[anti-abuse-wg] VERIFIED[.]IS

I see that there is an interesting and active discussion on this now.
Everyone may be sure that I will be posting further comments shortly
which clarify my personal position on all the matters discussed so far.

In the meantime however, I just realized that I neglected to clarify
how I came to find that VERIFIED[.]IS web site in the first place.

It may not be at all important, but just so everyone knows, I found
that VERIFIED[.]IS indirectly.  First, I stumbled onto the following
web site, which is clearly selling credit cards *and* also (U.S.)
social security numbers (SSNs) and dates-of-birth (DOBs).  (You can
even pick out which U.S. state you prefer!)  These bits of information
are often helpful to people intent on committing identity theft:

   http://www.wellsfargo.lequeshop[.]ru/

As you can see, there is an email address on the above page.  It is
<mixx at exploit.im>.  I simply googled that email address and then
started to visit the web sites found.

One of them was verified[.]is

But this criminal carder ... who seems to be Russian... is also active
on many other web sites, presumably selling what he has to offer in
many different forums.


Regards,
rfg