I was browsing through some of the links on Fresh Onions yesterday, and came across a number of them that said, “Thank you guys!” After visiting them, I realized that the person behind these sites was a successful phisher. For instance, here’s one of the many sites: http://omegajmlgir64ix7.onion/
Just so you don’t need a microscope to read it, allow me to assist:
Heya guys, I’d like to thank you very much.
You have been visiting my scamming sites over the last 4 years and gave me the possibility to collect more than 200 BTC just out of nothing. I never expected that amount of payments – are you all stupid? Is really nobody verifying the URLs they’re on?
Anyway every story has an end, and every software should have an end of life before it gets blown up. This scamming network served more than 800 domains on 20 front-end servers with about 5kk hits per day.
I’m pretty sure there are some guys out there who are really pissed off – I’d be if I lost 20k$ on a scamming site. 😀 (and thats [sic] not a [sic] exception)
And I’m also pretty sure my fully self written proxy software with external payment processor is not bug free. It was indeed a boredom project which was never expected to be that “successful” – or better “profitable”?
The software ore [sic] one of the servers will be hacked or seized at some time and I really don’t want to be doxxed [sic].
So I’m going to retire now. As a farewell gift I’ll tell you the right URL of the site you tried to visit:
As you can imagine, this is only one of many sites that this person was operating. If what he says is true, he made a fortune on it.
So what have we learned from this? It’s always a good idea to verify that you’re on the correct URL of a site you’re visiting, particularly if it’s a marketplace or anything that involves money. This is why most marketplaces say on their landing page:
“Make sure you’re visiting the real [insert name of market here],” followed by an onion link.
Another reason I decided to write about this is that many people have been contacting me lately regarding things like the hitman/red room sites. I can guarantee you that those are scams as well, so don’t give them your money, unless you want to end up like the unfortunate victims of the “thank you” guy here.
Hmm…maybe I should try the same thing. I’m saving up to buy a house.
P.S. To conclude, I’ll list a few of the other domains this brilliant scammer used: