security Scammers on the nP marketplace

[Gube]

Hello nP,

These last days have been relatively active for scammers on nP.

Their method of operation is always the same (Scammers are not that smart - or it might be the same individual) :
- They create a new nP account
- Get a few fake reviews on their new account
- List liquid names on the nP marketplace (A lot of 4L for some reasons).. and ask to get paid with PayPal.

Could and should we restrict access to the nP marketplace to users with a given amount of posts (Or Trusted Members), or accounts older than x, or something else?

 

[FolioTeam]

I believe restricting brand new accounts from the marketplace can go a long way. But implementing it without impeding the progress of new accounts that happen to be tricky, will be tricky

 

[Gube]

I believe restricting brand new accounts from the marketplace can go a long way. But implementing it without impeding the progress of new accounts that happen to be tricky, will be tricky

I agree, it could maybe concern sale threads only (only preventing them to list names for sales)
That way they would still be allowed to participate in auctions
Now for growing their nP account, the best place is probably not the marketplace section at the very start as they should learn what to buy, and what sells first IMO

 

[OnlineDomainShop]

Paypal is equal culprit giving shelter to scammers , I am amazed to see paypal is seems to be safe heaven for scammers.

 

[Bravo Mod Team]

Could and should we restrict access to the nP marketplace to users with a given amount of posts (Or Trusted Members), or accounts older than x, or something else?

Unfortunately, that wouldn’t be more effective than the advanced automated and manual systems that NamePros already has in place, which are part of the reason that scams on NamePros are so rare. Members are also really great at helping and educating each other to do due diligence, notice red flags, use escrow services, etc.

The best defense is being educated about scams and reporting anything suspicious.

 

[Bravo Mod Team]

I agree, it could maybe concern sale threads only (only preventing them to list names for sales)
That way they would still be allowed to participate in auctions
Now for growing their nP account, the best place is probably not the marketplace section at the very start as they should learn what to buy, and what sells first IMO

Most transactional scams from new members take place in direct messages or email (outside of NamePros). Access to the marketplace isn’t necessary to use direct messages or contact members outside of NamePros, which is why we restrict both marketplace access and direct messages when a potential scam comes to our attention.

Education and awareness are so important because scams typically don’t happen in public.

 

[Gube]

Education and awareness are so important because scams typically don’t happen in public.

It's true. I know we are on Xenforo, but could you customize the conversation page for new users asking the recipient(s) to pay attention when dealing with that person as he is new on nP in this case ?

 

[NickB]

It looks to me they are taking over old accounts now as well......

https://www.namepros.com/threads/thief-zedim.1230409/page-4#post-8187845

@Paul it needs looking into.....

 

[MasterOfMyDomains]

your so smart, where am I now?
@[Redacted]

 

[MasterOfMyDomains]

I invite a mod to pm me to know what the unknown page is I am viewing, it may be a security issue?

 

[Paul]

I can hijack all accounts.

Then hijack mine. All you're doing is credential stuffing.

 

[MasterOfMyDomains]

No one will hack mine. who would want to be me. Good to see @[Redacted] closed

 

[cyc]

Then hijack mine. All you're doing is credential stuffing.

https://www.namepros.com/threads/thief-zedim.1230409/page-5#post-8187914 : )

 

[lpstong]

This is the original lpstong. The hacker did it about 15 minutes after I logged out of .y account today. I saw 3 emails from name pros about 30 minutes after I logged out. He was trying to buy some domain from a new account. The domain they were trying to buy was Dan.com for $500. Im not sure if it went through but it looks like the were trying to buy it with bitcoin

 

[Paul]

This is the original lpstong.

Glad to hear you've made it back into your account. We're still in the process of cleaning up, and we're continuing to monitor for further issues.

At this time, the logs indicate that the attacker is only able to get into an account if they already know the password. If you're reading this, and you use the same password across multiple websites, you should change it. Your NamePros password shouldn't be the same as your Gmail password, and your Gmail password shouldn't be the same as your registrar password.

 

[lpstong]

All my other passwords are not the same as my old one for this acct. Nonetheless I have changed the password on this acct and will try and change it monthly. Thanks for the help

 

[Paul]

All my other passwords are not the same as my old one for this acct.

Even if they're similar or follow a pattern, that's usually enough for an attacker to get in.

 

[Bravo Mod Team]

I invite a mod to pm me to know what the unknown page is I am viewing, it may be a security issue?

It's just a page that an add-on forgot to announce to the "Viewing" functionality.

It's harmless, so you can continue to have fun with it.

 

[matt3214]

This is the original lpstong. The hacker did it about 15 minutes after I logged out of .y account today. I saw 3 emails from name pros about 30 minutes after I logged out. He was trying to buy some domain from a new account. The domain they were trying to buy was Dan.com for $500. Im not sure if it went through but it looks like the were trying to buy it with bitcoin

Glad to know that the scammer has gone.
He (the scammer, not you of course) messaged me that he wanted to take BIN at one of my auctions. At first I was happy, and asked him to provide standard data for transactions via DAN. He refused, and insisted on transactions via paypal or crypto. I gave my BTC wallet code and asked him to send it first, then I would push the domain. He refused, and forced me to push first. He said "Nonsense, I'm a member for over 10 years. I have reputation." Lol. Luckily, although I'm a new member here in NP, I now that there must be something wrong with this guy. So I refuse him.

For future reference, his Godaddy account is below.
mail: [email protected]
Username: lookmend

I hope Godaddy representation here in namepros can take an action to his account. Perhaps there are some stolen domains in his GD account.

 

[Bravo Mod Team]

At first I was happy, and asked him to provide standard data for transactions via DAN.

That's a key component of many scams: the target is tricked into being excited about it.

That's, in part, where the saying comes from:

• "If something seems too good to be true, it probably is too good to be true."

Always be diligent.

 

[Ostrados]

There have been a series of scam threads in the liquid domains section recently. Just now there is a new 4L for sale thread that is very fishy:
https://www.namepros.com/threads/4-letters-17-years-old-domain.1230850/#post-8190435

A brand new member that just signed up today selling a 4L with crypto as the only payment option, and insisting to receive money first!

I am strongly with restricting the access to marketplace to new members, and require at least posting something like 10 posts in the forums before getting access.

 

[Gube]

There have been a series of scam threads in the liquid domains section recently. Just now there is a new 4L for sale thread that is very fishy:
https://www.namepros.com/threads/4-letters-17-years-old-domain.1230850/#post-8190435

A brand new member that just signed up today selling a 4L with crypto as the only payment option, and insisting to receive money first!

I am strongly with restricting the access to marketplace to new members, and require at least posting something like 10 posts in the forums before getting access.

It could also be a more "advanced" scam where (I won't explain how) they defraud the registrar or the previous owner, and then sell the name for crypto (or PayPal F&F)
The name then gets seized by (or returned to) the registrar and/or previous owner.