1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

How the F*CK did this guy get my personal details?

Discussion in 'BlackHat Lounge' started by Ghoast, Aug 19, 2015.

  1. Ghoast

    Ghoast Power Member

    Joined:
    Nov 17, 2009
    Messages:
    565
    Likes Received:
    621
    I got an email today sent to my personal email - for a domain name that is owned by my company. The Registrar account used to register this domain has no ties with my personal email at all.

    Then the weirdest part - they had my personal mobile number in the email - This isn't shared ANYWHERE, not on my facebook, not on twitter, I have literally never put my mobile number online...

    Thirdly, the domain in question is completely private and has anon whois information...

    The email in question was the usual 'hello we are seo company please rank your site sir'

    But I have no idea how they managed to connect me to this domain... Even connecting my company with this domain would be hard since there is no whois information, but to contact me on my personal email with my phone number is just crazy!

    Any ideas how they've done it?!

    Also, the domain in question has been parked with no content and then expired for the duration of the time I owned it - so it's not like any info could be gained from there
     
    Last edited: Aug 19, 2015
  2. ZennoBlaster

    ZennoBlaster Senior Member

    Joined:
    Jan 17, 2014
    Messages:
    1,030
    Likes Received:
    310
    Was it paid via Paypal? Who was the registrar?
     
  3. Ghoast

    Ghoast Power Member

    Joined:
    Nov 17, 2009
    Messages:
    565
    Likes Received:
    621
    no it was paid by my company card and the registrar was my company (different email address to my personal one) and there is domain privacy on the domain in question
     
  4. tony_d

    tony_d Elite Member

    Joined:
    Jun 22, 2013
    Messages:
    2,582
    Likes Received:
    3,171
    Location:
    1600 Amphitheatre Parkway, Mountain View CA
    Somewhere out there on the internet, you've written something, or registered something, or posted something... and they've found it, and joined the dots.
    What happens if you do a Google search of your personal email address "[email protected]"?
     
  5. Ghoast

    Ghoast Power Member

    Joined:
    Nov 17, 2009
    Messages:
    565
    Likes Received:
    621
    The bizarre thing is that this domain in question has never been used for anything, it was simply registered and forgotten about. If you google my personal email then information about my company comes up, but that's about it
     
  6. SEO20

    SEO20 Elite Member

    Joined:
    Mar 25, 2009
    Messages:
    2,017
    Likes Received:
    2,260
    Have you set hosting up for the domain - on the same server as some of your other domains?
    Then it's easy.
     
  7. Ghoast

    Ghoast Power Member

    Joined:
    Nov 17, 2009
    Messages:
    565
    Likes Received:
    621
    Nope - there's nothing there. No hosting, just registered and forgotten about...
     
  8. SEO20

    SEO20 Elite Member

    Joined:
    Mar 25, 2009
    Messages:
    2,017
    Likes Received:
    2,260
    The mail sent to you - does it state sent via "xxxxx.facebook.xxxx" in the FROM?

     
  9. Ghoast

    Ghoast Power Member

    Joined:
    Nov 17, 2009
    Messages:
    565
    Likes Received:
    621
    No it doesn't and this personal email I'm referring to isn't used for facebook
     
  10. rockandcarter

    rockandcarter Junior Member

    Joined:
    Jan 2, 2010
    Messages:
    136
    Likes Received:
    74
    I have had this a couple of times before with brokers. I've always asked how they managed to get my personal details but they never want to discuss that, just if they can have my domains.
     
  11. SeoWrecker

    SeoWrecker Jr. VIP Jr. VIP

    Joined:
    Jul 16, 2012
    Messages:
    1,916
    Likes Received:
    1,644
    Gender:
    Male
    Location:
    Doesn't matter
    Google indexes anything and everything :D
     
  12. Ghoast

    Ghoast Power Member

    Joined:
    Nov 17, 2009
    Messages:
    565
    Likes Received:
    621
    It's quite bizarre though - because personally if I try and work backwards from the domain I can't find anything connected to even my business, let alone myself.
     
  13. zsimpson22

    zsimpson22 Regular Member

    Joined:
    Oct 10, 2012
    Messages:
    305
    Likes Received:
    101
    Gender:
    Male
    Location:
    On My Way To The Top
    Which tells you somehow someway your company is tied to your personal email right? if google shows your company when you google your email, it probably shows your email when you google your company.