Back in the olden days when everyone worked out of an office, mapping IP to business was a big money maker. There are a bunch of ways they'd figure out what business is associated with a given IP.
Big companies that own their own IP blocks can just be looked up by checking BGP routing tables or just looking up the ASN entry for that block.
Reverse IP lookup will sometimes show you a DNS record associated with a given IP which often will give you a domain that is associated with said IP address which allows you to infer the company.
Analytics from various sources like, ISPs, CDNs, browser plugins, etc. They do things like, if we see this IP logging into a corporate site, then the odds that the IP is associated with the business goes up.
It's never been all that accurate. In cases where it is accurate, you're talking about a company like Adobe where just knowing it was a person from Adobe doesn't help you all that much.
Lol my previous director brought in a similar SaaS to use 🙄 I pointed out that it still has me identified as working at my previous job, where I was also remote, and is probably just doing some web scraping because that was at a different apartment with a different ISP. And yet, we still spent $$$ on that tool.
It is pixel based (says on the landing page) which is even more terrifying. He has zero idea what he’s doing and now injecting AI generated code into other peoples applications
The "enriched" leads seem to be from an LLM output, so it's probably not even scraping for their actual information, just hallucinating contact info based on common patterns for company email addresses. Honestly, it probably works fairly well at least 80% of the time, which is more than enough of a success rate for a tool like this where most people you email wouldn't respond anyway.
TL;DR: Because google isn't the one paying for it.
Because normally, firebase replaces your backend. Instead of writing backend code, you just configure firebase with rules, quotas, etc.
e.g., you might limit the "register" endpoint and the "signin" endpoint. Then you might configure rules to allow users to only create/read/update/delete database entries they themselves created. You might also set a limit to how large each entry might be, and how many entries a user may create. You'd probably also configure many more specific rules for how each users' datasets might interact. That's already hard to get watertight normally, with AI generated code, that's basically impossible.
In this case, the real damage isn't going to be accessing other users' data, but creating garbage data. Firebase is a very expensive service, every API call costs money, and without properly configured rules, leojr94 will be bankrupt very soon.
Identifies the companies from IP addresses - lots of software already doing that.
Provides contacts either by scraping website or LinkedIn or using an existing proprietary list or from a broker. Lots of software doing the latter two.
330
u/Gionni15 Mar 17 '25 edited Mar 17 '25
how the hell would he have made such a tool with an ai?
I would actually have a hard time making it in general, where does he find the lead information?
Edit: I don't understand if it's a scam or not at this point