Post
Topic
Board Beginners & Help
Re: How a crypto related website fall for a phishing thru Google Ad and gets hack
by
bitsurfer2014
on 26/09/2020, 23:07:51 UTC
Weird that the resulting site you view is different depending if you get there through the Ad, or type the url in a browser. If I type the URL reflected in the OP’s screenshot, I’m taken to a site about Africa, whilst the article in the OP leads to a cookislands travel website. Not that this is the method that is being used (direct url entry), but if anyone cares to comment as to the how and why of this behaviour, I’d be interested in knowing.

Scammers are up to 10 BTC so far.

<...>
What I still don't see is "why" they do this (different site viewed from Google than from direct access).

As per info from OP article, maybe this could be the real reason why the link shows two different sites.

Quote
What is noteworthy is that if you try to type in this address without clicking on the advertisements, you will be redirected to the page backclain.com which is a copy of cookislands.travel website. Apparently, such manipulation is needed to bypass Google's validation when registering malicious advertising.

A diversionary tactic to fool Google's mechanisms.