A Peek Inside the Current State of BitCoin Exchanges

Dear blog readers,

In this post I'll provide some actionable intelligence on the current state of active BitCoin Exchanges landscape with the idea to assist everyone on their way to properly attribute a fraudulent or malicious transaction or to dig a little bit deeper inside the infrastructure and financial infrastructure behind these BitCoin Exchanges.

Sample BitCoin Exchanges URLs:

hxxp://bisq.network
hxxp://blockdx.net
hxxp://boltz.exchange
hxxp://changenow.io
hxxp://coinswap.click
hxxp://crp.is
hxxp://exch.cx
hxxp://exchanger.infinity.taxi
hxxp://exolix.com
hxxp://fixedfloat.com
hxxp://godex.io
hxxp://hodlhodl.com
hxxp://letsexchange.io
hxxp://localmonero.co
hxxp://majesticbank.at
hxxp://mandala.exchange
hxxp://peachbitcoin.com
hxxp://sideshift.ai
hxxp://stealthex.io
hxxp://tradeogre.com
hxxp://unstoppableswap.net
hxxp://vexl.it
hxxp://bitswitch.io
hxxp://wizardswap.io
hxxp://xchange.me

Sample known responding IPs:

172.67.172.108
91.195.240.19
51.68.37.66
188.165.1.80
104.21.80.1
104.21.64.1
36.86.63.182
172.67.69.184
188.114.99.236
188.114.96.18
185.178.208.163
3.24.66.78
188.114.98.229
104.26.7.14
188.114.99.229
103.154.123.132
172.67.68.152
188.114.98.224
182.23.79.195
203.119.13.75
203.119.13.76
186.2.163.71
91.215.41.54
176.9.158.211
188.114.98.128
146.112.61.107
188.114.99.192
162.241.216.218
128.242.250.148
208.101.21.43
202.160.130.52
202.160.128.210
146.112.61.106
89.41.182.24
89.41.182.99
193.168.141.179
193.168.141.55
72.52.178.23
13.248.148.254
104.21.58.171
206.189.58.26
167.99.246.105
54.66.176.79
157.245.84.7
188.114.97.4
188.114.96.4
188.114.97.12
95.214.53.250
159.89.122.145
104.21.60.147
172.67.197.200
172.64.86.149
15.235.75.245
104.18.45.100
188.114.97.1
104.31.82.18
192.29.39.98
107.154.236.60
107.154.141.60
172.67.70.100
192.29.39.48
65.8.227.25
13.225.229.65
18.160.144.91
13.35.245.111
13.249.64.117
172.217.12.179
172.217.16.179
198.18.1.141
34.196.254.27
92.242.140.6
185.66.143.187
188.114.96.6
188.114.97.10
188.114.96.14
104.31.83.21
104.21.34.110
188.114.97.14
192.186.250.199
188.114.97.11
18.102.16.191
13.50.141.112
176.9.29.194
104.26.1.187
34.234.52.18
65.0.79.182
173.236.182.137
104.244.46.93
198.18.1.164
108.160.165.211
52.25.92.0
86.35.3.193
50.63.202.31
104.21.112.1
184.168.221.26
50.63.202.19
172.67.134.215
255.255.255.255
23.217.138.108
149.202.88.23
184.168.221.42
45.60.153.115
15.165.119.196
188.114.96.0
15.164.135.176
18.173.233.64
104.26.13.101
188.114.97.20
108.160.170.41
104.21.81.250
188.114.97.6
188.114.97.3
104.21.32.1
172.67.128.64
104.26.7.183
184.168.221.44
172.64.80.1
23.202.231.167

A Peek Inside the Current State of BitCoin Mixers

Dear blog readers,

In this post I'll provide some actionable intelligence on the current state of active BitCoin Mixers landscape with the idea to assist everyone on their way to properly attribute a fraudulent or malicious transaction or to dig a little bit deeper inside the infrastructure and financial infrastructure behind these BitCoin Mixers.

Sample known BitCoin Mixer URLs:

hxxp://anonymixer.com
hxxp://bitmixer.online
hxxp://chipmixer.com
hxxp://coinomize.biz
hxxp://coinomize.co
hxxp://coinomize.is
hxxp://cryptomixer.io
hxxp://gingerwallet.io
hxxp://jambler.io
hxxp://jokermix.to
hxxp://medusamixer.io
hxxp://blindmixer.com
hxxp://mixer.money
hxxp://mixerdream.com
hxxp://mixero.io
hxxp://mixtum.io
hxxp://mixtura.money
hxxp://mixy.money
hxxp://puremixer.io
hxxp://sparrowwallet.com
hxxp://swamplizard.io
hxxp://tengricrypto.com
hxxp://thormixer.io
hxxp://unijoin.io
hxxp://webmixer.io
hxxp://whir.to

Sample known responding IPs:
104.21.14.15
172.67.133.191
136.228.192.103
172.64.101.28
172.64.98.33
104.21.36.129
172.67.158.129
188.114.97.3
188.114.97.1
172.67.142.24
185.205.69.10
135.181.110.78
93.95.231.89
34.102.136.180
172.67.188.123
104.26.3.240
198.177.120.27
104.21.58.174
188.114.99.229
188.114.98.224
104.21.79.112
34.102.155.139
216.246.46.117
172.67.170.136
172.67.172.23
108.167.189.28
162.241.61.115
108.167.189.61
192.185.4.130
188.114.97.0
172.67.180.202
188.114.96.4
104.21.34.115
172.67.160.123
46.101.27.21
108.160.143.236
188.114.96.3
172.67.170.175
104.21.63.126
65.109.166.143
103.224.212.100
93.95.231.80
199.59.243.226
37.120.206.181
172.64.174.24
152.89.162.34
188.114.96.0
46.17.96.4
103.224.212.210
186.2.163.238
101.99.91.215
172.67.154.113
104.21.69.169
185.178.208.78
172.67.210.143
 

188.114.98.229
188.114.97.4
188.114.96.14
172.67.158.73
188.114.97.2
172.67.70.29
188.114.97.14
104.26.5.134
186.2.163.228
23.202.231.167
104.21.96.1
198.54.117.210
188.114.97.22
198.54.117.200
188.114.97.7
149.28.138.23
45.180.20.12
185.86.149.239
218.93.250.18
185.178.208.139
172.67.191.198
188.114.99.224
104.21.43.207
46.28.207.19
104.26.3.196
13.248.151.237
104.21.36.95
172.64.80.1
36.86.63.182
172.64.165.7
23.217.138.112
 

185.178.208.159
172.67.206.39
104.21.16.160
172.67.154.213
104.21.6.88
5.61.48.183
172.67.154.211
104.239.213.7
45.76.91.219
46.101.124.25
23.195.69.112
104.21.6.90
164.92.229.238

Stay tuned.

Profiling the iSpoof Cybercrime Enterprise

Dear blog readers,

In this post I decided to take a look at the hxxp://ispoof.cc cybercrime enterprise in terms of providing actionable intelligence on its Internet connected infrastructure.

Sample known responding IPs:

116.203.61.96
104.26.14.153
172.67.75.247
104.26.15.153
104.21.60.205
172.67.201.73
172.67.150.241
104.21.0.121
104.21.23.23
172.67.208.110
172.64.205.7
172.64.204.7

Related domains known to have been parked at the same IP (116.203.61.96):

hxxp://ivshare4.xyz
hxxp://spoofsystem.co.uk
hxxp://civi-bi.com
hxxp://ispoof.cc

Sample screenshots:

 

Stay tuned.

Profiling a Currently Active Portfolio of High-Profile Cybercriminal Jabber and XMPP Accounts Including Email Address Accounts - Part Six

Dear blog readers,

The following is a recently data mined compilation of cybercrime-friendly XMPP/Jabber account IDs which I'm sharing with the idea to assist everyone on their cyber threat actor attribution efforts and to assist U.S Law Enforcement on its way to properly track down monitor and prosecute the individuals behind these campaigns.

Sample cybercrime-friendly XMPP/Jabber IDs:

 

000101@xmpp.jp
100100@xmpp.ru
112244@xmpp.jp
1helsenki@xmpp.jp
1nsider@xmpp.jp
250@xmpp.jp
2kjkszpjpgp@xmpp.jp
5entagon@xmpp.jp
7269@xmpp.jp
7811811@xmpp.jp
8898089@xmpp.ru
abeliks777@xmpp.jp
academik@xmpp.jp
accssell@xmpp.jp
admin_hide@xmpp.jp
afandro1994@xmpp.jp
afandro@xmpp.jp
alexcare@xmpp.jp
alexgun@xmpp.jp
almaz_00@xmpp.jp
alonart@xmpp.jp
amazon6876@xmpp.jp
amigo_trade@xmpp.jp
andrey_psd@xmpp.jp
aner94@xmpp.jp
antoniosalamandre@xmpp.jp
anubisddos@xmpp.jp
apollo_hack@xmpp.jp
aress11@xmpp.jp
armcop@xmpp.jp
askoldd@xmpp.jp
assedo@xmpp.jp
aus_8@xmpp.jp
autorobotrus@xmpp.pro
ayronic@xmpp.jp
azalis@xmpp.jp
azinj@xmpp.ru
backtobizz@xmpp.jp
badwood@xmpp.jp
bankir7@xmpp.ru
barf1488@xmpp.jp
baron88@xmpp.jp
bars228@xmpp.jp
basegrotz@xmpp.jp
beatrate@xmpp.jp
bestdump@xmpp.jp
bezname@xmpp.jp
bigbig@xmpp.jp
bignig@xmpp.jp
billing@xmpp.jp
billsmith63@xmpp.jp
bizsupport@xmpp.is
blackbatman64@xmpp.international
blackguide@xmpp.jp
blaknight@xmpp.zone
bob-akk@xmpp.jp
bodymody@xmpp.jp
brabus_call_fr@xmpp.su
brightmean@xmpp.jp
bro22@xmpp.jp
budun@xmpp.jp
burnerry@xmpp.jp
businesscenter@xmpp.jp
byah@xmpp.jp
cailmud@xmpp.jp
cardercash@xmpp.jp
carderz009@xmpp.jp
carterloki@xmpp.jp
cconscience@xmpp.jp
cheapcard@xmpp.jp
chefbandit@xmpp.jp
christopherrydell-1963@xmpp.jp
christopherrydell@xmpp.jp
chrono359@xmpp.jp
codedeath@xmpp.jp
coder_wan@xmpp.jp
compaser@xmpp.jp
crazybear@xmpp.jp
crd24@xmpp.jp
crypt-info@xmpp.jp
d0205toff@xmpp.jp
daenerisss@xmpp.jp
dak@xmpp.jp
damir7@xmpp.jp
danielray968@xmpp.org.uk
dankmeme@xmpp.is
dankmeme@xmpp.jp
darkphone-en@xmpp.jp
darksidex@xmpp.jp
darkuser@xmpp.ru
darkweb101@xmpp.jp
db4sale@xmpp.is
deaddwarf@xmpp.jp
debetatm@xmpp.jp
dedic_admin@xmpp.jp
deepozit@xmpp.jp
deqb@xmpp.jp
desura@xmpp.jp
detalist@xmpp.jp
diego222@xmpp.jp
dimancheck71@xmpp.jp
dimas585@xmpp.jp
dimentofax@xmpp.jp
donnydarko@xmpp.jp
dorkyhot@xmpp.jp
dpassmrk@xmpp.jp
dr.haizenberg@xmpp.jp
dragsec@xmpp.jp
dumpsdealer@xmpp.jp
dumpspw@xmpp.jp
ebomb@xmpp.jp
elektrik@xmpp.ru
eleos-tech@xmpp.jp
eleos@xmpp.jp
emigrant@xmpp.jp
ericsson@xmpp.jp
error_crw@xmpp.jp
esc55555@xmpp.jp
escobarthebest@xmpp.jp
euphoretik@xmpp.jp
euroeur@xmpp.pro
ex3ct@xmpp.jp
exploitone@xmpp.jp
exploitzeze@xmpp.jp
expol14@xmpp.jp
fabio213@xmpp.jp
fantomoooo@xmpp.jp
fbi_call@xmpp.jp
filichka@xmpp.jp
fishscale1337@xmpp.jp
flex203@xmpp.jp
flindroid@xmpp.jp
flud_tel@xmpp.jp
fn_02@xmpp.sh
fraerok02123@xmpp.jp
fraktal@xmpp.jp
freakzzz@xmpp.jp
freshbase@xmpp.jp
frod@xmpp.jp
frtz.brs@xmpp.jp
fullzinfo@xmpp.jp
gansel@xmpp.jp
gari-garrison@xmpp.jp
gaster@xmpp.jp
gelo@xmpp.ru
getdownman@xmpp.jp
globusbiz@xmpp.jp
goldbrokers@xmpp.jp
gooby333@xmpp.jp
google_adwords@xmpp.jp
gordonblek1@xmpp.jp
grigory1887@xmpp.jp
grims-pik@xmpp.jp
gtapbri59@xmpp.jp
hidden.root@xmpp.jp
hola1318@xmpp.jp
i555555@xmpp.jp
iamseptember@xmpp.jp
ico@xmpp.ru
id036@xmpp.jp
ipronax@xmpp.jp
isaprod@xmpp.jp
jabberigla@xmpp.jp
jaslmok@xmpp.ru
jkr1922@xmpp.cz
johnsmeet@xmpp.jp
johnsmeet@xmpp.ru
johnydepp@xmpp.jp
jolly_support@xmpp.is
jonnipaperoni@xmpp.jp
jonyik@xmpp.jp
k0tik@xmpp.jp
k228@xmpp.jp
kampret45@xmpp.jp
kapa@xmpp.jp
karlmax111@xmpp.jp
kartanal@xmpp.jp
kayyot@xmpp.jp
kemperok@xmpp.jp
khan_pc@xmpp.jp
kirik91@xmpp.jp
kiryushafucker@xmpp.jp
kisa001@xmpp.jp
kissa001@xmpp.jp
klime222@xmpp.jp
komrakoff@xmpp.jp
korefanch@xmpp.jp
kot_@xmpp.jp
kristinadunn@xmpp.ru
kwonliem20@xmpp.jp
lafontain3@xmpp.jp
lanbin@xmpp.jp
leninrdp@xmpp.jp
leobase@xmpp.jp
litecoin@xmpp.jp
litil@xmpp.jp
littlemancatch@xmpp.ru
liwong@xmpp.jp
lucifer619@xmpp.jp
lynatik_@xmpp.jp
m0ckingbird@xmpp.jp
macfree@xmpp.pro
machinegun707@xmpp.jp
mafiacards@xmpp.jp
makaka@xmpp.jp
maltego_x@xmpp.jp
manyhoney@xmpp.jp
martinelli@xmpp.jp
maslach@xmpp.jp
mayi@xmpp.jp
meestup@xmpp.jp
megiddo@xmpp.jp
mikeee@xmpp.jp
mish1t@xmpp.jp
mister.bender@xmpp.jp
mitpirates@xmpp.jp
moneymanflacko@xmpp.jp
moneyteam@xmpp.ru
mountaindew@xmpp.jp
mozyjp@xmpp.jp
mr.boss80@xmpp.jp
mr.heisenberg@xmpp.ru
mrmiyagi@xmpp.jp
mrmycroft@xmpp.jp
mulamoose@xmpp.jp
mxdor12@xmpp.jp
myspamway@xmpp.jp
n3utrino@xmpp.jp
n7269@xmpp.jp
n@xmpp.jp
nalex131@xmpp.jp
naomicc@xmpp.jp
ncheapcard@xmpp.jp
nelita1@xmpp.jp
nhola1318@xmpp.jp
nicksome-222@xmpp.jp
nkasta@xmpp.jp
nmafiacards@xmpp.jp
nmakaka@xmpp.jp
nmulamoose@xmpp.jp
nocen@xmpp.jp
nosok@xmpp.jp
npema@xmpp.jp
nqings1@xmpp.jp
nrosli@xmpp.jp
nsetekh@xmpp.jp
nwildaccess@xmpp-hosting.de
nzam12maz@xmpp.jp
ocaro@xmpp.jp
onemoment1@xmpp.jp
ord7nar7a@xmpp.jp
p.ptsm@xmpp.ru
panama@xmpp.jp
pangurban@xmpp.jp
panzer90@xmpp.jp
passpor2@xmpp.jp
pema@xmpp.jp
phgod@xmpp.jp
pkfzz@xmpp.jp
playercc@xmpp.jp
poctd@xmpp.jp
podfartom@xmpp.jp
point2pin@xmpp.jp
polbitnik@xmpp.jp
pornobroo@xmpp.jp
pren@xmpp.jp
prof@xmpp.jp
prohit@xmpp.jp
pss100@xmpp.jp
psyho228@xmpp.jp
purecure123@xmpp.jp
qings1@xmpp.jp
qolls@xmpp.jp
qp-online@xmpp.jp
rabidthebeast@xmpp.jp
ratwhite@xmpp.jp
rchopishi@xmpp.jp
rdp2022@xmpp.jp
realshadowjoker@xmpp.jp
redpro@xmpp.jp
redxens@xmpp.jp
reichloyal@xmpp.jp
rickscan@xmpp.jp
riperskonger@xmpp.jp
rq228@xmpp.jp
rrsport@xmpp.jp
russian-master@xmpp.jp
s0i1s0y0p0h0o1s@xmpp.jp
s151719@xmpp.jp
sadist@xmpp.ru
samorage@xmpp.pro
samraid777077@xmpp.jp
samuelj@xmpp.jp
samuraiddos@xmpp.jp
sanitar_lesa@xmpp.jp
saturn.ge@xmpp.jp
scanmaster@xmpp.jp
scanomen@xmpp.jp
scans@xmpp.jp
scorp@xmpp.jp
sec777@xmpp.jp
securedreputation@xmpp.jp
seimen@xmpp.ru
sellerkey32@xmpp.jp
sema1834@xmpp.jp
sersh@xmpp.ru
set781@xmpp.jp
setekh@xmpp.jp
shadowcrdng@xmpp.jp
shangala1@xmpp.jp
shankly@xmpp.jp
shum1090@xmpp.jp
shyma@xmpp.jp
simaxyz@xmpp.jp
simonukr@xmpp.jp
sizi1008@xmpp.jp
skafa@xmpp.jp
skaner@xmpp.jp
skaner@xmpp.ru
sks@xmpp.jp
skywallet@xmpp.jp
sms4you@xmpp.jp
smsify@xmpp.jp
smsochka@xmpp.jp
sniffedpcs@xmpp.jp
snoopcallto@xmpp.jp
soft-rdp@xmpp.jp
sokratis@xmpp.jp
spiker@xmpp.jp
spoofi@xmpp.jp
sport1k@xmpp.jp
sportikq@xmpp.jp
ssn150cc@xmpp.jp
st@xmpp.jp
stariymen@xmpp.jp
stenfordm@xmpp.jp
stluis@protonxmpp.ch
suicidecorp@xmpp.jp
sunshinestrike@xmpp.jp
sup_krass@xmpp.is
supptrop@xmpp.jp
suren_assaa77@xmpp.jp
sweeter@xmpp.jp
taichao88@xmpp.jp
taman@xmpp.jp
tania113@xmpp.jp
tbilling@xmpp.jp
tdragsec@xmpp.jp
tenb_admin@xmpp.jp
the_bro@xmpp.jp
the_creator@xmpp.jp
thrall@xmpp.jp
tommy697@xmpp.jp
tonicnk@xmpp.ru
tonnysapranno@xmpp.jp
tpolem@xmpp.jp
tramp_66@xmpp.jp
tranzit00135@xmpp.jp
trapecias@xmpp.jp
trofim75@xmpp.jp
trufae@xmpp.is
truth.truth007@xmpp.jp
tsmsify@xmpp.jp
ttramp_66@xmpp.jp
twostar@xmpp.ru
tzylofone@xmpp.jp
u00a0112244@xmpp.jp
u00a0andrey_psd@xmpp.jp
u00a0blackwalletone@xmpp.jp
u00a0crypt-info@xmpp.jp
u00a0debetatm@xmpp.jp
u00a0eurodocen@xmpp.jp
u00a0jabberigla@xmpp.jp
u00a0redxens@xmpp.jp
u00a0sokratis@xmpp.jp
u00a0wixresidents@xmpp.jp
u00a0xasper@xmpp.jp
u0430@xmpp.ru
u0435pic@xmpp.jp
u043cwp@xmpp.ru
ukasher@xmpp.jp
ukasher_support@xmpp.jp
up1@xmpp.jp
usastuff@xmpp.jp
userxss@xmpp.jp
wallet.dat@xmpp.jp
webprofile@xmpp.jp
western@xmpp.jp
wildaccess@xmpp-hosting.de
william600@xmpp.jp
witing@xmpp.ru
wixresidents@xmpp.jp
x1s@xmpp.jp
xaocplushka@xmpp.jp
xemicif@xmpp.jp
xmpp%3aspidehost@exploit.im
xmppsoft@xmpp.dk
xxx08@xmpp.jp
yatut1@xmpp.jp
yingon@xmpp.jp
z_donny_z@xmpp.jp
zam12maz@xmpp.jp
zao777@xmpp.jp
zloi-bober@xmpp.jp
zylofone@xmpp.jp
000111@zloy.im
0cytron@exploit.im
0nyx@exploit.im
0x10c@exploit.im
1.20.18@exploit.im
100btc-exchange@exploit.im
10110101@exploit.im
1047@exploit.im
112233@exploit.im
112244@zloy.im
1515151515@exploit.im
1helsenki@exploit.im
217217@exploit.im
217217@pandion.im
24@exploit.im
250@zloy.im
29october@exploit.im
29october@zloy.im
340065@exploit.im
4.chieftain13@exploit.im
489452@jabb.im
4ekist@exploit.im
588771@zloy.im
635chs@exploit.im
7117777117@exploit.im
777555@exploit.im
7crymore@exploit.im
991090@exploit.im
_sniper_@neko.im
a.immler@t-online.de
a.m.impianti@aruba.it
a@pandion.im
accord5k@exploit.im
actor@exploit.im
alanyj5@froyo.imap.mineweb.in
alenskan@exploit.im
alexandraeh5@froyo.imap.mineweb.in
alexandria231@exploit.im
alexgun7@exploit.im
alexwork@exploit.im
alone777@exploit.im
alphalocker@exploit.im
amigotrade@exploit.im
an0nim@exploit.im
anatole_che@exploit.im
andrade.importado@bol.com.br
andre555@jabb.im
andrea.imel@libero.it
andreypsd1@jabb.im
android88@exploit.im
androidman@exploit.im
anotonbal@exploit.im
antonbal@exploit.im
anubi@exploit.im
apexglide@exploit.im
apmucm1337@exploit.im
appa@exploit.im
appo@exploit.im
aqualizer@exploit.im
archer0@exploit.im
artale.imp@ngi.it
assolibro.imperia@katamail.com
atani@exploit.im
atmcorp@jabb.im
aura@exploit.im
aw_support@exploit.im
az.imil-1996@list.ru
backhere@jabb.im
baghor23@omerta.im
baki@exploit.im
banality@creep.im
banalitybiz@exploit.im
bank-shop.eu@exploit.im
bankb0ss@blah.im
banki@darknet.im
bankingstore@jabb.im
barbaddos@exploit.im
barbara.imrie@tdsb.on.ca
barmaleilucky@exploit.im
baron88@exploit.im
barry.imber@ns.sympatico.ca
bars228@exploit.im
bastard@exploit.im
battistoni.impianti@libero.it
bcca@exploit.im
bebest@exploit.im
benbin77@zloy.im
benibn77@exploit.im
bestdedic@exploit.im
bestrdpshop@pandion.im
biemme.impianti@libero.it
biffi.impianti@libero.it
big_tony@exploit.im
biggie-banks@exploit.im
bigsellbro@exploit.im
bita.imam@alumni.ubc.ca
bitcoiner@exploit.im
bithop@pandion.im
bithunter@jab.im
blaazing@exploit.im
black888@exploit.im
blackrecruiter@exploit.im
bluecalm_@exploit.im
bluetooth@exploit.im
bobbi4@exploit.im
bober@zloy.im
boc_man@exploit.im
boltamigo@exploit.im
bonjure@exploit.im
boosk@exploit.im
boqas@exploit.im
bossss@exploit.im
br0@exploit.im
brabus_call@exploit.im
brandle@exploit.im
breakingbaddos@zloy.im
brokerman@exploit.im
bts1@exploit.im
bugsbunny@exploit.im
bushidokeys@exploit.im
business2018@exploit.im
buysell@exploit.im
bzman@exploit.im
callforall@exploit.im
callmaker@exploit.im
callmelady@exploit.im
carat@exploit.im
carder@exploit.im
cardmafia@exploit.im
cardmaster@zloy.im
carouselexchange@exploit.im
carteldesanta@jabb.im
carter@exploit.im
cash.dirt@exploit.im
cash1716@exploit.im
cashbank@exploit.im
cashhunter666@exploit.im
cdkeymaster@exploit.im
changelog@exploit.im
cheapflood2@exploit.im
chekon@blabber.im
chrono359@exploit.im
cityplan@zloy.im
classic999@zloy.im
cleanrdps@exploit.im
clone@exploit.im
codeprasya@exploit.im
corayh7@froyo.imap.mineweb.in
corpmail@exploit.im
crd2@exploit.im
criscris@exploit.im
crustyf@jabb.im
crypt4you@exploit.im
cryptoboss@yax.im
cryptohunter@exploit.im
cs.imagine@inbox.ru
cstn@exploit.im
cy74@exploit.im
cyber-x@exploit.im
cybernato@exploit.im
cz.imre@t-online.hu
czabai.imre@indamail.hu
d.imran@gmx.de
d.reeder@ballacottier.sch.im
d.schuldes.immobilien@t-online.de
d1zz@exploit.im
d4u@exploit.im
d@ejl.im
dadi@zloy.im
dandjcocker@lon.imag.net
dark-master@exploit.im
ddos.mafia@exploit.im
dedicatedbrute@exploit.im
den@exploit.im
denis2363@exploit.im
derden8866@exploit.im
desertegl@exploit.im
dew.impex@gmx.de
dewdew@pandion.im
digital.image@msa.hinet.net
dilkino@exploit.im
dimancheck71@xmpp.jp
dimas585@xmpp.jp
dimentofax@xmpp.jp
dizainer@exploit.im
dnk@exploit.im
docc@exploit.im
docer@exploit.im
docer@zloy.im
dokini@exploit.im
dollyjk4@froyo.imap.mineweb.in
dotcreww@creep.im
dr.gaspar@jabb.im
dr.predator@exploit.im
drdastan@exploit.im
dreamk0@exploit.im
druzh_ba@exploit.im
ds.support@exploit.im
dtg_support@exploit.im
dukan@zloy.im
dunhill11@exploit.im
dwade@armada.im
dwade@exploit.im
ebay_by_gunz@exploit.im
ego@creep.im
egorea1999@exploit.im
elli.immel@web.de
elprofessor@jabb.im
emegrante@exploit.im
emilio666@zloy.im
encoder@exploit.im
eorigemo@jabb.im
epson@exploit.im
espanol@yax.im
etc2010@exploit.im
etcshop_docs_bot@exploit.im
exchangemoney@exploit.im
exp95@exploit.im
exploiter666@jabb.im
extremal@zloy.im
fake_docs@exploit.im
faraon72@zloy.im
fargo1231@yax.im
farnell@exploit.im
farsh.biz@exploit.im
fastmoney@zloy.im
fbi_call2@exploit.im
fbsupport@exploit.im
federalket@exploit.im
federica.improta.0@aliceposta.it
feikdok77@zloy.im
fernanda.imperiale@cheapnet.it
ffaaff@exploit.im
filipina.r00t@exploit.im
findlogs@exploit.im
fireball@exploit.im
fitotop@jodo.im
flakon@exploit.im
folsec@exploit.im
forceful@exploit.im
forcryptgroup@exploit.im
foto-radikal@exploit.im
frank_001@exploit.im
frankdoc@exploit.im
franklinwoods@exploit.im
fraudcat@kode.im
fraufrau@exploit.im
frenchplug@exploit.im
freshpc@exploit.im
fruehstueck.im.bett@gmx.de
fu1ckingpolice@exploit.im
fuall@exploit.im
full_bg@exploit.im
fullki-palki@exploit.im
fulloknet@exploit.im
fullz_informer@zloy.im
fullzinfo@exploit.im
funsicko@exploit.im
galeym69@froyo.imap.mineweb.in
gambrius.impro@web.de
generation_p@zloy.im
geohot@chatme.im
ger4ld@exploit.im
germ@exploit.im
getapk@exploit.im
ghan@blah.im
ghost666@exploit.im
godany.imre@indamail.hu
goldencash@exploit.im
gonor@exploit.im
gooold777@exploit.im
gr0m@jabb.im
greenlight-shop@exploit.im
greenmanalishi@exploit.im
grims-pik@xmpp.jp
grizlii@exploit.im
guccigod@zloy.im
guido.im.netz@gmx.de
gunnar@exploit.im
gurubrute@exploit.im
h0tsh0t@jodo.im
hacknet@exploit.im
hamsun@exploit.im
happyboss24@exploit.im
harangozo.imi324@citromail.hu
harmankarton@exploit.im
hd_pl4stic@exploit.im
hgscholz.imc@t-online.de
hh1@exploit.im
highdpi@exploit.im
hiton@zloy.im
hookadom@exploit.im
htcp@exploit.im
humer1@zloy.im
iamkas@exploit.im
ibersys@exploit.im
ideal_docs@exploit.im
ideal_shop@exploit.im
igara@exploit.im
iingenious@exploit.im
ime.impianti@email.it
informer@zloy.im
inkognitoxxx@exploit.im
inseption@exploit.im
inserttx@zloy.im
install_downloads@exploit.im
interprice@exploit.im
islimm@exploit.im
issuance-office@pandion.im
jabme@exploit.im
jabuer@jabb.im
jakegrin@jab.im
jana.impe@t-online.de
japonec@exploit.im
jarkko.immonen@inbox.com
jb-fuall@exploit.im
jellyhello@blah.im
jeremy.clarkson@exploit.im
jesusme@jabb.im
jexgray@exploit.im
jjcc@jabb.im
joeblack@zloy.im
joedasin@exploit.im
johnnycash@zloy.im
jonny85@exploit.im
jonnyd123@jabb.im
jonnyssh@exploit.im
jonxl1@froyo.imap.mineweb.in
jooboos@exploit.im
josettechiret.immobettin@inbox.ru
jowhite@exploit.im
jpw@creep.im
julia.pcret@exploit.im
julien.imbeault@globetrotter.net
jum@exploit.im
jumboz@exploit.im
jusioner@exploit.im
jusk8dsa@exploit.im
kader.im@gmx.de
kadkad@exploit.im
kamilfo@exploit.im
kanjos@exploit.im
kartonchik@exploit.im
kassa@zloy.im
kathy.imber@att.net
khan_teamwork@exploit.im
khan_wallets@exploit.im
khrom@zloy.im
kiiper@exploit.im
kingofhubest@exploit.im
kinoshka@zloy.im
klime222@xmpp.jp
kola@zloy.im
komrakoff_support@exploit.im
kondorfor@jabb.im
korombo@exploit.im
kubuntu@exploit.im
kuzmabro@exploit.im
kwsmith@cwk.imag.net
kylekatarn@exploit.im
lambreta@exploit.im
las.impianti@hotmail.it
lemming@exploit.im
leon_admin@jabb.im
leonchik@exploit.im
lildozhd@jabber.otr.im
loads_1@exploit.im
logfactory@exploit.im
logs.fsb@exploit.im
lol2000@exploit.im
loose@exploit.im
lucifer6@exploit.im
lukaspalerno@pandion.im
luzzz0n@jabb.im
luzzzz0n@jabb.im
m.im@citromail.hu
macfree@exploit.im
magicbot@exploit.im
majormanager@exploit.im
malfey@exploit.im
mamohtjr@pandion.im
marc@exploit.im
markbuygifts@exploit.im
markopolo1234@jabb.im
marrypotters@exploit.im
massimo.imperatore@ymail.com
massimo@jabb.im
mazafaka1983@exploit.im
mefodiy@exploit.im
megasss@exploit.im
mehreen.imtiaz@utoronto.ca
melleybet@darknet.im
melycron@exploit.im
menro@exploit.im
mercedes-f@exploit.im
mercedes@jabb.im
merq@zloy.im
mfi.imschloss@t-online.de
migbank@exploit.im
mike_shinoda@exploit.im
millenium_team@exploit.im
minstroelf@jabb.im
mirex@pandion.im
mitty@jabb.im
mixermax@zloy.im
mk1@zloy.im
ml11144@pandion.im
mnimo@pandion.im
mnogo_sms@exploit.im
molly666@zloy.im
monah@jabb.im
monetization2015@exploit.im
moneyman25@blabber.im
mongolik@exploit.im
monkeysocks@exploit.im
monster@darknet.im
moros@exploit.im
mr.abu@exploit.im
mr.mr@exploit.im
mr_loki@exploit.im
mrfargo@exploit.im
mrfriday@exploit.im
ms.alliono4ka@exploit.im
mskextazi@exploit.im
nacabbro@exploit.im
nacho@jabb.im
namigotrade@exploit.im
nan0nim@exploit.im
nandersen@pandion.im
napollon_555@exploit.im
napollon_555@pandion.im
nboc_man@exploit.im
ncharliechaplin@exploit.im
ndispatcher@exploit.im
neboltay@exploit.im
nekstt@exploit.im
nelita@exploit.im
netc2010@exploit.im
netcshop_docs_bot@exploit.im
netreputation@exploit.im
newtontask@exploit.im
ngonor@exploit.im
nicholasdd16@froyo.imap.mineweb.in
nif.imp.exp@sympatico.ca
nightmoney@exploit.im
niore@exploit.im
njeremy.clarkson@exploit.im
njusk8dsa@exploit.im
nkrots@exploit.im
nodeyakare@exploit.im
noneflone@jabb.im
nop@exploit.im
notredame@exploit.im
noxpreeuu@exploit.im
npokerkid@exploit.im
nprocrd@exploit.im
nsetekh@exploit.im
nsimona@zloy.im
nslimhat@exploit.im
nswipertracks@exploit.im
numerik53@jabb.im
numizmatist.dm@zloy.im
nz.alex@exploit.im
nzig-zag@exploit.im
obnalchik@exploit.im
octopusdos@exploit.im
olle.imnet@arcor.de
on.hackpro@exploit.im
oneflone@jabb.im
oracul@exploit.im
ordi7@yax.im
ostino@jabb.im
palocz.imre@t-online.hu
pariahchromebotnet@jabb.im
passero@exploit.im
passpor2@chatme.im
passpor2@exploit.im
patrikst@exploit.im
patriotik@zloy.im
paypal.com@exploit.im
paypalforall@exploit.im
penelopacruz@exploit.im
pengen@darknet.im
pesso@exploit.im
peterga7@froyo.imap.mineweb.in
phant0m1@exploit.im
phgod@jabb.im
phpjs@exploit.im
pikachoo@exploit.im
piro1@creep.im
platon555@exploit.im
point2013@exploit.im
point2pin@exploit.im
pokemona@exploit.im
poker1@chatme.im
pokercheck@pandion.im
poligraffio@exploit.im
poloralph@exploit.im
popka1@exploit.im
popka@exploit.im
posarm@exploit.im
powerfullddos@exploit.im
ppmaster@exploit.im
pptuta@exploit.im
prahlad_makan@mxit.im
procrd@exploit.im
promtorg@creep.im
ptsm-scans@exploit.im
pumpwaterreborn@exploit.im
pussycall@exploit.im
pustychka@exploit.im
qasix@exploit.im
qings3@exploit.im
qwb@exploit.im
r.e.m@zloy.im
r.imbrogno@sympatico.ca
r3kruter@exploit.im
rake00@creep.im
ramsus-call@exploit.im
rccn@exploit.im
rdp2022@exploit.im
rdpseller@exploit.im
rdpshop@exploit.im
reallibrarian@exploit.im
rex_arx@jabb.im
ridik@exploit.im
ripka@exploit.im
rnm@exploit.im
robwstar@exploit.im
rolex@exploit.im
rondabuy@exploit.im
root.system@exploit.im
rootnik@exploit.im
rothschildgroup@exploit.im
rouping@exploit.im
rssmai@exploit.im
s.imbusch@web.de
s1200dpi@exploit.im
sachko@exploit.im
sales.linkensphere@exploit.im
sanina@exploit.im
saniok@creep.im
sanya1212@neko.im
sayber@zloy.im
sayto@exploit.im
sbsupport@exploit.im
scano@exploit.im
scatte@exploit.im
sclassadmin@exploit.im
sddfg@exploit.im
searchssndob@exploit.im
seba.impagliazzo@libero.it
sebastien.imar@cegetel.net
secddos@exploit.im
secret@zloy.im
seimen@xmpp.ru
sell_all_cards@pandion.im
sellbacc@exploit.im
sellbrut@exploit.im
sellpaypal@exploit.im
semuel7@exploit.im
sergobrute@exploit.im
setekh@exploit.im
sfxpp@exploit.im
sgemeneanu@uk.imshealth.com
shad0wcypress@exploit.im
shadensc@email.immaculate-conception.net
shadow_fullz@jabb.im
shanja@exploit.im
shelley@chatme.im
shiko@exploit.im
shop13@exploit.im
sidywka@exploit.im
simaxyz@xmpp.jp
simona@zloy.im
simonukr@xmpp.jp
sindikat@exploit.im
skaner6@exploit.im
skyfly@exploit.im
sllrdp@exploit.im
smartdocs@exploit.im
sms_bro_bot@exploit.im
snejok19@exploit.im
socksbox@exploit.im
sorrow@exploit.im
spamhouse@exploit.im
speedman@zloy.im
spidersoft@exploit.im
sportcartel@exploit.im
sshman@zloy.im
sshseller@exploit.im
sshtamapa@exploit.im
stahanoff@exploit.im
starburst@pandion.im
staromin321@exploit.im
start888@exploit.im
starttop@exploit.im
stokrat@exploit.im
stone@zloy.im
stooper@exploit.im
suen@darknet.im
superman007@exploit.im
superseller@exploit.im
support@blah.im
support_miloff@exploit.im
supportkassa@blah.im
supportssh@exploit.im
swipertracks@exploit.im
sxizmat@jabb.im
szegedi.imi@postafiok.hu
t4ekist@exploit.im
tagrex@exploit.im
talgol@exploit.im
tania113@exploit.im
tania113new@exploit.im
tatmcorp@jabb.im
tbenbin77@zloy.im
tbenibn77@exploit.im
tboc_man@exploit.im
tdedicatedbrute@exploit.im
tdmk_gr@exploit.im
tduke.eugene@exploit.im
techno@exploit.im
temafroloff@exploit.im
terra01@zloy.im
terroristka7@exploit.im
tetc2010@exploit.im
tetraider_737@exploit.im
tgetsend777@exploit.im
thardytaboo@exploit.im
thelastemperor@exploit.im
tim@callahan.im
tlisa_backlinks@exploit.im
tmakop@exploit.im
tmrfargo@exploit.im
tmtfamily@exploit.im
tnightmoney@exploit.im
tommy.blunt@pandion.im
tonnysapranno@exploit.im
tonygates@exploit.im
trafic234@exploit.im
trixbunneh@exploit.im
trofim75@xmpp.jp
trofim@exploit.im
trueacc2@exploit.im
trueacc3@exploit.im
trueacc@exploit.im
trump@zloy.im
trustmark@exploit.im
tsaulgoodobnal@zloy.im
tungsten@exploit.im
turbion@exploit.im
tzrk@exploit.im
u00a01047@blah.im
u00a01047@exploit.im
u00a0112233@exploit.im
u00a0akkerman@exploit.im
u00a0andreypsd1@jabb.im
u00a0dis911@exploit.im
u00a0hacknet@exploit.im
u00a0hd_pl4stic@exploit.im
u00a0komrakoff_support@exploit.im
u00a0mrpink@exploit.im
u00a0semuel7@exploit.im
ultradisk@exploit.im
uniqque@exploit.im
uzu110@2go.im
w1sk1@darknet.im
wcypress@exploit.im
webget@exploit.im
whitebilli@blabber.im
williambaumanxz@exploit.im
win2002@exploit.im
workforbtc@jabb.im
worldwide@exploit.im
wot@exploit.im
wracker@exploit.im
wwhproet@exploit.im
x-ware@exploit.im
xardyssn@exploit.im
xmpp%3aspidehost@exploit.im
xon@exploit.im
xuligande@exploit.im
xxakep@exploit.im
y-a-n-d-e-x@exploit.im
yan_dex@exploit.im
yashimura@exploit.im
z.alex@exploit.im
zagzig@exploit.im
zaraza_best@exploit.im
zaska@exploit.im
zedd@exploit.im
zeka@exploit.im
zeliboba47@exploit.im
zifirka@exploit.im
zifirka@pandion.im
zig-zag@exploit.im
zloukpekep@exploit.im
zloy666@zloy.im
zloypentex@zloy.im
zm.imran@bk.ru
zodiaq@exploit.im
zordugly@pandion.im
zorg1@exploit.im
zqe12@jabb.im
zup0123@creep.im
zz1177@exploit.im

New Project - Malware C&C Domains Offensive Network Reconnaissance Monitoring Project

Dear blog readers,

An image is worth a thousand words. I've recently started working on a new project which I executed and achieved with success. It's basically a malware C&C domains offensive network reconnaissance project where I'm once again feeding back the results into a local MySQL database.

Here's a link to my similar project.

New Project - 419 Scam Domains WHOIS Registrar Monitoring Project

Dear blog readers,

An image is worth a thousand words. I've recently started working on a new domain take down project where I'm busy sourcing 419 scam domains and trying to figure out their WHOIS registrar in bulk and then feeding back all the information in a local MySQL database. The best part? I did it and it works.

Here's a link to my similar project.