ICCIA - International Cyber Crime Investigation Association

[UKZJ007]

Hey Guys,

Recently I was the victim of a small domain name scam - Like many others I am just SICK of cyber crime now.

I decided to start a website which will be a free cyber crime information site and forums. I would like as much helpful advice/feedback as to what features should be on the site - (from anyone who has an interest in Cyber Law)

I would also like a feature on the site where people can ask for free advice from lawyers and experts in this industry - The lawyers/experts can then privately offer their services if there is a situation.

The problem is that I don't have many many legal contacts, I would like to see who has an interest in this site, and wouldn't mind helping me when the site is complete, and also to see what the general attitude here is. I need as much help as possible to make this site helpful.

Some of the planned features on the site

- Articles from experts on Cyber Crime and other related issues
- Reviews on Anti-Virus/Anti-Spyware programs
- Free Lawyer advice
- Interviews with Lawyers/"EX" Scammers & Cyber Criminals\Experts in the industry
- We could actively try to hunt down scammers (helpful members)
- Latest cyber news
- Links to useful places

(I am still researching as to how large a portion the "forums" should be, but some of the above may be a seperate module or integrated into the forum)

Also, feel free to give any other input as to the idea of the site or anything to do with the site (Site is still in planning phase btw)

Thanks namepros members!

 

[Dave_Z]

Here's one for you: http://forum.freeadvice.com .

Although many share your sentiment, the problem is that a country's laws will
only apply in that country and its territories. So how one country handles a
certain legal issue may be handled differently in another country.

Not to mention it's going to be a headache trying to understand a gazillion
legal jurisdictions.

I think one international law enforcement agency is Interpol. But I don't know
how much have they invested (if so) in creating a task force for cyber crimes.

Check google and see if there's such a forum. If hardly, there's always a first
time!

In this case you. Good luck!

 

[UKZJ007]

Thanks for the link, Ironically I posted there just before here.

In regards to your country comment, that is precisely what I wish to educate people about - I don't think many people understand the consequences and legalities concerned (heck, even I want to educate myself better in this field) - If you think you can help whether it be via a small link, giving advice on the site or some content - Please contact me

 

[Zeeble]

I like the idea of this, I have been speaking to Jaffer about it over MSN and we have got some things sorted already. However more people are needed to make something like this work.

First page is up:
www.ICCIA.com
ICCIA stands for: International Cyber Crime Investiagtion Association

So far Zain has register the .com the .net and .org for the purposes of the org.

 

[zaros64]

wow... good luck guys..if you need any help I can put 88x31 buttons on my site,etc,etc..
I am willing to really support you guys

 

[Oblivion.]

I'll help you in any way I can (which probably isn't many).

 

[UKZJ007]

Progress is good so far - our team has tracked down his country of residence, his connection type and have all the contact info to hopefully bust him ..

We need as many testimonials from people as possible (people complaining they want their money back etc)

Thanks,

Zain Jaffer.

Please PM me if you can help out.

 

[crazy]

Very good idea, i agree with you, cybercrime is getting out of hand especially with all these people behind elite proxies which are almost impossible to track.

 

[LeeRyder]

everyone is trackable. everyone makes mistakes, human nature.

human nature also means we brag about "accomplishments" as such, somewhere online "Mr Martin" is bragging about it. Someone else knows.

the clues are this: his links to the appraisal companies are direct links, not affiliate links...as such, it appears he has no such profit to be made... which means, since we all know beyond any reasonable doubt that he is a scammer that he works explicitely for (or owns) all of the companies he refers people too.

that is a FACT.

We have so many people here from all around the world, he is very catchable. even in russia. It would not surprise me that he reads these (and other) forums, possibly partaking in them as such.

I've barely breathed on this guy simply because of laziness and that while ive asked for IP address or email headers.. I havent received them (unless I missed a post?) from anyone... once i get those.. it would take very little time to trace him down. Russia or not.. his time is limited.

to me a scammer/grifter is no different than an armed robber. Maybe even worse because he betrays the inherent trust needed for online trade to succeed.

I can say this, when I do find him.. Russia wont be far enough.

this post is my life journal to trace him down real quick. please, dont reply to this post as it is just for my notekeeping

jopros
DhB
|______Name: greenB
Location: Germany
Birthdate: 04-03
Bio: Hügelrunterfaller
Interests: 2: jopros, käse. [Modify yours]
Friends: 5: cydney, scorpion2k, skulg, unhit, zwackel

http://www.fishing.ru/Forum/025/
(can someone translate this for me, too busy to do that and trace him)

|________www.efort.ru (unknown affiliation)

more potential trace information (personal notes/ignore)

38.113.3.71 found
host 38.113.3.71 = smtp-out.hotpop.com (cached)
smtp-out.hotpop.com is 38.113.3.71
Possible spammer: 38.113.3.71
Received line accepted
Relay trusted (38.113.3.71)


Received: from toughguy.net (kubrick.hotpop.com [38.113.3.103]) by smtp-out.hotpop.com (Postfix) with SMTP id E48C711CF4FC for <[email protected]>; Tue, 9 Nov 2004 20:06:40 +0000 (UTC)
38.113.3.103 found
host 38.113.3.103 = kubrick.hotpop.com (cached)
kubrick.hotpop.com is 38.113.3.103
Possible spammer: 38.113.3.103
ips are close enough
38.113.3.103 is close to an MX (38.113.3.62) for hotpop.com
38.113.3.103 is mx
Possible relay: 38.113.3.71
38.113.3.71 not listed in relays.ordb.org.
38.113.3.71 has already been sent to relay testers
Received line accepted
Relay trusted (38.113.3.103)


Received: from DIAMOND (ppp134-89.dialup.mtu-net.ru [62.118.134.89]) by smtp-1.hotpop.com (Postfix) with SMTP id 8139F1A024E for <[email protected]>; Tue, 9 Nov 2004 19:35:21 +0000 (UTC)
62.118.134.89 found
host 62.118.134.89 (getting name) = ppp134-89.dialup.mtu-net.ru.
ppp134-89.dialup.mtu-net.ru is 62.118.134.89
Possible spammer: 62.118.134.89
62.118.134.89 is not an MX for ppp134-89.dialup.mtu-net.ru
host ppp134-89.dialup.mtu-net.ru (checking ip) = 62.118.134.89
Possible relay: 38.113.3.103
38.113.3.103 not listed in relays.ordb.org.
38.113.3.103 has already been sent to relay testers
Received line accepted

Tracking message source: 62.118.134.89:
Routing details for 62.118.134.89
[refresh/show] Cached whois for 62.118.134.89 : [email protected] [email protected].
Using abuse net on [email protected]
abuse net mtu.ru = [email protected], [email protected]
Using abuse net on [email protected].
abuse net mtu.ru = [email protected], [email protected]
Using best contacts [email protected] [email protected]

Friend of: 5: cydney, scorpion2k, skulg, unhit, zwackel

http://www.senderbase.org/?searchBy=ipaddress&searchString=38.113.3.71&oOrder=lastmonth asc (possible hit)

kubrick.hotpop.com
|____________Ding


Apparently he is involved in somesort of watch scam?
http://groups-beta.google.com/group...13.3.71+group:*abuse*&rnum=1#29e6b8002fc3d3ab

kubrick.hotpop.com is a stron lead.

Domain name: HOTPOP.COM

Administrative Contact:
Master, Host hostmaster-74929#alias.HotPOP.com
PO BOX 508
Newton, MA 02460
US
+1.5187131719
Technical Contact:
Master, Host hostmaster-74929#alias.HotPOP.com
PO BOX 508
Newton, MA 02460
US
+1.5187131719


Registration Service Provider:
Domain Direct, dnstech#domaindirect.com
1-416-531-2084
http://www.domaindirect.com
This company may be contacted for domain login/passwords,
DNS/Nameserver changes, and general domain support questions.


Registrar of Record: TUCOWS, INC.
Record last updated on 15-Sep-2004.
Record expires on 07-May-2006.
Record created on 08-May-1998.

Domain servers in listed order:
NS1.JERKY.NET 38.113.2.100
NS6.JERKY.NET 199.166.26.101

Email sent [email protected] to attain header info with bait email just in case. more to come

kubrick traced to

To: [email protected]
Subject: Bug#167377: marked as done (php4-interbase in testing does not work with the version of php4 in testing)
From: [email protected] (Debian Bug Tracking System)
Date: Tue, 23 Mar 2004 05:33:04 -0800
Cc: Debian QA Group <[email protected]>
In-reply-to: <[email protected]>
Message-id: <[email protected]>
Old-return-path: <[email protected]>
References: <[email protected]> <[email protected]>
Sender: Debian BTS <[email protected]>

 

[UKZJ007]

Don't bother with tracing him/them anymore, we know their exact location and all we need now is testimonials from people ... they can even be as short as one line ... We just need some proof such as "I got scammed for xxx, I demand that the authorities take some course of action" - signed by xxx, [email protected] from xxx.com

 

[LeeRyder]

sexmagnet.com is one of "mr Martins" domains

traced to Jabber.org.
Ladies and gentlemen, meet "Mr Martin".

http://nsantos.f2o.org/info/neil/contact.htm

Domain ID:D2861564-LROR
Domain Name:JABBER.ORG
Created On:25-Dec-1998 05:00:00 UTC
Last Updated On:26-Dec-2004 01:36:11 UTC
Expiration Date:25-Dec-2005 05:00:00 UTC
Sponsoring Registrar:DSTR Holdings, Inc. (R34-LROR)
Status:OK
Registrant ID:DOT-1G6N7JO05LRW
Registrant Name:Jeremie Miller
Registrant Organization:Jabber Software Foundation
Registrant Street1:417 2nd Ave. SW
Registrant Street2:
Registrant Street3:
Registrant City:Cascade
Registrant State/Province:IA
Registrant Postal Code:52033
Registrant Country:US
Registrant Phone:+1.5638523464
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email:
Admin ID:DOT-5TK5I8MH2Z7Q
Admin Name:Jeremie Miller
Admin Organization:Jabber Software Foundation
Admin Street1:417 2nd Ave. SW
Admin Street2:
Admin Street3:
Admin City:Cascade
Admin State/Province:IA
Admin Postal Code:52033
Admin Country:US
Admin Phone:+1.5638523464
Admin Phone Ext.:
Admin FAX:
Admin FAX Ext.:
Admin Email:
Tech ID:DOT-0NN8OVQ0JNLE
Tech Name:Jeremie Miller
Tech Organization:Jabber Software Foundation
Tech Street1:417 2nd Ave. SW
Tech Street2:
Tech Street3:
Tech City:Cascade
Tech State/Province:IA
Tech Postal Code:52033
Tech Country:US
Tech Phone:+1.5638523464
Tech Phone Ext.:
Tech FAX:
Tech FAX Ext.:
Tech Email:
Name Server:NS1.JEREMIE.COM
Name Server:NS2.JEREMIE.COM
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:

thank but no thanks Zain. I dont quit until it is finished.

 

[TommyK]

sexmagnet.com is one of "mr Martins" domains

traced to Jabber.org.
Ladies and gentlemen, meet "Mr Martin".

http://nsantos.f2o.org/info/neil/contact.htm


thank but no thanks Zain. I dont quit until it is finished.

ok, even a 10yo knows how to use a domain lookup tool. so, that domain registry info means nothing. Please, stop the macho acting! We both you know you aint down with it!

Also, it IS possible to track people, proxy or not.. high-anon or just anon proxy, socks or just http, still, its all just about how good you are at what you do..

Anyway, that's all from me..

 

[LeeRyder]

lol, my reputation here in tracing people stands on its own... please be mindful of that

and apparently your not payin attn. the whois isnt him, the Santos guy is.

 

[equity78]

Don't attack LEE as a new member because Lee knows what he is doing and is a valuable member of this community. Interesting first post Tommy

 

[LeeRyder]

hey thank you Equity Much appreciatted!