NEED ATOT EFFECT .... to bring down a scam site

halik

Lifer
Oct 10, 2000
25,696
1
81
Originally posted by: DeviousTrap
Yup... it says under construction :/

it's still there, i dont wanna post a direct link because its not hard to find the list of all the data. just push it over yahoo quota ....
 

halik

Lifer
Oct 10, 2000
25,696
1
81
its bunch of php scripts that are saving it to a plain text file. they set it up wrong so i was able to see the dir. listing and find the file. I've sent out emails to every email address on that list tellin em to change their passwords
 

yukichigai

Diamond Member
Apr 23, 2003
6,404
0
76
Originally posted by: MacBaine
Originally posted by: The_good_guy
how do you have teh list of data coming off it?

Yeah... uhhh... care to explain?
He has access to people's PayPal account info. Y'know, credit card numbers, login and password. Harmless stuff like that.

Fortunately halik is being a good samaritan and e-mailing everyone who's submittied (legitimate) information to the site, telling them to change their passwords ASAMFP.
 

halik

Lifer
Oct 10, 2000
25,696
1
81
bump.... theres more and more crap popping up. Im about to write a script that gets the file and does diff on the previous one and then emails everyone on the list....
 

Nocturnal

Lifer
Jan 8, 2002
18,927
0
76
How do we know you're not going to do anything with those CC#s? Hmmm... good luck on "taking down" this website!
 

Klixxer

Diamond Member
Apr 7, 2004
6,149
0
0
Going to put a direct link to that on a proxy that pings as fast as it can get replies.

Won't do much good on it's own though.
 

Turin39789

Lifer
Nov 21, 2000
12,218
8
81
halik is on the level here, their site is open but we obviously arent going to spread info on how to access it. They are scamming people and getting paypal info. lets see some atot muscle for this one
 

halik

Lifer
Oct 10, 2000
25,696
1
81
up... i made an html page that refreshes every second.... keep it open on your desktop and it will bring em down
 

Rainsford

Lifer
Apr 25, 2001
17,515
0
0
I'm all for this, but as a suggestion, I imagine they have an image or something on their site. Constantly reloading THAT would create a lot more traffic for them than simply loading an index.html file. After all, images, even small ones, and MUCH larger than some 1.5 K index file.

Just a though if you can link to an image that doesn't give away TOO much info about the site layout.
 

Rainsford

Lifer
Apr 25, 2001
17,515
0
0
Originally posted by: silverpig
Wouldn't this be classified as a DoS attack and we're therefore hackers?

:D

IANAL, as the disclaimer goes, but...

Who exactly is going to press charges, the scammers? I imagine this would go over really well ;)

Edit: However, that wouldn't work if we WEREN'T helping to bring down a scam site, but some poor sucker's site. But the "qpaypal.us" domain name is very suspect.
 

zimu

Diamond Member
Jun 15, 2001
6,209
0
0
what i don't get is what we're doing.

i've got your stupid reloading page up, but its still just showing me "site under construction." i see nothing referring to paypal or anythign like that. whats the deal yo?
 

halik

Lifer
Oct 10, 2000
25,696
1
81
Originally posted by: Rainsford
I'm all for this, but as a suggestion, I imagine they have an image or something on their site. Constantly reloading THAT would create a lot more traffic for them than simply loading an index.html file. After all, images, even small ones, and MUCH larger than some 1.5 K index file.

Just a though if you can link to an image that doesn't give away TOO much info about the site layout.

the image on the index page is 80k - its the biggest on the whole site
 

halik

Lifer
Oct 10, 2000
25,696
1
81
Originally posted by: zimu
what i don't get is what we're doing.

i've got your stupid reloading page up, but its still just showing me "site under construction." i see nothing referring to paypal or anythign like that. whats the deal yo?

i dont wanna link the actual thing, because its really easy to find the file with all the passwords and cc numbers ... dont wanna spread the information. trust me its all hosted off geocities and they will hit the bandqith quote soon
 

churchdoesmatter

Senior member
Apr 6, 2001
560
0
0
This is NOT hosted via geocities.. It is hosted through YAHOO STORE.. they bought a .us domain site name from Yahoo Store . I don't think your schema will work.
 

zimu

Diamond Member
Jun 15, 2001
6,209
0
0
Originally posted by: churchdoesmatter
This is NOT hosted via geocities.. It is hosted through YAHOO STORE.. they bought a .us domain site name from Yahoo Store . I don't think your schema will work.

i agree. basically this whole thing is pointless. best thing you can do is report them to whoever is their domain administrator.