Newsletter 2020-12-22

Published on December 22, 2020 by

December 2020: Telegram channel

Subscribe to our new Telegram channel at:

New Telegram subscribers receive a free 3-day Professional license code! We will post frequent updates and technical background info to this channel.

🏛 Open Government

We are archiving all .GOV and .MIL websites. Any changes will be preserved, any alterations detected! Read the full blog post here.

You can find it as the “Government US” category in the Advanced menu. It contains already more than 5 TB of public data.

📝 Trivia

  • Group-IB maintains a competitor list that is banned from attending their “CyberCrimeCon 2020” conference. See the list here.
  • We have purchased a WinRAR license! 🎉
  • Our storage servers are soon running out of… letters of the alphabet (simply due to the count of hard disks and the amount of drive letters required). Fortunately, drives can be mounted as folders. Screenshot here.
  • We started using 18 TB HDDs. Most of them work fine, but one crashed almost immediately due to a “bad block” causing file system corruption, a bugcheck in a driver, and subsequently the crash of the entire server.
  • Someone made more than 6 million requests to our in a short amount of time. We developed our own application firewall which is actively blocking the offender. Read details in this Twitter thread.

📰 Darknet marketplaces and hacks in the media

  • The SolarWinds Sunburst domain list was indexed here. These domains can be an indicator of compromise.
  • Joker’s Stash, a credit card marketplace, was temporarily disrupted (news article) by redirecting the domain “jstash.bazar”. One of the still active Tor domains “jstash5cxe6ixxb2.onion” is known in Intelligence X since 2016.
  • The Chinese Communits Party leak with 1.95 million members was indexed here.
  • Europol took down the Sipulimarket. Intelligence X has some historical versions. Twitter thread.

Kleissner Investments s.r.o., Na Strzi 1702/65, 14000 Prague, Czech Republic

If you don’t wish to receive this newsletter anymore, please click here to unsubscribe.

Related articles

Newsletter 2021-01-23

Published on January 23, 2021 by

January 2021: Capitol Hill Riots Archive, New Features Our dataset contains now 30 billion records and grows by +3 billion every month. Last year has been incredible for us. We are growing by any metric – all organically. Searches are up 113% Q-on-Q and our user base is growing sustainably at 18% month-on-month. Capitol Hill

Archiving Capitol Hill riots’ media

Published on January 7, 2021 by

We are archiving media from todays Capitol Hill riots. Follow our Twitter account for updates. We have archived the Capitol Hill riots media here: Use the “Tree View” tab to see all pictures and videos. The FTP server stores now 200 GB (about 4000 files). Note: Some files contain graphic content.

Our statement regarding Ledger’s Content Removal Request

Published on December 21, 2020 by

Today at 13:14 we have received the following Content Removal Request from Ledger regarding this search result. […] By making this database public, the privacy of over 1 million individuals is violated, which places them at risk of, amongst other things, phishing attacks. We respectfully request that you expeditiously remove the thread. Our client is

Search the blog: