• +5
    B-Edwards replies to Resident47
    | 1 reply
    Thanks - I know I had seen those JK posts, but had not remembered the name.  btw - as I have gone through older posts and threads, the more I read your posts the happier I am you use your power of communication for the forces of Good.  Very clear, very tight style.  Did you even work on a newspaper?  Or in press room?
  • +4
    William
    "CCC" posted in the wrong number thread :
    https://800notes.com/Phone.aspx/1-301-270-2281
  • +4
    William replies to B-Edwards
    Maybe in a wine press ?
  • +4
    William
    https://800notes.com/Phone.aspx/1-866-664-2512/9
    Nine pages of posts that the calls are from a "debt collector" and then conspiracy theorist
    "ANN NON OMUS" shows up saying it's a political call :

    This is a govt hack group ..    have you posted Politcal postings FB /  Yahoo / Twitter / Huffington Imposter site or YAHOO?   That's why you can't get any answer.. They are trying to find out who you are.
  • +4
    William
    | 7 replies
    Found something worse that a site scraper : a clone of 800notes.

    http://www.greatadsigns.org/

    Be extremely careful is you decide to visit that website.

    There are no ads on that page.
    The domain hides its ownership behind a proxy service in Australia.
    The servers are located in Russia.
    The site was registered only 6 months ago.
    I will report it to Google as a phishing site.

    800notes : http://imgur.com/v8olGuT
    greadadsigns.org : http://imgur.com/liGfK2t

    === Clicking on number thread links on the home page gives

    Access Denied
    Your request has been blocked by the OctoNet HTTP filter.

    === I did a "View Page Source" and the website accesses a css page on octo.net and an image or two
    === The rest of the page is just data scraped from 800notes

    === I searched on Google for 626-575-7723
    === and this particular URL showed up

    http://www.greatadsigns.org/AreaCode.aspx/1-626/m6

    === And that's how I found this domain.

    There is no "sign in" at the top of the "home page".
    Still, this webpage is why it's a phishing site :
    http://www.greatadsigns.org/contactUs

    === http://www.urlvoid.com/scan/greatadsigns.org/
    === http://whois.domaintools.com/greatadsigns.org
  • +4
    William replies to William
    | 3 replies
    dagnabbit, I know better.
    I should have posted the direct links to the images instead of the site's gossip pages :
    800notes : http://i.imgur.com/v8olGuT.png
    greadadsigns.org : http://i.imgur.com/liGfK2t.png
  • +4
    B-Edwards replies to William
    | 2 replies
    YIKES!!!   Wow!   Did you send any of this to Admin?   They usually know about these, but it make sense to notify.
  • +3
    CelticDragon replies to William
    | 2 replies
    I saw that site before while running a web search. I think there was one other I saw, but I can't remember the name offhand nor how I ran the search in question
  • +4
    William replies to B-Edwards
    | 1 reply
    Got interrupted and had things to take care of, four hours passes by quick !
    Have not notified yet, will post it in an internal email.
  • +4
    William replies to CelticDragon
    | 1 reply
    I saw the domain for the first time in a search result, but Firefox reported the domain could not be reached, or a cloudflare webpage popped up saying the url could not be accessed, so at the time I did not know what the site looked like.

    More site scrapers (that are not clones) :
    original data :
    https://800notes.com/Phone.aspx/1-855-564-6801

    1)
    this appears in search results, and works if you copy-and-paste it into the address bar
       (note the spaces!) : findwhocallsyou.com/855 564 6801
    the "%20" makes it clickable : http://findwhocallsyou.com/855%20564%206801

    2)
    appears in search results, copy-and-paste this into address bar :
        855.dnc.press/855-564-6801.report
    and it redirects to
        http://855.whocallme.online/855-564-6801.report
  • +4
    William replies to William
    "I saw the domain for the first time in a search result" yesterday.
  • +4
    B-Edwards replies to William
    I sent a quick note as well.  It makes sense to be sure these get passed on.  It may be possible there is one person who keeps moving the fake site around and changing urls.   Hope you are well and doing fine!  I love reading your posts!
  • +4
    CelticDragon
    I ran that site through my checker...hiding behind a proxy out of Queensland. Site looks to be (via web search) out of Russia
  • +3
    William
    | 1 reply
    Burlco48 should be ruminating in a forum thread, not a number thread.
    Lot of self-misinformed things there.
    Never says he got a call from that specific number.
    https://800notes.com/Phone.aspx/1-609-423-1164/2#p1013620869764326752
  • +3
    BigA replies to William
    Yeah he is a repeat spammer.  Posts in multiple thread with idiotic rants and many times they are  vulgar in some way.  Looks like that one is gone baby gone.

Reply to topic