Do post the link here without actually opening it, I‘ll make an effort to take it down
Morning, I have one too from OrdersBot55
Realised it was spam but took me a while to work out the how it was sent as it looked to be coming from the legit domains…
happy to forward the DM on to anyone if it will help.
Payment link -
hxxp[://]emails[.]tindie[.]com/track/click/30145078/s5centr-verifyuser[.]world?p=eyJzIjoicmozeU51bFZtTU1oVjByRjVZdGRTNXF5MnhVIiwidiI6MSwicCI6IntcInVcIjozMDE0NTA3OCxcInZcIjoxLFwidXJsXCI6XCJodHRwczpcXFwvXFxcL3M1Y2VudHItdmVyaWZ5dXNlci53b3JsZFxcXC8yNTQ4NDAwODhcIixcImlkXCI6XCI5ODQ4NDdjMmQ1MGY0OTU5YWM4ZTVkMDJiZmIwNWY0N1wiLFwidXJsX2lkc1wiOltcIjU0N2VmNTA0OGM1MWVjY2JmMzlmOGUzYTU2ZjRlY2I3NmFlOTZiNTFcIl19In0
Payment link when viewing my PM directly
hxxps[://]s5centr-verifyuser[.]world/254840088
Link to the Thread
hxxp[://]emails[.]tindie[.]com/track/click/30145078/discuss[.]tindie[.]com?p=eyJzIjoiUkpHYUZ2V19IYzdpOUx5VnB2SldKT3BINlN3IiwidiI6MSwicCI6IntcInVcIjozMDE0NTA3OCxcInZcIjoxLFwidXJsXCI6XCJodHRwczpcXFwvXFxcL2Rpc2N1c3MudGluZGllLmNvbVxcXC90XFxcL2ltcG9ydGFudC1jb25maXJtYXRpb24tb2Ytc2FsZS1hbmQtdmVyaWZpY2F0aW9uLW9mLXBheW1lbnQtZGF0YVxcXC81MDA5NjhcXFwvMVwiLFwiaWRcIjpcIjk4NDg0N2MyZDUwZjQ5NTlhYzhlNWQwMmJmYjA1ZjQ3XCIsXCJ1cmxfaWRzXCI6W1wiODYzNmNkNjQyMzkzM2M4NmMxZTk5ZGY0ZWM3YTgzMzkwYjU0Y2M4M1wiXX0ifQ
1 Like
@614144e4 Thanks for sharing, I’m hoping this will make other users aware of the scamming tactics. The link is down for now, but I’m sure it will be back online before long as this scammer has been doing this since the first attempt. Will keep tracking the link though
It’s still a shame @tindie is not doing anything from their side to prevent these kinds of scams from happening. As an online-platform, they are at a higher risk from these kind of attacks
I got one of these too. Looking at the metadata, it seems that it legitimately comes from tindie.com. So, it is on Tindie to stop however these emails are being sent - either an open email server, or some way of tricking the platform.
Not worth looking deeper into S5Centr-VerifyUser.world manually (do not open, scammer webpage, currently only 7 days old).
The way the scammer works is by keeping the website offline. Then preparing a link with which the website can be accessed before making the domain online again. This fishy link is then sent to (one or more) tindie user(s). If they enter the details, usually bank and/or Paypal, the scammer gets what they want. Usually, you’ll see a chat window which they usually read in real-time.
As soon as the scammer smells suspicion, the website goes offline and links appear as broken.
Will set up a bot to track this scammer’s domains and take them down by reporting abuses
For anyone else getting these kind of emails with any username, asking you to verifiy yourself, be critical as tindie wouldn’t send these mails.
Latest DNS records show this scammer might be from Spain, though it’s not confirmed. By the way, scammer, nice try, but no cigar, or should I say, Paella? Nice to see you’re putting a little extra effort, but it would be easier to just get a job, no?
In case anyone else reads this, please post the links here and do not open them in advance
@OrdersBot56 @OrdersBot55 @OrderBot88 @OrderBot89 @OrderSystem @OrderBot58 @OrderBot67 @OrderBot77 @OrderBot65
You do know that it’s kind of useless right? Spending full-time scamming people…a job would suit you better at this stage
