base428 1 #1 January 31, 2005 I just discovered that my credit card and personal info was stolen and used to purchase a subscription to an internet porn site (dirty-pussygirls.com) through a billing agent (ccbill.com) on 12/23/2004 at 1:43pm MST. After discovering the error on my credit card statement, I cancelled my credit card and the monthly porn charges from ccbill.com. After investigating further and with the assistance of ccbill.com, I was provided with the following information: -The IP was logged: 24.158.94.1 (Charter network - Charleston, WV) at 1:43pm MST on 12/23/2005. -Thief had entered my correct name, complete address, my Mastercard credit card number, expiration date, and even my CVV2 number found on the back of the card. -Thief used email address sunsettroy@yahoo.com, which appears to be a valid Yahoo account and in no way matches anything of mine. -Thief had username "dreamdream" and PW "XXXXXXX", which in no way matches anything of mine. -CCbill.com will only release written records of this fradulent transaction (IP and date/time) to local authorities, to which I'm contacting today. They did, however, release all info to me verbally, so that's how I got the IP info. I've already contacted Charter.net (the perp's ISP) regarding the stolen credit card. Charter will probably not give a rat's ass about this, even if my local authorities contact them. Hopefully, they still have the IP logs from 23 December. I've also contacted the porn site to see if they have IP logs matching that particular user ID. Again, I'm not holding my breath on that one. At no time was my credit card lost. We are assuming that the card number and CVV2 were either (a) stolen from a merchant database by a disgruntled employee using the info from one of my recent online orders because all required information would have been readily available, or (b) stolen at a point of sale location by an employee. Since the card was issued in July 2004, I have a complete record of the limited number of locations, both online and local, that the card was used. Nobody, including my local authorities, will probably even care about my $50. But I don't take this crap lightly and I'll do whatever it takes to track down the perp. The funny thing is, they only charged the card one time.... Anyone have any tips? Ever been in a similar situation? Did you find resolution? Were the IP logs disclosed? PS. If I find no resolution in the next few weeks, especially from the dirty-pussygirls.com webmaster, I (er, the thief) still have about a month of free porn coming to me and I'll post the username and password so you all can bombard them.(c)2010 Vertical Visions. No unauthorized duplication permitted. <==For the media only Quote Share this post Link to post Share on other sites
Remster 30 #2 January 31, 2005 QuoteI just discovered that my credit card and personal info was stolen and used to purchase a subscription to an internet porn site (dirty-pussygirls.com) Dont start a thread with that... no one will take you seriously! lol Sorry man, it does suck though ... all that personal info... Remster Quote Share this post Link to post Share on other sites
Darius11 12 #3 January 31, 2005 can you get where the items have been shipped?I'd rather be hated for who I am, than loved for who I am not." - Kurt Cobain Quote Share this post Link to post Share on other sites
CrazyIvan 0 #4 January 31, 2005 That's just wrong. Of course, it's a little late but, one "advise" I give to people regarding "online purchases" is to always have a "very low limit" credit card ($200-$300 the most) that way in situations like this, is not really a big problem. Regarding the IP logging, that's gonna be a tough one, since IP's can be faked, and, if this individual was able to snatch your personal info as well as credit info, for sure, knows how to spoof IP's. Lastly, posting the username and password IS A BIG NO-NO, and illegal.__________________________________________ Blue Skies and May the Force be with you. Quote Share this post Link to post Share on other sites
beowulf 1 #5 January 31, 2005 they could have also used an anonymous proxy server. That would make tracking them down very diffucult. Quote Share this post Link to post Share on other sites
base428 1 #6 January 31, 2005 The perp bought an online porn subscription, so all he got was a username and password. Nothing was shipped and, surprisingly, the perp only used it one time (perhaps hoping I'd not notice?). Then again, maybe my dog has found a way to surf porn while I'm at work? I have to admit, telling my coworkers about this and then hearing them laugh at the domain name was priceless. Ivan, posting usernames and PW is illegal? How so? What are they gonna do to ME? I could actually be the perp who has somehow stolen Jason's dropzone.com username and PW! Quotecan you get where the items have been shipped?(c)2010 Vertical Visions. No unauthorized duplication permitted. <==For the media only Quote Share this post Link to post Share on other sites
Thanatos340 1 #7 January 31, 2005 Sorry this happened to you, But it sounds like it could have been much worse if all they got was a sub to a Porn site. Dispute the Charge with your credit Card Company and everything should be taken care of. A lot of Stolen Credit Cards come from using your card at Restaurants (actually MUCH more dangerous than using your Credit Card online). You give your credit card to a Waiter/Waitress and let them walk away with it. They then have plenty of time to write down all Information on the card including the Verification Numbers on the back. They can then ask to see your ID for verification and try to remember your address until they get back in the back to write it down along with the Credit Card Number they already have from you. Much simpler than trying to hack an online encrypted database for that information. Easy Solution, Try not to use your credit cards where someone will walk away with it. Quote Share this post Link to post Share on other sites
davedlg 0 #8 January 31, 2005 maybe you had a few too many drinks one night and got on the internet... Quote Share this post Link to post Share on other sites
QuickDraw 0 #9 January 31, 2005 Quotean internet porn site (dirty-pussygirls.com) Have you typed out the name of that website right ? I just took a look & found nothing. Edit: apart from this.. NSFW -- Hope you don't die. -- I'm fucking winning Quote Share this post Link to post Share on other sites
base428 1 #10 January 31, 2005 Oh, the website is for real. Try using WWW at the beginning. Nice attached pic, by the way. I get those all the time! QuoteHave you typed out the name of that website right ? I just took a look & found nothing.(c)2010 Vertical Visions. No unauthorized duplication permitted. <==For the media only Quote Share this post Link to post Share on other sites
Randy_H 0 #11 January 31, 2005 QuoteOf course, it's a little late but, one "advise" I give to people regarding "online purchases" is to always have a "very low limit" credit card ($200-$300 the most) that way in situations like this, is not really a big problem. Agreed. I had my bank set up a seperate charge card which is only used for internet purchases. Since most credit card information is stored in SQL databases, there is really not much security. SQL is very easy to exploit and get admin privileges which is why CrazyIvan fell victim to some pimple faced, pud-pulling punk with too much time (and too much something else) on his hands! 010010010110010101100001011101000111000001110101011100110111001101111001 Quote Share this post Link to post Share on other sites
QuickDraw 0 #12 January 31, 2005 Ok i found it. What seemed strange is there is no mention anywhere in google, and most sites are usually crosslinked to other sites. All i can find is that the first time the site was archived was March 24th 2004. Just seems strange that its not even cached anywhere. -- Hope you don't die. -- I'm fucking winning Quote Share this post Link to post Share on other sites
SkyDekker 1,465 #13 January 31, 2005 QuoteOf course, it's a little late but, one "advise" I give to people regarding "online purchases" is to always have a "very low limit" credit card ($200-$300 the most) that way in situations like this, is not really a big problem. That would not have helped him one iota. When victim to fraudulent use of your card, you are generally only liable for $50 at the most, regardless of your maximum credit available. Actually, you are much better of using any type of credit card as opposed to a debit card. Quote Share this post Link to post Share on other sites
BlueEyedMonster 0 #14 January 31, 2005 I had EXACTLY the same thing happen to me. It happened because some dumb*** company you bought something from online or your bank got hacked, and they didn't tell anyone or didn't know. CCBill was less cooperative with me. They cancelled the subscription to the gambling site, but were not going to disable the ID. After some yelling on my part, they finally disabled the website ID. I could not believe they were just going to cancel the account at the end of the cycle and leave the ID active for this hacker to use for 30 days. You can more than likely thank the some high-tech mobsters in Eastern Europe for this. But as Ivan said. The IP that was traced is probably incorrect. Its might be someone's sweet grandma's computer without a firewall or any windows updates. Quote Share this post Link to post Share on other sites
eb66to77 0 #15 January 31, 2005 Jason, I have some advice. Find the perp and kill him/her. I will help as I didn't get to cross the ocean this year for Bridge Day and had to give up my slot to a friend, so I have plenty of energy and anger. Plus my buddy hasn't paid me back yet. Let me know.....BASE 861....MATT Quote Share this post Link to post Share on other sites
davedlg 0 #16 January 31, 2005 QuoteYou can more than likely thank the some high-tech mobsters in Eastern Europe for this. But as Ivan said. The IP that was traced is probably incorrect. Its might be someone's sweet grandma's computer without a firewall or any windows updates. I think the fact the IP traces to West Virginia, and he is in West Virginia (or at least his profies says he is) indicates that it is probably someone local who got his credit card number the low tech way. Quote Share this post Link to post Share on other sites
bch7773 0 #17 February 1, 2005 lemme guess... the wife/girlfriend found out about your secret porn subscription and now you gotta post this in order to look innocent right? just kidding... be glad he only did one charge with it. MB 3528, RB 1182 Quote Share this post Link to post Share on other sites
Avion 0 #18 February 1, 2005 If they had the CVV2 number they probably got it from somewhere other than a POS merchant, they mostly ignore the number. You might have a key logger program running on you computer. Have you entered all that information for an online purchase? My guess is that it was a key logger or somebody got into a database. Quote Share this post Link to post Share on other sites
vid666 0 #19 February 1, 2005 I take CC's all the time, and when I have to verify them, from the info I gathered CVV2 is never given out, and they cannot do anything but VERIFY it if against what you give them. A widespread merchant database hack - I am sure you would of already gotte a notice from the issuing bank or it would of been already posted on the WWW. My guess - you used the CC at a restaurant or another place where somebody could see it, but you couldn't see them. This would mean that the thief could easily write all the necessary info down. The fact that the IP is somewhat local to you supports that. Quote Share this post Link to post Share on other sites
Evelyn 0 #20 February 1, 2005 That is so wrong. It's one thing to have your purse stolen (happened to me) but quite another to have someone take your info off the internet when you're least expecting it. Don't have any words of wisdom, but go for it.,pursue those bastards, and let us know how it comes out so we can benefit in the future. Good Luck!! Life is either a daring adventure or nothing ~ Helen Keller Quote Share this post Link to post Share on other sites
PhreeZone 20 #21 February 1, 2005 Paper rubs are still the fastest, most reliable and accurate method of getting stolen credit card info. Takes all of about 3 seconds ro lift the exact name, card numbers, exp date, and flip it over to get the CVV2 numbers. Restruants tend to be the source of these since the card is out of your sight for a few seconds or minutes. But they've been documented rubs happening at Gas stations, department stores, and just about anywhere a person can have you turn your back for more then about 5 seconds while they have your card. These numbers are gold in online chat rooms where they exchange credit card numbers. Follow up with the companies you bought things with online. if they are a small enough company they might have had a security breach and don't know it.Yesterday is history And tomorrow is a mystery Parachutemanuals.com Quote Share this post Link to post Share on other sites
base570 1 #22 February 1, 2005 Maybe the wife needed a fix Or a friend 'borrowed' it? Jason 570 Quote Share this post Link to post Share on other sites
mr2mk1g 10 #23 February 1, 2005 You have an the guys e-mail address (well, at least an email address).... try 419 scamming him - tell him he's won a trip or an all expenses paid night at a swanky hotel. Then have the cop meet him there... or just turn up and kick the living crap out of him... ok, ok, police would be a better idea. You'd be surprised how often things like that can work. Law enforcement agencies have even used such tactics - they sent free holiday tickets crooks who had outstanding warrants - dozens of them turned up and booked in for their freebee, only to be arrested. Quote Share this post Link to post Share on other sites
Snowwhite 0 #24 February 1, 2005 I have a girlfriend who had this happen to her recently. The cops said the perp had taken her card at a restaurant, run it thru a second scanner which he had attached to a computer that logged all of her info. They actually made a duplicate card. He went on a great spending spree with a group of his friends, bought bunches of stuff in Chicago ( about 180 miles from us ) and then walked into a McDonalds and bought 65 bucks worth of food. Apparently, McDonalds has a low floor limit, and so they had to verify the info on the card. That's how they caught the guy. Several thousad dollars were spent in about 48 hours.skydiveTaylorville.org freefallbeth@yahoo.com Quote Share this post Link to post Share on other sites