Another forum clone

Status
Not open for further replies.

klank

Killer of Killer NIC Threadz
Joined
Aug 22, 2011
Messages
2,175
Appears that couponsdiscounts.org is cloning the site.

FYI
 
Ok it loaded with a blank BlueHost service screen. Still nothing about these forums.
 


IDK what to tell you. Using 8.8.8.8 and 8.8.4.4 for DNS.

host www.couponsdiscounts.org
www.couponsdiscounts.org has address 46.17.100.111


whois couponsdiscounts.org
whois couponsdiscounts.org
[Querying whois.publicinterestregistry.net]
[whois.publicinterestregistry.net]
Domain Name:COUPONSDISCOUNTS.ORG
Domain ID: D177065776-LROR
Creation Date: 2015-08-09T04:15:50Z
Updated Date: 2015-08-09T04:15:52Z
Registry Expiry Date: 2016-08-09T04:15:50Z
Sponsoring Registrar:pDR Ltd. d/b/a PublicDomainRegistry.com (R27-LROR)
Sponsoring Registrar IANA ID: 303
WHOIS Server:
Referral URL:
Domain Status: clientTransferProhibited -- http://www.icann.org/epp#clientTransf erProhibited
Domain Status: serverTransferProhibited -- http://www.icann.org/epp#serverTransf erProhibited
Registrant ID:pP-SP-001
Registrant Name:Domain Admin
Registrant Organization:privacy Protection Service INC d/b/a PrivacyProtect.org
Registrant Street: C/O ID#10760, PO Box 16
Registrant Street: Note - Visit PrivacyProtect.org
Registrant Street: to contact the domain owner/operator
Registrant City:Nobby Beach
Registrant State/Province:Queensland
Registrant Postal Code:QLD 4218
Registrant Country:AU
Registrant Phone:+45.36946676
Registrant Phone Ext:
Registrant Fax:
Registrant Fax Ext:
Registrant Email:[email protected]
Admin ID:pP-SP-001
Admin Name:Domain Admin
Admin Organization:privacy Protection Service INC d/b/a PrivacyProtect.org
Admin Street: C/O ID#10760, PO Box 16
Admin Street: Note - Visit PrivacyProtect.org
Admin Street: to contact the domain owner/operator
Admin City:Nobby Beach
Admin State/Province:Queensland
Admin Postal Code:QLD 4218
Admin Country:AU
Admin Phone:+45.36946676
Admin Phone Ext:
Admin Fax:
Admin Fax Ext:
Admin Email:[email protected]
Tech ID:pP-SP-001
Tech Name:Domain Admin
Tech Organization:privacy Protection Service INC d/b/a PrivacyProtect.org
Tech Street: C/O ID#10760, PO Box 16
Tech Street: Note - Visit PrivacyProtect.org
Tech Street: to contact the domain owner/operator
Tech City:Nobby Beach
Tech State/Province:Queensland
Tech Postal Code:QLD 4218
Tech Country:AU
Tech Phone:+45.36946676
Tech Phone Ext:
Tech Fax:
Tech Fax Ext:
Tech Email:[email protected]
Name Server:MELINDA.NS.CLOUDFLARE.COM
Name Server:JASON.NS.CLOUDFLARE.COM
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
DNSSEC:Unsigned

Access to Public Interest Registry WHOIS information is provided to assist perso ns in determining the contents of a domain name registration record in the Publi c Interest Registry registry database. The data in this record is provided by Pu blic Interest Registry for informational purposes only, and Public Interest Regi stry does not guarantee its accuracy. This service is intended only for query-ba sed access. You agree that you will use this data only for lawful purposes and t hat, under no circumstances will you use this data to(a) allow, enable, or other wise support the transmission by e-mail, telephone, or facsimile of mass unsolic ited, commercial advertising or solicitations to entities other than the data re cipient's own existing customers; or (b) enable high volume, automated, electron ic processes that send queries or data to the systems of Registry Operator, a Re gistrar, or Afilias except as reasonably necessary to register domain names or m odify existing registrations. All rights reserved. Public Interest Registry rese rves the right to modify these terms at any time. By submitting this query, you agree to abide by this policy. For more information on Whois status codes, pleas e visit https://www.icann.org/resources/pages/epp-status-codes-2014-06-16-en.

whois 46.17.100.111
whois 46.17.100.111
[Querying whois.arin.net]
[Redirected to whois.ripe.net]
[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '46.17.100.0 - 46.17.103.255'

% Abuse contact for '46.17.100.0 - 46.17.103.255' is '[email protected]'

inetnum: 46.17.100.0 - 46.17.103.255
netname: HOSTKEY-NET
descr: HOSTKEY B.V.
country: NL
admin-c: ANSH31-RIPE
tech-c: ANSH31-RIPE
status: ASSIGNED PA
mnt-by: HOSTKEY-MNT
remarks: abuse-mailbox: [email protected]
created: 2014-07-24T12:16:29Z
last-modified: 2015-07-27T14:24:51Z
source: RIPE

person: Shevchenko Andrey
address: Tussen de Bogen 6, 1013 JB Amsterdam, The Netherlands
phone: +31 20 820 3777
nic-hdl: ANSH31-RIPE
abuse-mailbox: [email protected]
mnt-by: HOSTKEY-MNT
created: 2015-07-22T09:22:31Z
last-modified: 2015-07-22T09:25:39Z
source: RIPE

% Information related to '46.17.96.0/21AS57043'

route: 46.17.96.0/21
descr: HOSTKEY-NET
origin: AS57043
mnt-by: HOSTKEY-MNT
created: 2014-07-24T11:19:33Z
last-modified: 2015-08-26T10:28:31Z
source: RIPE

% This query was served by the RIPE Database Query Service version 1.80.1 (DB-3)
 
Shows up on three different computers, three different ISPs. (Charter, AT&T, Comcast)
 
Man, I went to screencap it and then post the cap here, and I had to figure out why there was no quick post box at the bottom of the thread.

Of course, I had tabbed into the cloned site. Quite amusing, though looking at my monitor right now is giving me a headache.

yOtIanQ.jpg
 
With scripting disabled the page wont even start to load.
Gets "504 Gateway Time-out"
I'm not testing it with scripting enabled.

I wonder if its acting as a pass through to the site you clicked from somehow?
Might be a way to gather login data.
 
Status
Not open for further replies.
Back
Top