Thursday, June 13, 2024

Exposing a Domains Portfolio Courtesy of Breached Forum Team Members - An OSINT Analysis

I’ve recently obtained access to a publicly obtainable set of personally identifiable information belonging to a secondary Breached Forum team members and based on this discovery I've decided to dig a little bit deeper and find out related domain name registrations courtesy of the same individuals that are members of the forum on our way to look for related fraudulent and malicious activity.

Interesting domains include:

hxxp://secured-logins.online

hxxp://microsoftupdale.com

hxxp://amzn-offer.com.ng

hxxp://paypalcustomerservices.com

Sample domains known to have been involved in the campaign include:

hxxp://biunj[.]top

hxxp://wzmxec[.]cn

hxxp://semainedelapopphilosophie[.]fr

hxxp://haileybeauty[.]fr

hxxp://kellyblake[.]us

hxxp://securitylab[.]hk

hxxp://texasaction[.]us

hxxp://kazuko[.]us

hxxp://purgestresser[.]xyz

hxxp://bagipokemon[.]com

hxxp://moneymatterswitheric[.]com

hxxp://idriss[.]fr

hxxp://bluesteelcraft[.]net

hxxp://phohangcu[.]com

hxxp://kookwinkels[.]net

hxxp://mediumsonja[.]net

hxxp://ukmshops[.]com

hxxp://makebelief[.]science

hxxp://depressioncure[.]science

hxxp://aisukoneko[.]net

hxxp://82flex[.]club

hxxp://ssri[.]science

hxxp://snri[.]science

hxxp://gadjahmada[.]org

hxxp://keralacultural[.]science

hxxp://internetmarketergroup[.]com

hxxp://sampitroda[.]science

hxxp://apjabdulkalam[.]science

hxxp://floatingmind[.]science

hxxp://neurotransmission[.]science

hxxp://sunitawilliams[.]science

hxxp://teslamemorial[.]science

hxxp://moodregulation[.]science

hxxp://antipsychotic[.]science

hxxp://originofearth[.]science

hxxp://wardenclyffetower[.]science

hxxp://antidepressant[.]science

hxxp://chuvabravasolfeliz[.]com

hxxp://vasthu[.]science

hxxp://resumosparaprovas[.]com[.]br

hxxp://ultra1337s[.]pro

hxxp://indiancultural[.]science

hxxp://resuminhosparaprovas[.]com

hxxp://benchfee[.]net

hxxp://homijbhabha[.]science

hxxp://blunder[.]science

hxxp://paradisusloscabos[.]com

hxxp://meums[.]edu[.]ly

hxxp://serinformatico[.]com

hxxp://gs-france[.]fr

hxxp://modaparatodo[.]com[.]br

hxxp://proshoponline[.]com[.]br

hxxp://sr-ken1[.]com

hxxp://iltdamktdigital[.]com[.]br

hxxp://meums[.]ly

hxxp://sportday[.]com[.]br

hxxp://chauffeur24[.]ma

hxxp://shoukai-system[.]net

hxxp://fuertedestination[.]com

hxxp://bykvu[.]com

hxxp://f-gmail[.]com

hxxp://marsoul-tech[.]ly

hxxp://alanosempre[.]com

hxxp://esercizi-e-rimedi[.]com

hxxp://whdhwfawla[.]com

hxxp://vectorofdream[.]club

hxxp://p-at-g[.]info

hxxp://recruitmentsourcing[.]us

hxxp://koisit[.]com

hxxp://your-candle[.]com

hxxp://woshilaosijikuaishangche[.]xyz

hxxp://casadipasta[.]fr

hxxp://connectionloop[.]jp

hxxp://osamathabet[.]com

hxxp://capl[.]com[.]sg

hxxp://puccinis[.]us

hxxp://allinfotoday[.]us

hxxp://btler[.]kz

hxxp://aventerpriseindia[.]com

hxxp://smart99sendai[.]com

hxxp://mgo777[.]us

hxxp://ced-guitare34[.]fr

hxxp://suntech[.]com[.]pa

hxxp://merhawitravels[.]com

hxxp://weknownothingpodcast[.]com

hxxp://purehempsoap[.]ca

hxxp://organia[.]com[.]ua

hxxp://lnwgame[.]com

hxxp://vikingventures[.]us

hxxp://vygoranie[.]su

hxxp://my-mail-gmail[.]com

hxxp://login-mail-gmail[.]com

hxxp://fundaciondeespecialistas[.]com

hxxp://market365[.]com[.]ua

hxxp://lindsayfashions[.]com

hxxp://jornaldosbairrosonline[.]com[.]br

hxxp://petirketarketir[.]vip

hxxp://siam1[.]net

hxxp://hi9765[.]com

hxxp://fathersclub[.]us

hxxp://account-my-mail-gmail[.]com

hxxp://myaccount-my-mail-gmail[.]com

hxxp://goodgirls101[.]com

hxxp://freender[.]us

hxxp://myaccounts-mail-gmail[.]com

hxxp://hot-auto[.]com[.]ua

hxxp://ygu-1[.]net

hxxp://xn--jn2a86s[.]tw

hxxp://kvadrat-m[.]com

hxxp://curriculo2022[.]com

hxxp://vishakafoundation[.]com

hxxp://app12123[.]com

hxxp://donnaree[.]net

hxxp://e-standart[.]com

hxxp://neposidko[.]com

hxxp://mgo55[.]us

hxxp://bidiknews24[.]com

hxxp://mosclub[.]su

hxxp://iniq[.]us

hxxp://mfenno[.]com

hxxp://2t[.]gs

hxxp://deesign[.]co[.]kr

hxxp://mail-gmail[.]com

hxxp://iorganicpetshop[.]com

hxxp://iorganichouse[.]com

hxxp://humresource[.]com

hxxp://ko-bo-440[.]com

hxxp://hayao0819[.]com

hxxp://hog-lab[.]com

hxxp://hi12123[.]com

hxxp://hshealt[.]com

hxxp://myaccounts-my-mail-gmail[.]com

hxxp://findabitch[.]info

hxxp://my-account-mail-gmail[.]com

hxxp://gosspcrepair[.]com

hxxp://my-accounts-mail-gmail[.]com

hxxp://lizihost[.]com

hxxp://copticsite[.]com

hxxp://petenjess[.]com

hxxp://shinobu[.]kr

hxxp://shinbou[.]co[.]kr

hxxp://hamptoonu[.]com

hxxp://cryptbits[.]us

hxxp://cryptoskope[.]us

hxxp://blockhodl[.]us

hxxp://cryptomonist[.]us

hxxp://cityofcrypto[.]us

hxxp://chainofthings[.]us

hxxp://hesapcibaba[.]com

hxxp://emeraldenzosculptures[.]com

hxxp://gh-herbals[.]us

hxxp://hallareview[.]com

hxxp://solnyshko-2022[.]kz

hxxp://amzn-offer[.]com[.]ng

hxxp://rce[.]net[.]cn

hxxp://arol[.]us

hxxp://consejoscomunalesparaladefensaintegral[.]xyz

hxxp://noticiasnaweb[.]net

hxxp://quick2pey[.]us

hxxp://microsoftupdale[.]com

hxxp://sribiosys[.]com

hxxp://proxmoxve[.]cn

hxxp://whmcsservices[.]cn

hxxp://virtualizor[.]cn

hxxp://goodealhosting[.]cn

hxxp://fetomagduruaileler[.]net

hxxp://28subatvefetomagduruaileler[.]net

hxxp://zjmftheme[.]cn

hxxp://shieyingxiong[.]cn

hxxp://whmcshelp[.]com

hxxp://habersilvangazetesi[.]com

hxxp://dusunce360[.]com

hxxp://hurtakipci[.]com

hxxp://urfahurhaber[.]com

hxxp://dieq41[.]com

hxxp://arminarekaperdanahalim[.]com

hxxp://cains[.]party

hxxp://topsalestoday[.]us

hxxp://stuartpowell[.]us

hxxp://animu[.]su

hxxp://cleanconnect[.]us

hxxp://truthtrend[.]us

hxxp://milina[.]jp

hxxp://pchd[.]one

hxxp://ricambiauto[.]us

hxxp://rachelmorton[.]us

hxxp://shopauro[.]us

hxxp://sppt[.]us

hxxp://effectivtech[.]us

hxxp://careerchanger[.]us

hxxp://jleon-automation[.]us

hxxp://johnlwaite[.]com

hxxp://lakeshore[.]tw

hxxp://no-no-no-no[.]com

hxxp://alisonjones[.]us

hxxp://segner[.]us

hxxp://charliem[.]us

hxxp://valuation[.]co[.]il

hxxp://no-no[.]com

hxxp://trumpersonly[.]us

hxxp://posten-no-no[.]com

hxxp://totallyavir[.]us

hxxp://kathypizzino[.]us

hxxp://wildburger[.]us

hxxp://cfodesk[.]co[.]il

hxxp://whisky-a-no-no[.]com

hxxp://trevorhill[.]us

hxxp://charliemoore[.]us

hxxp://no-no-no[.]com

hxxp://michaelstamerfarms[.]com

hxxp://voidedparadox[.]com

hxxp://my-no-no[.]com

hxxp://zeromatter[.]us

hxxp://cuntmode[.]com

hxxp://figyak[.]com

hxxp://oht[.]com[.]tw

hxxp://herbalhongkong[.]com

hxxp://mo-no-no[.]com

hxxp://jumphost[.]kz

hxxp://nana-no-no[.]com

hxxp://liveearth-no-no[.]com

hxxp://candronepilotcoop[.]com

hxxp://celebrity-no-no[.]com

hxxp://escobarproductions[.]us

hxxp://yasu-no-no[.]com

hxxp://vjdiamonds[.]co[.]il

hxxp://burkardt[.]us

hxxp://buy-no-no[.]com

hxxp://makabaka[.]us

hxxp://me-no-no[.]com

hxxp://pnrsyntax[.]us

hxxp://big-no-no[.]com

hxxp://visentagroup[.]com

hxxp://aki-no-no[.]com

hxxp://carte-vital-notification[.]fr

hxxp://epichi[.]us

hxxp://vpnsvr[.]top

hxxp://verification-amazon-fr[.]fr

hxxp://laurencecouture[.]fr

hxxp://it-serve[.]pro

hxxp://thefeelgoodhood[.]com

hxxp://bookrichandsassy[.]com

hxxp://pio-no-no[.]com

hxxp://apt4[.]kr

hxxp://minjs[.]us

hxxp://demandredesign[.]org

hxxp://riches-elenas[.]kz

hxxp://test-ryhall-dns-is-us-test-gmail[.]com

hxxp://try-no-no[.]com

hxxp://eliteautoloans[.]ca

hxxp://akixi-test-gmail[.]com

hxxp://get-no-no[.]com

hxxp://fatemzassl[.]com[.]ng

hxxp://aryamatbaa[.]com

hxxp://official-no-no[.]com

hxxp://thizastore[.]com[.]br

hxxp://everydayweplay365new[.]com

hxxp://curiousq[.]info

hxxp://hgarbaglobalventures[.]com[.]ng

hxxp://dafdfeafeae[.]com

hxxp://facebooksexlist[.]com

hxxp://attavitacons[.]com

hxxp://test-bh-staging-domain28082021025944[.]com

hxxp://politics-is-a[.]science

hxxp://alexcohen[.]us

hxxp://esv[.]jp

hxxp://wagnitzsoftware[.]com

hxxp://cdcysj[.]cn

hxxp://demonslayerswords[.]net

hxxp://wolftecno[.]com

hxxp://epic-hi[.]us

hxxp://outletku[.]com

hxxp://serialmail[.]net

hxxp://oh-no-no[.]com

hxxp://cysj1[.]cn

hxxp://skjdnsn[.]com

hxxp://sallybestor[.]com

hxxp://hotelfortkolesnik[.]com

hxxp://birdy[.]com[.]tw

hxxp://ebiz[.]co[.]il

hxxp://youngfaith[.]us

hxxp://vitejambe[.]com

hxxp://kittybox[.]us

hxxp://artech-a[.]fr

hxxp://jrspipesandtubes[.]com

hxxp://herbsandnature[.]us

hxxp://tlftest[.]us

hxxp://laboratorioedn[.]com

hxxp://subprimary[.]com

hxxp://cyrusmedia[.]ca

hxxp://trogdor-test-teststs-devee[.]com

hxxp://leenuts[.]com

hxxp://gmo-test-2022-05-05-ishitoya01[.]com

hxxp://dd9[.]co[.]kr

hxxp://smsvg[.]com

hxxp://s-proj[.]co[.]il

hxxp://spartanguild[.]com

hxxp://becysj[.]cn

hxxp://test-bh-staging-domain06092021131217[.]com

hxxp://tjcysj[.]cn

hxxp://thanushcreations[.]com

hxxp://cartevitale-am[.]fr

hxxp://piephomedia[.]com

hxxp://theinquiryhub[.]com

hxxp://smsnh[.]com

hxxp://yuanayu[.]com

hxxp://plusswagath[.]com

hxxp://asukaindonesia[.]com

hxxp://smsrb[.]com

hxxp://maacademia[.]com

hxxp://topfactsglobal[.]com

hxxp://prakrie[.]com

hxxp://i-socialapp[.]com

hxxp://luzxd[.]us

hxxp://findmyiphone-view[.]com

hxxp://ipklll[.]us

hxxp://ip-pbx[.]su

hxxp://terminodador[.]com

hxxp://test1122[.]net

hxxp://manurnu[.]com

hxxp://testingdomainwsuite12345[.]net

hxxp://jorcustoms[.]com

hxxp://testingdomainwsuite123456[.]net

hxxp://0br[.]us

hxxp://yandex-toloka[.]ru[.]com

hxxp://dollpls[.]com

hxxp://weeblycombo2[.]com

hxxp://whcysj[.]cn

hxxp://weeblycombotesting1[.]com

hxxp://programadorweb[.]net

hxxp://aaravidevelopers[.]com

hxxp://44518[.]cn

hxxp://inviz[.]host

hxxp://kz123[.]cn

hxxp://collectifpolar[.]fr

hxxp://naromedia[.]space

hxxp://secandosemparar[.]com

hxxp://steemdice[.]online

hxxp://uvlfastmarket[.]com

hxxp://trackblogexperthealth[.]space

hxxp://changyouworld[.]cn

hxxp://weeblycombo[.]com

hxxp://lovepets[.]fr

hxxp://gombong[.]asia

hxxp://lei-nuo[.]com[.]cn

hxxp://runhr[.]us

hxxp://kaya-bunga[.]com

hxxp://dimensionengiservices[.]com

hxxp://thomashcliu[.]com

hxxp://ttglobaladvisory[.]net

hxxp://0xe[.]us

hxxp://underarmourstore[.]us

hxxp://friendsland[.]pp[.]ua

hxxp://eoczy[.]host

hxxp://qualiteletrica[.]com[.]br

hxxp://heskes[.]info

hxxp://quemseduzconquista[.]com

hxxp://nitix[.]biz

hxxp://starhelectricalservicesllc[.]com

hxxp://2xlipat[.]com

hxxp://mugyuphotoworks[.]com

hxxp://exroot[.]us

hxxp://promicom[.]ma

hxxp://ibracket[.]net

hxxp://compteabonnement[.]fr

hxxp://gotowka-doreki[.]info

hxxp://pamyu-pamyu[.]com

hxxp://ismarcoscastro[.]com

hxxp://a-gmail[.]com

hxxp://doremi-hochouki[.]com

hxxp://hahapetshop[.]com

hxxp://joshuahatten[.]com

hxxp://reza-najafi[.]com

hxxp://lloyds-area[.]com

hxxp://fibvo[.]com

hxxp://codenific[.]com

hxxp://linhtinhcenter[.]com

hxxp://zo1984[.]com

hxxp://lifevantagethai-nrf2[.]com

hxxp://greenenershop[.]com

hxxp://gaytravelcrowd[.]com

hxxp://aythotellock[.]com

hxxp://doooectb[.]com

hxxp://gratiasmarthome[.]com

hxxp://myrenttoownhomes[.]us

hxxp://voxchronicle[.]com

hxxp://cloudtest[.]asia

hxxp://teedin789[.]org

hxxp://car789[.]org

hxxp://alarmmoney[.]info

hxxp://cctvnon[.]com

hxxp://ouvoleravecmondrone[.]com

hxxp://vtechwriter[.]com

hxxp://greenmage321[.]com

hxxp://avtoremont36[.]xyz

hxxp://carav[.]us

hxxp://flowerwseb[.]info

hxxp://cjford[.]org

hxxp://ouvoleravecmondrone[.]net

hxxp://suns-vip[.]com

hxxp://mindyshousecleaners[.]com

hxxp://gaytravelcrowd[.]biz

hxxp://healthlantern[.]us

hxxp://greens333[.]com

hxxp://vacation-crowd[.]com

hxxp://blockpays[.]info

hxxp://rem971verslesucces[.]com

hxxp://nsr-sys[.]com

hxxp://aminpour[.]info

hxxp://ba2b[.]xyz

hxxp://nwtgck[.]xyz

hxxp://classhelper[.]us

hxxp://dustbinservices[.]com

hxxp://checkiclouds[.]info

hxxp://lclsecuret[.]com

hxxp://toretto[.]host

hxxp://antoinetbt[.]host

hxxp://ecomyparty[.]com

hxxp://vil-diesel[.]host

hxxp://ontime-a[.]com

hxxp://canlammotteam[.]host

hxxp://dominic-toretto[.]host

hxxp://semailaanhem[.]host

hxxp://badromance[.]host

hxxp://cd-storage-reviews[.]com

hxxp://antoinegriezmann[.]host

hxxp://seeyouagain[.]host

hxxp://mrtbt[.]host

hxxp://line-dn[.]com

hxxp://eklink[.]org

hxxp://emlakhaberleri[.]org

hxxp://eklink[.]info

hxxp://legendturk[.]biz

hxxp://secured-logins[.]online

hxxp://64bitcongnghe[.]com

hxxp://pocket0077[.]com

hxxp://dallaporte[.]com

hxxp://etchmall[.]com

hxxp://accounts-my-mail-gmail[.]com

hxxp://account-mail-gmail[.]com

hxxp://accounts-mail-gmail[.]com

hxxp://art-photo-story[.]com

hxxp://azarter[.]com

hxxp://youractiontoys[.]com

hxxp://sil21[.]com

hxxp://indicatorchoice[.]com

hxxp://myaccount-mail-gmail[.]com

hxxp://teamkill[.]pro

hxxp://mdhanastha[.]com

hxxp://smpplugin[.]com

hxxp://smp-plugin[.]com

hxxp://todaymagazine[.]xyz

hxxp://thecouponparty[.]com

hxxp://todayradio[.]xyz

hxxp://serva4ok[.]pro

hxxp://forteam[.]pro

hxxp://facebuilder[.]xyz

hxxp://irandirectory[.]xyz

hxxp://mixandmastering[.]xyz

hxxp://nameforbaby[.]xyz

hxxp://justpayforshipping[.]biz

hxxp://justpayforshipping[.]org

hxxp://justpayforshipping[.]info

hxxp://lambdaf[.]info

hxxp://herdiesel-santoso[.]com

hxxp://keywordriches[.]org

hxxp://energybodyart[.]com

hxxp://floresemangola[.]com

hxxp://sonyatour[.]com

hxxp://doktorhatasi[.]biz

hxxp://probono123[.]org

hxxp://personalitynetwork[.]org

hxxp://gold4money[.]us

hxxp://odt[.]moscow

hxxp://okget[.]xyz

hxxp://mixedfire[.]com

hxxp://batikidalestari[.]com

hxxp://frugalandresponsibleliving[.]com

hxxp://makrandownload[.]com

hxxp://yfilatov[.]xyz

hxxp://artbodyart[.]com

hxxp://meme-generator[.]info

hxxp://delhitransport[.]info

hxxp://trisnoidamanbatik[.]com

hxxp://modadhanasta[.]com

hxxp://okemoviezone[.]com

hxxp://gowanusindustrial[.]org

hxxp://ydafmc[.]com

hxxp://books-mania[.]com

hxxp://buettner[.]science

hxxp://vdeserve[.]com

hxxp://k-u-n-s-t-s-t-o-f-f[.]com

hxxp://f-f[.]com

hxxp://f-l-u-f-f[.]com

hxxp://a-f-f[.]com

hxxp://t-a-f-f[.]com

hxxp://b-f-f[.]com

hxxp://k-f-f[.]com

hxxp://f-f-f[.]com

hxxp://m-f-f[.]com

hxxp://g-f-f[.]com

hxxp://p-u-f-f[.]com

hxxp://s-t-a-f-f[.]com

hxxp://okrok[.]info

hxxp://d-i-f-f[.]com

hxxp://roukio[.]info

hxxp://t-f-f[.]com

hxxp://teotio[.]info

hxxp://s-u-n-o-f-f[.]com

hxxp://s-t-i-f-f[.]com

hxxp://okrok[.]org

hxxp://w-f-f[.]com

hxxp://teotio[.]org

hxxp://h-f-f[.]com

hxxp://pokere[.]org

hxxp://v-f-f[.]com

hxxp://roukio[.]org

hxxp://f-a-c-e-o-f-f[.]com

hxxp://s-u-f-f[.]com

hxxp://take-o-f-f[.]com

hxxp://u-s-f-f[.]com

hxxp://qeou[.]online

hxxp://u-f-f[.]com

hxxp://karatsu-f-f[.]com

hxxp://j-f-f[.]com

hxxp://l-f-f[.]com

hxxp://o-f-f[.]com

hxxp://f--f[.]com

hxxp://e-f-f[.]com

hxxp://gardener-f-f[.]com

hxxp://i-f-f[.]com

hxxp://p-j-f-f[.]com

hxxp://y-f-f[.]com

hxxp://s-f-f[.]com

hxxp://c-f-f[.]com

hxxp://boulangerie-dupont-f-f[.]com

hxxp://s-t-f-f[.]com

hxxp://n-u-f-f[.]com

hxxp://ca-f-f[.]com

hxxp://sts-rci-rogers[.]ca

hxxp://p-f-f[.]com

hxxp://scholarlysources[.]com

hxxp://f-f-f-f[.]com

hxxp://globalrealez[.]com

hxxp://df-we-4234-f-we-fw-4234-f-we-f-f[.]com

hxxp://iconarise[.]com

hxxp://hamad-f-f[.]com

hxxp://toplifedailylive[.]com

hxxp://n-f-f[.]com

hxxp://s-o-f-f[.]com

hxxp://p-i-s-s-o-f-f[.]com

hxxp://c-u-f-f[.]com

hxxp://d-f-f[.]com

hxxp://z-f-f[.]com

hxxp://r-i-f-f[.]com

hxxp://r-f-f[.]com

hxxp://innovationoffice[.]org

hxxp://mindsxchange[.]com

hxxp://marketresearchcolloquium[.]com

hxxp://danielles-f-f-f[.]com

hxxp://x-f-f[.]com

hxxp://q-f-f[.]com

hxxp://platformxchange[.]com

hxxp://d-i-l-l-i-g-a-f-f[.]com

hxxp://c-i-f-f[.]com

hxxp://k-y-f-f[.]com

hxxp://kairosteknoloji[.]download

hxxp://enesaldemir[.]net

hxxp://tenadesign[.]net

hxxp://shyfzorg[.]com

hxxp://disdikbud-papua[.]org

hxxp://al-azharaslichmughny[.]org

No comments:

Post a Comment