Exploit a gold seller

[antizero]

First post on the forum so mods feel free to delete if this has already been posted / is in the wrong section etc.

I found a gold selling website that is stupid enough to offer a free trial on its gold services for one week only. They only give you 100g to "test their services" but I have repeated and tested this and as of now it IS working. The website is wowtoonz dot tk and you will just have to click the big red banner that takes you to the registration page.

Just to stop you all facepalming, the website doesn't require any account details or credit cards.

I have repeated the process between 10 and 15 times and it seems that the system is automated so repeating the process is easy as hell.

Let me know below if you get it working, and enjoy the exploit while it lasts.

EDIT: probably should of mentioned I think it may only work for EU servers

[DarkLinux]

I dont like the looks of that site lols... Toonz 5th Anniversary! The site does not even have a history...

[Ground Zero]

No real gold selling website uses a free .tk domain name.

[lxhackdxl]

This website was created using wix.com

scam much?

plus, this domain has only been registered for 3 months... how can they have a 5 year anniversary?

[tvl]

created : 11-july-2011 07:38
so it's just a big scam bc alot of ppl use the same pass for msn and wow

[SiMka]

Oh yeah, just need your e-mail and password for trial Nice1

[xcureanddisease]

Im gonna go out on a limb here and say that OP IS the scammer / person running the website.

[arenawarrior]

I agree---filler

[kozzzan]

Nice try tho

[2dgreengiant]

The guy who posted the news on the site is called 'Balls Deep' ofc its a scam ha

[Scx]

scam much?

Plus, this domain has only been registered for 3 months... How can they have a 5 year anniversary?

lolololol they have an anniversary everytime they sell(scam) to someone

[gneugen]

Hey OP,

I registered on that site and used a really long password (my CC number hehe) but I haven't received my gold yet. What do?

[d0t]

Scam all the way -_- ...

Here are the email addresses associated with this scam taken from the "sendEmail.jspx" send mail page on that site:

[email protected]
[email protected]

Note: The subject header for the first email (runscapegpd) was "experiment".

My guess is like everyone else’s, he/she's phishing passwords and possibly passing the victims email address onto gold sellers/farmers.