[WARNING: Scam site]Found a site which is looks just like SF site, and we are also its members??

Discussion in 'Site Feedback' started by sweetpea, Apr 5, 2016.

  1. krash661 [MK6] transitioning scifi to reality Valued Senior Member

    Messages:
    2,973
    in a sense, but i also can decipher the difference from the pretenders and the wannabes to the actual knowledgeable ones from the pathetic-s(which is for sure known that you are an exact of), solely from, this little, significant, thing referred to as experience.
    so in essence-- continue to be a wannabe, and/or a pretender all you want, simply because i already know that your piss-ant, wannabe, stance is massively insignificant than what you wish it was.
    in other words

    Please Register or Log in to view the hidden image!

    carry on.
     
  2. Guest Guest Advertisement



    to hide all adverts.
  3. joepistole Deacon Blues Valued Senior Member

    Messages:
    22,910
    I'd say the real reason you habitually respond to single post with multiple postings is because the original post hit a nerve with you. The original post exposed your insecurity, and you have ample and legitimate reasons to be insecure.

    Please Register or Log in to view the hidden image!

    carry on.

    Please Register or Log in to view the hidden image!

     
  4. Guest Guest Advertisement



    to hide all adverts.
  5. krash661 [MK6] transitioning scifi to reality Valued Senior Member

    Messages:
    2,973

    Please Register or Log in to view the hidden image!

    (shrugs)--whatever you need to tell yourself..
     
  6. Guest Guest Advertisement



    to hide all adverts.
  7. joepistole Deacon Blues Valued Senior Member

    Messages:
    22,910
    LOL....CARRY ON

    Please Register or Log in to view the hidden image!

     
  8. krash661 [MK6] transitioning scifi to reality Valued Senior Member

    Messages:
    2,973
    (confused)--ummm--okay?
     
  9. krash661 [MK6] transitioning scifi to reality Valued Senior Member

    Messages:
    2,973
    joe, i find it odd as an intellect of business that you would replicate me in the up-most aspect. i appreciate that, this speaks volumes.
     
  10. joepistole Deacon Blues Valued Senior Member

    Messages:
    22,910
    Does it now?

    Please Register or Log in to view the hidden image!

    CARRY ON

    Please Register or Log in to view the hidden image!

     
  11. krash661 [MK6] transitioning scifi to reality Valued Senior Member

    Messages:
    2,973
    is this all?
     
  12. BdS Registered Senior Member

    Messages:
    512
    I cant ping the masquerading domain and cant get the domain name to resolve to a IP address. Tracert command also not resolving.
    Whois service gives the following info for the domain http://who.is/whois/sarahdream.com

    When I monitor TCP locally, it shows the same IP addresses used when communicating to both domains “sciforums.com” and “saha....com”.

    You can probably add some PHP and Jscript to the site to detect domain spoofing.


    Example of code logic...

    If instr{browser.url.text, “sciforums.com”} = true then //for jscript

    If instr{$url, “sciforums.com”} = true then //for PHP


    Continue...

    Else

    Echo “Domain spoofing detected! Communication severed! Please use www.sciforums.com to browse this site.”

    die("Unable to browse site")

    End if
     
  13. sweetpea Valued Senior Member

    Messages:
    1,329
    Hold-on, it could be the other way round...Sciforums is the dodgy site and sarahdream is the legit site.
     
  14. el es Registered Senior Member

    Messages:
    322
    Scraper site?
     
  15. BdS Registered Senior Member

    Messages:
    512
    Nope, since sciforums.com resolves to a IP address and sara....com doesn't. Try it for yourself, open a windows command prompt and type:

    ping sciforum.com
    You get a reply from the server: Pinging sciforums.com [IP address is here]

    now go to your browser and in the URL box type the IP address and you'll be browsing sciforums via its IP address, because they have the browse by IP option enabled on the server.


    Now try to ping sara....com, type the following in the command prompt.

    ping sara....com
    You dont get a reply. I wonder how they loopholed the DNS's? Since the NSlookup command shows my default gateway address only for sara....com

    How did you find that site?

    Please Register or Log in to view the hidden image!




    I dont think so.
     
    Last edited: Apr 16, 2016
    sweetpea likes this.
  16. BdS Registered Senior Member

    Messages:
    512

    Attached Files:

    sweetpea likes this.
  17. sweetpea Valued Senior Member

    Messages:
    1,329
    I use google for looking up old posts here, that's if I can remember a particular sentence or part of a post.
    Mods.
    This morning I did it again...found another clone, but the title of that site was a sentence and not what you would call a title. And not the words I was searching for.
    I was going to keep quiet until I could find it again, so as to prove it. I can't remember what I typed, but, I did type sifi something something redshift. I can't remember if sifi or redshift was in the 'title' of that site now, I was just too gobsmacked at finding another one. I have been racking my brains to remember and getting fed-up with looking. My browser clears everything when it closes, so no help there.
     
  18. Sarkus Hippomonstrosesquippedalo phobe Valued Senior Member

    Messages:
    10,356
    I just did a search of part of this thread's title on Google: i.e. "Found a site which is looks just like SF site"

    It came up with 3 sites: Sciforums, Sarahdream, and the rather odd betterkitchenutensil.com

    I could click on the links to Sciforums and Sarahdream to get to this thread, but the third was redirected to a web address of "www.cranpondefoots.com" - but straight to an error due to the web-address not being found.

    The intrigue continues...?
     
  19. sweetpea Valued Senior Member

    Messages:
    1,329
    MODS and Every body, I'm not being a drama queen but...
    I went to Sarkus's profile page to check out his posts ( I'm a nosy bas***d), I was going to click on my 'NoScripts' to allow scripts so as to show his posts. LUCKY I looked at the ' NoScripts ' drop -down...
    It was "temporarily allow sarahdreams.com". What the heck is going on here?? I when back to homepage and it showed the right Sciforums address for our site. I have tried to repeat this, but It now seems to be ok.
    edit to add:Sarkus, betterkitchenutensil.com rings a bell
     
    Last edited by a moderator: Apr 17, 2016
  20. cluelusshusbund + Public Dilemma + Valued Senior Member

    Messages:
    7,985
  21. BdS Registered Senior Member

    Messages:
    512
    monitoring with TCPview app made it easier than netstat cmd.
    These IP's are suspect.
    181.215.104.59
    69.58.188.40
     
  22. BdS Registered Senior Member

    Messages:
    512
    Firefox with noscript, adblock plus and firebug addons is awesome.

    Please Register or Log in to view the hidden image!

     
  23. Dr_Toad It's green! Valued Senior Member

    Messages:
    2,527
    The IP addresses are interesting.

    The first resolves to an ISP in Argentina, and I blacklisted them today for trying an old hack on my mysql database. I still don't understand how they captured the database here, unless someone left the door open..

    The second resolves to Verisign, and that's a bit more troubling.
     

Share This Page