[WARNING: Scam site]Found a site which is looks just like SF site, and we are also its members??

joepistole said:
Do you now, is that how you rationalize it? :)
Click to expand...
in a sense, but i also can decipher the difference from the pretenders and the wannabes to the actual knowledgeable ones from the pathetic-s(which is for sure known that you are an exact of), solely from, this little, significant, thing referred to as experience.
so in essence-- continue to be a wannabe, and/or a pretender all you want, simply because i already know that your piss-ant, wannabe, stance is massively insignificant than what you wish it was.
in other words :) carry on.
 
krash661 said:
in a sense, but i also can decipher the difference from the pretenders and the wannabes to the actual knowledgeable ones from the pathetic-s(which is for sure known that you are an exact of), solely from, this little, significant, thing referred to as experience.
so in essence-- continue to be a wannabe, and/or a pretender all you want, simply because i already know that your piss-ant, wannabe, stance is massively insignificant than what you wish it was.
in other words :) carry on.
Click to expand...
I'd say the real reason you habitually respond to single post with multiple postings is because the original post hit a nerve with you. The original post exposed your insecurity, and you have ample and legitimate reasons to be insecure. :) carry on. :)
 
joepistole said:
I'd say the real reason you habitually respond to single post with multiple postings is because the original post hit a nerve with you. The original post exposed your insecurity, and you have ample and legitimate reasons to be insecure. :) carry on. :)
Click to expand...
:) (shrugs)--whatever you need to tell yourself..
 
I cant ping the masquerading domain and cant get the domain name to resolve to a IP address. Tracert command also not resolving.
Whois service gives the following info for the domain http://who.is/whois/sarahdream.com

When I monitor TCP locally, it shows the same IP addresses used when communicating to both domains “sciforums.com” and “saha....com”.

You can probably add some PHP and Jscript to the site to detect domain spoofing.


Example of code logic...

If instr{browser.url.text, “sciforums.com”} = true then //for jscript

If instr{$url, “sciforums.com”} = true then //for PHP


Continue...

Else

Echo “Domain spoofing detected! Communication severed! Please use www.sciforums.com to browse this site.”

die("Unable to browse site")

End if
 
Hold-on, it could be the other way round...Sciforums is the dodgy site and sarahdream is the legit site.
 
sweetpea said:
Hold-on, it could be the other way round...Sciforums is the dodgy site and sarahdream is the legit site.
Click to expand...
Nope, since sciforums.com resolves to a IP address and sara....com doesn't. Try it for yourself, open a windows command prompt and type:

ping sciforum.com
You get a reply from the server: Pinging sciforums.com [IP address is here]

now go to your browser and in the URL box type the IP address and you'll be browsing sciforums via its IP address, because they have the browse by IP option enabled on the server.


Now try to ping sara....com, type the following in the command prompt.

ping sara....com
You dont get a reply. I wonder how they loopholed the DNS's? Since the NSlookup command shows my default gateway address only for sara....com

How did you find that site? :)


el es said:
Scraper site?
Click to expand...
I dont think so.
 
Last edited:
BdS said:
How did you find that site? :)
Click to expand...
I use google for looking up old posts here, that's if I can remember a particular sentence or part of a post.
Mods.
This morning I did it again...found another clone, but the title of that site was a sentence and not what you would call a title. And not the words I was searching for.
I was going to keep quiet until I could find it again, so as to prove it. I can't remember what I typed, but, I did type sifi something something redshift. I can't remember if sifi or redshift was in the 'title' of that site now, I was just too gobsmacked at finding another one. I have been racking my brains to remember and getting fed-up with looking. My browser clears everything when it closes, so no help there.
 
sweetpea said:
This morning I did it again...found another clone, but the title of that site was a sentence and not what you would call a title. And not the words I was searching for.
Click to expand...
I just did a search of part of this thread's title on Google: i.e. "Found a site which is looks just like SF site"

It came up with 3 sites: Sciforums, Sarahdream, and the rather odd betterkitchenutensil.com

I could click on the links to Sciforums and Sarahdream to get to this thread, but the third was redirected to a web address of "www.cranpondefoots.com" - but straight to an error due to the web-address not being found.

The intrigue continues...?
 
MODS and Every body, I'm not being a drama queen but...
I went to Sarkus's profile page to check out his posts ( I'm a nosy bas***d), I was going to click on my 'NoScripts' to allow scripts so as to show his posts. LUCKY I looked at the ' NoScripts ' drop -down...
It was "temporarily allow sarahdreams.com". What the heck is going on here?? I when back to homepage and it showed the right Sciforums address for our site. I have tried to repeat this, but It now seems to be ok.
edit to add:Sarkus, betterkitchenutensil.com rings a bell
 
Last edited by a moderator:
BdS said:
When I monitor TCP locally, it shows the same IP addresses used when communicating to both domains “sciforums.com” and “saha....com”.
Click to expand...
monitoring with TCPview app made it easier than netstat cmd.
These IP's are suspect.
181.215.104.59
69.58.188.40
 
The IP addresses are interesting.

The first resolves to an ISP in Argentina, and I blacklisted them today for trying an old hack on my mysql database. I still don't understand how they captured the database here, unless someone left the door open..

The second resolves to Verisign, and that's a bit more troubling.
 
You must log in or register to reply here.
Back
Top