PDA

View Full Version : For all you budding cybercrime sleuths



Apotheosis
11-01-2005, 12:13 PM
Therehave been a number of job "phishing" e-mails that I have been receiving lately. One in particular, I applied for, because it fit the bill for something I applied for in the past.

Before I go on any further, let me give some basic background info. I had given up searching for jobs/projects on the internet, because it was easier for me to find work through networking and cold calling. I removed all of my online resumes, and politely ignored recruiters and headhunters that were outside of my network.

Anyway, the point is, I took the bait, because it was targeted to people with my skillset, and I am interested in generating new business. So far, I have not had any negative results (outside of more spam sent to a disposable e-mail address that I set up).

Anyway, I once I had filled out this application (which requested very little personal information), I realized that something was wrong. I did a search for the name of the "recruiter" who had sent the e-mail, and discovered a forum (scam.com) that identified the sender as a "phisher".

With that said, I have tried to identify exactly who "scam.com" is, and came up with some strange and conflicting information about the site itself.

#1, a whois search identifies scam.com as being registered by excalibyte.com, which does not have a website. In addition, the information identifies the registrant as being in Lisbao, Lisbao. IE: the physical address is weird and does not exist, as far as I can tell.

There is a Lisboa, Spain, as far as I know.

#2 The president of "scam.com" is from Ontario. Isn't it unusual that a domain is registered in a country different from the home state of the president?

#3 The main "users" of the site seem particularily bent on bringing attention to specific career "phishing" schemes relating to the one I applied to. They have gone so far as to identify the sources (or make allegations about the sources).

#4 Because I am not savvy at identifying internet sources beyond the "whois", I am curious as to what is exactly going on, and the reality may be that there is nothing.

Anyway, if you scratch a bit beneath the surface of this content, something about it doesn't seem right, and I wonder if there isn't a way out there that an average person can go to get some solid facts as to their Allegations and Identity.

The reason I bring this up is because, with a good understanding of SEO techniques, and how sites like google rank websites, it wouldn't be terribly difficult to create multiple forum based sites to collect personal data, and at the least collect data to sell to marketers, and at the worst commit identity and credit fraud.

So, can I really find out who this "Scam.com" is, and what the phishing schemes are trying to do?

Wezas
11-01-2005, 12:17 PM
Um, I don't get your post.

Scam.com is a site that informs/warns people of what types of scams people have found.

In my opinion, it's probably a totally legit site that's trying to help people. If I were you I'd concentrate more on who phished you.

Unique
11-01-2005, 12:34 PM
Originally posted by Wezas
Scam.com is a site that informs/warns people of what types of scams people have found.


The point is that scam.com's information has the hallmarks of... get this... a scam.

Too busy at the moment to look into it unfortunately.

Apotheosis
11-01-2005, 02:05 PM
First of all. Consider the design/layout. It uses traditional propaganda techniques, such as identifying itself with the good 'ole USA. Therefore, people who feel a strong sense of patriotism identify with it positively.

The conflicting background information and lack of information on it and the main users sends up red flags as well.

Theorhetically, an organized group could use a push/pull method to attract people to what it wants using a combination of phishing, IP identification (is this possible with non-static addresses?), data mining, qualitative analysis/observational analysis to identify targets.

Tsa`ah
11-01-2005, 04:43 PM
Well consider this.

Were it a registration within US jurisdiction ... it would have been dead in a week.

It's not uncommon for scammers and advocates alike to set up domains outside of the US borders. In this case there webmaster of scam.com probably didn't want the hassles of a US or Canadian domain and shopped around, or wasn't really even paying attention to the location of his provider's server.