Quote:
Originally Posted by k0nr4d
No, it means that their server is an intermediary that is receving and resending the card data - which means they must be PCI complaint (which they probably aren't)
|
Your right, I doubt very much that they are PCI compliant
This looks like an affiliate scam that we got hit with many years ago.
Basically they setup a fake website like that simply to collect the credit card and IP details. When a user tries to join it simply comes up with an error but the user hasnt been charged so they simply walk away
Then one way to turn all that information into cold hard cash is they go an register with lots of affiliate programs. They then use the CC details to put through lots of fake sales
It usually take say 4 to 6 weeks for the transactions to come back as fraud by which time the affiliate has got his commission and disappeared