1337day.com is a scam site. They do not have the 0days they are selling for.

Their address is http://blockchain.info/address/1AWqYR4CCP5j9GEqMNk8b3ZNPPfG5Jniu1

As you can see I purchased the vBulletin 0day with this transaction:

 vBulletin v4.x.x and 5.x.x Shell Upload / Remote Code Execute (0day)

https://blockchain.info/tx/2380e1187dac2c76ddf7430ecf5a0573bc415f595f01e46796c8acf201cfb4f6

I received an email from admin@1337day.com asking for jabber or skype. Here's our logs: (timestamps removed for my anonymity)


1337day
here
 
joshzerlan@jwchat.org
ok, so what about the vBulletin 0day?    

1337day
Hello    

joshzerlan@jwchat.org
Hi   

1337day
Bro please tomorrow , at the moment i back home
today or tomorrow
 
joshzerlan@jwchat.org
what's with the youtube video saying you scammed someone over the MS office 0day?   

1337day
I waited for you all day
this man make video to get stuff for free
many kids idiots
 
joshzerlan@jwchat.org
okay, when will you be able to disclose it?
(not sure what time zone you are in)
 
1337day
today   

joshzerlan@jwchat.org
ok. I'll be available here. thanks   

1337day
respect
add me
 
joshzerlan@jwchat.org
added   

1337day
you use windows?   

joshzerlan@jwchat.org
no
you responsible for macrumors?
 
1337day
yes
you want database?)
 
joshzerlan@jwchat.org
that wasn't done through a 0day
that was done through XSS
 
1337day
no)   

joshzerlan@jwchat.org
http://gyazo.com/dc04ae4ecd2ff1eb0a43191f6778369c   

1337day
)
my screen)
do you want this database?
 
joshzerlan@jwchat.org
it would make me
more comfortable if i know you actually have a 0day
 
1337day
3 btc and i give you database)
interest?
 
joshzerlan@jwchat.org
show me some proof first   

1337day
proof? you send me 10 btc and you want proof?   

joshzerlan@jwchat.org
you want me to send more   

joshzerlan@jwchat.org
so?
you don't have the 0day.


1337day
and?   

joshzerlan@jwchat.org
posting about scam reports on all the forums now
i'll make sure the #2 search result for 1337day is a scam report
 
1337day
show me   

-----

As you can see, they claim responsibility for the MacRumors attack when it was done by someone using the name 'lol'. That attack was through compromising a moderator account, and making a XSS announcement. The actual hacker of MacRumors has said 1337 didn't do shit with proof:

http://gyazo.com/dc04ae4ecd2ff1eb0a43191f6778369c   

1337day are scammers - do not pay them.

(And yes, this is a hacked account).