freebitco.in being blocked

[wetsuit]

Hello

I have received reports from my users that freebitco.in is being blocked by MalawareBytes and the following message is being shown: "Your Malwarebytes Premium blocked this website because it may contain riskware. We strongly recommend you do not continue."

 

Could you please let me know the reason for the blocking and this message so that I may rectify it?

 

Thank you.

[Zynthesist]

Hello,

This domain is blocked for Trojan.CoinMiner.

[wetsuit]

We do not use any coin mining scripts on the website currently. Previously we had an optional miner that would only start if a user activated it but the link to that page was removed from the website a while ago. The web page for mining hadn't been deleted until now but I have just deleted it. Could you please check again.

[wetsuit]

This is the message that users are getting, if it helps.

[tasosthelord]

It is a legit site and they was using a legit miner that asks you to start. #ReleaseTheMining.html :) 

 

[TheQuin]

What is the reason not to unblock this site? What you describe as Trojan.CoinMiner is not a Trojan. It is not malware that is disguised as legitimate software. It is a piece of software that does exactly what it says it does. It also requires the user to acknowledge that they wish it to run.

Regardless of that the software is no longer on the site so I can see no reason for you not to remove the block.

[Zynthesist]

The block is being reviewed. Will update here when completed. 

[wetsuit]

Hello

Could I get an update on this please?

[broke_tradah]

Please take into consideration that this is an illegal gambling site that is not licensed/registered anywhere let alone the US (as demanded here by US Law:  https://www.gamblingsites.com/online-gambling-jurisdictions/us/).  The US is but only one example.  I'm sure more could be provided given this site's chosen industry (gambling/porn).  As a malwarebytes user,  I would agree with continuing to block this site as it's potentially malicious given it's illegal status and history of silently mining with coinhive on it's users machines randomly.

Edited June 27, 2018 by broke_tradah

[wetsuit]

13 hours ago, broke_tradah said:

Please take into consideration that this is an illegal gambling site that is not licensed/registered anywhere let alone the US (as demanded here by US Law:  https://www.gamblingsites.com/online-gambling-jurisdictions/us/).  The US is but only one example.  I'm sure more could be provided given this site's chosen industry (gambling/porn).  As a malwarebytes user,  I would agree with continuing to block this site as it's potentially malicious given it's illegal status and history of silently mining with coinhive on it's users machines randomly.

Please do not make false accusations, we have never mined without a user explicitly permitting us to do so and we have removed all traces of the miner from our website so I do not see any reason for us to stay blocked. If MB staff would let me know what needs to be fixed (if anything) to get off the block list, I would be happy to implement those changes.

 

Edit: The user above seems to have some kind of agenda against us because of which he is lying about us mining secretly, as can be seen from his post history at https://bitcointalk.org/index.php?action=profile;u=2126895;sa=showPosts

Edited June 28, 2018 by wetsuit

[broke_tradah]

You are correct,  I do have an agenda against this site BECAUSE of its snake oil practices and its attempts to mute me when I bring them up.  Classic douchbaggery tactics.  If you ran a legit operation and had a sane employee doing your CS you wouldnt have people such as myself so adamant to point out all its wrong doings and illegal activities.  We both know that the random mining has and may happen again among all the other issues ive brought up as well.  So it shouldnt be any surprise to anyone that it got flagged by a scanner which just goes to show im not 'lying' about anything and to say such things also insinuates that this here scanner is as well.  Your attempts to delete my posts (which i mentioned already) are no excuse for the random hidden mining that has been taking place.  However mysteriously since I started posting here and proposed that thequinn stop deleting posts in exchange for being quiet elsewhere,  none of my posts have been deleted.  So if that remains the case,  i will cease posting here.  But if the practice continues I will raise as much hell as I can in forums you dont control.

Edited June 28, 2018 by broke_tradah

[broke_tradah]

Control/have influence in.

[pondus]

Sucuri website scanner  >>  https://sitecheck.sucuri.net/results/freebitco.in

 

[TheQuin]

44 minutes ago, pondus said:

Sucuri website scanner  >>  https://sitecheck.sucuri.net/results/freebitco.in

 

To be honest that looks a bit scammy itself. They want to charge you to clean up your website.

This one says MalwareBytes says it is clean.

https://www.virustotal.com/#/url/dcc9b4516f8526be1a88fa0a31a856712088f7d23c869911f75fc82b5e81d73d/detection

It's a bit of a shame they don't tell us themselves.

 

Edited June 28, 2018 by TheQuin

[pondus]

3 hours ago, TheQuin said:

To be honest that looks a bit scammy itself. They want to charge you to clean up your website.

Of course, website security is the business Sucuri work with and dont do the job for free, what is scammy about that?

And Virustotal URL scan does not scan the website for infections, it is a blacklist check

Edited June 28, 2018 by pondus

[broke_tradah]

I rest my case.  Anything that they dont agree with == scammy according to them.  Sucuri is anything BUT scammy.  It's a highly respected company in the security industry.  Virustotal is not meant to be used to scan websites for anything.  All it'll do is check blacklists and scan files that a user uploads or links to,  often displaying a lot of false negatives (and false positives) along the way.  It doesnt even use the full version of the products it uses (they use free versions publicly available or provided by said company, you can see this in their Tos) It's not really as reliable of a source when checking a website, file,  or whatever you are trying to check.  In general,  just dont use virustotal for anything mission critical.  I wouldnt even use it on my smart electricronic garden gate personally let alone a file or website.

Edited June 28, 2018 by broke_tradah

[TheQuin]

1 hour ago, pondus said:

Of course, website security is the business Sucuri work with and dont do the job for free, what is scammy about that?

And Virustotal URL scan does not scan the website for infections, it is a blacklist check

They are claiming our javascript is malicious, which no other scanner claims, and then asking for $295 to 'fix' it. Smells scammy to me.

[broke_tradah]

  You crack me up.  Calling sucuri a scam.  omg I am dying of laughter over here.  You really are clueless arent you   Did it ever occur to you that Wetsuit isnt what you think he is?  Yes?  No?  Maybe?  Even a tiny ounce?  Did you approach him about licensing yet?  Let me know how that convo goes.

[CuR53dWoLf]

I am a user of the site since 2014 and I have to say that I have never had problems that broke_tradah mentioned, before they had a tab that was to go under your browser but you had to give it to the button and accept but it was already removed some time ago. .. I do not say that it is neither more reliable nor less the site, the truth, I do not care I personally would not bet a hard one after having lost enough in his game but that you secretly mine or such strange things .. .yo as a user I say no a had. Sorry for my english.A greeting !!

[broke_tradah]

Thats the problem Cur53dWolf.  Hidden mining doesnt show up as a "problem".  It's hidden.  The users simply dont know it's happening unless something like Malware tells them about it (which it's obviously been doing).  So it's not surprising that you've never had issues with it.  I know that TheQuinN asked people to come here and plead their case that it's "legit",  but the problem with that is that these users dont have any clue what a hidden miner is let alone what it does.  So those "testimonials" should be viewed as invalid imo

[CuR53dWoLf]

no one has asked me to come and comment anything and I repeat that I do not care, I have only seen what they said and I have commented MY experience since it is long on the page (I would say from the beginning practically). And the only thing I said is that I have not seen anything strange, you say that mine to escndidas and such ... I have not seen any of that, you can not accuse without giving something to certify ... I just say that

[broke_tradah]

Thats the point.  You wouldnt see it unless you were looking for it specifically (which you wont find now that wetsuit knows someone is on to his game).  And yes you did come here because someone asked you to as seen here:  https://bitcointalk.org/index.php?topic=320959.6460 where he says and I quote:

"If anyone would like to pop over to https://forums.malwarebytes.com/topic/231469-freebitcoin-being-blocked/ and put the record straight that would be appreciated."

Wetsuit got caught with his pants down and is trying to do damage control now.  If his site is unblocked,  theres no telling if he would just try it again in the future.  I would place a bet that he would try something again.  What that something is,  idk.

I think its just best to leave it blocked because users can whitelist it by hand if they really want to keep visiting the site.  At that point they should know that they are dealing with a less than honest site.

Edited June 29, 2018 by broke_tradah

[CuR53dWoLf]

I was referring to that no one had contacted me privately as your comment sujeria to tell me to come to post anything here ... On the other hand I repeat that I just wanted to give my experience on the site as a user years ago but neither will I it comes to me ... do not take it the wrong way but to me it stops more your case a user that surely will have lost money in the multiply and takes it as revenge to freebitco, it is the sensation that gives me, I do not say it is that way but if you stop to think all the "casinos" have to deal with a lot of people like that, who lose money and take it against the casino itself ... I said, I will not post anymore because as I said several times neither will I it comes to me, I think it has been clear what I wanted to express and so I have done ... just one more thing, this is for the admin of freebitco ... since there have been so many changes in the page, you could stretch a little but also and on the weekends together with the rewards bonus, remove the% for the house (only on weekends), I think It would be a good commercial strategy for people to be encouraged to play something more in the multiply ... Greetings to all and luck!

[broke_tradah]

Actually I lose revenue if freebitco goes down or somehow loses customers because i run a public bot fhat uses freebitco.  So everytime one of my users rolls,  i get a commisson from it.  I dont actually use the site myself anymore other than a small account to show how the bot works on a live stream.  My problem with freebitco is that its been doing less than honest things lately and my users sometimes blame me for it and im not cool with that.  Their staff of thequin is also in need of replacing too because he just lies through his teeth like water travels downstream in a river.  Its clear your first language isnt english so ill give you a pass in saying you came here because of someone else.  I didnt mean someone messaged you directly.  I was just saying that you came here becauae you saw his post thats all.  If Thequin had not badmouthed my dice bot (it doesnt even roll free rolls by default and is actually a martingale bot for his dice game)  I wouldnt have such a big problem with the site.  I can deal with the hidden crap thats been going on with his site and helping people add a whitelist but the tirades that Thequinn does are completely inexcusable and unprofessional.  So ya,  he needs to be replaced/fired, whatever and wetsuit really should have been reprimanded for the mining stuff long ago.  Im hoping this issue will open his eyes to the fact that we can and do see the shady stuff he does.  Maybe he will even get the site licensed properly to give it more credibility but im not betting on that one since it forces him to step out from behind the anonymous fog of the internet.

Edited June 29, 2018 by broke_tradah

[broke_tradah]

If Thequin had not badmouthed my dice bot over and over and over for no good reason at all (it doesnt abusel free rolls and is actually a martingale bot for his dice game) in a thread I created specifically for the bot without disturbing freebitcos threads then I might not of gone on the warpath but at this point I dont even care anymore.  If freebitco were to die tomorrow I wouldnt even care and would move the bot to a different site.  If I were wetsuit I would have fired him on the spot because my bot gets people to deposit large amounts into his site and not all of them are responsible players and will lose it all which is revenue for both of us. My live stream is always up 24x7 and it shows just how stable the bot can be with the correct settings and it makes the multiply game loads more fun.  Why any clown would trash it the way thequin does is only understandable when one realizes that his iq is that of a walnut.

Edited June 29, 2018 by broke_tradah