OSINT Analysis of the World’s Biggest Cybercriminal Infrastructures
WhoisXML API maintains a list of the most prominent cybercriminal groups around the globe in an effort to help fellow researchers and vendors and the authorities enrich their actionable threat intelligence.
Danchev combined the power of Maltego and WhoisXML API tools to uncover a list of active domains, IP addresses, and other web properties that could help the cybersecurity industry move further toward their shared goal—make the Internet safe for all users.
Our deep dive allowed us to build detailed threat research materials that revealed:
- Close to 400 email addresses known to have been used by various hackers in cybercriminal underground forums to either buy or sell illicit products
- More than 2,100 domains that contained the email addresses in their historical WHOIS records
Download the threat research materials now to access the complete list of identified artifacts that you can use to conduct additional enrichment and threat analysis as well as trend identification.
Latest Reports
Earth Sirrush Espionage Tool Evolution: DNS Facts Unveiled
WhoisXML API uncovered 400+ additional artifacts linked to Earth Sirrush. Download the threat research materials now.
Four hours before PHP2Shell’s Disclosure
A server scouted our honeypots 4 hours before PHP2Shell’s disclosure, then returned with exploit attempts. The report covers its traffic history and IoCs.
APT36 Deploys Multiple Malware in RapidRust: A DNS Investigation
WhoisXML API uncovered 300+ additional artifacts linked to Operation RapidRust. Download the threat research materials now.