Talk:Dream Market

URL edit wars

@MHoover: How did you determine that http://lchudi7d5pt7ddjj.onion is the correct URL? The provided source says http://lchudifyeqm4ldjj.onion -- intgr [talk] 08:08, 1 August 2017 (UTC)

@MHoover: Please explain your edits here and let's have a discussion instead of edit warring. -- intgr [talk] 07:56, 21 August 2017 (UTC)

@Intgr: We've been having phishing problems on onion-related pages (see also Grams (search) and Bitcoin Fog). Likely this page will need to get "review prior to publication" protection as well. **casts meaningful look in the direction of Mz7 and wiggles eyebrows**

By the way, the Dream Market owners were smart to put the correct link (lchudifyeqm4ldjj.onion) in their banner image; apparently the scammers are too stupid to know how to replace that in their man-in-the-middle attack. :D --Nanite (talk) 07:46, 28 August 2017 (UTC)

Check out this sneaky guy. :D Unlike previous phishers he bothered to put in the work to improve the article with a news link, and he did a few edits before so it's not an obvious sock account. However just like the previous phishing sites, this one can't manage to replace the address shown in the images [1]. Try harder, guys! --Nanite (talk) 19:53, 28 August 2017 (UTC)

Another sneaky phishing insertion here. Thanks for improving the article, phishers! --Nanite (talk) 20:22, 24 September 2017 (UTC)

Removing the URL from the article

@Nanite and Rhododendrites: Rhododendrites removed the onion site's address from the article. Note also that the logo image in the article contains the site's address; should we edit/remove the image too?

But if DeepDotWeb now lists a new address for this website, can we presume it's a reliable source and simply link to the current one listed there? -- intgr [talk] 15:36, 6 March 2018 (UTC)

The two other places I have been checking for these links, dnstatsWARNING - ALL LINKS ON DNSTATS ARE PHISHING URLS and DNM superlist, seem to be inconsistent with the DeepDotWeb address. I'd suggest leaving it off for now.

That said, I was curious and checked, there doesn't seem to be any hack or compromise. All the .onion addresses seem to have the same logo image with lchud... in it. Also, they added a 'Verified' badge that links to a 'Proof of onion url correctness' page: lchudifyeqm4ldjj.onion/verifySafeHeaven 7ep7acrkunzdcw3l.onion/verifySafeHeaven cazzt4rectv7k5hk.onion/verifySafeHeaven . In each case there is a valid signature from the PGP key on the lchud... site (0xF687B4FEBFF8F8B4) so they appear to all be valid mirrors. --Nanite (talk) 19:54, 6 March 2018 (UTC)

Yet another doctored logo was uploaded recently, File:Drеam Market Logo.png. This one even uses the Russian character "е" and not the Latin one; of course there's no legitimate reason to use such a trick? I have removed the logo from the article.

Even weirder is that user QuentinB69, who uploaded the new doctored image, today reverted back to the old image he didn't upload. @QuentinB69: Do you want to explain what's going on? -- intgr [talk] 21:12, 8 April 2018 (UTC)

@Nanite: "All the .onion addresses seem to have the same logo image with lchud... in it" Beware that there are actually two very similar addresses. One is lchudifyeqm4ldjj, the original address from 2017; the other is lchuvdurnjdendjj, which QuentinB69 is now trying to strong-arm into articles. Maybe you missed the difference? -- intgr [talk] 21:31, 8 April 2018 (UTC)

@Intgr: looks like a new development, apparently wikipedia has case sensitive filenames so File:Dream_Market_logo.png (the old one) is distinct from File:Drеam_Market_Logo.png. *sigh*, well, it seems if this page is not permanently protected then indeed the best is to leave off all addresses. --Nanite (talk) 11:26, 9 April 2018 (UTC)

@Nanite: It's not obvious at first, but the difference isn't just between "logo"/"Logo", it's also "e" vs "е", the characters look same or very similar, but they're actually distinct -- notice that they lead to different Wikipedia pages. -- intgr [talk] 11:34, 9 April 2018 (UTC)

Impressive. Unicode was a mistake. :-P --Nanite (talk) 18:39, 9 April 2018 (UTC)

extended confirmed

Users have been adding links to phishing site. PP till this gets sorted out.--Dlohcierekim (talk) 19:32, 6 March 2018 (UTC)

I loathe extended confirmed. Please let me know if/when it is no longer needed. Thanks, --Dlohcierekim (talk) 19:58, 6 March 2018 (UTC)