Provide current and historical ownership information on domains / IPs. Identify all connections between domains, registrants, registrars, and DNS servers.
Aleksei Belan is part of the Federal Bureau of Investigation (FBI) Most Wanted List. He was charged for several cybercriminal activities connected to a massive Yahoo! database compromise involving at least 500 million user accounts.1
A recent WhoisXML API study of Belan’s connected infrastructure based on an initial list of seven IP addresses and two unredacted registrant email addresses tagged as indicators of compromise (IoCs) led to the discovery of more than 170 domains that resolved to the IP addresses or registered using the email addresses identified as IoCs.
Download the threat research materials now.
—
- [1] https://www.fbi.gov/wanted/cyber/alexsey-belan