Just finished reading this upsetting story at the BBC today about scam groups that are using terminally ill children to raise money then stiffing the parents of the funds. The story says the scam was tied to an org called Chance Letikva (chanceletikva.org) but stops short of figuring out who's responsible.

https://www.bbc.com/news/articles/ckgz318y8elo

I spent about 10 seconds looking at the passive DNS for this domain, and found some interesting leads. Passive DNS shows it references the email address davidm@yeahdim.co.il. That email address is tied to multiple website registrations for a person in Israel by the name of David Margaliot, and also Shoshana Margaliot.

A search on this name in Domaintools finds the name David Margaliot tied to at least 25 domains, including ezri.org.il, which is a very odd site that features a huge image of a young child who is apparently in the hospital holding a gift wrapped box with a teddy bear. The site asks for donations but has a strange mission statement: Ezri Association promotes life-saving innovation through a surveillance drone project for emergency response teams, the establishment of an international medical knowledge database, along with other technological initiatives".

I'll probably continue the rest of this in a follow-up story.