Used Maltego CE to run an investigation on findingassange.com domain. Here's the topology it spit back out to me:
Part 1 -
https://sli.mg/Z1bHvz.png
Part 2 -
https://sli.mg/Ujaxwy.png
This is where I need some help and opinions : wildcard-in-use.findingassange.com
Weird looking website really, and the IP block is originating from somewhere else than the original URL findingassange.com.
Also weird privacy statement with no contact info and product reference : http://wildcard-in-use.findingassange.com/privacy
The IP for wildcard-in-use.findingassange.com linked to these two entities:
Bodis : https://bodis.com/ --> domain parking
Prolexic Technologies : https://en.wikipedia.org/wiki/Prolexic_Technologies --> DDoS mitigation and IT security services
The IP for findingassange.com linked to these two different entities:
WILDCARD-AS --> cant find shit on this
I Fast Net LTD : https://ifastnet.com/ --> hosting
Also, ftp.findingassange.com prompts for username password, if anyone wants to try to work their way in.
I'll keep digging, but to me, it looks weird, and I need opinions about this! Upvoat for visibility!!!
view the rest of the comments →
RebelSkum ago
Seems like protection from DDoS. It's believed the Dyncorp Cyberattack may have suppressed Wikileaks releases, so it could be an added countermeasure against that. Their enemies have no shortage of horsepower.
pizzagateishell ago
gotta admit this is weird tho right ? http://wildcard-in-use.findingassange.com
Freemasonsrus ago
Weird bc of the topics? I could see an outline here making sense, but I'm no IT genius. Could be legit categories of info, no?
pizzagateishell ago
Most random privacy statement i've ever read, vague as fuck, no product, company, entity, nothing. http://wildcard-in-use.findingassange.com/privacy
Freemasonsrus ago
Ya I don't get my hopes up for this kind of crap. If they have something, great, if not, they just wasted a bunch of time bc most of us know 99% of the time it's BS.
Fateswebb ago
None of that stuff is even related to findingassange.com it's all a redirect that is employed when you put ANY webpage before findingassange that does not exist. For instance kfjehifjrbicjenwhdicjsvdoeje.findingassange.com does the same thing. It's a marketing trick done by the host that has nothing at all to do with the website. Nothing to see here...... If anything it's a ddos safeguard, forwarding any non relevant traffic to an unrelated domain.
Freemasonsrus ago
Thanks for the explanation. I guess we'll see tomorrow. BTW, judging by language and timing I believe they are overseas.