Exposing a Currently Active Malicious and Fraudulent Domain Portfolio Managed and Operated by Members of a Known Cybercrime-Friendly Community - An OSINT Analysis
0
Related domains known to have been involved in the campaign and that are currently managed and operated by members of a well known cybercrime-friendly forum community:
hacklab.pro
news-plus.info
proxybase.net
net-net-net-net.net
net-net.net
net-net-net-net-net.net
mobservdot.com
hs-mail.com
gohlke-hs-mail.com
net-net-net.net
net---net.net
mahadevia.com
mediamaxfilms.com
inter-net-net.net
net--net.net
net-net-net-net-net-net.net
trojanbotnet.com
millionevents.net
kombykorm.kz
knoc.kz
putehestvie.com
extendedfor.xyz
xaker.top
djamix.space
kuninganonline.com
comawhite.net
123buildmysite.com
bestpochta.com
thegingerzone.com
theaxiompress.com
alanmclaughlin.com
theaxiompress.net
0816yl.net
mitrapengujian.com
mitraautomation.com
mitra-timbangan.com
webisnis.com
bantalonline.com
autonewblog.com
kurortsochi.com
matemat.xyz
imeretinskiy.club
djamix.xyz
djamix.site
cansistent.com
safron.site
depsdm-kemenpan.com
hdb-global.com
gdlexpress.com
bwt-logistic.com
arc-sch.com
manesinc1.com
manesinc.com
rampstercorp.com
js-top.link
js-cdn.link
js-save.link
sexonlyvideo.com
hypermgp.com
mgpproject.net
hardlink.biz
buyrolex.biz
yourmpgvideo.com
mobiledatadevice.biz
noteshere.net
mmmstock.com
mmmtrust.net
mmmbook.net
cloudaway.com
greatgadgetsstore.com
mmmfz.top
kkkfz.top
hhhlj.top
hhhfz.top
10-2-2.com
365import.com
1-in-2-2.com
test-javier-2-2.com
gz2510.com
zqlankou.com
2-0-2-2.com
testci47570399d5.com
baomaev.com
zhongdaojiaoyu.cn
gzpylv.com
electronsurge.com
6-2-2.com
9-2-2.com
uiautotest-2-2.com
jiuzhoufj.com
entertt.com
dz1688.com
wonghao.top
china2-2-2.com
agnesbinagwaho.com
multi17.cn
ffflj.top
kkklj.top
ggglj.top
gggfz.top
jjjfz.top
999fz.top
hotmy.net
zcggz.org
autosecure.net
tacwj.org
lawguides2008.net
wohsl.org
auth2.net
mjnxs.org
yamahayzfr1.us
zdofd.org
stabantitheft.us
xauov.org
gamerplanet1.com
ydtmj.org
juicedetails.com
yprwm.org
discountgoods2012.com
qlkux.org
jewelrystoresnow.com
vzzub.org
onlinerace4u.com
yaphq.org
tradecars1.com
vobkx.org
pindostan.us
xowds.org
patefon32.us
frefh.org
pilot-cooking.us
wcyso.org
technics22.us
gzxinyakj.com
incorruptible-computers.com
solartope.com
stemcellplant.com
thoughtclone.com
stellarphonicorchestra.com
solarlaserproductions.com
chez-2-2.com
yzzby.com
sko5.com
kxiduo.com
im0000.com
gzima.com
oaiwen.com
njbhzs.com
aoyaok.com
30-2-2.com
batteryblitzer.com
testpathbe-2-2.com
look-not.com
boon-2-2.com
0-2-2.com
crowdfundance.com
xn--22-iz2c.com
sakura2-2-2.com
accesslogs-2-2.com
4-4-2-2.com
3-2-2.com
8-2-2.com
2--2.com
2-2-2.com
2-2.com
netholderace.com
ejsldk.info
ip-info-2-2.com
2-2-2-2-2.com
ip10-2-2.com
huawei2-2-2.com
hua-wei-2-2-2.com
test-site-paid-ads-2-2-2-2-2-2.com
ip-2-2-2-2.com
arataka-2-2.com
t-2-2.com
future-beam.com
kobayashi8.com
wwb-company.com
crowdfundance.net
advertdatacache.com
peaceplanet.info
infohoster.net
crowdfundance.info
light-surge.com
industrial-laser-engraving.com
cloudydaysolar.org
sustainable-computers.com
sergedouw.com
litesurge.com
incredible-computers.com
incorruptiblecomputers.com
futurebeam.com
bleepmusic.com
a-weekend.com
crowdfundance.org
2--2--2.com
4-2-2.com
2-2-2-2.com
en-2-2.com
e-netanteisha-2-2.com
1-2-2.com
5-2-2.com
salad2-2-2.com
mmiller-ep5-native-products-2-2.com
6-7-8-2-2.com
qa-mil-1827-2-2.com
cloudydaysolar.com
7-2-2.com
robustinverters.com
d3520-2-2.com
swissjabber.ch
ud-22-2-2.com
internationalidentification.org
trainhorn.us
ysiuemg.com
zqiwie.com
tywhus8.com
mmkdsk.com
jdhfsai.com
zquweh.com
bizzkit.com
peaceapproach.com
xyapakikixox.info
jincheng1.com
dinzarikbu.info
dadsbigshed.com
765system.link
goo678.com
thebestupdates.com
igo678.com
kartoxa.biz
moto288.com
himybro.biz
mybro.biz
nilai-wuhan.com
theearninggame.com
theearninggame.info
themusicaltree.info
themusicaltree.org
biggiftwinner.com
sustainabilityhive.com
hiranks.com
themusicaltree.com
successsurge.com
boomaweb.com
themusicaltree.net
theearninggame.net
theearninggame.biz
themusicaltree.biz
greenlifeincome.com
rome0.net
nipdq.org
superman-deals.us
ddgxq.org
computer-helping.us
eggvd.org
logical-board.us
hfduv.org
green-monkeys.us
pikwk.org
train-pro.us
ungrd.org
magic-deals.us
plpbd.org
magicislands.us
tmagm.org
applepie1.us
qxieb.org
ulcmk.org
nwchf.org
kuvvh.org
mxqmo.org
nkuii.org
ggboy.org
nwrsm.org
zpmph.org
greencomputer.us
mvliw.org
snikers.us
ifynq.org
changeshops.us
sxdyv.org
tviks.us
dflcj.org
crazystyles.us
ljsey.org
download-apple.us
jixld.org
tradecars1.us
htfjs.org
fruite-ninjas.us
adsee.net
get-health.us
rmfns.org
itunes-media.us
gszyb.org
pingvin.us
iicsj.org
money-bags.us
pwmlg.org
sennheiser-mp3.us
uzebg.org
mycompanyaddress.us
iulrf.org
sportsvalley.us
luqob.org
online-markets1.us
hlfcm.com
easterniowaweather.info
xn--22-zja.com
4s6.com
xn--22-ng4atbj2c1b4ac1cg7nscs2fzfsevc5ioa.com
szsungold.com
kellytoys4u.com
jncjpxxx.com
ysbsqa-farm4mig2wh2-2-2.com
colourfullvibations.com
colourfulvibrations.com
laserlords.com
bwqj.info
feathersdream.info
peaceplanetproductions.com
peaceplanit.com
loanomat.com
eeywz.org
cclev.org
aqsax.org
acqlb.org
sellomat.com
xn--22-dr5c.com
solartope.org
emsjjkd.net
1-2-2-2.com
shmomom.com
backlink9000-2-2.com
3acai.org
3acai.net
drjmm.org
besth2o.biz
incorruptibleworld.com
Exposing a Currently Active Malicious Free VPN Domain Portfolio Run and Operated by the NSA - An OSINT Analysis
0
My Compilations of Personally Identifiable Information Belonging to Multiple International and High-Profile Cyber Threat Actors - An Elaboration
0
Commenting on the SANS Threat Intelligence Summit 2021 Presentations - An Analysis and Practical Recommendations
0
I recently came across to the entire portfolio of SANS Threat Intelligence Summit presentations which are currently online at YouTube and I've decided to take the time and effort to go through them and offer practical and relevant threat intelligence and OSINT advice and recommendations which I hope will come handy to the presenters including anyone currently working in the field or interested in making an impact as a threat intelligence analyst.
h0 h0 h0 - Xmas came earlier!
This is Dancho. Believe it or not the time has come to say goodbye to one of the security industry's most popular security publication since December, 2005 and actually let you know that I've successfully migrated this blog to a new Dark Web Onion address which is - http://iysxzy3z5qjtr5pipcuj5webwfrjnh7mvgb7jl5ki2iypvnj3j5u4pid.onion/ which I advise you to bookmark and check on a daily basis in terms of presenting new and novel research courtesy of me the way I've been doing it since December, 2005.
Stay tuned and bare with me! Visit it on a daily basis and stay tuned! Keep up the good work and keep it coming!
Image courtesy of a loyal fan reader.
Second image courtesy of me attending a private party.
Continue reading →
In this OSINT analysis I'll offer in-depth information and analysis of Bulgaria's Bulgarian Cyber Army including personally identifiable information on some of the key members behind the group for the purpose of assisting U.S Law Enforcement and the U.S Intelligence Community on its way to track down and prosecute the cybercriminals behind these campaigns.
In this post I'll provide personally identifiable information on some of the key members of the Team Code Zero hacking group with the idea to assist U.S Law Enforcement and the the U.S Intelligence Community on its way to track down and prosecute the cybercriminals behind these campaigns.Sample personal photos of Team Code Zero Members:
In this analysis I'll provide personally identifiable information on some of the key members of the infamous 29A Virus Coding Group for the purpose of assisting U.S Law Enforcement and the U.S Intelligence Community on its way to track down and prosecute the cybercriminals behind these campaigns.Personal email belonging to the group: 29A@sourceofkaos.com
Group's personal Web site: http://sourceofkaos.com/homes/29a/
Second group's Web Site: http://www.29a.net/ - Email: m0n305@terra.es
Personally identifiable information for GriYo: – Spain – Email: griyo@akrata.org - http://www.geocities.com/Area51/Corridor/2618 - Email: Dreamcatcher5072@aol.com - Email: griyo@hellsparty.com; griyo29A@hotmail.com- http://griyo.hellsparty.com - Email: griyo@bi0.net - https://twitter.com/griyo666- http://vxug.fakedoma.in - https://www.facebook.com/pg/djgriyo
Personal Emails belonging to 29A Team Members:
- Jacky Qwerty – Peru - jqwerty@cryogen.com
- Mental Driller – Spain - mental_driller@hotmail.com
- Reptile - Canada - bwaha@hotmail.com
- SoPinky – Argentina - msopinky@hotmail.com
- Super – Spain - super_29a@mixmail.com
- Tcp – Spain - tcp@cryogen.com
- Vecna – Brazil - vecna@antisocial.com
- VirusBuster – Spain - darknode@oninet.es - Email: virusbuster@terra.es
- Z0mbie – Russia - zloebuchij_zasrakomondohooy@usa.net
- Darkman - Denmark darkman@sourceofkaos.com
- roy g biv - iam_rgb@hotmail.com
Personally Identifiable Information for Benny:
Personal Web Site: http://benny29a.cjb.net; http://benny29a.kgb.cz; http://www.benny29a.com
Sample Personal Email: benny_29a@hushmail.com; benny@post.cz; benny_29a@privacyx.com
Related personal Web sites: http://benny.bloguje.cz; http://benny.hysteria.cz
ICQ – 123122556; 156892790; UnderNet.Org server, #vir, #virus, #vxers channels
Related personal Web sites for 29A Group Members:
- Alcopaul/[rRlf] http://alcopaul.cjb.net; alcopaul@cannabismail.com
- Benny/29A http://www.coderz.net/benny; benny@post.cz
- Mental Driller/29A mental_driller@notrix.net; mental_driller@psynet.net; mental_driller@hotmail.com
- philet0ast3r/[rRlf] http://www.rRlf.de philet0ast3r@rRlf.de PhileT0ast3r@gmx.de
- ZeMacroKiller98 http://zemckiller98.multimania.com - http://membres.lycos.fr/zemckiller98 zebulon@softel.fr
- Vecna http://coderz.net/vecna
- VirusBuster http://virustradingcenter.cjb.net
- Z0MBiE http://z0mbie.host.sk http://forumer.com/bsodomon
- GriYo Spain griyo@hellsparty.com
- Ratter Czech Republic ratter@atlas.cz
- roy g biv iam_rgb@hotmail.com
- VirusBuster Spain virusbuster@terra.es
- Super super_29a@mixmail.com
HackPhreak Group Members Include:
Bronc Buster, Lothos, Overdose, Truedog, x-empt, phriction, ntwakO, Gridmark, Phemetrix, Mnemonic, t0ucht0ne, muted, espionage, mercs, kanuchsa, Morbid Angel, Lucii, optiklenz, cap n crunch, tip, icer, sreality, Zyklon, havoc, HyperLogik, Defiant, Duncan Silver. Slfdstrct, lothos
Group's founder: Charlie Wellborne - rloxley@hackphreak.org
Personally identifiable information for Digital Ebola:
Digital Ebola - Email: digi@legions.org
AIM: digitalebola1
ICQ: 70001776
IRC: Undernet #legions, Efnet #ampedout
MUD: sensenet.legions.org port 5555
digi@wintermute.linux.tc
digi@wintermute.unixgeeks.com
Sample HackPhreak network infrastructure reconnaissance:
http://wintermute.legions.org - 66.12.11.162
http://neuromancer.legions.org - 66.12.11.171
http://cyberspace7.legions.org
http://sensenet.legions.org
http://straylight.legions.org
http://monkeyboxing.legions.org - 66.12.11.170
http://boomzilla.legions.org
lhttp://uckydragon.legions.org - 66.12.11.172
http://walledcity.legions.org
http://aleph.legions.org
Sample Personal Emails belonging to HackPhreak members:
digi@wintermute.linux.tc, digi@wintermute.unixgeeks.com, digi@legions.org, ks@rmci.net, digi@linuxpron.com, fejed@legions.org, proto@legions.org, shekk@smurfs.com, wak0@legions.org, super@ce.net, threx@attrition.org, phric@legions.org, fejed@legions.org, threx@attrition.org, digi@legions.org, sodium@omega2.net, fejed@legions.org, godess@securityflaw.com, ntwako@legions.org, anonymous@legions.org, phric@legions.org,, CogitoESum@yahoo.com, ddfelts@ultravision.net, gimps@legions.org, gridmark@legions.org, davidj@wiretapped.net, dayzee@madsekci.net, clocker@adelphia.net, dayzee@madseckzi.net, flutterby_2001@hotmail.com, syntech@intraworldcom.net, j.p@b3ss13.ant10nl1ne.com, morbie@legions.org, pr00f@pr00f.org, cippa@hobbiton.org, beowulf3@telocity.com, adonis1@videotron.ca, alkinoos@project802.net, vecna@s0ftpj.org, cogitoesum@yahoo.com, ntwak0@safehack.com, archimedes@security-foundation.net, gridmark@planetmotherfucker.net, ruben@generation.nl, vecna@insertcoint.net, kiddish@hehe.com, blooddjinn@hotmail.com
Sample Personal Photos belonging to HackPhreak hacking group members:
Continue reading →
I've decided to share with you a direct free download copy of my personal memoir circa 2021.
Grab a copy here.
Stay tuned!
Continue reading →
RSS Feed