Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.
To post in this sub-forum you must have made 30 posts or have Trust status or have completed our ID Verification



View this topic in a long page with up to 500 replies per page Create new topic
1 | 2 | 3 | 4
freitasm

BDFL - Memuneh
80658 posts

Uber Geek
+1 received by user: 41071

Administrator
ID Verified
Trusted
Geekzone
Lifetime subscriber

  #1408919 18-Oct-2015 23:01
Send private message

l43a2: the site has been taken down.


No. The site is still there. A couple of ISPs took the initiative to block access to it.





Referral links: Quic Broadband (free setup code: R587125ERQ6VE) | Samsung | AliExpress | Wise | Sharesies 

 

Support Geekzone by subscribing (browse ads-free), or making a one-off or recurring donation through PressPatron.

 




Talkiet
4819 posts

Uber Geek
+1 received by user: 3934

Trusted

  #1408921 18-Oct-2015 23:07
Send private message

I asked our DNS people to kill the site for Spark customers this afternoon and I got confirmation it had been done early this evening. Not sure if the site itself is still up.

Cheers - N





Please note all comments are from my own brain and don't necessarily represent the position or opinions of my employer, previous employers, colleagues, friends or pets.


l43a2
1784 posts

Uber Geek
+1 received by user: 591

ID Verified
Trusted

  #1408923 18-Oct-2015 23:14
Send private message

Talkiet: I asked our DNS people to kill the site for Spark customers this afternoon and I got confirmation it had been done early this evening. Not sure if the site itself is still up.

Cheers - N



yea im on spark, must be why its down here now.







Oblivian
7345 posts

Uber Geek
+1 received by user: 2117

ID Verified

  #1408924 18-Oct-2015 23:15
Send private message

I hate to think who has suckered for it and not yet cancelled cards.

Not only does it show coke, and US based menu. But it screams dumb asking for CC details up front. Then again, people put tinfoil on for worse.

Was amazing despite this, to see the (sponsored no less!) FB page likes increasing rapidly. From 160 to 230 in a quick time I checked this afternoon.

Then again, I saw yet another Qantas giving away half a million free 1st class flights with only 300 or so likes being shared like wildfire too. 1+1/=2 it seems.

michaelmurfy
meow
13581 posts

Uber Geek
+1 received by user: 10914

Moderator
ID Verified
Trusted
Lifetime subscriber

  #1408927 18-Oct-2015 23:23
Send private message

On 2degrees and can confirm it is still up. Hopefully this guy gets owned by the cops.

Glad somebody got the real whois details. Site is behind Cloudflare which doesn't help. I've notified the DNC earlier on but by the time they respond it'll be too late and he'll likely have a few CC details in his database but have also reported it to Google for Phishing.

Edit: I think my DNS server may have the site cached. I also have found the guy: https://twitter.com/naveengamage





Michael Murphy | https://murfy.nz
Referral Links: Quic Broadband (use R122101E7CV7Q for free setup)

Are you happy with what you get from Geekzone? Please consider supporting us by subscribing.
Opinions are my own and not the views of my employer.


freitasm

BDFL - Memuneh
80658 posts

Uber Geek
+1 received by user: 41071

Administrator
ID Verified
Trusted
Geekzone
Lifetime subscriber

  #1408955 19-Oct-2015 07:32
Send private message

JamesL: What's sad is the amount of people who likely fell for it.

Anyway, details before he realised he exposed himself:

registrant_contact_name: Naveen Gamage
registrant_contact_address1: 12, Liverpool street
registrant_contact_city: Auckland
registrant_contact_province: Auckland
registrant_contact_postalcode: 1010
registrant_contact_country: NZ (NEW ZEALAND)
registrant_contact_phone: +204 1994 121
registrant_contact_email: onesoftnz@gmail.com


Will any of the ISPs point this scam to police? Or to Netsafe at least?






Referral links: Quic Broadband (free setup code: R587125ERQ6VE) | Samsung | AliExpress | Wise | Sharesies 

 

Support Geekzone by subscribing (browse ads-free), or making a one-off or recurring donation through PressPatron.

 


 
 
 
 

Shop now for Dell laptops and other devices (affiliate link).
freitasm

BDFL - Memuneh
80658 posts

Uber Geek
+1 received by user: 41071

Administrator
ID Verified
Trusted
Geekzone
Lifetime subscriber

  #1408956 19-Oct-2015 07:35
Send private message

Well, I forwarded to Netsafe via their contact email. Let's see if there's a reply.





Referral links: Quic Broadband (free setup code: R587125ERQ6VE) | Samsung | AliExpress | Wise | Sharesies 

 

Support Geekzone by subscribing (browse ads-free), or making a one-off or recurring donation through PressPatron.

 


Stu

Stu
Hammered
8743 posts

Uber Geek
+1 received by user: 2409

Moderator
ID Verified
Trusted
Lifetime subscriber

  #1408967 19-Oct-2015 08:26
Send private message

michaelmurfy:I think my DNS server may have the site cached. I also have found the guy: https://twitter.com/naveengamage


Account no longer exists.




People often mistake me for an adult because of my age.

 

Keep calm, and carry on posting.

 

Referral Links: Sharesies

 

Are you happy with what you get from Geekzone? If so, please consider supporting us by subscribing.

 

No matter where you go, there you are.


spearsniper
133 posts

Master Geek
+1 received by user: 65


  #1408974 19-Oct-2015 08:52
Send private message
drunkmonk
49 posts

Geek
+1 received by user: 16


  #1409016 19-Oct-2015 09:23
Send private message

Thanks for the heads up Frietasm.  If KFC just bloody delivered we wouldn't have this issue.

Oblivian
7345 posts

Uber Geek
+1 received by user: 2117

ID Verified

  #1409035 19-Oct-2015 09:33
Send private message

'alleged'

Wouldn't be the first time something bad has been made as a vendetta against someone else.. (especially with the wrongly formatted intl number in the initial registration)

 
 
 
 

Shop now for Dyson appliances (affiliate link).
spearsniper
133 posts

Master Geek
+1 received by user: 65


  #1409039 19-Oct-2015 09:39
Send private message

A lot of things all line up for this guy being the perpetrator  - unfortunate if it's not him.

 

Web designer, away from his motherland, and a photo of the Auckland Skytower on his twitter profile. Name matches the domain registration.

Oblivian
7345 posts

Uber Geek
+1 received by user: 2117

ID Verified

  #1409047 19-Oct-2015 09:45
Send private message

More of a tell-tale would Facebook being cooperative (tiu ad) and letting authorities know (tui) the account that created and paid for additional virality sponsorship of the fake FB page promoting it.

freitasm

BDFL - Memuneh
80658 posts

Uber Geek
+1 received by user: 41071

Administrator
ID Verified
Trusted
Geekzone
Lifetime subscriber

  #1409049 19-Oct-2015 09:48
Send private message

I have removed a photo. As far as we know the name could have been an id theft - anyone could use that name.

But there are some strong indications.






Referral links: Quic Broadband (free setup code: R587125ERQ6VE) | Samsung | AliExpress | Wise | Sharesies 

 

Support Geekzone by subscribing (browse ads-free), or making a one-off or recurring donation through PressPatron.

 


meesham
973 posts

Ultimate Geek
+1 received by user: 267


  #1409051 19-Oct-2015 09:48
Send private message

Oblivian: 'alleged'

Wouldn't be the first time something bad has been made as a vendetta against someone else.. (especially with the wrongly formatted intl number in the initial registration)


Exactly this, I don't think a witch-hunt on here is a good idea, let the authorities do their thing (hopefully they take it seriously).

1 | 2 | 3 | 4
View this topic in a long page with up to 500 replies per page Create new topic








Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.