Is it safe for website to generate fake profile pages?
Today I found a website which generates a fake profile when asked if said profile exists. Example: www.site.com/user/mycoolname doesn't exist yet. But if I put it in the browser for the site I get a fake profile of mycoolname with no picture, a date joined from some time in the past 6 years, and the users two favorite ice cream flavors (ok its not that, but its close).
If I go to www.site.com/flavor/mint-chocolate and change it to flavor/mint-copperfield it returns 'flavor not found', but for users it doesn't.
Does user/randomletters exist after I close my browser, and if so, isn't this a threat to their servers?
[If the answer is no, I'm curious how I can verify it doesn't persist or why it's not a threat that it does, if it's yes I intend to contact their security team.]
