I went to bed at around 4 o'clock, but I didn't fall asleep. I originally thought about typing another chapter, but I saw a book friend in the book review area sending a link to cmfuvip.cn, saying that I would like to get free Qidian coins

At first glance, I knew it was a very low-level scam

This is a phishing website, used to steal Qidian's VIP account, which takes advantage of everyone's greed for small gains

He applied for a space on a free personal homepage website (id666.com), and then placed a simple single page on it, which was made very similar to Qidian. He collected some data from Qidian. If you go and read it now, you should still see it.

Then, he registered a one-dollar cn domain name, cmfuvip.cn, and then said there was a free Qidian coin collector, asking you to fill in your account...

This method is a general method for thieves.

Entering that website, you can find that he just jumped cmfuvip.cn

After checking the source code of that web page, it can be found that he just made a form and used a message board system from Yahoo to save data.

From the source code, you can see a link to yahoo, which is the address of the data submission. From the source code, you can find that his registered name in yahoo is chenguol203

Then I found: http://hk.geocities.yahoo.com/gb/sign?member=chenguol203

This is the address of the Yahoo message board. The page he made is to submit data to this page. The functions of the two are the same.

Where is the submitted data saved? Using search engines, I found the viewing address of the Yahoo message board

http://hk.geocities.yahoo.com/gb/view?member=chenguol203

From here you can see the data. When you open it, you will see that some readers have been deceived.

Since the data had just been refreshed, I thought that the account thief might not have time to modify the account password, so I immediately used the account and password above to log in to the starting point, and then immediately changed the password to protect it...

There are only three accounts displayed now, only two are protected, one of which has been modified by the account thief.

It is estimated that the account thief also found that someone was robbing his account, so he immediately set the message board as private.

In this way, you will not see the refresh of the data.

However, Yahoo’s message board seems to have a feature. If it is set to private, he will not see the message above, haha!

Another feature of this message board of Yahoo is that the data saved is limited. If you keep submitting spam data, you can fill it up quickly. In this way, even if some readers believe in this scam, they will not submit their account.

So I opened Shuxue and planned to automatically submit the garbage data, but found that this page was a bit advanced, Shuxue could not analyze the form (it seems that this guy is a bit good)

There was no choice but to submit it manually. I submitted about dozens of them, and suddenly I saw it and it was full... The prompt said:

"This Yahoo!GeoCities visitor list has been filled in. You need the name holder to delete some current message before you can leave a message here."

Before the account thief cleans up the junk data, the account of the deceived reader cannot be submitted for the time being.

However, there was nothing I could do before. Readers who have submitted data should change their password immediately.

Friends who have time can go to this page to check it out. If you see the data refresh, you will immediately help those cheated readers protect their accounts and return them to them.

Page address:

http://hk.geocities.yahoo.com/gb/view?member=chenguol203

Now that guy is probably going to bed, everyone will tell each other about this and let everyone pay attention. If you are deceived, change your password immediately.

In the future, don’t believe in such things as pie falling from the sky. When submitting your account and password, be vigilant and pay attention to whether this website is the real official website.

Some readers have a password for all accounts, which is even more dangerous.

Give an example.

I now have the reader's Qidian account and password, and then based on his QQ number in Qidian information, I may log in to his QQ and steal his QQ number. If there are other data such as email and bank account in his QQ, it is very likely that even these will be stolen.

I have contacted a reader and after realizing my true identity, I returned his account to him.

Another one is: Belly Belly Band

I have sent him a QQ message, but haven't contacted me yet.
Chapter completed!