Dissolved Firm's Domain Re-Registered as Likely AI-Built Fake ISO Certifier
kingslyj · x · 2026-10-23
Security researcher kingslyj documents a suspicious impersonation scheme:
- While the original QEC company was active, qecgroup.co.uk displayed a real phone number and email; after dissolution it switched to a different contact (Neil Cooke), likely a retiree serving old clients.
- On Sep 3, 2025, someone re-registered the same domain and stood up a website with the dissolved company's logo, a fake New York address, and a placeholder phone number.
- WHOIS shows a Namecheap registration where Nominet couldn't match the registrant's details against third-party sources.
- The new site poses as a "globally recognized ISO certification body" claiming 25+ standards, 1000+ certified organizations, and 50+ auditors, with template-style pages and an affiliate program—hallmarks of a rapidly generated, likely AI-built scam site.
Takeaway: verify a certifier's accreditation independently before engaging; don't trust a polished website or an old domain name.
More from Safety
- Quest Diagnostics hit by hack, exposing patient data at a firm serving half of US hospitals — cephaloform · 2026-10-23
- OpenAI fired three researchers fighting to keep chain-of-thought visible after requesting their Signal chats — JeffLadish · 2026-10-23
- Cybersecurity is now a token-attrition war of red vs blue agent swarms — AccBalanced · 2026-10-23
- Abliterated GLM-5.3 sells for $10 as "world-class penetration tester", fueling vulnerability surge — deedydas · 2026-10-23
- Allie Miller's 3-step personal cybersecurity playbook for the AI attack era — alliekmiller · 2026-10-23
- Replit patches infrastructure and blocks exploits in response to widespread third-party vulnerabilities — amasad · 2026-10-23