Just some Primary blog @licflagg - Tumblr Blog

Posts

Just as a reminder: i follow, like, and send asks from this blog, but I'm active on @terrariamodbosses , @omniblog-of-starbound , @phazitephaaze , @refurbishedtartar , @missfitdroneexperiments And @greedycatdemon . those are side blogs to this one.

allthingswhumpyandangsty

not my tweet but I thought it would be a good psa for artists here too

#psa #(please be careful!)

circusgoth-dotcom

guys who's ready for perfectly even february in a week

#woah. i wonder how rare this is #and when was the last even February...

allhailthe70shousewife

#so this is what they call a “salad” back then.#like... why?

scam-alerts

idk how new this tactic is but APPARENTLY. I think theres a variant of the reported account scam where someone random slides into your dms and tries to say "oh you bought me these badges, are you hacked or something?" and directs you to fake support (fresh account with only a handful of eddsworld related things in the reblogs/likes/follows)

Oh wow yeah this is the new version of this scam!

Reminder/Notice:

Tumblr does not use outlook.com as their email provider.

Tumblr will e-mail you from their own email that ends in tumblr.com if there are ever issues with your account for whatever reason.

Staff will never tell someone to message you, to then tell you to message them, staff, via an email, discord, or via some other method.

Staff will not do this. Ever.

Here are two examples of Tumblr's official emails.

If your account was reported, you will always get a email from Tumblr on the account you're linked to. They will not just ban, suspend, terminate, ect you, without letting you know. Anyone saying otherwise is lying to you. It's all in your email unless you turned notifications off. Check your junkmail if you didn't get anything.

If there's issues, or you report an account, you'll get emails from [email protected]. Example:

When you get an email saying you have an ask or a message, or you're signed up for their newsletter, you get a email from [email protected].

This is from tumblr dot com the website.

That is how you know it's real.

Again, Tumblr does not use outlook, gmail, hotmail, discord, or anything else. If you get a ask, message, or anything telling you to contact 'staff' at an address/website/platform, that is 100% a scam.

Thanks for making me aware of this and helping spread awareness.

-Bee

#psa #(oh boy. more scam variants.)#(PLEASE be careful out there!)

chubs-deuce

since I'm getting more and more of these lately...

Y'all, if you receive a comment that reads something along the lines of "hey I have something important to tell you (about your account), but I can't message you idk whyy??"

... DO NOT DM THEM.

THIS IS A PHISHING TACTIC - they will most likely tell you that they accidentally reported your account or something and that you have to get it resolved with tumblr and then give you an email screenshot or something that tells you to contact a "tumblr staff" on discord - THIS IS FAKE.

THEY ARE TRYING TO GET YOUR LOGIN INFORMATION, TO USE YOUR ACCOUNT TO TRICK OTHERS INTO THE SAME TRAP.

likewise...

... DO NOT DM ACCOUNTS THAT SAY THEY "WANT TO COMMISSION YOU" AND TELL YOU TO DM THEM. <- <- <- THESE ARE PHISHING/SCAM BOTS TOO.

----

If you're unsure:

bots tend to comment almost immediately after a post went up

bots never compliment anything specific about your post so that it's easier to copy/paste automatically

unless you have this setting different, by default anyone should be able to dm you and a commenter acting like you have to do the first step to initiate a DM convo is a red flag

tumblr HAS ways to contact them about issues through their help center. Tumblr does NOT handle these things through DISCORD

#psa

sparkchemy

Hey, just wanted to give a quick PSA on a new type of bot/scam going around Tumblr. I've seen these types of comments on multiple artist's posts now. All of them are from generic / empty accounts with the usual bots behavior and they always ask artists to DM them in regards to commissions.

ASSUME MALICIOUS INTENT / REPORT / BLOCK / CARRY ON WITH YOUR DAY

A couple of examples below:

#(its been a thing for more than a year now? didn't know that... Still be careful)

a-silly-poll-side-blog-yay

How did you come across/join tumblr?

-Pinterest refugee

-Tumblr reddit posts refugee

-someone told me of it

-twitter/bluesky refugee

-secret fifth option

How did you come across/join tumblr?

Pinterest refugee

Tumblr reddit posts refugee

someone told me of it

twitter/bluesky refugee

secret fifth option

Voting ended onJan 18

personally i was googling some fanart + fanfic

#OLD miiverse refugee #learned about it before that closed down.#(random polls with comments)

doublefallen

update from the discord group courtesy of one of my mutuals;

do not trust that damned survey. change your discord password. utilize 2FA.

I use 2FA on every website I log into, and it didn't ask for any details when I took the survey, but I still don't trust that thing at all. One can never be too safe.

ghoulangerlee

whoops I accidentally double reblogged but:

hi, i did some research on this but this link was not phishing and here's why:

qualtrics is a legit website that companies pay to host data gathering surveys to collect metrics on various things. you can also create free surveys but from what i understand the survey results aren't as in-depth as the paid versions get you.

it looks like the survey originates from a banner on the discord app and you click on it and it takes you to the site and you do the thing there. it was only rolled out to a certain amount of people (for the purposes to maybe only get people they thought would be pro-AI? who knows with Discord) but was then passed around everywhere because Fuck AI. And then Discord realized that things weren't going the way they wanted and pulled the survery.

I did some further research on the URL itself:

From ESET link checker it rates it as safe, I also plugged it into a few others as well like Fortinet and Bitdefender and both of those came back safe too, here's a screenshot of ESET:

info on the link itself from urlvoid:

the actual qualtrics site info from urlvoid as well to compare the age of the domain (usually phishing domains are very very young and/or brand new and not legitimate domains but these are both legitimate domains.)

and, inb4 people say "phishing attempts don't always have to ask you to enter your login credentials to scrape your info"

no keyloggers or malware after I clicked on the link (it's been 8 hours now and my discord account is fine).

hopefully, this will quell some panic about the discord thing, its always good practice to protect your account with MFA when it's offered and to change your password when you suspect something may not be right, it's better to err on the side of caution etc, but in this case, it's alright and there's no need to create any undue panic about a link to a survey. fuck AI and Discord should know better than to try and pull more wool over its userbases' eyes because did they not learn from the NFT thing?

okey dokey bye bye now

#updated info #still be careful. don't put in your info on the site.