Possible Scam Site with Google Search for Uniden?

[SCPD]

http://scanners.info/repair/index.cfm

I went to Google and entered in Uniden Repair and this site was listed. This is an exact copy of the Uniden site and asks for credit card information for repairing an item. My browser warned that this sites certificate was a forgery. Any one know the story on this web site?

 

[jdolina]

Both sites return to the same IP address when you do a dns lookup

nslookup scanners.info

Non-authoritative answer:
Name: scanners.info
Address: 12.5.107.146

nslookup Uniden | A World Without Wires


Non-authoritative answer:
Name: Uniden | A World Without Wires
Address: 12.5.107.146


The IP is registered to Uniden of America
AT&T WorldNet Services ATT (NET-12-0-0-0-1)
12.0.0.0 - 12.255.255.255
UNIDEN OF AMERICA UNIDEN-O45-107-128 (NET-12-5-107-128-1)
12.5.107.128 - 12.5.107.191

Domain information for scanners.info returns all lookups email etc to uniden.com
> scanners.info
Non-authoritative answer:
scanners.info MX preference = 10, mail exchanger = mx01.uniden.com
scanners.info
primary name server = ns.uniden.com
responsible mail addr = postmaster.uniden.com
serial = 2006102501
refresh = 21600 (6 hours)
retry = 3600 (1 hour)
expire = 691200 (8 days)
default TTL = 86400 (1 day)
scanners.info internet address = 12.5.107.146
scanners.info nameserver = dbru.br.ns.els-gms.att.net
scanners.info nameserver = dmtu.mt.ns.els-gms.att.net
scanners.info nameserver = ns.uniden.com

I would say this may be why it is an exact duplicate of the uniden.com site it appears to be one in the same.

What https page did you get the certificate error? My guess is because the certificate is registered to www.uniden.com and not scanners.inof but if I have the url I can check.

 

[KF4ZTO]

It's a phishing site. I wouldn't give them any information and I would probably do a malware/adware scan of your computer after viewing it.

 

[jdolina]

Definately NOT a phising site is another DNS entry for uniden.com. Just wireshareked it and the packets go the same place 12.5.107.146

 

[SCPD]

Definately NOT a phising site is another DNS entry for uniden.com. Just wireshareked it and the packets go the same place 12.5.107.146

Well Uniden needs to update their certificate then. Most modern web browsers and anti-virus software will identify the problem with the certificate.

 

[brandon]

Just go to Uniden.com to be sure.
I would advise against clicking on any links that show under "Sponsored Results". That is just asking for trouble!

 

[bezking]

http://scanners.info/repair/index.cfm

I went to Google and entered in Uniden Repair and this site was listed. This is an exact copy of the Uniden site and asks for credit card information for repairing an item. My browser warned that this sites certificate was a forgery. Any one know the story on this web site?

If it's only HTTP how did your browser pick up an invalid SSL cert?

 

[SCPD]

If it's only HTTP how did your browser pick up an invalid SSL cert?

When you go to the web page to enter in CC info the protocol for that page is https://

 

[rdale]

It's a phishing site.

What info do you have that would indicate it's phishing?

 

[UPMan]

Note that this is not a phishing site. Uniden owns the "scanner.info" domain, and it is currently being switched over to a redirect to our main site instead of allowing browsing through that domain. The certificate error was due to our having a single SSL certificate and it is only valid for "uniden.com" navigation.