I've also just came across a phishing attempt from user AIRBOU
It was the same format as OP.
Directed me to a forum link that requested me to log in again.
I then replied warning him of his crappy attempt and that red ink will be coming his way.
His reply:
Who are you and what are you talking about?
Topic: phishing attempt from EDOMAJKA11 (Read 245 times)
Yeah, I've had exactly same experience about phishing attempt as well.
It was username predkin that tried to scam me like this.
It was username predkin that tried to scam me like this.
Did you post negative trust against the account?
M
Yeah, I've had exactly same experience about phishing attempt as well.
It was username predkin that tried to scam me like this.
It was username predkin that tried to scam me like this.
What happened:
I received a PM from this user indicating he replied to my message. He included a URL that looked like a Bitcointalk URL, but in reality points to a lookalike site:
http://detallesfalleros.com/index/?u=mdude77&r=789369
Which of course then prompts me for my logon credentials.
Scammers Profile Link:
https://bitcointalksearch.org/user/edomajka11-224178
Reference Link:
http://detallesfalleros.com/index/?u=mdude77&r=789369
PM/Chat Logs:
hi mdude77
i've replied to you:
hi mdude77
i've replied to you:
https://bitcointalk.org/index.php?topic=2267392.0 <----DO NOT CLICK ON THIS
Thanks.
Additional Notes:
This user appears to have been around for a while. That probably means his account has been compromised or sold.
You can see the raw text he sent me by quoting me. It uses an iurl tag, which I've not seen before.
M
I received a PM from this user indicating he replied to my message. He included a URL that looked like a Bitcointalk URL, but in reality points to a lookalike site:
http://detallesfalleros.com/index/?u=mdude77&r=789369
Which of course then prompts me for my logon credentials.
Scammers Profile Link:
https://bitcointalksearch.org/user/edomajka11-224178
Reference Link:
http://detallesfalleros.com/index/?u=mdude77&r=789369
PM/Chat Logs:
hi mdude77
i've replied to you:
hi mdude77
i've replied to you:
https://bitcointalk.org/index.php?topic=2267392.0 <----DO NOT CLICK ON THIS
Thanks.
Additional Notes:
This user appears to have been around for a while. That probably means his account has been compromised or sold.
You can see the raw text he sent me by quoting me. It uses an iurl tag, which I've not seen before.
M
Jump to: