This is Dancho.
This is the second part of the article which a reader recently shared with me in terms of using not just publicly accessible but publicly obtainable information to cross-check and cross-reference RAMP's administrator Stallman.
Here's the analysis:
Stallman ---> admin ---> axe1@thesecure.biz | the operator's jabber persona (Jan 2022) | "My contackts … Jabber axe1@thesecure.biz" (2022-01-19); re-issued by a member in April 2022: "contackts still valid" | ---> Axe1@list.ru
/OnlineTrade_BF/data/onlinetrade-clients.sql a russian online marketplace like ebay
(1702572, 1547186758, 0, 1596084470, 0, 0, 'Никита', '', '', 0, 0, 'Axe1@list.ru', '+79129809766', '9129809766', 1547186758, '', '', '', '', 1, 0, 0, 0, 0, 1, 0, 1, 0, 221, 2, 0, 380909, 0, 1, '', 0, 0, 0, 0, 0, 0, 0, '', 0, '', 0, 0, 0, 0, 0, 0, 0, '', 0, '', 0, '', 0, '', 0, '', '', 0, 0, 0, 0, '46.146.221.120 109.194.185.131', '', 0, 0, '', 0, 0, 0, 0, 0, 0, 0, '', '', 0, 0),
CDEK_BF/data/base.txt
920691430 \N \N Кириллов Епифан Кириллов Епифан 614535757 PRM32 Axe1@list.ru
858287747 \N \N Радаев Никита Радаев Никита 572925927 PRM14 Axe1@list.ru
Радаев Никита Радаев Никита -- IT Guy works at merdian credit union https://vk.ru/radaev89
Meridian Bank is a financial institution in Pennsylvania
Admin has one single IP leak
2023-03-30, 12:14:51 UTC. admin. A cookie_login a returning browser, a remembered session from 166.148.215.206 this is from a phone in Pennsylvania
Дорогие друзья! Я не проверяю ВК. Пожалуйста пишите в инсту на lipton_catman, в ФБ или на емейл radaev89@gmail.com
1 person reacted
Show shared copies
4 Aug 2021
He says he will be inactive and that you should email him if you need anything
| 2021-04-05 | Master wallet 1Bc4Nkmo… first on-chain activity pre-RAMP financial trail begins |
| 2021-07 | Matveev (Orange) builds RAMP on Babuk's old Tor infrastructure; Orange admin, MRT/999/KAJIT moderators (McAfee ATR/Intel 471, 2021-09-09) |
| 2021-10-18 | Kajit named RAMP admin (Velasco/Group-IB via The Register, 2021-12-02); admin account registered 14:45:28 UTC same day |
| 2021-11-01 | RAMP opens to the public; Stallman account registered 23:33:54 UTC, email stallman2@thesecure.biz |
At the same time as stallman starts operating
Nikita Radaev
Сегодня я понял, что означает пословица hear no evil, see no evil, speak no evil.
0 people reacted
Show shared copies
6 Nov 2018
Nikita Radaev
updated his profile photo to the
11 people reacted
Show shared copies
20 Oct 2018
Mikhail Serov
Mikhail Serov
мафиозник?)
Show likes
21 Oct 2018
Share
Stas Stezz
Stas Stezz replied to Mikhail
Mikhail, ты спрашиваешь без уважения
1
Show likes
21 Oct 2018
Share
Nikita Radaev
Mikhail Serov
Mikhail Serov
уважение только к истинным мафиози)
png496 KB
1
Show likes
21 Oct 2018
Share
Nikita Radaev
other accounts belonging to himhttps://huggingface.co/meacue
https://ca.linkedin.com/in/nikitaradaev
https://github.com/Meacue into infosec and cybersecuritycodewars.com/users/Meacue
https://career.habr.com/meacue
https://leetcode.com/u/meacue/
https://hub.docker.com/u/meacue
radaev.72@yandex.ru
Sample photos:

























0 Comments:
Post a Comment