Quote from: btctaipei on December 26, 2023, 11:01:27 PM

Hi Op,
can you ban trade chat from being between buyer / seller on your platform involving
*agarodesk.com*

I'm pretty sure people here at bitcointalk is no stranger to cyber squatting and login credential harvesting.

below link is an example why this ban should take precedence before member's bitcoin wallet gets drained.

https://agarodesk[.]com/ad/47758a06-4144-4fb4-b58a-064144afb434/

Keep in mind draining non custodial wallet can be done without login onto your website and type in password (which should be same as above), if they know how to use the offset from password phishing link above to compute the xprv key to allow it determine related utxo and priv key pairs.

Hi! Thanks for the report. We've already reported the phishing domain to the registrar, as we do all such cases. Simple chat scanning is easily bypassed by the phishers with alternate spellings, unfortunately. Only enforcing site-wide 2FA would fully close down this vector, though that would take away from the ease of use of the website. Generally, we believe that it's the user's own responsibility whether they believe they need 2FA or not.