kfcdelivery site scam

To post in this sub-forum you must have made 30 posts or have Trust status or have completed our ID Verification

Forums › Bargains and Deals › kfcdelivery site scam

1 | 2 | 3 | 4

BDFL - Memuneh
79250 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#1408919 18-Oct-2015 23:01

l43a2: the site has been taken down.

No. The site is still there. A couple of ISPs took the initiative to block access to it.

Talkiet

4792 posts

Uber Geek

Trusted

#1408921 18-Oct-2015 23:07

I asked our DNS people to kill the site for Spark customers this afternoon and I got confirmation it had been done early this evening. Not sure if the site itself is still up.

Cheers - N

Please note all comments are from my own brain and don't necessarily represent the position or opinions of my employer, previous employers, colleagues, friends or pets.

l43a2

1779 posts

Uber Geek

ID Verified

Trusted

#1408923 18-Oct-2015 23:14

Talkiet: I asked our DNS people to kill the site for Spark customers this afternoon and I got confirmation it had been done early this evening. Not sure if the site itself is still up.

Cheers - N

yea im on spark, must be why its down here now.

Oblivian

7296 posts

Uber Geek

ID Verified

#1408924 18-Oct-2015 23:15

I hate to think who has suckered for it and not yet cancelled cards.

Not only does it show coke, and US based menu. But it screams dumb asking for CC details up front. Then again, people put tinfoil on for worse.

Was amazing despite this, to see the (sponsored no less!) FB page likes increasing rapidly. From 160 to 230 in a quick time I checked this afternoon.

Then again, I saw yet another Qantas giving away half a million free 1st class flights with only 300 or so likes being shared like wildfire too. 1+1/=2 it seems.

michaelmurfy

meow
13240 posts

Uber Geek

Moderator

ID Verified

Trusted

Lifetime subscriber

#1408927 18-Oct-2015 23:23

On 2degrees and can confirm it is still up. Hopefully this guy gets owned by the cops.

Glad somebody got the real whois details. Site is behind Cloudflare which doesn't help. I've notified the DNC earlier on but by the time they respond it'll be too late and he'll likely have a few CC details in his database but have also reported it to Google for Phishing.

Edit: I think my DNS server may have the site cached. I also have found the guy: https://twitter.com/naveengamage

Michael Murphy | https://murfy.nz
Referral Links: Quic Broadband (use R122101E7CV7Q for free setup)

Are you happy with what you get from Geekzone? Please consider supporting us by subscribing.
Opinions are my own and not the views of my employer.

freitasm

BDFL - Memuneh
79250 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#1408955 19-Oct-2015 07:32

JamesL: What's sad is the amount of people who likely fell for it.

Anyway, details before he realised he exposed himself:

registrant_contact_name: Naveen Gamage
registrant_contact_address1: 12, Liverpool street
registrant_contact_city: Auckland
registrant_contact_province: Auckland
registrant_contact_postalcode: 1010
registrant_contact_country: NZ (NEW ZEALAND)
registrant_contact_phone: +204 1994 121
registrant_contact_email: onesoftnz@gmail.com

Will any of the ISPs point this scam to police? Or to Netsafe at least?

freitasm

BDFL - Memuneh
79250 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#1408956 19-Oct-2015 07:35

Well, I forwarded to Netsafe via their contact email. Let's see if there's a reply.

Equinox IT

Cloud spending continues to surge globally, but most organisations haven’t made the changes necessary to maximise the value and cost-efficiency benefits of their cloud investments. Download the whitepaper From Overspend to Advantage now.

Stu

Hammered
8332 posts

Uber Geek

Moderator

ID Verified

Trusted

Lifetime subscriber

#1408967 19-Oct-2015 08:26

michaelmurfy:I think my DNS server may have the site cached. I also have found the guy: https://twitter.com/naveengamage

Account no longer exists.

People often mistake me for an adult because of my age.

Keep calm, and carry on posting.

Referral Links: Sharesies - Backblaze -

Are you happy with what you get from Geekzone? If so, please consider supporting us by subscribing.

No matter where you go, there you are.

spearsniper

133 posts

Master Geek

#1408974 19-Oct-2015 08:52

Can always use the google cached version: http://webcache.googleusercontent.com/search?q=cache:https://twitter.com/naveengamage

drunkmonk

49 posts

Geek

#1409016 19-Oct-2015 09:23

Thanks for the heads up Frietasm. If KFC just bloody delivered we wouldn't have this issue.

Oblivian

7296 posts

Uber Geek

ID Verified

#1409035 19-Oct-2015 09:33

'alleged'

Wouldn't be the first time something bad has been made as a vendetta against someone else.. (especially with the wrongly formatted intl number in the initial registration)

spearsniper

133 posts

Master Geek

#1409039 19-Oct-2015 09:39

A lot of things all line up for this guy being the perpetrator - unfortunate if it's not him.

Web designer, away from his motherland, and a photo of the Auckland Skytower on his twitter profile. Name matches the domain registration.

Oblivian

7296 posts

Uber Geek

ID Verified

#1409047 19-Oct-2015 09:45

More of a tell-tale would Facebook being cooperative (tiu ad) and letting authorities know (tui) the account that created and paid for additional virality sponsorship of the fake FB page promoting it.

freitasm

BDFL - Memuneh
79250 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#1409049 19-Oct-2015 09:48

I have removed a photo. As far as we know the name could have been an id theft - anyone could use that name.

But there are some strong indications.

meesham

973 posts

Ultimate Geek

#1409051 19-Oct-2015 09:48

Oblivian: 'alleged'

Wouldn't be the first time something bad has been made as a vendetta against someone else.. (especially with the wrongly formatted intl number in the initial registration)

Exactly this, I don't think a witch-hunt on here is a good idea, let the authorities do their thing (hopefully they take it seriously).

1 | 2 | 3 | 4