[anti-abuse-wg] VERIFIED[.]IS was - Russian carding... no, Islandic carding... no Belizian carding!

“We”?  Unless you actually work for ripe ncc that’s a rather large amount of overstatement.


On 10/08/16, 10:29 AM, "anti-abuse-wg-bounces at ripe.net on behalf of andre at ox.co.za" <anti-abuse-wg-bounces at ripe.net on behalf of andre at ox.co.za> wrote:

    
    So, you stumbled across some potential criminal activity, then you
    notified law enforcement and/or Interpol?
    
    Or you think that it is a better solution for RIPE to investigate
    criminal activity and simply to 'nul-route' child pornographers,
    identity thieves and criminal syndicates?
    
    You are saying that you would rather discuss criminal syndicates on an
    anti abuse discussion list?
    
    So, we should investigate crimes now and then disable their routing or
    email or what?
    
    On Tue, 09 Aug 2016 12:53:34 -0700
    "Ronald F. Guilmette" <rfg at tristatelogic.com> wrote:
    
    > 
    > I see that there is an interesting and active discussion on this now.
    > Everyone may be sure that I will be posting further comments shortly
    > which clarify my personal position on all the matters discussed so
    > far.
    > 
    > In the meantime however, I just realized that I neglected to clarify
    > how I came to find that VERIFIED[.]IS web site in the first place.
    > 
    > It may not be at all important, but just so everyone knows, I found
    > that VERIFIED[.]IS indirectly.  First, I stumbled onto the following
    > web site, which is clearly selling credit cards *and* also (U.S.)
    > social security numbers (SSNs) and dates-of-birth (DOBs).  (You can
    > even pick out which U.S. state you prefer!)  These bits of information
    > are often helpful to people intent on committing identity theft:
    > 
    >    http://www.wellsfargo.lequeshop[.]ru/
    > 
    > As you can see, there is an email address on the above page.  It is
    > <mixx at exploit.im>.  I simply googled that email address and then
    > started to visit the web sites found.
    > 
    > One of them was verified[.]is
    > 
    > But this criminal carder ... who seems to be Russian... is also active
    > on many other web sites, presumably selling what he has to offer in
    > many different forums.
    > 
    > 
    > Regards,
    > rfg
    >