Possible Scam Site with Google Search for Uniden?

Status
Not open for further replies.

SCPD

QRT
Joined
Feb 24, 2001
Messages
65,126
Location
Virginia
http://scanners.info/repair/index.cfm

I went to Google and entered in Uniden Repair and this site was listed. This is an exact copy of the Uniden site and asks for credit card information for repairing an item. My browser warned that this sites certificate was a forgery. Any one know the story on this web site?
 

jdolina

Member
Premium Subscriber
Joined
Jul 4, 2006
Messages
416
Location
Lorain Ohio
Both sites return to the same IP address when you do a dns lookup

nslookup scanners.info

Non-authoritative answer:
Name: scanners.info
Address: 12.5.107.146

nslookup Uniden | A World Without Wires


Non-authoritative answer:
Name: Uniden | A World Without Wires
Address: 12.5.107.146


The IP is registered to Uniden of America
AT&T WorldNet Services ATT (NET-12-0-0-0-1)
12.0.0.0 - 12.255.255.255
UNIDEN OF AMERICA UNIDEN-O45-107-128 (NET-12-5-107-128-1)
12.5.107.128 - 12.5.107.191

Domain information for scanners.info returns all lookups email etc to uniden.com
> scanners.info
Non-authoritative answer:
scanners.info MX preference = 10, mail exchanger = mx01.uniden.com
scanners.info
primary name server = ns.uniden.com
responsible mail addr = postmaster.uniden.com
serial = 2006102501
refresh = 21600 (6 hours)
retry = 3600 (1 hour)
expire = 691200 (8 days)
default TTL = 86400 (1 day)
scanners.info internet address = 12.5.107.146
scanners.info nameserver = dbru.br.ns.els-gms.att.net
scanners.info nameserver = dmtu.mt.ns.els-gms.att.net
scanners.info nameserver = ns.uniden.com

I would say this may be why it is an exact duplicate of the uniden.com site it appears to be one in the same.

What https page did you get the certificate error? My guess is because the certificate is registered to www.uniden.com and not scanners.inof but if I have the url I can check.
 
Last edited:

KF4ZTO

Member
Joined
Dec 26, 2005
Messages
517
Location
Virginia
It's a phishing site. I wouldn't give them any information and I would probably do a malware/adware scan of your computer after viewing it.
 

jdolina

Member
Premium Subscriber
Joined
Jul 4, 2006
Messages
416
Location
Lorain Ohio
Definately NOT a phising site is another DNS entry for uniden.com. Just wireshareked it and the packets go the same place :) 12.5.107.146
 

SCPD

QRT
Joined
Feb 24, 2001
Messages
65,126
Location
Virginia
Definately NOT a phising site is another DNS entry for uniden.com. Just wireshareked it and the packets go the same place :) 12.5.107.146
Well Uniden needs to update their certificate then. Most modern web browsers and anti-virus software will identify the problem with the certificate.
 

brandon

Member
Database Admin
Joined
Dec 19, 2002
Messages
3,462
Location
SoCal
Just go to Uniden.com to be sure.
I would advise against clicking on any links that show under "Sponsored Results". That is just asking for trouble!
 

bezking

Member
Database Admin
Joined
Aug 5, 2006
Messages
2,634
Location
On the Road
http://scanners.info/repair/index.cfm

I went to Google and entered in Uniden Repair and this site was listed. This is an exact copy of the Uniden site and asks for credit card information for repairing an item. My browser warned that this sites certificate was a forgery. Any one know the story on this web site?
If it's only HTTP how did your browser pick up an invalid SSL cert? :confused:
 

UPMan

Uniden Representative
Premium Subscriber
Joined
Apr 19, 2004
Messages
13,288
Location
Arlington, TX
Note that this is not a phishing site. Uniden owns the "scanner.info" domain, and it is currently being switched over to a redirect to our main site instead of allowing browsing through that domain. The certificate error was due to our having a single SSL certificate and it is only valid for "uniden.com" navigation.
 
Status
Not open for further replies.
Top