Thursday, December 21, 2006

Tracking Down a Spammer

From time to time a spammer will annoy me enough to track them down and call them at home to let them know how I feel about their spam. Today's story is about tracking down a spammer at home.

I am constantly receiving image spam for an online pharmacy called RXCart.org. This is the story of how I tracked down the man responsible.

1. It used to be that when you placed an order at RXCart.org you were directed to hsnsecure.com. It so happens that this is an SSL-enabled site complete with Versign certificate. Immediately after this blog posting rxcart.org was changed to point to a new processor.

2. Using Firefox I examined the SSL certificate for hsnsecure.com and find that it's issued to a "Health Solutions Network, LLC" with an address in Washington state. From research conducted on the Internet, it seems as though HSN is a company that specializes in processing orders for all kinds of people hawking their prescription medication sites.

3. I got to the Washington Secretary of State's Web site and look up this corporation. I see who it is registered to. Turns out he's in Snohomish, WA (he's probably one of the pricks threatening the boy who was almost killed by the cannon too).

4. I take this information over to zabasearch.com and find his home address and phone number.

So, you see, it can be very easy to track a spammer down if you know which tools to use.

EDIT: I changed this post to remove direct references to the actual individual on the advice of counsel. The information remains accessible via the methods described.