kazuldur also knows the main referral/wallet addresses of a large, Russian botting network that is plaguing HUNDREDS of faucet users - I have told him these on past occasions, and warn any admins who contact me to be aware of them. Has he done anything to prevent the abuse of the sites that the network in question attacks, despite being aware of the precise referral tree? Nope.

Anyone who wants more details, PM me.

Is this happening to anyone else? Not to me and I have one of the highest payouts, surely I would get my faucet raped. I think it must be your script . I have no sympathy for you by the way. You're rude to those offering their advice/suggestions even if it's wrong. I mentioned it could possibly be coinwall as I used to run a GPT site abiabck.com and had to deal with fraud. I even said "I don't know how coinwall works", and you said I dont know what I'm talking about, I didn't know coinwall themselves verifies and send payments. So I'll just leave it, figure it out yourself FFS! Let me guess, it's a custom script and you dont know shit!

What features do you mean? Reverting payments isn't an option, come on, that's ludicrous. All other anti-bot features have to be implemented in the faucet script, not in FaucetBOX.com service.

Does anyone here has access to this program: http://www.autoclickbots.com/product/coincollector-v3/ ?

Well, would you look at this. Another instance of a company that started off so great only to let their greed get in the way of their hard work that made them so great in the first place. thefaucetrunner, I think it's unfortunate that your message was overlooked and dismissed so suddenly. Just because FaucetBOX is profitable doesn't mean that they can neglect the very sites that make them profitable in the first place. As much as I wanted to use FaucetInaBox as the backbone for my upcoming faucet, after the way that things have been handled by FaucetBOX in the last few pages of this thread, I don't feel confident that I will be safe from botters and hackers with FaucetBOX any longer.

0.5BTC may not mean shit to you, kaz, but for some faucet admins who are doing everything that they can to run a faucet by the book, that's the make or break balance. Don't be so quick to dismiss and rule out these admins when they come to you looking for help, ESPECIALLY after they do so much due diligence on an infrastructure that supports an extra side of your business.

I suggest that if you want to stay on top, you help investigate matters like the one that thefaucetrunner has posted about. Because if it happened to him, you can be damn sure it's happening to other faucets out there, as well.

Do the right thing, kaz.

As if I'm being called on my ability to judge my own faucets getting hacked. Kaz you deserve to give me a better response than this, I will continue to campaign for the correct features and functions to be added until you do something to protect admins like myself.

Your doubts mean little to me, I know they're bot addresses - you have no right to dismiss my judgment like that. I'm not happy at all..

I spent three hours going through all of those addresses, verifying patters, updating the withdraw threshold and then logging them. I can't believe what you've just written, I'm disgusted.

They are all identical.. I have checked.

Of course I do, I'm one of the most active anti-bot admins here. You're robbing me, I spent hours checking those users. There are a number of ways to tell these users are not legit:

1. They all claim on 'Faucetbtcs' repeatedly before coming to mine, Alex (ElenaBit) or Raphael's faucets.
2. They all cashed out within seconds of disabling ACL after enabling it accidentally. I have a snapshot of the behaviour.
3. They all cashed out within seconds of each other on all sites.

Stop trying to get out of it - you take our fees for nothing at all. I want ALL of those addresses payments reversed, I have all the proof you need. You can check them yourself Kaz.

To think you don't trust my judgment on this. I have caught some of the biggest networks around, you were less than helpful before (telling me it was 'my script') when actually your entire service is open to abuse, and you claim fees off users regardless.

I have proof of you neglecting users who actually bother to check their payouts, if you don't respond to this.

I think that he thought that CoinWall paid out using FaucetBox and that is where the payments come from.

If I am correct, the only way that CoinWall withdraws is by using its own payment system to try and prevent fraud. Nothing in that screenshot has anything to do with CoinWall.

No way we'll implement reversing payments by owners, that would be abused over and over again.

Banning addresses is a feature that can be implemented in your faucet script if you want (Faucet in a BOX script supports that), but frankly it's pointless. Bots can create new addresses instantly and for free. What could be useful is banning IP addresses. If they're from single network, then it makes sense to ban it. Check your logs and check if there's any pattern in IP addresses. If there is, please send it to me and I'll work on adding it to Nastyhosts.com.

Also FaucetBOX.com won't reverse these payments. There's no way to tell which ones are legit and which ones are not. Heck, it's possible that these aren't even bots at all, but you just got promoted on some rotator. It's not possible to tell the difference from our point of view and we're here to protect interests of users and owners equally.

Do you use any measures to block bots except for captcha?

Of course only admins would use this feature, why would I want that sort of functionality in the hands of some random BTC users.

Come on, of course you know that's what I meant.  And as for whoever is mentioning the Coinwall - you have literally no idea what you're talking about at all, please don't post random stuff you typed.

I don't think you understand what is going on in his screenshot. Those 18 transactions/cashouts were done within 3 minutes of each other, and he said he's got 6-7 pages of transactions like that. Someone is exploiting his faucet. What does coinwall have to do with anything?