Who-is detective help please

daelo

daelo

daelo

Associate
Joined
22 Sep 2009
Posts
982
A "friend" of mine has been having dealings(being scammed) with a so called Japanese Law Firm who I beleive only live in cyberspace.

The website is - http://www.kazumiyasunoripartners.com

Can you please help with some OCUK Who-is detective work?

So far I can deduce....

1. The who-is information is protected and made anonymous , am i correct?
2. The IP of this website appears to be located in england rather than japan and is hosted by host1plus.com
3. The website is a load of **** , errors + broken formatting or is it just my browser?
4. Is there a way to get the real persons name and address and find out where they are emailing from, because they do supply an email address, so I would suppose being Japanese Attorneys they would be living in Japan and the email would originate from there.

I did I think whats called a Traceroute and found the server lives in Bournemouth, is that correct?

Any of information you leg ends can find would be most useful as i'm quite worried (with her limited computer knowledge) that shes being reeled in hook line and sinker for a Cash Advance Scam so need some evidence to convince her to stay the hell away!
:)
 
The server that site's on is in Bournemouth and is running apache 2.2.16. Which isn't really helpful.

They use whoisprivacyprotect.com which a service of eNom (who the url was registered with) to hide Whois details.
 
Last edited:
Spunkey said:
The server that site's on is in Bournemouth and is running apache 2.2.16. Which isn't really helpful.

They use whoisprivacyprotect.com which a service of eNom (who the url was registered with) to hide Whois details.
Click to expand...

I had an idea they were trying to hide themselves... as general consensus any "legitimate" business who don't operate with shady/illicit procedures will have nothing to hide and therefore always have a registered address/contact for who owns the domain?

Do you think if I email the Enom people they will be able to give any information as to who the domain belongs to or is that a longshot (data protection etc..)
 
Wow there are so many scam sites hosted on 84.45.45.106 it would be doing the world a favor to DOS it offline, unfortunatly it would just be a drop in the ocean tho.

Unfortunatly they seem to have decided to obfuscate their details behind so many fake, semi-legal and legal operations that it would be difficult to pinpoint any one specific without either legal action or doing something illegal (hacking).


There may be some potential lead using this URL http://kazumiyasunoripartners.com/Thurber-james-fitch-priscilla-mason/ I'm not really sure of the significance of it at this time (may just be content "filler" to trick search engines).
 
Last edited:
Rroff said:
There may be some potential lead using this URL http://kazumiyasunoripartners.com/Thurber-james-fitch-priscilla-mason/ I'm not really sure of the significance of it at this time.
Click to expand...

Ohhhhh how interesting ....I can see that they have hosted a lot more on that site than meets the eye... how do you get to the root of a website... almost like a sitemap which displays all the different content stored under one domain?

*Edit.. Or is a lot of that crap on that page actually just embedded it would appear... meaningless crap it would seem... anything else hidden within the website?
 
Last edited:
Theres quite a bit of meaningless crap embedded around the domain, some of it linked to from external sites which had me wondering it if was possible to track down a username on another site to investigate, but a lot of its Japanese sites the purpose of which are complete mysteries to me even after running through google translate.

I'm guessing a lot of its just to trick search engines into seeing the site as having more content and useage/purpose than it actually does.
 
I came across a strange link http://kazumiyasunoripartners.com/Thurber-james-fitch-priscilla-mason/ on this part of the page when inspecting elements in chrome (frames? where the pictures are)

http://visit.webhosting.yahoo.com/visit.gif?&r=http://forums.overclockers.co.uk/showthread.php%3Fp%3D19183894&b=Netscape%205.0%20%28Windows%20NT%206.0%29%20AppleWebKit/534.24%20%28KHTML%2C%20like%20Gecko%29%20Chrome/11.0.696.60%20Safari/534.24&s=1280x800&o=Win32&c=32&j=true&v=1.2

Why is there a GIF on this scammers site with a link to an overclockers forum thread which i just tried to open but could not find...??

image included.. how odd.



Uploaded with ImageShack.us
 
Probably just a referrer thing if you clicked the link I pasted from here, the sites got a lot of extra fluff like that which I assume is to artifically promote its rank on search engines and the like.

Theres also a http://kazumiyasunoripartners-mail.com/ domain but again nothing very useful, they've gone to a lot of lengths to hide behind tons of crap - without taking legal action to get registrars, etc. to give up information or using somewhat less legal means theres no easy way to get useful information.


EDIT: If she can get a reply from an email address the full headers might be somewhat useful but I suspect they hide behind hacked pcs, public internet or similiar.
 
Last edited:
From www.kazumiyasunoripartners.com/Partners.pdf

Kazumi Hideaki is a partner to Kazumi Yasunori & Partners.
She has domestic and international experience in product liability and
infringement cases, in both defensive and offensive role for more than two
decades.

She has been responsible for preparation and negotiation of international license agreement and similar transaction for both domestic and foreign clients.

By taking advantages of studying at the University and passing bar examination in the US, She has been responsible especially for working for foreign clients.

Kazumi Hideaki can discuss persuasively her interpretation of Japanese law
before courts to accord domestic law to foreign law. She also develops roles
of Japanese attorneys who also have title of US attorney in Japan. She is in
contact with many foreign attorneys to assist business development of foreign clients in Japan.

Professional Admissions:
Member of Daiichi Tokyo Bar Association
Professional Activities:
Arbitrator of Tokyo Summary Court
Member of Law School Committee of Daiichi Tokyo bar Association

Kunio Yasunori is a partner to Kazumi Yasunori & Partners. He has extensive experience in representing insurance companies, security companies and patent holders. He is supporting the insurance companies in term of moral hazard. Mr. Kunio Yasunori has been responsible for litigation matters. He is also supporting in opening various kind conferences for companies. He is always collecting extensively many evidences for clients and developing persuasive discussion before courts based upon the big volume of evidences
collected by him. Many clients appreciate his efforts. He is dedicated to protection of his clients in term of legal matters. He never loses trust from his
clients whether or not the clients lose before courts. Even his old clients who lose before court still retains him again as his attorney.

Professional Admissions:
Member of Tokyo Bar Association

Main Achievements:
Outside auditor of software corporation

Hashimoto Isamu is one of the cofounders of Kazumi Yasunori & Partners. He started his regal carrier in 1986 after servicing for Japanese Central Governments. He selected an officer with Central Government, although he was eligible for attorney at law just after graduation of University. These experience developed human relationship with many officers of central and local governments, who are now his clients. He serves as a special counsel to Matsudo-city near Tokyo in giving lectures to officers thereof.

Mr. Hashimoto has been responsible for general agreements, especially computer software development agreement, international transaction agreement, municipal and other governments law issues and labor issues.

Professional Admissions:
Member of Daiichi Tokyo Bar Association
Click to expand...

Any use?
 
So .. for myself I can pretty much tell that site is bad news all over, screams scam written all over it.. not to mention the hidden pages within the site. This scam also is being based upon a dead "father" who moved to america (on that hidden page there is a death certificate for an american who died some time ago - James Mason)

Rroff, how did you find the hidden urls on that website, id like to investigate the other incredibly similar(Edit... In some parts, word for word such as the descriptions of the attorneys) website Burnsy added.

Anyway I'm very appreciative of your help and if anyone has anything else to offer with further digging that would be amazing :D
 
daelo said:
I came across a strange link http://kazumiyasunoripartners.com/Thurber-james-fitch-priscilla-mason/ on this part of the page when inspecting elements in chrome (frames? where the pictures are)

http://visit.webhosting.yahoo.com/visit.gif?&r=http://forums.overclockers.co.uk/showthread.php%3Fp%3D19183894&b=Netscape%205.0%20%28Windows%20NT%206.0%29%20AppleWebKit/534.24%20%28KHTML%2C%20like%20Gecko%29%20Chrome/11.0.696.60%20Safari/534.24&s=1280x800&o=Win32&c=32&j=true&v=1.2

Why is there a GIF on this scammers site with a link to an overclockers forum thread which i just tried to open but could not find...??

image included.. how odd.
Click to expand...

That link goes to post #5 in this thread, otherwise post no. 19183894 in OcUK forums.
I guess it's a tracking link so they know where someone has come from.
 
Tomsk said:
That link goes to post #5 in this thread, otherwise post no. 19183894 in OcUK forums.
I guess it's a tracking link so they know where someone has come from.
Click to expand...

Do you think thats a safe guard incase the site suddenly registers many users coming from the same location.. ie to alert the scammer that hes been rustled and to remove the site and move onto the next person?
 
daelo said:
Do you think thats a safe guard incase the site suddenly registers many users coming from the same location.. ie to alert the scammer that hes been rustled and to remove the site and move onto the next person?
Click to expand...
Er... it's just a tracking image, so the site owner knows where people visiting his site are coming from :confused:
 
You must log in or register to reply here.
Back
Top Bottom