Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Investigate potential phishing claim related to "Buy Swag" button #132

Open
lehnberg opened this issue Jun 6, 2019 · 6 comments
Open

Investigate potential phishing claim related to "Buy Swag" button #132

lehnberg opened this issue Jun 6, 2019 · 6 comments

Comments

@lehnberg
Copy link
Contributor

lehnberg commented Jun 6, 2019

https://twitter.com/Horus1618/status/1136176389244084225:

@grincouncil I went to buy a swag to support GRIN devs and the link takes me here... Does that look right? Please advise. If it is linking to a Phishing site please fix this. Love your work BTW

phishing

@lehnberg
Copy link
Contributor Author

lehnberg commented Jun 6, 2019

Not sure what to make of this, could be that is the user's own filtering software that is acting up. If we find evidence of anything phishing related, we should remove the links.

@0xmichalis
Copy link
Contributor

@0xb100d fyi

@0xb100d
Copy link
Contributor

0xb100d commented Jul 10, 2019

just saw this, have not heard any other reports of this, it must be an ISP specific thing. we've yet to rip anyone off, share anyone's information, or trick anybody in any way, so all I can think of is the ISP has an anti-crypto list of some sort? I've tested it on at least three ISPs and it doesn't pop up for me.

thank you for tagging me going to tweet about it to see if anybody else has come across anything like it

@phyro
Copy link
Member

phyro commented Jul 20, 2019

the website is also not secured by https right now

@0xb100d
Copy link
Contributor

0xb100d commented Oct 5, 2019

I don't know why this randomly popped up and then disappeared. It is not currently flagged on any sites when I looked it up. My only guess is that accepting or mentioning cryptocurrencies automatically flagged it? I am sure nobody reported the site individually, as we have sent everybody everything they ever ordered and have had no complaints. I've also checked all the wordpress files and it does not look like anybody has compromised the site and uploaded anything nefarious. I think this was a fluke and can be marked as closed unless anyone has other concerns. have not done a transparency report in a while which is crappy but will by end of November when grinoire ships. have not made enough money to exit scam!

@beardofmerlin
Copy link

It seems to be a case of FortiGuard Web Filter having TMGOX as a false positive. This wouldn't be the first time this happens.

FortiGuard seems to be used for computers in workplaces and universities as far as I can tell from quick Google searches. In any case, it seems like TMGOX is no longer flagged.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

5 participants