PSA: A new method of Identify Theft using domains

Just wanted to share a new method of identify theft for those who don’t know (like me)

I’ve came across a case where smarter than your average Nigerian prince are using this method to try and steal identities of personalities and businesses.

1) purchase an expiring domain name
2) find the history of the domain (Wayback machine, hunter.io)
3) recreate the email addresses that were associated with the domains, especially those personal ones like firstname@lastname
4) create a capture all …

businesses case cybersecurity domain domain name domains don find identify identities name psa share steal theft try