Tuesday, July 30, 2024

An Elaboration on Russian Business Network’s Mykhaylo Sergiyovich Rytikov’s AbdAllah Internet Hizmetleri Bulletproof Hosting Provider

If you see this netblock you would definitely recognize it. It's the Russian Business Network in specific Mykhaylo Sergiyovich Rytikov’s AbdAllah Internet Hizmetleri bulletproof hosting provider which recently got busted in terms of infrastructure with Mykhaylo Sergiyovich Rytikov on U.S Secret Service Most Wanted cybercriminals list.

Although Ukraine's SSU recently found and busted some of the actual physical infrastructure which you can see in the attached video including the associated screenshots it's my belief that if this is Mykhaylo Sergiyovich Rytikov and his Russian Business Network AbdAllah Internet Hizmetleri bulletproof hosting franchise we might have a very good and decent case of actual video demonstration of the sophistication that cybercriminals put into place to cover their tracks build infrastructure and then start populating as much cybercrime-friendly forum communities with their fraudulent propositions ultimately leading to a situation where we have a bulletproof hosting ecosystem similar to what the Russian Business Network was and is back in the day up to present day.

Sample screenshots of Russian Business Network’s Mykhaylo Sergiyovich Rytikov’s AbdAllah Internet Hizmetleri Bulletproof Hosting Provider:



Sample video:

Sample screenshots of Russian Business Network’s Mykhaylo Sergiyovich Rytikov’s AbdAllah Internet Hizmetleri Bulletproof Hosting Provider:











Monday, July 29, 2024

DNC (Democratic National Committee) Domains C&C Portfolio

The following is a list of personal email address accounts and domain C&C servers from the DNC (Democratic National Committee) cyber attack campaign.

Sample personal email address accounts known to have been involved in the campaign include:

julienobruno[.]hotmail.com

jenna.stehr[.]mail.com

s.simonis[.]mail.com

domreg[.]247livesupport.biz

kumarhpt[.]yahoo.com

aksnes.thomas[.]yahoo.com

yingw90[.]yahoo.com

andre_roy[.]mail.com

myprimaryreger[.]gmail.com

okorsukov[.]yahoo.com

tzubtfpx5[.]mail.ru

annaablony[.]mail.com

jamesyip823[.]gmail.com

tmazaker[.]gmail.com

emmer.brown[.]mail.com

qupton[.]mail.com

adel.rice[.]mail.com

trainerkart2[.]gmail.com

cowrob[.]mail.com

direct2playstore[.]gmail.com

cffaccll[.]mail.com

drgtradingllc[.]gmail.com

jack2020[.]outlook.com

pdkt00[.]Safe-mail.net

david_thompson62[.]aol.com

distardrupp[.]gmail.com

perplencorp[.]gmail.com

spammer11[.]superrito.com

jilberaner[.]yahoo.de

snowyowl[.]jpnsec.com

asainchuk[.]gmail.com

OKEKECHIDIC[.]GMAIL.COM

abelinmarcel[.]outlook.fr

idesk.corp.apple.com[.]gmail.com

mutantcode[.]outlook.fr

pier[.]pipimerah.com

vrickson[.]mail.com

prabhakar_malreddy[.]yahoo.com

jack2020[.]outlook.com

Sample domains known to have been involved in the campaign include:

hxxp://linuxkrnl.net

hxxp://accounts-qooqle.com

hxxp://account-gooogle.com

hxxp://accoounts-google.com

hxxp://account-yahoo.com

hxxp://accounts-googlc.com

hxxp://accoutns-google.com

hxxp://addmereger.com

hxxp://akamainet.net

hxxp://akamaivirusscan.com

hxxp://apple-icloud-services.com

hxxp://apple-notification.com

hxxp://arabianbusinessreport.com

hxxp://azamtelecom.com

hxxp://babylonn.com

hxxp://baengmail.com

hxxp://boobleg.com

hxxp://chinainternetservices.com

hxxp://com-hdkurknfkjdnkrnngujdknhgfr.com

hxxp://combin-banska-stiavnica.com

hxxp://cvk-leaks.com

hxxp://fb-security.com

hxxp://g00qle.com

hxxp://global-exchange.net

hxxp://googlesetting.com

hxxp://hlbnk.com

hxxp://homesecuritysystems-sale.com

hxxp://icloud-localisation.com

hxxp://imperialc0nsult.com

hxxp://informationen24.com

hxxp://interglobalswiss.com

hxxp://intra-asiarisk.com

hxxp://invest-sro.com

hxxp://iphone-onlineshopping.net

hxxp://kur4.com

hxxp://lastdmp.com

hxxp://localisation-apple-icloud.com

hxxp://localisation-apple-support.com

hxxp://localisation-mail.com

hxxp://login-163.com

hxxp://login-kundenservice.com

hxxp://magic-exchange.com

hxxp://mail-apple-icloud.com

hxxp://mailpho.com

hxxp://malprosoft.com

hxxp://medicalalertgroup.com

hxxp://megafileuploader.com

hxxp://mfadaily.com

hxxp://mfapress.com

hxxp://militaryexponews.com

hxxp://msoftonline.com

hxxp://myaccountgoogle.com

hxxp://myaccountsgoogle.com

hxxp://mydomainlookup.net

hxxp://mypmpcert.com

hxxp://net-a-porter-coupon.com

hxxp://newiphone-online.net

hxxp://newiphone-supply.net

hxxp://newreviewgames.com

hxxp://nobel-labs.net

hxxp://nvidiaupdate.com

hxxp://obamacarerx.net

hxxp://onlinecsportal.com

hxxp://pass-google.com

hxxp://password-google.com

hxxp://paydaytoday-uk.com

hxxp://pb-forum.com

hxxp://planetaryprogeneration.com

hxxp://regionoline.com

hxxp://security-notifications.com

hxxp://service-facebook.com

hxxp://servicesupdates.com

hxxp://set121.com

hxxp://set132.com

hxxp://set133.com

hxxp://sicherheitsteam-pp.com

hxxp://sicherheitsteam-pp.net

hxxp://skypeupdate.com

hxxp://smp-cz.com

hxxp://soft-storage.com

hxxp://solutionmanualtestbank.com

hxxp://ssl-icloud.com

hxxp://team-google.com

hxxp://techlicenses.com

hxxp://techlicenses.net

hxxp://ua-freedom.com

hxxp://updates-verify.com

hxxp://us-mg7mail-transferservice.com

hxxp://us-westmail-undeliversystem.com

hxxp://us6-yahoo.com

hxxp://vatlcan.com

hxxp://wordpressjointventure.com

hxxp://ya-support.com

hxxp://yandex-site.com

hxxp://yepost.com

hxxp://support-forum.org

hxxp://oceaninformation.org

hxxp://vodafoneupdate.org

hxxp://succourtion.org

hxxp://eascd.org

hxxp://northropgruman.org

hxxp://apple-iphone-services.com

hxxp://localisation-security-icloud.com

hxxp://applesecurity-supporticloud.com

hxxp://icloud-iphone-services.com

hxxp://icloud-id-localisation.com

hxxp://apple-localisation-id.com

hxxp://identification-icloud-id.com

hxxp://cloud-id-localisation.com

hxxp://support-security-icloud.com

hxxp://identification-apple-id.com

hxxp://localisation-apple-security.com

hxxp://security-icloud-localisation.com

hxxp://dabocom.com

hxxp://quick-exchange.com

hxxp://hygani.com

hxxp://hztx88.com

hxxp://sddqgs.net

hxxp://qufu001.com

hxxp://lutushiqi.com

hxxp://gsctgs.com

hxxp://tazehong.com

hxxp://hthgj.com

hxxp://kvistberga.com

hxxp://bjytj.net

hxxp://cqhuicang.com

hxxp://softbank-tech.com

hxxp://osce-press.org

hxxp://maxidea.tw

hxxp://sdti.tw

hxxp://gmailcom.tw

hxxp://zex.tw

hxxp://gain-paris-notaire.fr

hxxp://loto-fdj.fr

hxxp://client-amzon.fr

hxxp://idse-orange.fr

hxxp://rgraduzkfghgd.com

hxxp://jmhgjqtmhanoncp.com

hxxp://stwdchstclovuzk.com

hxxp://puxqtyrwzuzybgzehc.com

hxxp://maatil.com.ng

hxxp://surestbookings.com

hxxp://asatuyouth.org.ng

hxxp://hanna.ng

hxxp://hostlink.com.ng

hxxp://sirbenlimited.com

hxxp://dce.edu.ng

hxxp://eventsms.com.ng

hxxp://krsbczmxwdsjwtizmx.com

hxxp://alizirwzyjazurof.com

hxxp://zslipanehule.com

hxxp://cxotonspmjkxw.com

hxxp://wpifmhyjkxyt.com

hxxp://ngvsngpwdidmn.com

hxxp://imperialvillas.com.ng

hxxp://lipyhgpofsnifste.com

hxxp://flexceeweb.com

hxxp://fgfcpkdcnebgduls.com

hxxp://shinjiru.us

hxxp://supportchannel.net

hxxp://couponofferte.com

hxxp://psepaperindustrial.com

hxxp://lakws.com

hxxp://perplencorp.com

hxxp://lbchemtrade.com

hxxp://viaggibelli.com

hxxp://liontitco.com

hxxp://svendiamo.com

hxxp://orogenicgroup.com

hxxp://giudeviaggio.com

hxxp://greenskill.net

hxxp://siteseditor.net

hxxp://e-mail-supports.com

hxxp://biplen.com

hxxp://infradesajohor.com

hxxp://dealhot.net

hxxp://suanmin.com

hxxp://on9on9.com

hxxp://accoutns-google.com

hxxp://puroniq.com

hxxp://sinqa.com

hxxp://sadihadi.com

hxxp://mrangkang.com

hxxp://terumbu.com

hxxp://phygitail.com

hxxp://veraniq.com

hxxp://potxr.com

hxxp://icraw.com

hxxp://thearoid.com

hxxp://teempo.com

hxxp://parblue.com

hxxp://mydomainlookup.net

hxxp://adrianvonziegler.net

hxxp://zetindustries.com

hxxp://researchs.com.ng

hxxp://joymoontech.com

hxxp://researchmaterials.com.ng

hxxp://james823.com

hxxp://oneibeauty.net

hxxp://accounts-qooqle.com

hxxp://account-gooogle.com

hxxp://accoounts-google.com

hxxp://account-yahoo.com

hxxp://accounts-googlc.com

hxxp://accoutns-google.com

hxxp://addmereger.com

hxxp://akamainet.net

hxxp://akamaivirusscan.com

hxxp://apple-icloud-services.com

hxxp://apple-notification.com

hxxp://arabianbusinessreport.com

hxxp://azamtelecom.com

hxxp://babylonn.com

hxxp://baengmail.com

hxxp://boobleg.com

hxxp://chinainternetservices.com

hxxp://com-hdkurknfkjdnkrnngujdknhgfr.com

hxxp://combin-banska-stiavnica.com

hxxp://cvk-leaks.com

hxxp://fb-security.com

hxxp://g00qle.com

hxxp://global-exchange.net

hxxp://googlesetting.com

hxxp://hlbnk.com

hxxp://homesecuritysystems-sale.com

hxxp://icloud-localisation.com

hxxp://imperialc0nsult.com

hxxp://informationen24.com

hxxp://interglobalswiss.com

hxxp://intra-asiarisk.com

hxxp://invest-sro.com

hxxp://iphone-onlineshopping.net

hxxp://kur4.com

hxxp://lastdmp.com

hxxp://localisation-apple-icloud.com

hxxp://localisation-apple-support.com

hxxp://localisation-mail.com

hxxp://login-163.com

hxxp://login-kundenservice.com

hxxp://magic-exchange.com

hxxp://mail-apple-icloud.com

hxxp://mailpho.com

hxxp://malprosoft.com

hxxp://medicalalertgroup.com

hxxp://megafileuploader.com

hxxp://mfadaily.com

hxxp://mfapress.com

hxxp://militaryexponews.com

hxxp://msoftonline.com

hxxp://myaccountgoogle.com

hxxp://myaccountsgoogle.com

hxxp://mydomainlookup.net

hxxp://mypmpcert.com

hxxp://net-a-porter-coupon.com

hxxp://newiphone-online.net

hxxp://newiphone-supply.net

hxxp://newreviewgames.com

hxxp://nobel-labs.net

hxxp://nvidiaupdate.com

hxxp://obamacarerx.net

hxxp://onlinecsportal.com

hxxp://pass-google.com

hxxp://password-google.com

hxxp://paydaytoday-uk.com

hxxp://pb-forum.com

hxxp://planetaryprogeneration.com

hxxp://regionoline.com

hxxp://security-notifications.com

hxxp://service-facebook.com

hxxp://servicesupdates.com

hxxp://set121.com

hxxp://set132.com

hxxp://set133.com

hxxp://sicherheitsteam-pp.com

hxxp://sicherheitsteam-pp.net

hxxp://skypeupdate.com

hxxp://smp-cz.com

hxxp://soft-storage.com

hxxp://solutionmanualtestbank.com

hxxp://ssl-icloud.com

hxxp://team-google.com

hxxp://techlicenses.com

hxxp://techlicenses.net

hxxp://ua-freedom.com

hxxp://updates-verify.com

hxxp://us-mg7mail-transferservice.com

hxxp://us-westmail-undeliversystem.com

hxxp://us6-yahoo.com

hxxp://vatlcan.com

hxxp://wordpressjointventure.com

hxxp://ya-support.com

hxxp://yandex-site.com

hxxp://yepost.com

Domains Portfolio Operated by Cytrox Spyware

The following is a list of C&C domains belonging to the Cytrox commercial spyware.

Sample domains involved in the campaign include: 

hxxp://5m5.io

hxxp://actumali.org

hxxp://addons.ne

hxxp://adibjan.net

hxxp://adservices.gr.com

hxxp://advertsservices.com

hxxp://almasryelyuom.com

hxxp://alpineai.uk

hxxp://alraeeenews.com

hxxp://alraeesnews.net

hxxp://altsantiri.ne

hxxp://amazing.la

hxxp://api-apple-buy.com

hxxp://api-telecommunication.com

hxxp://applepps.com

hxxp://apps-ios.net

hxxp://aramexegypt.com

hxxp://atheere.com

hxxp://audit-pvv.com

hxxp://bank-alahly.com

hxxp://bbcsworld.com

hxxp://bi.tly.gr.com

hxxp://bi.tly.li

hxxp://bit-li.com

hxxp://bit-li.ws

hxxp://bit-ly.li

hxxp://bit-ly.org

hxxp://bitlly.li

hxxp://bitlyrs.com

hxxp://bitt.fi

hxxp://bity.ws

hxxp://bityl.me

hxxp://bmw.gr.com

hxxp://bookjob.cl

hxxp://browsercheck.se

hxxp://bumabara.bi

hxxp://burgerprince.us

hxxp://businesnews.net

hxxp://carrefourmisr.com

hxxp://cellconn.net

hxxp://chatwithme.st

hxxp://citroen.gr.com

hxxp://clockupdate.com

hxxp://cloudstatistics.net

hxxp://cloudtimesync.com

hxxp://cnn.gr.com

hxxp://com.apple.webkit.net

hxxp://connectivitycheck.li

hxxp://connectivitychecker.com

hxxp://contents-domain.com

hxxp://covid19masks.sh

hxxp://crashonline.si

hxxp://cut.re

hxxp://cyber.co

hxxp://danas.bi

hxxp://distedc.com

hxxp://ebill.co

hxxp://edolio5.com

hxxp://eg-gov.org

hxxp://egyqaz.com

hxxp://elpais.me

hxxp://engine.ni

hxxp://enikos.ne

hxxp://ereportaz.ne

hxxp://espressonews.gr.com

hxxp://etisalatgreen.com

hxxp://ewish.ca

hxxp://fastdownload.me

hxxp://ferrari.gr.com

hxxp://ffoxnewz.com

hxxp://fimes.gr.com

hxxp://fisherman.engine.ni

hxxp://flexipagez.com

hxxp://forwardeshoptt.com

hxxp://getsignalapps.com

hxxp://getsignalapps.li

hxxp://goldenscent.net

hxxp://goldenscint.com

hxxp://goldescent.com

hxxp://gosokm.com

hxxp://guardian-tt.me

hxxp://guardnew.li

hxxp://guardnews.li

hxxp://heaven.ar

hxxp://heiiasjournai.com

hxxp://hellasjournal.com

hxxp://hellottec.ar

hxxp://hempower.sh

hxxp://icloudeu.com

hxxp://icloudflair.com

hxxp://ikea-egypt.net

hxxp://in-politics.com

hxxp://infosms-a.si

hxxp://insider.gr.com

hxxp://instagam.cl

hxxp://instagam.in

hxxp://instagam.ph

hxxp://instegram.co

hxxp://ios-apps.st

hxxp://iosmnbg.com

hxxp://itcgr.li

hxxp://itly.li

hxxp://itter.me

hxxp://kathimerini.ne

hxxp://kinder.engine.ni

hxxp://koenigseggg.com

hxxp://kohaicorp.com

hxxp://koora-egypt.com

hxxp://kormoran.bi

hxxp://kranos.gr.com

hxxp://lamborghini-s.sh

hxxp://lexpress.me

hxxp://lifestyleshops.net

hxxp://link-protection.com

hxxp://linkit.cl

hxxp://liponals.st

hxxp://llinkedin.net

hxxp://lnkedin.org

hxxp://localegem.net

hxxp://md-news-direct.com

hxxp://mifcbook.li

hxxp://mitube1.li

hxxp://mlinks.ws

hxxp://mobnetlink1.com

hxxp://mobnetlink2.com

hxxp://mobnetlink3.com

hxxp://msas.ws

hxxp://mycoffeeshop.sh

hxxp://myfcbk.net

hxxp://myutbe.net

hxxp://nabd.si

hxxp://nassosblog.gr.com

hxxp://nemshi-news.li

hxxp://nemshi.net

hxxp://networkenterprise.net

hxxp://newsbeast.gr.com

hxxp://niceonase.com

hxxp://niceonesa.net

hxxp://nissan.gr.com

hxxp://novosti.bi

hxxp://olexegy.com

hxxp://olxeg.com

hxxp://omanreal.net

hxxp://onlineservices.gr.com

hxxp://orangegypt.co

hxxp://orchomenos.ne

hxxp://otaupdatesios.com

hxxp://paok-24.com

hxxp://pastepast.net

hxxp://playestore.net

hxxp://politika.bi

hxxp://politique-koaci.info

hxxp://prmopromo.com

hxxp://pronews.gr.com

hxxp://protothema.li

hxxp://qwxzyl.com

hxxp://redeitt.com

hxxp://redirecting.li

hxxp://redirecting.pa

hxxp://safelyredirecting.com

hxxp://sepenet.gr.com

hxxp://sephoragroup.com

hxxp://servers-mobile.info

hxxp://serviceupdaterequest.com

hxxp://sextape225.me

hxxp://shorten.fi

hxxp://shortenurls.me

hxxp://shortwidgets.com

hxxp://shortxyz.com

hxxp://simetricode.uk

hxxp://sinai-new.com

hxxp://smsuns.com

hxxp://sniper.pe

hxxp://speedy.sb

hxxp://speedymax.sh

hxxp://sportsnewz.si

hxxp://static-graph.com

hxxp://stonisi.ne

hxxp://supportset.net

hxxp://suzuki.gr.com

hxxp://svetovid.bi

hxxp://symoty.com

hxxp://synctimestamp.com

hxxp://syncupdate.si

hxxp://telecomegy-ads.com

hxxp://telenorconn.com

hxxp://tesla-s.sh

hxxp://teslal.sh

hxxp://teslali.com

hxxp://timestampsync.com

hxxp://timeupdateservice.com

hxxp://tiny.gr.com

hxxp://tinylinks.li

hxxp://tinyulrs.com

hxxp://tinyurl.cl

hxxp://tly.gr.com

hxxp://tly.li

hxxp://tovima.li

hxxp://tw.itter.me

hxxp://twtter.net

hxxp://ube.gr.com

hxxp://uberegypt.cn.com

hxxp://url-promo.cl

hxxp://uservicescheck.com

hxxp://uservicesforyou.com

hxxp://viva.gr.com

hxxp://vodafonegypt.com

hxxp://we-site.net

hxxp://weathear.li

hxxp://webaffise.com

hxxp://wha.tsapp.me

hxxp://wtc1111.com

hxxp://wtc2222.com

hxxp://wtc3333.com

hxxp://xf.ac

hxxp://xnxx-hub.com

hxxp://yallakora-egy.com

hxxp://yo.utube.to

hxxp://yout.ube.gr.com

hxxp://youtu-be.net

hxxp://youtube.gr.li

hxxp://youtubesyncapi.com

hxxp://youtubewatch.co

hxxp://yuom7.net

hxxp://z2adigital.cl

hxxp://z2digital.cl

hxxp://zougla.gr.com

hxxp://zougla.ne

hxxp://iclouddid.com

hxxp://iclouddii.com

hxxp://jinruifanglue.com

hxxp://icloudicloudapple.com

hxxp://apple-imessage-app.com

hxxp://icloundin.com

hxxp://icloudrw.com

hxxp://icloudlc.com

hxxp://icloudcu.com

hxxp://icloundip.com

hxxp://icloudll.com

hxxp://icloudlu.com

hxxp://icloundie.com

hxxp://iclouddl.com

hxxp://icloudiu.com

hxxp://iclouddu.com

hxxp://apple-usa-info.com

hxxp://apple-icloud-info.com

hxxp://apple-imessage-icloud.com

hxxp://appleid-icloud-imessage.com

hxxp://com-apple-sms.com

hxxp://info-apple-find-my-iphone.com

hxxp://apple-sms-vid.com

hxxp://apple-see-info.com

hxxp://apple-imessage-info.com

hxxp://apple-imessage-sms.com

hxxp://apple-imessage-usa-id.com

hxxp://apple-icloud-imessage-usa.com

hxxp://apple-imessage-id.com

hxxp://imessage-apple-icloud.com

hxxp://apple-icloud-imessage.com

hxxp://icloud-store-apple-app.com

hxxp://icloudzx.com

hxxp://icloudaz.com

hxxp://icloudld.com

hxxp://appleicloudicloud.com

hxxp://icloudidid.com

hxxp://icloudiui.com

hxxp://icloudiy.com

hxxp://icloudii.com

hxxp://icloudzo.com

hxxp://icloudee.com

hxxp://miwire.net

hxxp://icloudai.com

hxxp://icloudci.com

hxxp://icloudidi.com

hxxp://icloudal.com

hxxp://lclorud.com

hxxp://applcioud.com

hxxp://icloudeu.com

hxxp://icloudsd.com

hxxp://iclouddd.com

hxxp://icloudlx.com

hxxp://applelcioud.com

hxxp://icloudlk.com

hxxp://icloundil.com

hxxp://icloudoo.com

hxxp://icloundiy.com

hxxp://icloudod.com

hxxp://iclouddk.com

hxxp://icloudam.com

hxxp://iclouddy.com

hxxp://icloudcy.com

hxxp://comqiao.com

hxxp://swsport.net

hxxp://icloudaa.com

hxxp://iclouddi.com

hxxp://icloudic.com

hxxp://zhaodaopingguo.com

hxxp://icloudbo.com

hxxp://applelcioud.net

hxxp://icloudig.com

hxxp://appleicoud.com

hxxp://bet1228.com

hxxp://zhutoujian.com

hxxp://91jiu.net

hxxp://asunnyboy.com

hxxp://ic10ud.com

hxxp://qr8dndntnca45d586c6c6ra2ct0ob.net

hxxp://icloudli.com

hxxp://yuntuopan.com

hxxp://info-app-inc.com

hxxp://info-app-sms.com

hxxp://apple-vid-id.com

hxxp://apple-info-usa.com

hxxp://apple-info-see.com

hxxp://apple-vid-info.com

hxxp://apple-info-sms.com

hxxp://apple-indo-vid.com

hxxp://apple-vid.com

hxxp://apple-info-vid.com

Domains Portfolio Operated by EncroChat

The following is a list of personally identifiable information on EncroChat including a domain portfolio operated by EncroChat.

Personal email: galip77@msn.com

Related domains:

hxxp://canna4bits.com

hxxp://pgpplus.com

hxxp://eccomsolutions.com

hxxp://hypercore.network

hxxp://citaxy.com

hxxp://vitadote.com

hxxp://pgpsure.com

hxxp://mysmart.cab

hxxp://organic4bits.com

hxxp://beauty2girls.com

hxxp://cryptobrite.com

hxxp://hypercore.mobi

hxxp://encrochatsure.com

hxxp://visumkaufen.de

hxxp://hypercore.systems

Sunday, July 28, 2024

Domain Portfolio Operated by Sp3cial1st from Darkode

The following is a set of domains known and managed and operated by Sp3cial1st from Darkode.

Email address accounts known to have been involved in the campaign include:

anewone@criptext.com

alexane50@protonmail.com

darkness_su@protonmail.ch

Sample MD5s known to have been communicating with one of the domains include:

adcbf2ea5a9709b455fd2baf002b81ef

1aa2388ec405059bc27b177001c3b096

Sample domain portfolio includes:

hxxp://bluewavebookings.com

hxxp://ansonfamily.us

hxxp://successfullfreedom.us

hxxp://aquaworldmarine.com

hxxp://buycomplete1.com

hxxp://gqali.com

hxxp://clementmunns.com

hxxp://corp-gems.com

hxxp://be-liberty.com

hxxp://obey.su

hxxp://feltoninteractive.com

hxxp://skyrocketadv.com

hxxp://e-commt.net

hxxp://catalystechnologies.com

hxxp://bpoval.com

hxxp://darkness.su

hxxp://tananashvili.com

hxxp://axcelsp.com

hxxp://clickforsupport.us

hxxp://crunchycrew.com

hxxp://enuniq.com

hxxp://gotots.us

hxxp://bestmailonline.com

hxxp://germandise.com

hxxp://gldt.net

hxxp://sethyoufree.tv

hxxp://jy-partners.com

hxxp://iohex.com

hxxp://brit.tw

Julian Assange's IoCs

Correct me if I'm wrong but OSINT is the power of everything.

Personal email: anon1984@fastmail.to

Related email address accounts: thoreau@netspace.net.au

Related domains:

hxxp://suelette.net

hxxp://suelette.org

hxxp://underground-book.org

hxxp://underground-book.net

Hacking Group: International Subversives

Hacking Group Members: Mendax, Trax and Prime Suspect

Related email address accounts:

me@iq.org

proff@iq.org

Skype: meatiqdotorg

Related email address account:

suelette@xs4all.nl

Related email address accounts:

suelette@iq.org

proff@iq.org

proff@suburbia.net

julien@post.harvard.edu

proff@gnu.ai.mit.edu

proff@suburbia.apana.org.au

proff@four.net - hxxp://metaverse.org

Handle: Mendax

Tuesday, July 23, 2024

Malicious Infrastructure Discovery

Greatly inspired by two comparative studies on the IoCs (Indicators of Compromise) market segment within the threat intelligence market in specific IoCs obtained using public and not necessarily proprietary sources which believe it or not also include my personal blog which is quite a privilege I've decided to try to resume my blogging rhythm to the point of "getting back to basics" in terms of returning to my original roots as an independent contractor where I'm most productive and self-started and officially launch a series of blog posts which I've decided to entitle "Malicious Infrastructure Discovery" where I aim to bring back the true spirit of the market segment and possibly to the industry to the point of getting some of my old readers back in the game here in terms of providing daily and unique actionable intelligence on some of the malicious infrastructure that I'm using both public and proprietary tools to monitor and analyze.

In the first post I'll discuss in-depth an "ongoing portfolio" of what appears to be cyber traps in a way which they could be courtesy of an unknown individual an information operation attempting to collect information or plain simple attempt by high profile cybercriminals to spread their malicious portfolio domains to as many users as possible in an attempt to attract new users into their user base.

Let's start from the basics. It "all began" when I stumbled upon several rogue and bogus sites offering access to supposedly stolen and compromised credit cards. I then decided to take a deeper look and in specific as I was interested in figuring out the actual details behind the malicious and rogue infrastructure behind these I decided to come up with a new daily blog posts series which I entitled "Malicious Infrastructure Discovery" in an attempt to bring back the true spirit of my blog back in 2008-2009 when I was most active and providing actionable intelligence on the Internet and network infrastructure behind some of the most relevant advanced and high volume attack campaigns and their associated infrastructure back in the time.

I'll first begin by discussing in-depth and profiling the name servers that are actually responsible for maintaining and keeping this rogue and bogus domain portfolio online. In this specific case the name servers involved in this rogue and malicious domain portfolio are:

hxxp://ns1.ecspert.su - Email: policecontrols[.]mail.ru

hxxp://ns2.ecspert.su

hxxp://ns1.putinkremel.su - Email: dnscointrolf[.]rambler.ru

hxxp://ns2.putinkremel.su

hxxp://ns1.idinaxui-netspama.ru

hxxp://ns2.idinaxui-netspama.ru

hxxp://ns1.dnsprivatecontrol.su - Email: lukinolegxcrq[.]mail.ru

hxxp://ns2.dnsprivatecontrol.su

hxxp://ns1.domenddnss.su - Email: robbin3ip[.]rambler.ru; aqerhett[.]rambler.ru

hxxp://ns2.domenddnss.su

hxxp://ns1.woeifnewowmecwff.my

hxxp://ns2.woeifnewowmecwff.my

hxxp://ns1.dnsiidifijjff.se

hxxp://ns2.dnsiidifijjff.se

hxxp://ns1.controlndssdsss.se

hxxp://ns2.controlndssdsss.se

hxxp://ns1.thgtrhrth.com

hxxp://ns2.thgtrhrth.com

We'll start by profiling the first name server (ns1.ecspert.su) which is known to have responded to the following IPs in the past:

185[.]228[.]232[.]43

45[.]140[.]19[.]21

5[.]42[.]98[.]120

185[.]5[.]249[.]202

45[.]152[.]86[.]149

109[.]107[.]161[.]35

185[.]159[.]129[.]185

94[.]142[.]142[.]207

45[.]159[.]208[.]130

45[.]159[.]208[.]159

45[.]154[.]3[.]155

45[.]156[.]21[.]13

80[.]76[.]42[.]107

5[.]42[.]98[.]59

94[.]142[.]141[.]92

185[.]228[.]233[.]252

78[.]153[.]149[.]252

and is offering name server resolution services to a decent portion of the entire domain portfolio. For instance the following domains are all known to have been parked using the same name server services:

hxxp://cvv-store.ru

hxxp://sell-dumps-online.ru

hxxp://fresh-cvv-shop-online.ru

hxxp://robocheck-ssn-price.ru

hxxp://swipegold.ru

hxxp://swiped.ru

hxxp://thefreshcc.ru

hxxp://legit-sites-to-buy-cc.ru

hxxp://golden-shop-cc.ru

hxxp://crdclub.ru

hxxp://german-plaza.ru

hxxp://approved1.ru

hxxp://swiped1.ru

hxxp://non-cvv-sites-2020.ru

hxxp://free-credit-card-dumps-with-pin-2020.ru

hxxp://fullz-for-sale-2020.ru

hxxp://cerberux.net

hxxp://vipcvv.net

hxxp://autodumps.net

hxxp://2rich4bitch.net

hxxp://ladybin101.net

hxxp://jerry.market

hxxp://blackbet.market

hxxp://bankomat.market

hxxp://bigfat.market

hxxp://cvvdumps.market

hxxp://dumps.market

hxxp://rescator.market

hxxp://ultimateshop.market

hxxp://dcshop.market

hxxp://uniccshop.market

hxxp://ccshop.market

hxxp://psycho.market

hxxp://stashpatrick.market

hxxp://bidencash.market

hxxp://realandrare.market

hxxp://prozone.market

hxxp://topgame.market

hxxp://00code.market

hxxp://savastan0.market

hxxp://stashpatrick.group

hxxp://sharkcvv.shop

hxxp://ch-status.shop

hxxp://bestdumps.shop

hxxp://goandswipe.shop

hxxp://buyfullz.info

hxxp://castrocvv.info

hxxp://c2bit.info

hxxp://vought.info

hxxp://cronozshop.info

hxxp://cvv2shop.info

hxxp://dumps-pin.info

hxxp://btcgenerate.info

hxxp://rondastore.info

hxxp://cvvsale.info

hxxp://buycc.info

hxxp://privatehub.info

hxxp://cvv2.info

hxxp://dumpstrack1.info

hxxp://shopfullz.com

hxxp://unifullz.com

hxxp://guccifullz.com

hxxp://superccfullz.com

hxxp://shel-bz.com

hxxp://cvv2money.com

hxxp://crdcrew.com

hxxp://x-cvv.com

hxxp://batmarket-cvv.com

hxxp://vclubshop-cvv.com

hxxp://cvv-market.com

hxxp://database-market.com

hxxp://cvv-news.com

hxxp://prt-status.com

hxxp://top-checkers.com

hxxp://legitcarders.com

hxxp://1stdumps.com

hxxp://swipedumps.com

hxxp://market-dumps.com

hxxp://trump-dmps.com

hxxp://dumpecards.com

hxxp://benumb-s.com

hxxp://cardermaster.com

hxxp://cvv2finder.com

hxxp://approved-bazar.com

hxxp://shopfullzcvvshop.com

hxxp://darkcvvshop.com

hxxp://bankcvvshop.com

hxxp://shopcvvlvshop.com

hxxp://maincvv-shop.com

hxxp://batmarket-shop.com

hxxp://mrwhite-shop.com

hxxp://xardyssn.com

hxxp://dumps-pin.com

hxxp://cc-stockhk.com

hxxp://dumps-store.com

hxxp://uas-store.com

hxxp://shop-cvv-shop-online.com

hxxp://buy-live-cc-online.com

hxxp://usrbinsale.com

hxxp://hostsellgood.com

hxxp://r2land.com

hxxp://cvv-privated.com

hxxp://loxcc.com

hxxp://fe-acc19.com

hxxp://tra-03.com

hxxp://privateshop2.com

hxxp://ssndob.team

hxxp://authorizecvv.org

hxxp://batmarket.org

hxxp://cashoutcarders.org

hxxp://meccadumps.org

hxxp://briancrabs.org

hxxp://verifpro.org

hxxp://fullzking.org

hxxp://yalelodge.org

hxxp://cardersplace.org

hxxp://88cc.org

hxxp://sruka.org

hxxp://txn2.org

hxxp://elonmoney.life

hxxp://dumps.life

hxxp://ccshop.life

hxxp://rd2.life

hxxp://ivbv.club

hxxp://185.159.129.122

hxxp://cvvbank.ru

hxxp://dumpsgate.ru

hxxp://shop-online-without-cvv-code.ru

hxxp://validcard.ru

hxxp://cc2cc.ru

hxxp://freshshop-cc.ru

hxxp://bstab.ru

hxxp://cardersvilla.ru

hxxp://cardingmafia.ru

hxxp://free-dumps-with-pin-2020.ru

hxxp://prozone.expert

hxxp://udumps.net

hxxp://sh0ping.net

hxxp://jerrys.market

hxxp://zunostore.market

hxxp://stashpatrick-shop.shop

hxxp://f1store.shop

hxxp://ultimateshop.info

hxxp://cvvpro.info

hxxp://darkbase.info

hxxp://00code.info

hxxp://benumb.info

hxxp://cvv4money.com

hxxp://bvcvv.com

hxxp://autocvv.com

hxxp://authorize-cvv.com

hxxp://wall-street-store-cvv.com

hxxp://yes-status.com

hxxp://xleets.com

hxxp://fullzshops.com

hxxp://cardclonedumps.com

hxxp://legitcarder.com

hxxp://kiwi-bestshop.com

hxxp://wucshop.com

hxxp://sniffedcc.com

hxxp://cvvshop2019.com

hxxp://sailor209.com

hxxp://stashpatrick.team

hxxp://ccvshop.org

hxxp://robinshop.org

hxxp://infraud.org

hxxp://dumps.name

hxxp://tmt24org.ru

hxxp://goswipe.ru

hxxp://cvvonline.ru

hxxp://topgame-alwaysonline.ru

hxxp://eurodollarscard.ru

hxxp://911cc.ru

hxxp://pabloclub.ru

hxxp://apeclub.ru

hxxp://shalomninja.ru

hxxp://sailor209.ru

hxxp://ddumps247.ru

hxxp://doc-shop.me

hxxp://cvvinc.me

hxxp://cvv1.me

hxxp://cvvhube.ru

hxxp://infraud.ru

hxxp://cvv-privated.ru

hxxp://zataclub.ru

hxxp://vought.store

hxxp://goldplastic.store

hxxp://authorizecvv.store

hxxp://batmarket.store

hxxp://jerry-store.store

hxxp://00code.store

hxxp://f1cc.store

hxxp://00code.online

hxxp://ssndob.space

hxxp://sharkshop.tech

hxxp://cvvshop.site

hxxp://ccvshop.site

hxxp://ultimateshop.site

hxxp://guccifullz.store

hxxp://superccfullz.store

hxxp://shel-bz.store

hxxp://elonmoney.store

hxxp://cvv4money.store

hxxp://cerberux.store

hxxp://xfreshcvv.store

hxxp://x-cvv.store

hxxp://shopemv.store

hxxp://omrt.store

hxxp://c2bit.store

hxxp://househt.store

hxxp://pitdumps.store

hxxp://legitdumps.store

hxxp://rescator.store

hxxp://cronozshop.store

hxxp://cvvshop.store

hxxp://robinshop.store

hxxp://cvv2shop.store

hxxp://doc-shop.store

hxxp://cvvpro.store

hxxp://btcgenerate.store

hxxp://fullbase.store

hxxp://darkbase.store

hxxp://77store.store

hxxp://mc-store.store

hxxp://cvv-privated.store

hxxp://primecc.store

hxxp://88cc.store

hxxp://kfcclub.store

hxxp://www-cvvhub.store

hxxp://benumb.store

hxxp://shalom-ninja.store

hxxp://cvvsale.store

The complete list of rogue and bogus domains hosted on these name servers includes:

hxxp://00c-status.ru

hxxp://00c-status.su

hxxp://00code.info

hxxp://00code.market

hxxp://100usd.su

hxxp://1stdumps.com

hxxp://2rich4bitch.net

hxxp://2tracks.biz

hxxp://88cc.org

hxxp://911cc.ru

hxxp://911shop.ru

hxxp://911shop.su

hxxp://apeclub.ru

hxxp://apeclub.su

hxxp://approved-bazar.com

hxxp://approved1.ru

hxxp://authorize-cvv.com

hxxp://authorize-cvv.su

hxxp://authorizecvv.org

hxxp://autocvv.com

hxxp://autodumps.net

hxxp://bankcvvshop.com

hxxp://bankomat.market

hxxp://batmarket-cvv.com

hxxp://batmarket-cvv.su

hxxp://batmarket-shop.com

hxxp://batmarket-shop.su

hxxp://batmarket.org

hxxp://benumb-s.com

hxxp://benumb.info

hxxp://benumb.su

hxxp://bestcvvshop.su

hxxp://bestdumps.shop

hxxp://bidencash.market

hxxp://big-dumps.ru

hxxp://bigfat.market

hxxp://biggest.su

hxxp://bingodumpslogin.ru

hxxp://blackbet.market

hxxp://blackbones.ru

hxxp://blackstash.su

hxxp://blcckchain.ru

hxxp://blcckchain.su

hxxp://briancrabs.org

hxxp://btcgenerate.info

hxxp://buy-live-cc-online.com

hxxp://buycc.info

hxxp://buydmp.su

hxxp://buyfullz.info

hxxp://bvcvv.com

hxxp://c2bit.info

hxxp://cardclonedumps.com

hxxp://cardermaster.com

hxxp://cardersplace.org

hxxp://carding-planet.su

hxxp://cardingforum.ru

hxxp://cards4money.su

hxxp://cashoutcarders.org

hxxp://castrocvv.info

hxxp://cc-stockhk.com

hxxp://cc2cc.biz

hxxp://cc2cc.ru

hxxp://cc2cc.su

hxxp://ccbuy.su

hxxp://cccvvshop.ru

hxxp://ccdumps.su

hxxp://ccdumpssites.ru

hxxp://ccshop.life

hxxp://ccshop.market

hxxp://ccvshop.org

hxxp://cerberux.net

hxxp://ch-status.shop

hxxp://ch-status.su

hxxp://chinadump.ru

hxxp://choppings.ru

hxxp://cleopatra-cc.su

hxxp://crdcrew.com

hxxp://crdstore.su

hxxp://cronozshop.info

hxxp://cvv-dumps-shop.ru

hxxp://cvv-dumps-shop.su

hxxp://cvv-market.com

hxxp://cvv-news.com

hxxp://cvv-privated.com

hxxp://cvv-privated.ru

hxxp://cvv-privated.su

hxxp://cvv-store.ru

hxxp://cvv1.me

hxxp://cvv2.info

hxxp://cvv2finder.com

hxxp://cvv2money.com

hxxp://cvv2shop.info

hxxp://cvv2shop.su

hxxp://cvv4money.com

hxxp://cvvcarders.su

hxxp://cvvdumps.market

hxxp://cvvhube.ru

hxxp://cvvhube.su

hxxp://cvvhubs.ru

hxxp://cvvinc.me

hxxp://cvvkings.su

hxxp://cvvprivate.su

hxxp://cvvpro.info

hxxp://cvvpro.ru

hxxp://cvvsale.info

hxxp://cvvshop2019.com

hxxp://cypher-shop.ru

hxxp://darkbase.info

hxxp://darkcvvshop.com

hxxp://database-market.com

hxxp://dcshop.market

hxxp://ddumps247.ru

hxxp://doc-shop.me

hxxp://doc-shop.su

hxxp://docster.su

hxxp://donaldcvv.su

hxxp://drevil.su

hxxp://dumpecards.com

hxxp://dumps-cc.su

hxxp://dumps-pin.com

hxxp://dumps-pin.info

hxxp://dumps-store.com

hxxp://dumps.life

hxxp://dumps.market

hxxp://dumps.name

hxxp://dumpscvv.ru

hxxp://dumpshop.su

hxxp://dumpsshop.su

hxxp://dumpster.su

hxxp://dumpstrack1.info

hxxp://ecspert.su

hxxp://elonmoney.life

hxxp://elonmoney.ru

hxxp://empirecc.su

hxxp://eurodollarscard.ru

hxxp://f1ccstore.su

hxxp://f1store-cc-shop.su

hxxp://f1store.shop

hxxp://f1store.su

hxxp://fe-acc19.com

hxxp://fe-dumps.ru

hxxp://feshop-one.su

hxxp://free-credit-card-dumps-with-pin-2020.ru

hxxp://free-cvv-dump-sites.ru

hxxp://free-dumps-and-pins.ru

hxxp://free-dumps-with-pin-2020.ru

hxxp://free-valid-cc-dumps.ru

hxxp://fresh-cc-shop-ru.ru

hxxp://freshbase-cc-cvv-shop.ru

hxxp://fullbase.su

hxxp://fullz-vendor.ru

hxxp://fullzking.org

hxxp://fullzshops.com

hxxp://fullzvendor.ru

hxxp://goandswipe.shop

hxxp://goldcvv.su

hxxp://golden-dumps-cvv.ru

hxxp://golden-dumps-shop.ru

hxxp://golden-shop-dumps.ru

hxxp://good-cvv-sites.ru

hxxp://goodshopbiz.ru

hxxp://guccifullz.com

hxxp://gullashop.ru

hxxp://hackingatm.ru

hxxp://hostsellgood.com

hxxp://hovatools.ru

hxxp://infraud.org

hxxp://iswipe.su

hxxp://ivbv.club

hxxp://jerry-store.su

hxxp://jerry.market

hxxp://jerrys.market

hxxp://jerrys.su

hxxp://kishan.su

hxxp://kiwi-bestshop.com

hxxp://krebsonsecurity.ru

hxxp://ladybin101.net

hxxp://legit-sites-to-buy-cc.ru

hxxp://legitcarder.com

hxxp://legitcarders.com

hxxp://liveccdumps.ru

hxxp://loxcc.com

hxxp://maincvv-shop.com

hxxp://maincvv-shop.su

hxxp://maincvv.ru

hxxp://maincvv.su

hxxp://market-dumps.com

hxxp://mastercvv-cards.ru

hxxp://meccadumps.org

hxxp://money-club.su

hxxp://moneybasecvv.ru

hxxp://mrwhite-shop.com

hxxp://next-lvl.su

hxxp://no-cvv-sites.ru

hxxp://oceancc.su

hxxp://ohu-status.ru

hxxp://pabloclub.ru

hxxp://pop3club.su

hxxp://pp24shop.su

hxxp://privatedumps.ru

hxxp://privatehub.info

hxxp://privateshop2.com

hxxp://privateuploadforsellers.ru

hxxp://prozone.expert

hxxp://prozone.market

hxxp://prt-status.com

hxxp://psycho.market

hxxp://r2land.com

hxxp://rd2.life

hxxp://rdp-sh0p.su

hxxp://realandrare.market

hxxp://realdumppin.biz

hxxp://realfullz.su

hxxp://rescator-cc-shop.ru

hxxp://rescator-cvv.ru

hxxp://rescator.market

hxxp://robinshop.org

hxxp://rondastore.info

hxxp://royaldumps.ru

hxxp://sailor209.com

hxxp://sailor209.ru

hxxp://sailor209.su

hxxp://savastan0.market

hxxp://scl-status.ru

hxxp://sclass.su

hxxp://sh0ping.net

hxxp://shalomninja.ru

hxxp://shalomninja.su

hxxp://sharkcvv.shop

hxxp://shel-bz.com

hxxp://shop-cc-dumps.ru

hxxp://shop-cvv-shop-online.com

hxxp://shopcvvlvshop.com

hxxp://shopfullz.com

hxxp://shopfullzcvvshop.com

hxxp://skibin.su

hxxp://sniffedcc.com

hxxp://spam-market.su

hxxp://sruka.org

hxxp://ssndob.team

hxxp://stashpatrick-shop.shop

hxxp://stashpatrick-shop.su

hxxp://stashpatrick.group

hxxp://stashpatrick.market

hxxp://stashpatrick.team

hxxp://super-shop.biz

hxxp://super-shop.su

hxxp://superccfullz.com

hxxp://swipe2go.ru

hxxp://swipedumps.com

hxxp://swipegold.ru

hxxp://swipestore.su

hxxp://top-checkers.com

hxxp://top-dump-shops.ru

hxxp://topgame-alwaysonline.ru

hxxp://topgame.agency

hxxp://topgame.market

hxxp://tra-03.com

hxxp://treasureclub.su

hxxp://trump-cvv.su

hxxp://trump-dmps.com

hxxp://txn2.org

hxxp://uas-store.com

hxxp://udumps.net

hxxp://ultimateshop.info

hxxp://ultimateshop.market

hxxp://uniccshop.market

hxxp://uniccshopcvv.su

hxxp://unifullz.com

hxxp://universalesellerpanel.ru

hxxp://univv.su

hxxp://usrbinsale.com

hxxp://validccs.ru

hxxp://validccs.su

hxxp://validshop-cvv.ru

hxxp://vclubshop-cvv.com

hxxp://verifpro.org

hxxp://vipcvv.net

hxxp://vought.info

hxxp://wall-street-store-cvv.com

hxxp://wrabbit.su

hxxp://wucshop.com

hxxp://x-cvv.com

hxxp://x-cvv.ru

hxxp://x-cvv.su

hxxp://xardyssn.com

hxxp://xfreshcvv.ru

hxxp://xfreshcvv.su

hxxp://xleets.com

hxxp://yalelodge.org

hxxp://yes-status.com

hxxp://yes-status.ru

hxxp://zataclub.ru

hxxp://zunostore.market

hxxp://00c-status.shop

hxxp://2020-cvv-sites.ru

hxxp://2022-fullz.su

hxxp://2pac.su

hxxp://2tracks24.ru

hxxp://approved-cc.su

hxxp://approved1.ru

hxxp://atlantiscards.shop

hxxp://atlantisdeals.shop

hxxp://autocvv.ru

hxxp://autocvv.shop

hxxp://autocvv.su

hxxp://babli.su

hxxp://bank-fullz.su

hxxp://bank-login-fullz.ru

hxxp://bank-logins-fullz.ru

hxxp://basecard.ru

hxxp://bass-pro-cc.ru

hxxp://best-credit-card-dump-sites.ru

hxxp://best-cvv-sites-2019-list.ru

hxxp://bestbins.su

hxxp://bestcvv.su

hxxp://bestdumps.su

hxxp://big-dumps.ru

hxxp://binboss.shop

hxxp://bingodumpslogin.ru

hxxp://binswork.ru

hxxp://briansdump.su

hxxp://brocard1.ru

hxxp://bstab.ru

hxxp://buy-cc-cheap.ru

hxxp://buy-cc-cvv.su

hxxp://buy-dumps.ru

hxxp://buycvv2.su

hxxp://buycvvonline.su

hxxp://buycvvshop.ru

hxxp://buydmp.su

hxxp://buydumpscvv.ru

hxxp://buyst0re.com

hxxp://cardclonedumps.shop

hxxp://carder00.ru

hxxp://carderpro.su

hxxp://carderscave.ru

hxxp://carderscave.su

hxxp://cardersplace.ru

hxxp://carderspro.shop

hxxp://cardersvilla.ru

hxxp://cardertools.su

hxxp://carding-bank.su

hxxp://carding-planet.ru

hxxp://carding-planet.su

hxxp://cardingforum.ru

hxxp://cardingforum.su

hxxp://cardingfree.shop

hxxp://cardingmafia.ru

hxxp://cardingmaster.ru

hxxp://cardmafia.su

hxxp://cardrock.su

hxxp://cards4money.shop

hxxp://cardstorm.su

hxxp://cc-cvv.ru

hxxp://cc-dumps.ru

hxxp://cc-store-near-me.ru

hxxp://cc-street.shop

hxxp://cc2btc.shop

hxxp://ccbase.su

hxxp://ccbuy.ru

hxxp://cccvvshop.shop

hxxp://ccdumpssites.ru

hxxp://ccfullz.ru

hxxp://ccvalid.su

hxxp://cgate.shop

hxxp://cheapdumps.shop

hxxp://chinadump.ru

hxxp://chopping.shop

hxxp://clubv.shop

hxxp://coinodeal.ru

hxxp://coinodeals.ru

hxxp://crdclub.ru

hxxp://crdmrkt.shop

hxxp://crdpro.ru

hxxp://credit-card-dumps.su

hxxp://cvtools.ru

hxxp://cvv-com.su

hxxp://cvv-market.shop

hxxp://cvv-net.su

hxxp://cvv-privated.shop

hxxp://cvv-shop.su

hxxp://cvv-store.ru

hxxp://cvv2-shop.shop

hxxp://cvv2seller.su

hxxp://cvv2shop.su

hxxp://cvvbank.ru

hxxp://cvvcarders.ru

hxxp://cvvcarders.shop

hxxp://cvvdump-hacking.ru

hxxp://cvvdumps.shop

hxxp://cvvhubs.shop

hxxp://cvvme-st.shop

hxxp://cvvmest-store.shop

hxxp://cvvonline.ru

hxxp://cvvseller.ru

hxxp://cvvseller.su

hxxp://cvvshop1.su

hxxp://cvvshops.shop

hxxp://cyberxsh0p.ru

hxxp://d4rksys.shop

hxxp://ddumps24.ru

hxxp://ddumps247.ru

hxxp://dpmix.su

hxxp://dump-shops.su

hxxp://dumpmania24.ru

hxxp://dumps-shop.su

hxxp://dumps4free.ru

hxxp://dumpscard.ru

hxxp://dumpscvv2.ru

hxxp://dumpsgate.ru

hxxp://dumpshop.su

hxxp://dumpskingdom.ru

hxxp://dumpspage.ru

hxxp://dumpster.su

hxxp://dumpstershop.ru

hxxp://eliteservices.su

hxxp://eurodollarscard.shop

hxxp://fe-acc19.shop

hxxp://fe-cc-market.ru

hxxp://fe-dumps.ru

hxxp://fe-shop.su

hxxp://fedumps-reserve.su

hxxp://feshop-dumps.su

hxxp://feshop-forever.su

hxxp://feshop-one.su

hxxp://feshop-reserve.su

hxxp://feshop-two.ru

hxxp://feshop.su

hxxp://fraudmarket.ru

hxxp://free-credit-card-dumps-with-pin-2020.ru

hxxp://free-cvv-dump-sites.ru

hxxp://free-dumps-and-pins.ru

hxxp://free-dumps-with-pin-2020.ru

hxxp://free-valid-cc-dumps.ru

hxxp://fresh-cc-dumps-cvv-shop.ru

hxxp://fresh-cc-shop-ru.ru

hxxp://fresh-cvv-shop-online.ru

hxxp://fresh-cvv.su

hxxp://fresh-dumps-shop.ru

hxxp://fresh-login.ru

hxxp://freshbase-cc-cvv-shop.ru

hxxp://freshshop-cc.ru

hxxp://freshstuff24.ru

hxxp://fridaydumps24.ru

hxxp://fullz-for-sale-2020.ru

hxxp://fullz-free.su

hxxp://fullz-vendor.ru

hxxp://fullzvendor.ru

hxxp://galaxycvv.shop

hxxp://german-plaza.ru

hxxp://goldcvv.su

hxxp://golddumps.ru

hxxp://golden-dumps-cvv.ru

hxxp://golden-dumps-shop.ru

hxxp://golden-shop-cc.ru

hxxp://golden-shop-dumps.ru

hxxp://goldendumps.ru

hxxp://good-cvv-sites.ru

hxxp://good-cvv.su

hxxp://good-dumps-shop.su

hxxp://gooddumps.shop

hxxp://goodshopbiz.ru

hxxp://greatdumps.ru

hxxp://greatestash.shop

hxxp://gullashop.ru

hxxp://hackingatm.ru

hxxp://hackingforum.su

hxxp://hackseller.shop

hxxp://hgn01.shop

hxxp://hostsellgood.shop

hxxp://hot-cards.shop

hxxp://househt.shop

hxxp://huegostore.shop

hxxp://infraud.ru

hxxp://infraud.shop

hxxp://inone.su

hxxp://instantcvv.ru

hxxp://instantcvv.su

hxxp://iprofitcvvshop.ru

hxxp://ispoof.shop

hxxp://iswipe.su

hxxp://joker-cvv.ru

hxxp://jokers-stash.shop

hxxp://jokersstash.shop

hxxp://just-kill.shop

hxxp://just4valid.su

hxxp://jvcc.ru

hxxp://krebsonsecurity.ru

hxxp://l33t.su

hxxp://legit-sites-to-buy-cc.ru

hxxp://legitcarder.ru

hxxp://legitcarder.shop

hxxp://livefire.su

hxxp://logocc.su

hxxp://logoshopcc.su

hxxp://loxcc.shop

hxxp://luckytrack.ru

hxxp://madstore.su

hxxp://mafiastore.shop

hxxp://mastercvv-cards.ru

hxxp://maza.su

hxxp://mc-store.shop

hxxp://mcdumpals.ru

hxxp://megamania.su

hxxp://mn0g0.su

hxxp://moneybasecvv.ru

hxxp://moneyvalley.ru

hxxp://monogo.ru

hxxp://multivpn.shop

hxxp://mydarkreviews.shop

hxxp://n1-shop.su

hxxp://no-cvv-sites.ru

hxxp://nocvvsites2019.ru

hxxp://non-cvv-sites-2020.ru

hxxp://ohu-status.shop

hxxp://oktavian.su

hxxp://pawn-store.su

hxxp://pingushop.shop

hxxp://pinshop.su

hxxp://pois0n-cc-shop.ru

hxxp://pompei.su

hxxp://private-cvv.shop

hxxp://privatedumps.ru

hxxp://privateshop2.ru

hxxp://privateuploadforsellers.shop

hxxp://procvvshop.su

hxxp://prt-status.shop

hxxp://prvtzone.ru

hxxp://putinkremel.su

hxxp://rdp-sh0p.su

hxxp://realest.su

hxxp://rescator-cc-shop.ru

hxxp://rescator-cvv.ru

hxxp://rescator-shop.su

hxxp://rescator.ru

hxxp://rescator.su

hxxp://rickstash.shop

hxxp://robocheck-ssn-price.ru

hxxp://royaldumps.ru

hxxp://russian-cvv-shop.ru

hxxp://savastano.shop

hxxp://scl-status.shop

hxxp://secretstore.ru

hxxp://sell-dumps-online.ru

hxxp://selldumpsshop.ru

hxxp://shop-buying-cvv-online.shop

hxxp://shop-cc-dumps.ru

hxxp://shop-cvv.su

hxxp://shop-online-without-cvv-code.ru

hxxp://shop-valid.su

hxxp://shopcvvlvshop.ru

hxxp://shopcvvlvshop.shop

hxxp://shopfullzcvvshop.ru

hxxp://shopfullzcvvshop.shop

hxxp://site-to-buy-fullz.ru

hxxp://sitetobuyfullz.ru

hxxp://sixtillion-cc-shop.ru

hxxp://skycvv.ru

hxxp://smart-stripes.ru

hxxp://spam-market.su

hxxp://swipe2go.ru

hxxp://swiped.ru

hxxp://swiped1.ru

hxxp://swipegold.ru

hxxp://thecarder.ru

hxxp://thefreshcc.ru

hxxp://thefreshstuffs.shop

hxxp://themoneyteam24.ru

hxxp://thugtools.ru

hxxp://tmt24org.ru

hxxp://toolzgang.ru

hxxp://top-cvv-sites.ru

hxxp://top-dump-shops.ru

hxxp://tor-dumps-shop.ru

hxxp://tor2card.ru

hxxp://tox3.shop

hxxp://track2shopcvv.ru

hxxp://trump-dmps.shop

hxxp://trump-dumps.shop

hxxp://trusted-cvv-shop-2020.ru

hxxp://trustedcvvshop2020.ru

hxxp://try2check.shop

hxxp://uas-shop.su

hxxp://uas-store.shop

hxxp://ug-storecards.ru

hxxp://ultimate-shop.shop

hxxp://uniccfullz.ru

hxxp://uniccshops.ru

hxxp://usacvv.shop

hxxp://vaicc.shop

hxxp://vaildcc.shop

hxxp://valcc.shop

hxxp://validcard.ru

hxxp://dnsproxy1.fm.nic.ru

hxxp://nomail.nic.ru

hxxp://entershop.me

hxxp://bank-of-america-atm-card-cvv.verifier.life

hxxp://verifier.life

hxxp://cvv-purchase.verifier.life

hxxp://buy-cc-numbers.carders.name

hxxp://the-dump-leather-furniture.carders.name

hxxp://bigseller.cc

hxxp://cc-shop-script.apaman-shop.cc

hxxp://cc-dump-sites.apaman-shop.cc

hxxp://fullz-website.apaman-shop.cc

hxxp://apaman-shop.cc

hxxp://swipe2go.cc

hxxp://buy-cc-numbers-online-best-cvv-sites.online

hxxp://feshoptor.online

hxxp://ukccshop.online

hxxp://black-market-cc-shop.online

hxxp://buy-cc-shop-admin.online

hxxp://buy-cc-numbers-online.online

hxxp://buy-cc-from-unicc.online

hxxp://briansclub-cvv.validcc-shop.be

hxxp://credit-card-dump-sites.validcc-shop.be

hxxp://buying-fullz.walmart-cc.be

hxxp://non-vbv-shop.walmart-cc.be

hxxp://buying-cvv-online.walmart-cc.be

hxxp://cvv-bank-logins.fullz-bins.online

hxxp://fullz-bins.online

hxxp://non-vbv-shop.card-dump-sites.online

hxxp://unicc-tor-domain.card-dump-sites.online

hxxp://card-dump-sites.online

hxxp://credit-card-dumps-free-2022-dump-cards.online

hxxp://dump-cards.online

hxxp://buy-cc-s.online

hxxp://cvv-dump-generator.online

hxxp://dumpscvvshop.online

hxxp://bingocvvshop.online

hxxp://d-goodshop-cc.dump-cvv-shop.online

hxxp://dump-cvv-shop.online

hxxp://bingo-cvv-shop.online

hxxp://cvv-shop-su.good-cvv-shop.online

hxxp://feshop-tor.good-cvv-shop.online

hxxp://sell-dumps-with-pin-www-mshop-metro-cc-ru-shop.online

hxxp://www-mshop-metro-cc-ru-shop.online

hxxp://shop-without-cvv-mshop-metro-cc-ru-shop.online

hxxp://mshop-metro-cc-ru-shop.online

hxxp://atm-dumps.carder-shop.online

hxxp://shop-your-way-cc.carder-shop.online

hxxp://carder-shop.online

hxxp://site-to-buy-live-cc-cvv-card-434256-login-shop.online

hxxp://buy-cvv-fresh-ebay-cc-acc-shop.online

hxxp://mshop-metro-cc-shop.online

hxxp://card-dumps-mr-anderson-cc-shop.online

hxxp://mr-anderson-cc-shop.online

hxxp://carderbazar-taplink-cc-shop.online

hxxp://taplink-cc-shop.online

hxxp://valid-cc-shop.valid-cc-shop.online

hxxp://buy-fullz-with-drivers-license.valid-cc-shop.online

hxxp://valid-cc-shop.online

hxxp://cvv-dump-sites.cc-shop.online

hxxp://https-d-good-shop-cc-checkout-page.cc-shop.online

hxxp://cc-shop.online

hxxp://cc-fullz-sites-roland-r8-rom-card-dump.online

hxxp://roland-r8-rom-card-dump.online

hxxp://101-201-dumps-cc-shop-xmpp-jp.online

hxxp://crypto-store-cc-store-cc-promo.online

hxxp://store-cc-promo.online

hxxp://bingodumps-login.online

hxxp://bazar-forum-carder-forum-bazar-forum-carder-forum.online

hxxp://bazar-forum-carder-forum.online

hxxp://no-cvv-sites-2022.carder-forum.online

hxxp://carder-forum.online

hxxp://fkowefkoprg.online

hxxp://cvv-shop-ru-18sgorg.online

hxxp://the-dump-online-shopping-18sgorg.online

hxxp://18sgorg.online

hxxp://cvv-shopping.online

hxxp://shopping-without-cvv-cc-best-shopping.online

hxxp://no-cvv-shopping-sites-cc-best-shopping.online

hxxp://ann-taylor-loft-cc-cc-best-shopping.online

hxxp://cc-best-shopping.online

hxxp://shop-online-without-cvv-code-taplink-cc-shopping.online

hxxp://cc-shopping.online

hxxp://centralshop-cvv.cvvstore.online

hxxp://fullz-bins.cvvstore.online

hxxp://cvvstore.online

hxxp://cc-best-shopping-taplink-cc-la-pulce-store.online

hxxp://taplink-cc-la-pulce-store.online

hxxp://liscn-cc-store.online

hxxp://sell-cvv-vk-cc-store.online

hxxp://vk-cc-store.online

hxxp://ltdcc-shop-mi-cc-store.online

hxxp://j-shop-cc-mi-cc-store.online

hxxp://mi-cc-store.online

hxxp://ssn-cvv-cc-8-store.online

hxxp://golden-dumps-cc-cc-8-store.online

hxxp://cc-8-store.online

hxxp://buy-cc-fullz-online.online

hxxp://no-cvv-websites.buying-dumps-online.online

hxxp://buying-dumps-online.online

hxxp://buy-ccs-online.online

hxxp://crate-and-barrel-cc.cc-shop-online.online

hxxp://dumps-with-pin-2022.cc-shop-online.online

hxxp://cc-shop-online.online

hxxp://neverlose-cc-buy-or-die.online

hxxp://dark-web-cc-sites-https-d-good-shop-cc-checkout-page.online

hxxp://dumpscreditcard.online

hxxp://russian-cvv-shop-online-shopping-no-cvv-required.online

hxxp://buy-bins-cc-online-shopping-no-cvv-required.online

hxxp://online-shopping-no-cvv-required.online

hxxp://the-dump-synchrony-legitcc.online

hxxp://ann-taylor-cc-legitcc.online

hxxp://legitcc.online

hxxp://card-cvs-number.buy-cc.online

hxxp://online-dumps-shop.buy-cc.online

hxxp://free-credit-card-dumps-website.buy-cc.online

hxxp://buy-cc.online

hxxp://mr-anderson-cc-shop-d-goodshop-cc.online

hxxp://d-goodshop-cc.online

hxxp://goswipe-cvv-good-best-shop-cc.online

hxxp://he-bought-dump-it.good-best-shop-cc.online

hxxp://purchase-cc-for-carding.good-best-shop-cc.online

hxxp://good-best-shop-cc.online

hxxp://online-shopping-no-cvv-required-darknet-shop-cc.online

hxxp://darknet-shop-cc.online

hxxp://goo-shop-cc.online

hxxp://free-fullz-2021-crown-shop-cc.online

hxxp://crown-shop-cc.online

hxxp://bypass-cc-shop.ferum-shop-cc.online

hxxp://ssn-dob-shop.ferum-shop-cc.online

hxxp://ferum-shop-cc.online

hxxp://goo-shop-cc-m-shop-cc.online

hxxp://company-fullz.m-shop-cc.online

hxxp://m-shop-cc.online

hxxp://extreame-shop-cc.online

hxxp://credit-card-dump-websites-https-good-shop-cc.online

hxxp://buy-stolen-cc-https-good-shop-cc.online

hxxp://cvv-sites-2021-https-n-good-shop-cc.online

hxxp://sites-to-buy-cc-n-good-shop-cc.online

hxxp://n-good-shop-cc.online

hxxp://cvv-store-https-k-good-shop-cc.online

hxxp://buy-cc-cheap-k-good-shop-cc.online

hxxp://dumps-paypal-and-dumps-credit-card-k-good-shop-cc.online

hxxp://k-good-shop-cc.online

hxxp://buy-cc-online-d-good-shop-cc.online

hxxp://d-good-shop-cc.online

hxxp://goob-shop-cc.online

hxxp://selling-cvv-my-shop-metro-cc.online

hxxp://my-shop-metro-cc.online

hxxp://sites-without-cvv-m-shop-metro-cc.online

hxxp://cc-dump-sites-m-shop-metro-cc.online

hxxp://m-shop-metro-cc.online

hxxp://goodshop-dumps-https-crypto-store-cc.online

hxxp://good-cvv-shop-https-crypto-store-cc.online

hxxp://crypto-store-cc.online

hxxp://fresh-dumps-with-pin-green-store-cc.online

hxxp://cc-dumps-bestvalid-cc.online

hxxp://debit-card-dump-bestvalid-cc.online

hxxp://sell-cvv-dumps-https-shop-cc-cc.online

hxxp://fresh-cvv-fullz-store-tilda-cc.online

hxxp://store-tilda-cc.online

hxxp://2rich4b.online

hxxp://shopping-sites-with-no-cvv-required-free-cc-fullz-2022.online

hxxp://free-cc-fullz-2022.online

hxxp://buy-valid-cc-cc-shops-2022.online

hxxp://cc-shops-2022.online

hxxp://jcp-cc-cvv-dumps-2022.online

hxxp://cvv-dumps-2022.online

hxxp://joker-stash-cc-carding-dumps-2022.online

hxxp://cc-hack-site-credit-card-dumps-2022.online

hxxp://dumps-atm-cash-out-cc-dumps-2022.online

hxxp://cvv-shop-online-free-cc-dumps-2022.online

hxxp://free-cc-dumps-2022.online

hxxp://www-mshop-metro-cc-ru-shop-best-cvv-sites-2022.online

hxxp://best-cvv-sites-2022.online

hxxp://dumps-shop-script-top-cvv-sites-2022.online

hxxp://cvv-store-net-top-cvv-sites-2022.online

hxxp://good-best-shop-cc-top-cvv-sites-2022.online

hxxp://top-cvv-sites-2022.online

hxxp://best-cvv-shop-no-cvv-sites-2022.online

hxxp://no-cvv-sites-2022.online

hxxp://best-cc-dump-sites-best-cc-dump-sites-2022.online

hxxp://cc-shop-best-cc-dump-sites-2022.online

hxxp://best-cc-dump-sites-2022.online

hxxp://alboraaq-account-and-database-dumps-cc-dump-sites-2022.online

hxxp://free-cc-sites-for-carding-fullz-shop-2022.online

hxxp://capital-one-walmart-cc-fullz-shop-2022.online

hxxp://best-cvv-shop-2022.online

hxxp://validcc-shop-dumps-shop-2022.online

hxxp://dumps-shop-2022.online

hxxp://free-credit-card-dumps-with-pin-2021-best-cc-shop-2022.online

hxxp://best-cc-shop-2022.online

hxxp://free-dumps-with-pin-2022.online

hxxp://dumps-with-pin-2022.online

hxxp://buying-cvv-credit-card-dumps-free-2022.online

hxxp://fernando-goods-dumps-credit-card-dumps-free-2022.online

hxxp://cc-cvv-shop-online-credit-card-dumps-free-2022.online

hxxp://cc-cvv-2021.online

hxxp://card-dumps-free.validcc-shop.be

hxxp://unicc-free-cc.validcc-shop.be

hxxp://validcc-shop.be

hxxp://ferum-shop-ru.walmart-cc.be

hxxp://mattress-firm-cc.walmart-cc.be

hxxp://cc-shops-2021.walmart-cc.be

hxxp://walmart-cc.be

hxxp://free-cc-dumps-2022-bestvalid-cc-r.online

hxxp://cc-dump-sites-2022.dump-cvv-shop.online

hxxp://good-cvv-shop.online

hxxp://top-cvv-sites-2022.carder-shop.online

hxxp://dump-warehouse-taplink-cc-shop.online

hxxp://buy-dumps-roland-r8-rom-card-dump.online

hxxp://rescator-dumps-store-cc-promo.online

hxxp://free-cc-dumps-telegram-cvv-shopping.online

hxxp://best-site-to-buy-cvv-vk-cc-store.online

hxxp://gagarin-shop-gg24-cc-dns-shop-ru-cc.online

hxxp://unicc-tor-cheap-dumps-cc.online

hxxp://the-dump-sale-this-weekend-darknet-shop-cc.online

hxxp://best-dumps-with-pin-shop-https-n-good-shop-cc.online

hxxp://taplink-cc-la-pulce-store-store-steampowered-com-cc.online

hxxp://store-steampowered-com-cc.online

hxxp://green-store-cc.online

hxxp://online-shopping-no-cvv-needed-cc-shops-2022.online

hxxp://cvv-websites-2022.online

hxxp://cvv-shopping-fullz-shop-2022.online

hxxp://cvv-shop-2022.online

hxxp://zukkoshop-cc-cvv-2021.online

hxxp://buy-cc-for-carding-free.validcc-shop.be

hxxp://cc-carding-sites-cc-shopping.online

hxxp://cc-cvv-dumps-free-neverlose-cc-buy-or-die.online

hxxp://fullz-shop-2022.online

hxxp://cvv-shop-2021-dumps-shop-2022.online

hxxp://credit-card-dumps-free-2022.online

hxxp://http-k-good-shop-cc.online

hxxp://buycards.cc

hxxp://paycash.cc

hxxp://vouched.cc

hxxp://privatestuff.cc

hxxp://dump.name

hxxp://trusted-cvv-sites.dumpsmall.name

hxxp://best-credit-card-dump-sites.dumpsmall.name

hxxp://dump-site-for-credit-cards.dumpsmall.name

hxxp://dumpsmall.name

hxxp://thetrackstore.name

hxxp://approved.name

hxxp://xstuff.cc

hxxp://cvv-shop-cheap.fe-dumpstore.cc

hxxp://fe-dumpstore.cc

hxxp://pawn-store.cc

hxxp://highbalance.cc

hxxp://validcard.cc

hxxp://carderunion.com

hxxp://crdsu.name

hxxp://cc-db.com

hxxp://skimmer-service.com

hxxp://vault-cc.com

hxxp://approved.name

hxxp://cvv-store.com

hxxp://just-valid.com

hxxp://piratescc.com

hxxp://dnsproxy2.fm.nic.ru

hxxp://dnsproxy1.fm.nic.ru

hxxp://cvvbase.com

hxxp://cc-base.com

hxxp://ccshoponline.com

hxxp://vendorsname.com

hxxp://xdedic.com

hxxp://entershopcc.com

hxxp://sniffcc.com

hxxp://dumpedata.com

hxxp://selldumpsshop.site

hxxp://ccv.name

hxxp://dumpsmall.name

hxxp://thetrackstore.name

hxxp://piretes-cc.com

hxxp://sucvv2sell.com

hxxp://cardersvilla.com

hxxp://dump.name

hxxp://jupi-sell.com

hxxp://freshbaycc.com

hxxp://rafanji.com

hxxp://pirates-cc.com

hxxp://procrd.one

hxxp://dmverified.com

hxxp://dumpscenter.name

hxxp://virginwork.com

hxxp://i1sell.com

hxxp://ccforsale.com

hxxp://dumps24.com

hxxp://darknetw0rk.com

hxxp://novlops.cc

hxxp://thefreshcc.com

hxxp://c4rdforallove.com

hxxp://terminalcc.com

hxxp://cheapcvv.me

hxxp://buyst0re.com

hxxp://privateservices.cc

hxxp://iseller.cc

hxxp://i1sell.cc

hxxp://paycash.cc

hxxp://dumpst1t2.com

hxxp://seabiz.cc

hxxp://goose-shop.cc

hxxp://cvv2bank.cc

hxxp://privateservice.cc

hxxp://buycards.cc

hxxp://prodaem.cc

hxxp://propal.cc

hxxp://dumpspage.com

hxxp://eliteservices.name

hxxp://vouched.cc

hxxp://updated.cc

hxxp://scene-tools.cc

hxxp://cardinghacking.com

hxxp://thecarding.com

hxxp://valid-stuff.com

hxxp://magic-numbers.cc

hxxp://virginwork.cc

hxxp://sellingdumps.cc

hxxp://track2cvv.cc

hxxp://cvv-shop.cc

hxxp://pois0ncc.com

hxxp://fernandoclub.com

hxxp://validsh0p.com

hxxp://goldstaff.cc

hxxp://cardingboard.com

hxxp://cvv-shop.me

hxxp://dumps-valid.com

hxxp://swipegold.com

hxxp://cvvmeback.com

hxxp://cvvinc.com

hxxp://forumscc.com

hxxp://cvvllc.com

hxxp://dumps101.com

hxxp://dumpsgate.com

hxxp://cvvshopadmin.com

hxxp://validbank.com

hxxp://german-plaza.com

hxxp://feshop-card.com

hxxp://cardunion.name

hxxp://jbestcc.com

hxxp://cvvbase.me

hxxp://cvvonline.me

hxxp://jworldtopcc.com

hxxp://infraud.com

hxxp://freshcv2.com

hxxp://mcdumpals.me

hxxp://source4cc.com

hxxp://rpsolutions.cc

hxxp://cashoutcc.cc

hxxp://dumpscvv2.com

hxxp://vietnamworm.com

hxxp://yalelodge.com

hxxp://anyccard.com

hxxp://fwefwef.com

hxxp://track2cc.com

hxxp://101blackcard.com

hxxp://ccfullzshopcc.com

hxxp://mrwhitecc.com

hxxp://feshopcc.com

hxxp://try2swipecc.com

hxxp://legitonlineshopcvv2.com

hxxp://goldenshopcc.com

hxxp://centralshopcc.com

hxxp://atnsquad.com

hxxp://ccbases.cc

hxxp://cvv-seller.cc

hxxp://carderscafe.com

hxxp://cardrock.org

hxxp://fullzstore.com

hxxp://sky-fraud.com

hxxp://buycvvonline.com

hxxp://source4dumps.cc

hxxp://fe-dumpstore.com

hxxp://dpscc.com

hxxp://globalccsource.com

hxxp://track1gen.com

hxxp://bases-valid.com

hxxp://batch-conf.com

hxxp://jshop-pro.com

hxxp://ardumps101.com

hxxp://saleccv.cc

hxxp://validcard.cc

hxxp://nhokdown.com

hxxp://logoshopcc.com

hxxp://realjabba.com

hxxp://cvvsh0p.cc

hxxp://ccnall.cc

hxxp://privatestuff.cc

hxxp://toolzgang.com

hxxp://zunostore.com

hxxp://cvvshop.org

hxxp://pawn-store.cc

hxxp://highbalance.cc

hxxp://cardinghispano.com

hxxp://prvtzone.com

hxxp://just4valid.com

hxxp://ssh-zone.com

hxxp://sellz-market.org

hxxp://shop-cc.org

hxxp://cc-shop.org

hxxp://cardersplace.org

hxxp://swipe2go.com

hxxp://dumps-atm.com

hxxp://dumps-bin.com

hxxp://dumpstrack2.com

hxxp://brand-shop.cc

hxxp://dumpspinonline.com

hxxp://fpp2.com

hxxp://fresh-cardsfull.com

hxxp://try2swipe.com

hxxp://2r4b.com

hxxp://0market.cc

hxxp://dumpstreet.cc

hxxp://torcarders.cc

hxxp://vend0rs.cc

hxxp://topdumps.cc

hxxp://vipdumps.cc

hxxp://golddumps.cc

hxxp://zukkos.cc

hxxp://getpins.cc

hxxp://randoms.cc

hxxp://torcrds.cc

hxxp://kards.cc

hxxp://bigseller.cc

hxxp://bigcarder.cc

hxxp://binshop.cc

hxxp://bulkshop.cc

hxxp://t12shop.cc

hxxp://card-room.cc

hxxp://cardrock.cc

hxxp://prostuff.cc

hxxp://freshstuff.cc

hxxp://fe-dumpstore.cc

hxxp://madstore.cc

hxxp://prvtzone.cc

hxxp://gold-card.cc

hxxp://bases-valid.cc

hxxp://damasc.cc

hxxp://sounic.cc

hxxp://german-plaza.cc

hxxp://wendetta.cc

hxxp://robotika.cc

hxxp://dumps44.cc

hxxp://magstr1p3.cc

hxxp://4carding.com

hxxp://shopcvv2.com

hxxp://mastercvv1.com

hxxp://buybest1.com

hxxp://greatdumpz.cc

hxxp://minery.cc

hxxp://honeymoney.cc

hxxp://buybanklogin.com

Friday, July 12, 2024

Got Tips?

Dear blog readers,

I have a new project which aims to be something in the lines of a final project in the context of that if I can manage to get it going and with success it will mean that I will figure out a decent way to secure my pension and that I will reach out to a lot of friends and colleagues from the field with your help and assistance and most importantly with your information and that a lot of impact will be made globally in the true context of what I've always been up to which is monitoring profiling and keeping track of the bad guys.

As of today I'm doing over my best to open a personal cybercriminal Tip Line which I hope that you'll participate with your information actionable threat intelligence including personally identifiable information on the bad guys including all the relevant attachments that you could possibly think of to support your information such as for instance personal photos or any other sort of attachments.

Here are the key summary points:

  • Every tip and actionable intelligence including attachment message is read daily and in real-time
  • Every tip and actionable intelligence including attachment message is processed manually
  • Every tip and actionable intelligence including attachment message is researched manually
  • Every tip and actionable intelligence including attachment message is enriched manually
If you truly want the best of the best in terms of your actionable intelligence tip and supporting attachment reaching out to the appropriate party and your actionable intelligence tip and supporting attachment making a true impact it would be my pleasure to assist here.

Here's the Dark Web Tips Onion URL:

Users who submit messages and attachments can also and are highly advised to use the following public PGP key:

-----BEGIN PGP PUBLIC KEY BLOCK-----

mDMEZgF9BBYJKwYBBAHaRw8BAQdAYvAz/G7rjxPEJtiRQ7YsfT4NifhN7YG4yRPR

sLBvAMu0KERhbmNobyBEYW5jaGV2IDxkYW5jaG8uZGFuY2hldkBodXNoLmNvbT6I

kgQTFgoAOxYhBFGixnfSpBOa356I0vgENZ63e1SHBQJmAX0EAhsDBQsJCAcCAiIC

BhUKCQgLAgQWAgMBAh4HAheAAAoJEPgENZ63e1SHYj4A/1aCVnEsjUV6xlAe+NKx

QAbeQiFjTdefPyGKNsyu68WJAPjOxlgJ3m1elk1CDtlFKUWQBhgZFaDXZGhB9d2c

ywgNuDgEZgF9BBIKKwYBBAGXVQEFAQEHQD5MYKD39ws1EEPUCjS9Mo9jkQsvSZYx

/wueyBhj3lxKAwEIB4h4BBgWCgAgFiEEUaLGd9KkE5rfnojS+AQ1nrd7VIcFAmYB

fQQCGwwACgkQ+AQ1nrd7VIeFVQD+Jx0PVSNldGe0r1QIhQcp/jHAB/uDbB8RYmzv

qUAjzxMBAPQ2GINA2pOTjs2DISv9lzIasdH7tGqj2Pxdug2lGEkE

=9oOH

-----END PGP PUBLIC KEY BLOCK-----

Friday, July 05, 2024

MP3 Training Audio Compilation

Dear blog readers,

I've decided to share with everyone a recently made available MP3 audio training compilation on the topic of OSINT cybercrime research and threat intelligence which you can check out here.

Stay tuned.

How I Tracked Down the Conti Ransomware Gang? - Video Demonstration

Dear blog readers,

I've decided to share with everyone a recently recorded video on the topic of "How I Tracked Down the Conti Ransomware Gang?" which is also available here.

Enjoy.

Wednesday, July 03, 2024

Exposing Bulgaria's Emil Kyulev/RansomedVC/Magadans/BorisTulev/BlackForums/ImpotentNaEvropa/Everest Ransomware Group/DADS Agency - An OSINT Analysis

Dear blog readers,

I've decided to share some OSINT notes on Bulgaria's Emil Kyulev.

Sample network assets reconnaissance:

e[.]kyulev[[.]]protonmail[.]com

hxxp://magadans[.]net

14cbx34hgJYN1iyFvT4PsCxKVsGDuZi5pR

0x0837a9df92d68505ceba32fb540475e29fbf29ff

hxxp://magadans23[.]com

hxxp://magadans23[.]info 

hxxp://magadans23[.]net

admin[[.]]ransomed[.]vc

hxxp://t[.]me/RansomedSupport

hxxp://k63fo4qmdnl4cbt54sso3g6s5ycw7gf7i6nvxl3wcf3u6la2mlawt5qd[.]onion/

hxxp://f6amq3izzsgtna4vw24rpyhy3ofwazlgex2zqdssavevvkklmtudxjad[.]onion/

TOX: 192D52C7C18F3D2693ED2453E64C53EC0CCF0255AB2291F019B65BA84442B313C410DE132E59

hxxp://twitter[.]com/RansomedVC

hxxp://t[.]me/USISAutoLookupBot

hxxp://breached[.]wiki - 172[.]232[.]4[.]89

hxxp://breached[.]fun - 162[.]255[.]119[.]114

ransomed[.]nigge[.]rs

BorisTulev

hxxp://t[.]me/s/[.]EOMLOL

hxxp://blackforums[.]net

impotentnaevropa

threasec[.]]xmpp[.]jp

hxxp://t[.]me/s/RansomedSupport

bc1qg07auf7efld3edzyjs2wqztaky39xjdyk0uprj

bc1qqc7nla44te4wxyvf9j7zxtc5q296sxn94k6v00

bc1qwv6hg860mf9g0at8fe64nsswa2pa73vgd9tvj5

bc1qqc7nla44te4wxyvf9j7zxtc5q296sxn94k6v00

everestgrp[.]exploit[.]im

everestgrp[.]thesecure[.]biz

everbe[.]airmail[.]cc

everest[.]airmail[.]cc

notopen[.]cock[.]li

eV3rbe[.]rape[.]lol

thunderhelp[.]airmail[.]cc

everestblog[.]airmail[.]cc

everestblog[.]cock[.]li

decryptors[.]xmpp[.]is

Raznatovic

hxxp://ransomed[.]biz

hxxp://t[.]me/s/ransomed_middleman

Tigers of Arkan

Raznatovic Channel

RaznatovicAdmin

hxxp://t[.]me/s/RaznatovicAdmin

Hriste Boze

hxxp://exposed[.]vc

Impotent

kmeta

kmetanaevropa

promise

creeper

pulpo

hanakobuta

hristeeboje

185[.]246[.]222[.]28

bankmanagers

ransomed[.]danwin1210[.]de

rfadmin[.]thesecure[.]biz

192D52C7C18F3D2693ED2453E64C53EC0CCF0

255AB2291F019B65BA84442B313C410DE132E59

ransomedSec

HristeeBoje

HanaKobuta

impotent[.]thesecure[.]biz

Mariamagdalena1337[.]mailfence[.]com

209[.]141[.]58[.]150

hxxp://rinse-right[.]com

hxxp://rancorpbr[.]com

hxxp://rancorp[.]net

hxxp://ransom-market[.]com

hxxp://ransomedtools[.]online

hxxp://pennywiseretail[.]com

hxxp://rancorpav[.]com

hxxp://openrangemgmt[.]com

hxxp://selectwindows[.]ca - Email: rancorp@shaw[.]ca

hxxp://preferredloansla[.]com

hxxp://rancorpgroup[.]com

blackforums[.]net@gmail[.]com

hxxp://flighthk[.]com

rifkyrev98[.]gmail[.]com

hxxp://worlddating[.]xyz

hxxp://orbpanel[.]xyz

hxxp://permanawfx[.]xyz

hxxp://free-mail[.]xyz

hxxp://slinku[.]xyz

hxxp://pressfly[.]online

hxxp://redpay[.]online

hxxp://omanexpress[.]xyz

hxxp://accounttelekom[.]xyz

hxxp://point-teleko[.]xyz

hxxp://telekobalance[.]xyz

hxxp://omandhl[.]xyz

Leading Company in Digital Peace Tax

hxxp://blackforums[.]net

hxxp://tulach[.]cc

Teodor Iliev

MAGADANS

#МълчаниетоСвърши

#НиеСмеСилата

#ВъзмездиетоИдва

State Agency for Digital Peace