Exposing a portfolio of currently active malicious free VPN domains run and operated by the NSA – An OSINT analysis

0


Of this.

Currently active free VPN service areas thanks to the NSA known to have participated in the campaign:

bluewebx.com

bluewebx.us

irs1.ga

iranianvpn.net

IRSV.ME

DNSSPEEDY.TK

fervpn.tk

fervpn.pw

irgomake.win

make-account.us

do-account.ir

IRANTUNEL.COM

JET-VPN.COM

newhost.ir

homeunix.net

vpnmakers.com

hidethisip.info

fr.myfastport.com

witopia.net

worldserver.in

music30ty.net

misconfused.org

tunnelprive.com

aseman-sky.in

Related fields known to have been involved in the campaign:

gaysexvideo.us

keezmovies.us

tubeporn.com

profitfreesex.com

allfreesextube.com

thegaytubes.com

sextubeshop.com

pornfetishexxx.com

ebonypornox.com

freepornpig.com

weddingsextube.com

searchporntubes.com

suckporntube.com

darlingmature.com

pornretrotube.com

teensexfusion.net

rough18.us

teendorf.us

1retrotube.com

typeteam.com

biosextube.com

hadcoreporntube.com

reporntube.com

telltake.com

asianprivatetube.com

hostnude.com

alfaporn.com

sexbring.com

porntubem.com

newerotictube.com

premierretrotube.com

oralsexelove.com

1bdsmtubes.com

poilutubeporn.com

brunettetubex.com

tubelatinaporn.com

xxxgaytubes.com

analxxxvideo.com

analsexytubecom

aeroxxxtube.com

amateurpornlovecom

admingay.com

xxxretrotube.com

xxxshemaletubes.com

hotpornstartubecom

firsttrannytube.com

erotixtubes.com

1pornstartubecom

Asian.com

18mpegs.com

maturediva.com

Elitemature.com

vipmatures.com

pcsextube.com

porn-vote.com

pornbrunettes.com

maturedtube.com

alfatubes.com

maturetubesexycom

justhairyporn.com

hotblowjobporn.com

maisontubez.com

homemadexx.com

golesbiansex.com

fuck-k.com

freebdsmxxx.com

emeraldporntubecom

dosextube.com

bigtitslove.com

tonsex.sexy

tubez.sexy

japaneseporn.win

hdfuck.me

tubelesbianporn.com

vipebonytube.com

vipamateurtube.com

grandmaturetube.com

latinosextube.com

xxxhardest.com

tubebigtit.com

tubesexa.com

realfetishtube.com

pornways.com

Related fields known to have participated in the campaign:

hi2panel.us

androidserver.us

make22.us

make46.us

make58.us

make-account.us

irspeedy.info

memolfashion.com

irspeedy.com

downloadpluse.com

do-account.com

kashkashun.com

erfan-shop.com

digidoorbin.com

make34.us

make94.us

make82.us

make70.us

make166.us

takeaw.us

irspeedyy.us

make-account2.us

downloadplus.link

mehrdad.biz

mypayments.me

appleid22.com

susadns.com

saba-sdi.com

saba-sdi.design

bluewebx.com

Stay tuned!

*** This is a Syndicated Security Bloggers Network blog by Dancho Danchev’s Blog – Mind Streams of Information Security Knowledge written by Dancho Danchev. Read the original post on: http://feedproxy.google.com/~r/danchodanchevonsecurityandnewmedia/~3/Is4GBRK0HRw/exposing-currently-active-malicious.html


Share.

About Author

Leave A Reply