How easy is it to bypass the website security checks?

Jev88

Jev88

Joined
Apr 6, 2019
Posts
4,567
Likes collected
9,067
Location
Eye, Peterborough, UK
Funster No
59,702
MH
RV
Exp
FourWinds Windsport 6.8L V10
Don't worry Funsters, I am not trying to set up a criminal mastermind centre!

I was informed a long time ago when buying online from a new source to check the padlock infront of the URL at the top of the browser to see if the website was actually legitimate?
"Verified by Cloudflare inc"

Now see 200ah Renogy lithium batteries at $79.95!! I know this is a crock of horse dung but concerns me that less computer savvy people continue to feed these robbing swines.

cincinating.com

12V 200Ah Lithium Iron Phosphate Battery w/ Bluetooth

100% guaranteed refund. Shipping>>Worldwide Express Shipping Available Limited Quantities At This Price! 😍 98.8% Of Customers Buy 2.😍 The Renogy Lithium Iron Phosphate Battery w/ Bluetooth is designed for the drop-in replacement of deep-cycle lead-acid batteries with its standard BCI group size...
cincinating.com

DODGY LINK HERE, but safe to just look!

1649160206965.png
 
The padlock icon indcates the domain is secured with an SSL certificate and because of this it transfers data via HTTPS. This means that traffic between your browser and the server is encrypted and cannot be read by third parties.

The presence of the padlock only shows the name on the certificate matches the domain name and the certificate has not expired etc.

If you own a domain name and host a site with it you can apply for/use an SSL certificate for a very low cost, even free these days.

Unfortunately the padlock does NOT guarantee the content of the website.

In the old days it was too much cost/effort/audit trail for scammers to buy a ssl certificate for the domain they were using (and get the padlock) thus the advice about checking it was more pertinant.

Now days most normal websites should use HTTPS so the scammers need to install a certificate to look legit, so the advice is not so valid.

The biggest indicator in this case is the website is pertaining to be costco which opperates with the domain but this site is using the domain https://cincinating.com/ and pretending to be costco.

Where the padlock advice comes into play is where you are submitting personal data (or any data IMO) to a site that does NOT have the padlock. this is a no no as it could potentially be intercepted and read by third parties.
 
Last edited:
Jev88 said:
So I assume the padlock doesn't mean much anyway now as this must be a dodgy/fake/scam site.
Click to expand...
Seems ok to me.

Subscribers  do not see these advertisements

 
Costco UK don't list any batteries like these and the battery in your link is over a grand from renogy.
Pretty clever stuff.
 
Real Costco site

<Broken link removed>

Subscribers  do not see these advertisements

 
to be honest this would be a much better scam if they advertised them at £699.00
 
pat12 said:
to be honest this would be a much better scam if they advertised them at £699.00
Click to expand...
£79.95 seems to be some sort of magical scam number. I have seen lots of fake stuff at this same price - hydraulic whole car lifters, motorbike lift platforms etc...
 
Jev88 said:
£79.95 seems to be some sort of magical scam number. I have seen lots of fake stuff at this same price - hydraulic whole car lifters, motorbike lift platforms etc...
Click to expand...

Probably the magic figure that keeps them under the radar at paypal.
 
  • This is what the Scam.doc site says about Cincinating.com which is the website concerned and has nothing to do with Costco.


  • Home
  • Rapport cincinating.com

Analysis of the website
"Cincinating.com"​

1%

Very bad trust score
Warning, only for experienced users!
  • coche-verte.svg

    HTTPS protocol detected. Beware as it does not always mean security
  • croix-rouge.svg

    The domain name is very recent (less than 6 months)
  • croix-rouge.svg

    The owner of the domain name is hidden: check privacy policies!
  • croix-rouge.svg

    Short life expectancy domain
The scoring and indications provided by ScamDoc are calculated via a complex algorithm. They reflect the trust you can give to the website. Please note that ScamDoc site publishers do not influence the rating of a specific domain or url.
Site owners can provide identification information likely to improve the trust score.
 
Just had a look on Costco wholesale USA......
A 2ah lithium power bank is $249.
Only 7 lithium batteries listed and none over 4ah.
The alleged battery listed in the above website was $199....reduced by 60% to $79.95
Looks like the padlock means nothing these days
 
pappajohn said:
Just had a look on Costco wholesale USA......
A 2ah lithium power bank is $249.
Only 7 lithium batteries listed and none over 4ah.
The alleged battery listed in the above website was $199....reduced by 60% to $79.95
Looks like the padlock means nothing these days
Click to expand...
An SSL Certificate (e.g. a "Padlock" symbol) means at best that the site is harder to hack externally to harvest data.

It doesn't mean - and it never has meant - that the site itself is not run by scammers.


It also does not mean that a site that does not have an SSL certificate is NOT trustworthy. Plenty of 'hobby' sites and forums don't have SSL (https:// addresses) as they don't save any information that would be of any interest to hackers and the cost of buying a certificate with some hosts can be punitive (many will only allow their own certificates to be installed and most 'hobbiests' are not into web designing and wouldn't have any idea or interest in getting round that restriction - they do knitting, or painting, or collecting pottery or whatever)
 
Last edited:
In addition to the above, I also like the ‘About us’ & ‘Contact’ details too, looks well dodgy.
 
and another warning....

Cincinating.com Reviews | Bad Trust Score: 1%

Looking for Cincinating.com reviews? Learn about our detailed trust score, user ratings, and in-depth analysis. Share your personal experience to contribute to our community and help others make informed decisions.
www.scamdoc.com www.scamdoc.com

oops, sorry, someone has already posted this!
 
Hoovie said:
An SSL Certificate (e.g. a "Padlock" symbol) means at best that the site is harder to hack externally to harvest data.

It doesn't mean - and it never has meant - that the site itself is not run by scammers.
Click to expand...
That, in itself, is deceiving.
You see the padlock and assume the site is safe and secure

Subscribers  do not see these advertisements

 
pappajohn said:
That, in itself, is deceiving.
You see the padlock and assume the site is safe and secure
Click to expand...
Well, to be blunt, anyone who assumes that is very very wrong and the sooner they realise that, the sooner they will avoid being potentially scammed by goodness knows how many scam sites.
 

Join us or log in to post a reply.

To join in you must be a member of MotorhomeFun

Join MotorhomeFun

Join us, it quick and easy!

Join us

Log in

Already a member? Log in here.

Latest journal entries

Back
Top