Exposing a Domains Portfolio Courtesy of Breached Forum Team Members – An OSINT Analysis
I’ve recently obtained access to a publicly obtainable set of personally identifiable information belonging to a secondary Breached Forum team members and based on this discovery I’ve decided to dig a little bit deeper and find out related domain name registrations courtesy of the same individuals that are members of the forum on our way to look for related fraudulent and malicious activity.
Interesting domains include:
hxxp://secured-logins.online
hxxp://microsoftupdale.com
hxxp://amzn-offer.com.ng
hxxp://paypalcustomerservices.com
Sample domains known to have been involved in the campaign include:
hxxp://biunj[.]top
hxxp://wzmxec[.]cn
hxxp://semainedelapopphilosophie[.]fr
hxxp://haileybeauty[.]fr
hxxp://kellyblake[.]us
hxxp://securitylab[.]hk
hxxp://texasaction[.]us
hxxp://kazuko[.]us
hxxp://purgestresser[.]xyz
hxxp://bagipokemon[.]com
hxxp://moneymatterswitheric[.]com
hxxp://idriss[.]fr
hxxp://bluesteelcraft[.]net
hxxp://phohangcu[.]com
hxxp://kookwinkels[.]net
hxxp://mediumsonja[.]net
hxxp://ukmshops[.]com
hxxp://makebelief[.]science
hxxp://depressioncure[.]science
hxxp://aisukoneko[.]net
hxxp://82flex[.]club
hxxp://ssri[.]science
hxxp://snri[.]science
hxxp://gadjahmada[.]org
hxxp://keralacultural[.]science
hxxp://internetmarketergroup[.]com
hxxp://sampitroda[.]science
hxxp://apjabdulkalam[.]science
hxxp://floatingmind[.]science
hxxp://neurotransmission[.]science
hxxp://sunitawilliams[.]science
hxxp://teslamemorial[.]science
hxxp://moodregulation[.]science
hxxp://antipsychotic[.]science
hxxp://originofearth[.]science
hxxp://wardenclyffetower[.]science
hxxp://antidepressant[.]science
hxxp://chuvabravasolfeliz[.]com
hxxp://vasthu[.]science
hxxp://resumosparaprovas[.]com[.]br
hxxp://ultra1337s[.]pro
hxxp://indiancultural[.]science
hxxp://resuminhosparaprovas[.]com
hxxp://benchfee[.]net
hxxp://homijbhabha[.]science
hxxp://blunder[.]science
hxxp://paradisusloscabos[.]com
hxxp://meums[.]edu[.]ly
hxxp://serinformatico[.]com
hxxp://gs-france[.]fr
hxxp://modaparatodo[.]com[.]br
hxxp://proshoponline[.]com[.]br
hxxp://sr-ken1[.]com
hxxp://iltdamktdigital[.]com[.]br
hxxp://meums[.]ly
hxxp://sportday[.]com[.]br
hxxp://chauffeur24[.]ma
hxxp://shoukai-system[.]net
hxxp://fuertedestination[.]com
hxxp://bykvu[.]com
hxxp://f-gmail[.]com
hxxp://marsoul-tech[.]ly
hxxp://alanosempre[.]com
hxxp://esercizi-e-rimedi[.]com
hxxp://whdhwfawla[.]com
hxxp://vectorofdream[.]club
hxxp://p-at-g[.]info
hxxp://recruitmentsourcing[.]us
hxxp://koisit[.]com
hxxp://your-candle[.]com
hxxp://woshilaosijikuaishangche[.]xyz
hxxp://casadipasta[.]fr
hxxp://connectionloop[.]jp
hxxp://osamathabet[.]com
hxxp://capl[.]com[.]sg
hxxp://puccinis[.]us
hxxp://allinfotoday[.]us
hxxp://btler[.]kz
hxxp://aventerpriseindia[.]com
hxxp://smart99sendai[.]com
hxxp://mgo777[.]us
hxxp://ced-guitare34[.]fr
hxxp://suntech[.]com[.]pa
hxxp://merhawitravels[.]com
hxxp://weknownothingpodcast[.]com
hxxp://purehempsoap[.]ca
hxxp://organia[.]com[.]ua
hxxp://lnwgame[.]com
hxxp://vikingventures[.]us
hxxp://vygoranie[.]su
hxxp://my-mail-gmail[.]com
hxxp://login-mail-gmail[.]com
hxxp://fundaciondeespecialistas[.]com
hxxp://market365[.]com[.]ua
hxxp://lindsayfashions[.]com
hxxp://jornaldosbairrosonline[.]com[.]br
hxxp://petirketarketir[.]vip
hxxp://siam1[.]net
hxxp://hi9765[.]com
hxxp://fathersclub[.]us
hxxp://account-my-mail-gmail[.]com
hxxp://myaccount-my-mail-gmail[.]com
hxxp://goodgirls101[.]com
hxxp://freender[.]us
hxxp://myaccounts-mail-gmail[.]com
hxxp://hot-auto[.]com[.]ua
hxxp://ygu-1[.]net
hxxp://xn--jn2a86s[.]tw
hxxp://kvadrat-m[.]com
hxxp://curriculo2022[.]com
hxxp://vishakafoundation[.]com
hxxp://app12123[.]com
hxxp://donnaree[.]net
hxxp://e-standart[.]com
hxxp://neposidko[.]com
hxxp://mgo55[.]us
hxxp://bidiknews24[.]com
hxxp://mosclub[.]su
hxxp://iniq[.]us
hxxp://mfenno[.]com
hxxp://2t[.]gs
hxxp://deesign[.]co[.]kr
hxxp://mail-gmail[.]com
hxxp://iorganicpetshop[.]com
hxxp://iorganichouse[.]com
hxxp://humresource[.]com
hxxp://ko-bo-440[.]com
hxxp://hayao0819[.]com
hxxp://hog-lab[.]com
hxxp://hi12123[.]com
hxxp://hshealt[.]com
hxxp://myaccounts-my-mail-gmail[.]com
hxxp://findabitch[.]info
hxxp://my-account-mail-gmail[.]com
hxxp://gosspcrepair[.]com
hxxp://my-accounts-mail-gmail[.]com
hxxp://lizihost[.]com
hxxp://copticsite[.]com
hxxp://petenjess[.]com
hxxp://shinobu[.]kr
hxxp://shinbou[.]co[.]kr
hxxp://hamptoonu[.]com
hxxp://cryptbits[.]us
hxxp://cryptoskope[.]us
hxxp://blockhodl[.]us
hxxp://cryptomonist[.]us
hxxp://cityofcrypto[.]us
hxxp://chainofthings[.]us
hxxp://hesapcibaba[.]com
hxxp://emeraldenzosculptures[.]com
hxxp://gh-herbals[.]us
hxxp://hallareview[.]com
hxxp://solnyshko-2022[.]kz
hxxp://amzn-offer[.]com[.]ng
hxxp://rce[.]net[.]cn
hxxp://arol[.]us
hxxp://consejoscomunalesparaladefensaintegral[.]xyz
hxxp://noticiasnaweb[.]net
hxxp://quick2pey[.]us
hxxp://microsoftupdale[.]com
hxxp://sribiosys[.]com
hxxp://proxmoxve[.]cn
hxxp://whmcsservices[.]cn
hxxp://virtualizor[.]cn
hxxp://goodealhosting[.]cn
hxxp://fetomagduruaileler[.]net
hxxp://28subatvefetomagduruaileler[.]net
hxxp://zjmftheme[.]cn
hxxp://shieyingxiong[.]cn
hxxp://whmcshelp[.]com
hxxp://habersilvangazetesi[.]com
hxxp://dusunce360[.]com
hxxp://hurtakipci[.]com
hxxp://urfahurhaber[.]com
hxxp://dieq41[.]com
hxxp://arminarekaperdanahalim[.]com
hxxp://cains[.]party
hxxp://topsalestoday[.]us
hxxp://stuartpowell[.]us
hxxp://animu[.]su
hxxp://cleanconnect[.]us
hxxp://truthtrend[.]us
hxxp://milina[.]jp
hxxp://pchd[.]one
hxxp://ricambiauto[.]us
hxxp://rachelmorton[.]us
hxxp://shopauro[.]us
hxxp://sppt[.]us
hxxp://effectivtech[.]us
hxxp://careerchanger[.]us
hxxp://jleon-automation[.]us
hxxp://johnlwaite[.]com
hxxp://lakeshore[.]tw
hxxp://no-no-no-no[.]com
hxxp://alisonjones[.]us
hxxp://segner[.]us
hxxp://charliem[.]us
hxxp://valuation[.]co[.]il
hxxp://no-no[.]com
hxxp://trumpersonly[.]us
hxxp://posten-no-no[.]com
hxxp://totallyavir[.]us
hxxp://kathypizzino[.]us
hxxp://wildburger[.]us
hxxp://cfodesk[.]co[.]il
hxxp://whisky-a-no-no[.]com
hxxp://trevorhill[.]us
hxxp://charliemoore[.]us
hxxp://no-no-no[.]com
hxxp://michaelstamerfarms[.]com
hxxp://voidedparadox[.]com
hxxp://my-no-no[.]com
hxxp://zeromatter[.]us
hxxp://cuntmode[.]com
hxxp://figyak[.]com
hxxp://oht[.]com[.]tw
hxxp://herbalhongkong[.]com
hxxp://mo-no-no[.]com
hxxp://jumphost[.]kz
hxxp://nana-no-no[.]com
hxxp://liveearth-no-no[.]com
hxxp://candronepilotcoop[.]com
hxxp://celebrity-no-no[.]com
hxxp://escobarproductions[.]us
hxxp://yasu-no-no[.]com
hxxp://vjdiamonds[.]co[.]il
hxxp://burkardt[.]us
hxxp://buy-no-no[.]com
hxxp://makabaka[.]us
hxxp://me-no-no[.]com
hxxp://pnrsyntax[.]us
hxxp://big-no-no[.]com
hxxp://visentagroup[.]com
hxxp://aki-no-no[.]com
hxxp://carte-vital-notification[.]fr
hxxp://epichi[.]us
hxxp://vpnsvr[.]top
hxxp://verification-amazon-fr[.]fr
hxxp://laurencecouture[.]fr
hxxp://it-serve[.]pro
hxxp://thefeelgoodhood[.]com
hxxp://bookrichandsassy[.]com
hxxp://pio-no-no[.]com
hxxp://apt4[.]kr
hxxp://minjs[.]us
hxxp://demandredesign[.]org
hxxp://riches-elenas[.]kz
hxxp://test-ryhall-dns-is-us-test-gmail[.]com
hxxp://try-no-no[.]com
hxxp://eliteautoloans[.]ca
hxxp://akixi-test-gmail[.]com
hxxp://get-no-no[.]com
hxxp://fatemzassl[.]com[.]ng
hxxp://aryamatbaa[.]com
hxxp://official-no-no[.]com
hxxp://thizastore[.]com[.]br
hxxp://everydayweplay365new[.]com
hxxp://curiousq[.]info
hxxp://hgarbaglobalventures[.]com[.]ng
hxxp://dafdfeafeae[.]com
hxxp://facebooksexlist[.]com
hxxp://attavitacons[.]com
hxxp://test-bh-staging-domain28082021025944[.]com
hxxp://politics-is-a[.]science
hxxp://alexcohen[.]us
hxxp://esv[.]jp
hxxp://wagnitzsoftware[.]com
hxxp://cdcysj[.]cn
hxxp://demonslayerswords[.]net
hxxp://wolftecno[.]com
hxxp://epic-hi[.]us
hxxp://outletku[.]com
hxxp://serialmail[.]net
hxxp://oh-no-no[.]com
hxxp://cysj1[.]cn
hxxp://skjdnsn[.]com
hxxp://sallybestor[.]com
hxxp://hotelfortkolesnik[.]com
hxxp://birdy[.]com[.]tw
hxxp://ebiz[.]co[.]il
hxxp://youngfaith[.]us
hxxp://vitejambe[.]com
hxxp://kittybox[.]us
hxxp://artech-a[.]fr
hxxp://jrspipesandtubes[.]com
hxxp://herbsandnature[.]us
hxxp://tlftest[.]us
hxxp://laboratorioedn[.]com
hxxp://subprimary[.]com
hxxp://cyrusmedia[.]ca
hxxp://trogdor-test-teststs-devee[.]com
hxxp://leenuts[.]com
hxxp://gmo-test-2022-05-05-ishitoya01[.]com
hxxp://dd9[.]co[.]kr
hxxp://smsvg[.]com
hxxp://s-proj[.]co[.]il
hxxp://spartanguild[.]com
hxxp://becysj[.]cn
hxxp://test-bh-staging-domain06092021131217[.]com
hxxp://tjcysj[.]cn
hxxp://thanushcreations[.]com
hxxp://cartevitale-am[.]fr
hxxp://piephomedia[.]com
hxxp://theinquiryhub[.]com
hxxp://smsnh[.]com
hxxp://yuanayu[.]com
hxxp://plusswagath[.]com
hxxp://asukaindonesia[.]com
hxxp://smsrb[.]com
hxxp://maacademia[.]com
hxxp://topfactsglobal[.]com
hxxp://prakrie[.]com
hxxp://i-socialapp[.]com
hxxp://luzxd[.]us
hxxp://findmyiphone-view[.]com
hxxp://ipklll[.]us
hxxp://ip-pbx[.]su
hxxp://terminodador[.]com
hxxp://test1122[.]net
hxxp://manurnu[.]com
hxxp://testingdomainwsuite12345[.]net
hxxp://jorcustoms[.]com
hxxp://testingdomainwsuite123456[.]net
hxxp://0br[.]us
hxxp://yandex-toloka[.]ru[.]com
hxxp://dollpls[.]com
hxxp://weeblycombo2[.]com
hxxp://whcysj[.]cn
hxxp://weeblycombotesting1[.]com
hxxp://programadorweb[.]net
hxxp://aaravidevelopers[.]com
hxxp://44518[.]cn
hxxp://inviz[.]host
hxxp://kz123[.]cn
hxxp://collectifpolar[.]fr
hxxp://naromedia[.]space
hxxp://secandosemparar[.]com
hxxp://steemdice[.]online
hxxp://uvlfastmarket[.]com
hxxp://trackblogexperthealth[.]space
hxxp://changyouworld[.]cn
hxxp://weeblycombo[.]com
hxxp://lovepets[.]fr
hxxp://gombong[.]asia
hxxp://lei-nuo[.]com[.]cn
hxxp://runhr[.]us
hxxp://kaya-bunga[.]com
hxxp://dimensionengiservices[.]com
hxxp://thomashcliu[.]com
hxxp://ttglobaladvisory[.]net
hxxp://0xe[.]us
hxxp://underarmourstore[.]us
hxxp://friendsland[.]pp[.]ua
hxxp://eoczy[.]host
hxxp://qualiteletrica[.]com[.]br
hxxp://heskes[.]info
hxxp://quemseduzconquista[.]com
hxxp://nitix[.]biz
hxxp://starhelectricalservicesllc[.]com
hxxp://2xlipat[.]com
hxxp://mugyuphotoworks[.]com
hxxp://exroot[.]us
hxxp://promicom[.]ma
hxxp://ibracket[.]net
hxxp://compteabonnement[.]fr
hxxp://gotowka-doreki[.]info
hxxp://pamyu-pamyu[.]com
hxxp://ismarcoscastro[.]com
hxxp://a-gmail[.]com
hxxp://doremi-hochouki[.]com
hxxp://hahapetshop[.]com
hxxp://joshuahatten[.]com
hxxp://reza-najafi[.]com
hxxp://lloyds-area[.]com
hxxp://fibvo[.]com
hxxp://codenific[.]com
hxxp://linhtinhcenter[.]com
hxxp://zo1984[.]com
hxxp://lifevantagethai-nrf2[.]com
hxxp://greenenershop[.]com
hxxp://gaytravelcrowd[.]com
hxxp://aythotellock[.]com
hxxp://doooectb[.]com
hxxp://gratiasmarthome[.]com
hxxp://myrenttoownhomes[.]us
hxxp://voxchronicle[.]com
hxxp://cloudtest[.]asia
hxxp://teedin789[.]org
hxxp://car789[.]org
hxxp://alarmmoney[.]info
hxxp://cctvnon[.]com
hxxp://ouvoleravecmondrone[.]com
hxxp://vtechwriter[.]com
hxxp://greenmage321[.]com
hxxp://avtoremont36[.]xyz
hxxp://carav[.]us
hxxp://flowerwseb[.]info
hxxp://cjford[.]org
hxxp://ouvoleravecmondrone[.]net
hxxp://suns-vip[.]com
hxxp://mindyshousecleaners[.]com
hxxp://gaytravelcrowd[.]biz
hxxp://healthlantern[.]us
hxxp://greens333[.]com
hxxp://vacation-crowd[.]com
hxxp://blockpays[.]info
hxxp://rem971verslesucces[.]com
hxxp://nsr-sys[.]com
hxxp://aminpour[.]info
hxxp://ba2b[.]xyz
hxxp://nwtgck[.]xyz
hxxp://classhelper[.]us
hxxp://dustbinservices[.]com
hxxp://checkiclouds[.]info
hxxp://lclsecuret[.]com
hxxp://toretto[.]host
hxxp://antoinetbt[.]host
hxxp://ecomyparty[.]com
hxxp://vil-diesel[.]host
hxxp://ontime-a[.]com
hxxp://canlammotteam[.]host
hxxp://dominic-toretto[.]host
hxxp://semailaanhem[.]host
hxxp://badromance[.]host
hxxp://cd-storage-reviews[.]com
hxxp://antoinegriezmann[.]host
hxxp://seeyouagain[.]host
hxxp://mrtbt[.]host
hxxp://line-dn[.]com
hxxp://eklink[.]org
hxxp://emlakhaberleri[.]org
hxxp://eklink[.]info
hxxp://legendturk[.]biz
hxxp://secured-logins[.]online
hxxp://64bitcongnghe[.]com
hxxp://pocket0077[.]com
hxxp://dallaporte[.]com
hxxp://etchmall[.]com
hxxp://accounts-my-mail-gmail[.]com
hxxp://account-mail-gmail[.]com
hxxp://accounts-mail-gmail[.]com
hxxp://art-photo-story[.]com
hxxp://azarter[.]com
hxxp://youractiontoys[.]com
hxxp://sil21[.]com
hxxp://indicatorchoice[.]com
hxxp://myaccount-mail-gmail[.]com
hxxp://teamkill[.]pro
hxxp://mdhanastha[.]com
hxxp://smpplugin[.]com
hxxp://smp-plugin[.]com
hxxp://todaymagazine[.]xyz
hxxp://thecouponparty[.]com
hxxp://todayradio[.]xyz
hxxp://serva4ok[.]pro
hxxp://forteam[.]pro
hxxp://facebuilder[.]xyz
hxxp://irandirectory[.]xyz
hxxp://mixandmastering[.]xyz
hxxp://nameforbaby[.]xyz
hxxp://justpayforshipping[.]biz
hxxp://justpayforshipping[.]org
hxxp://justpayforshipping[.]info
hxxp://lambdaf[.]info
hxxp://herdiesel-santoso[.]com
hxxp://keywordriches[.]org
hxxp://energybodyart[.]com
hxxp://floresemangola[.]com
hxxp://sonyatour[.]com
hxxp://doktorhatasi[.]biz
hxxp://probono123[.]org
hxxp://personalitynetwork[.]org
hxxp://gold4money[.]us
hxxp://odt[.]moscow
hxxp://okget[.]xyz
hxxp://mixedfire[.]com
hxxp://batikidalestari[.]com
hxxp://frugalandresponsibleliving[.]com
hxxp://makrandownload[.]com
hxxp://yfilatov[.]xyz
hxxp://artbodyart[.]com
hxxp://meme-generator[.]info
hxxp://delhitransport[.]info
hxxp://trisnoidamanbatik[.]com
hxxp://modadhanasta[.]com
hxxp://okemoviezone[.]com
hxxp://gowanusindustrial[.]org
hxxp://ydafmc[.]com
hxxp://books-mania[.]com
hxxp://buettner[.]science
hxxp://vdeserve[.]com
hxxp://k-u-n-s-t-s-t-o-f-f[.]com
hxxp://f-f[.]com
hxxp://f-l-u-f-f[.]com
hxxp://a-f-f[.]com
hxxp://t-a-f-f[.]com
hxxp://b-f-f[.]com
hxxp://k-f-f[.]com
hxxp://f-f-f[.]com
hxxp://m-f-f[.]com
hxxp://g-f-f[.]com
hxxp://p-u-f-f[.]com
hxxp://s-t-a-f-f[.]com
hxxp://okrok[.]info
hxxp://d-i-f-f[.]com
hxxp://roukio[.]info
hxxp://t-f-f[.]com
hxxp://teotio[.]info
hxxp://s-u-n-o-f-f[.]com
hxxp://s-t-i-f-f[.]com
hxxp://okrok[.]org
hxxp://w-f-f[.]com
hxxp://teotio[.]org
hxxp://h-f-f[.]com
hxxp://pokere[.]org
hxxp://v-f-f[.]com
hxxp://roukio[.]org
hxxp://f-a-c-e-o-f-f[.]com
hxxp://s-u-f-f[.]com
hxxp://take-o-f-f[.]com
hxxp://u-s-f-f[.]com
hxxp://qeou[.]online
hxxp://u-f-f[.]com
hxxp://karatsu-f-f[.]com
hxxp://j-f-f[.]com
hxxp://l-f-f[.]com
hxxp://o-f-f[.]com
hxxp://f–f[.]com
hxxp://e-f-f[.]com
hxxp://gardener-f-f[.]com
hxxp://i-f-f[.]com
hxxp://p-j-f-f[.]com
hxxp://y-f-f[.]com
hxxp://s-f-f[.]com
hxxp://c-f-f[.]com
hxxp://boulangerie-dupont-f-f[.]com
hxxp://s-t-f-f[.]com
hxxp://n-u-f-f[.]com
hxxp://ca-f-f[.]com
hxxp://sts-rci-rogers[.]ca
hxxp://p-f-f[.]com
hxxp://scholarlysources[.]com
hxxp://f-f-f-f[.]com
hxxp://globalrealez[.]com
hxxp://df-we-4234-f-we-fw-4234-f-we-f-f[.]com
hxxp://iconarise[.]com
hxxp://hamad-f-f[.]com
hxxp://toplifedailylive[.]com
hxxp://n-f-f[.]com
hxxp://s-o-f-f[.]com
hxxp://p-i-s-s-o-f-f[.]com
hxxp://c-u-f-f[.]com
hxxp://d-f-f[.]com
hxxp://z-f-f[.]com
hxxp://r-i-f-f[.]com
hxxp://r-f-f[.]com
hxxp://innovationoffice[.]org
hxxp://mindsxchange[.]com
hxxp://marketresearchcolloquium[.]com
hxxp://danielles-f-f-f[.]com
hxxp://x-f-f[.]com
hxxp://q-f-f[.]com
hxxp://platformxchange[.]com
hxxp://d-i-l-l-i-g-a-f-f[.]com
hxxp://c-i-f-f[.]com
hxxp://k-y-f-f[.]com
hxxp://kairosteknoloji[.]download
hxxp://enesaldemir[.]net
hxxp://tenadesign[.]net
hxxp://shyfzorg[.]com
hxxp://disdikbud-papua[.]org
hxxp://al-azharaslichmughny[.]org
About The Author
