I just got a really weird PM - page 2.

PrimeNumber7

copper member

Activity: 1666

Merit: 1901

Amazon Prime Member #7

Quote from: jackg on July 16, 2022, 06:19:07 PM

@op did you get a warning on the message that it could be phishing?

If I am thinking of the same warning message, that warning is only displayed with newbies send a PM, and it is displayed for all newbies, regardless of PM content. The person who sent the OP the PM is a Junior Member

Quote from: PowerGlove on July 16, 2022, 07:20:39 PM

Quote from: PrimeNumber7 on July 16, 2022, 05:08:17 PM

When I try to post the above BB code in a post, the link does not show up as green when I hover over the link. While this is a phishing link, santhosh121081 was not able to beat the anti-phishing measures of the forum.

That's weird. It was legit-looking and clickable in the PM. Maybe that URL has now been flagged by the system and so won't properly render anymore?

The URL is clickable, but the forum has implemented a security feature that will display links to the bitcointalk forum as green when the user hovers their mouse over the link, and will display as blue for all other links. The link in question was not to a bitcointalk forum page and was displayed as green

Harkorede

copper member

Activity: 2044

Merit: 793

Quote from: hilariousandco on July 16, 2022, 10:34:46 AM

I wonder if he bought it?

All are banned apart from Loyce. And guess what they're all banned for? Sending the same phishing PM including dragospirvu75. So either they're linked to the phishing or they're involved in selling merit to the phisher.

Or could have fell for phishing message ? and the user sending them didn't feel the need to change their password or attempt email changing since they lowly ranked account, so they decided to send send out their smerit and using the victims account to send similar message to potentially get more victims ? because why risk all your alt accounts getting banned once if he indeed owns all of them ?

PowerGlove

hero member

Activity: 510

Merit: 4005

Quote from: jackg on July 16, 2022, 06:19:07 PM

@op did you get a warning on the message that it could be phishing?

There was no warning when I first read the message and it had been sitting in my inbox for about 2 hours by that point. There was also no warning when I opened it a few hours later to click "Report To Admin".

There's now (I kept the message) a big red box with "This PM looks like possible phishing: examine links closely!".

Hmm, I wonder why that took so long to show up?

Quote from: PrimeNumber7 on July 16, 2022, 05:08:17 PM

When I try to post the above BB code in a post, the link does not show up as green when I hover over the link. While this is a phishing link, santhosh121081 was not able to beat the anti-phishing measures of the forum.

That's weird. It was legit-looking and clickable in the PM. Maybe that URL has now been flagged by the system and so won't properly render anymore?

jackg

copper member

Activity: 2856

Merit: 3071

https://bit.ly/387FXHi lightning theory

@op did you get a warning on the message that it could be phishing?

Quote from: crwth on July 16, 2022, 10:06:43 AM

You can easily spot different links. If you hover your mouse over at the link, verify if it's the same as the one posted.

You can also copy link text on mobile to copy a link that looks right onto your phone (to paste it in your search bar) or use copy link address and paste it into a notes app to interrogate to see if it's a trusted link - don't paste it into a search bar as you run the risk of accidentally hitting enter or paste and go and you may at the very least denonymise yourself.

Hopefully this gets fixed by admins to make more links return [suspicious link removed]

PrimeNumber7

copper member

Activity: 1666

Merit: 1901

Amazon Prime Member #7

Quote from: PowerGlove on July 16, 2022, 09:53:14 AM

This person didn't participate in that thread and the "link" is some kind of messed up BBCode (which I sanitized before quoting above):

Code:

[flash=200,200]https://[/flash][url=https://bitcointalk.login-index.php-topic.794551.0.thegermanaccess.com/?u=PowerGlove&l=5406168.0]bitcointalk.oгg/index.php?topic=5406168.0[/url]

Anybody know anything? Huh

When I try to post the above BB code in a post, the link does not show up as green when I hover over the link. While this is a phishing link, santhosh121081 was not able to beat the anti-phishing measures of the forum.

hilariousandco

global moderator

Activity: 4018

Merit: 2728

Join the world-leading crypto sportsbook NOW!

You need to report the PM.

Quote from: Lucius on July 16, 2022, 10:12:25 AM

After 6 pages of applications to various bounty campaigns and periods of inactivity, this user has obviously come for his perma-ban. Only 1 merit to become a Jr.Member still proves to be a bad decision, because PMs from newbies can at least be blocked.

One merit is still relatively hard to get, especially for a shitposter, but getting merit for this post today is a bit suspicious:

Quote from: santhosh121081 on February 26, 2019, 08:18:28 AM

#JOIN & #Proof of authentication

Facebook URL (personal): https://www.facebook.com/santhosh121081

Telegram username: @santhosh1981

ERC20 wallet for token distribution: 0x759b7576f2Ada6cD031A71Dd8070834e69e54DfD

I wonder if he bought it?

SIXMJ who merited that post is worth looking into. He received 3 merits from dragospirvu75 who has sent merit to the following:

   June 28, 2022, 01:12:32 AM: 3 to SIXMJ for Re: Want to buys some NFTs, please share your art...
   June 24, 2022, 12:26:27 AM: 1 to Irinatoken for Re: 🔥BLAZEPROTOCOL 🔥 Official Bounty Program
   June 12, 2022, 09:25:02 PM: 1 to Pktunnn for Re: 🌎 [BOUNTY]⚡ NOTCH COIN - 💰[100 000 000 NOTCH]💰 REWARD! 🌎
   June 11, 2022, 05:39:43 PM: 1 to ewck1442 for [ANN] Bitcoin Protocol - A Protocol to fulfulling Satoshi's Vision
   April 24, 2022, 02:43:32 PM: 1 to greenzon for Re: 🔥[BOUNTY]PIPSCHAIN - HYBRID EXCHANGE (Fiat & crypto currency in one platform)🔥
   April 10, 2022, 04:43:42 AM: 1 to LoyceV for Re: I just began to run full node. Where do I see my contribution?

All are banned apart from Loyce. And guess what they're all banned for? Sending the same phishing PM including dragospirvu75. So either they're linked to the phishing or they're involved in selling merit to the phisher.

Lucius

legendary

Activity: 3234

Merit: 5637

Blackjack.fun-Free Raffle-Join&Win $50🎲

After 6 pages of applications to various bounty campaigns and periods of inactivity, this user has obviously come for his perma-ban. Only 1 merit to become a Jr.Member still proves to be a bad decision, because PMs from newbies can at least be blocked.

crwth

copper member

Activity: 2940

Merit: 1280

https://linktr.ee/crwthopia

Be careful with these types of weird messages. It's best to open links in incognito, or better yet, never open them. It's easy to spot, though, if you are used to checking the links before clicking. I have seen some posts, IIRC, that swap out something like that.

You can easily spot different links. If you hover your mouse over at the link, verify if it's the same as the one posted.

Don't click links is a great motto as well.

OmegaStarScream

staff

Activity: 3500

Merit: 6152

Just report the PM. It's a phishing site, that's not the real bitcointalk forum. If you typed your password in there, make sure to change it.

PowerGlove

hero member

Activity: 510

Merit: 4005

Normally I wouldn't share something I've received by PM, but this feels dodgy and I have no idea who this person is:

Quote from: santhosh121081 on July 16, 2022, 12:06:56 PM

Hello PowerGlove,

I've replied to you
https://bitcointalksearch.org/topic/help-needed-with-blockchaincom-please-5406168

This person didn't participate in that thread and the "link" is some kind of messed up BBCode (which I sanitized before quoting above):

Code:

[flash=200,200]https://[/flash][url=https://bitcointalk.login-index.php-topic.794551.0.thegermanaccess.com/?u=PowerGlove&l=5406168.0]bitcointalk.oгg/index.php?topic=5406168.0[/url]

Anybody know anything? Huh

Edit: Here's an image of the message for anyone still interested:

Notice how the link is blue when it should be green. Also, notice the weird underlining that stops short of extending all the way to the left.

I've condensed what I learned from other members into a simple guide: Don't get your Bitcointalk account "phished" (Desktop/Laptop). Thanks everybody!

Topic: I just got a really weird PM - page 2. (Read 597 times)