Dear blog readers,
In this post I’ll provide actionable intelligence based on the research and analysis which I posted in my previous “Dissecting the RAMP (Russian Anonymous Marketplace) Ransomware Forum – An Analysis” blog post and will provide actionable intelligence on various domain portfolios manage and operated by members of the RAMP (Russian Anonymous Marketplace) forum with the idea to assist the security community and fellow researchers including U.S Law Enforcement on its way to properly track down and prosecute the individuals behind these communities.
Here’s the actual compilation:
| Source Entity | Target Entity |
| 00pumaspuma00@gmail.com | nord-termo.site |
| 00pumaspuma00@gmail.com | nord-termo.space |
| 00pumaspuma00@gmail.com | nordtermo.space |
| 00pumaspuma00@gmail.com | nordtermo.website |
| 123123@gmail.com | 24hoursnews.co |
| 123123@gmail.com | dqhost.net |
| 123123@gmail.com | dqsolutions.info |
| 1383mrn@gmail.com | mrn2003.ir |
| 3099389@gmail.com | annerley.com.hk |
| 3099389@gmail.com | memorials-usa.us |
| 497620405@qq.com | 1v4.cn |
| 497620405@qq.com | ckqlc.cn |
| a.parkhommm@gmail.com | astra-sport.com |
| a1exeg@hotmail.com | euadult.com |
| a1exeg@hotmail.com | lgtube.com |
| a1exeg@hotmail.com | pornxvidios.com |
| a1exeg@hotmail.com | qtrtube.com |
| a1exeg@hotmail.com | torrentcloud.download |
| aaaaaaaasdas21@gmail.com | exfeg.com |
| abduladam682@gmail.com | ucofj.net |
| abed1999alhameed@gmail.com | 3bed.dev |
| achrafiles@gmail.com | valeriobattagli.com |
| adali778899@gmail.com | ww5.in |
| admin@anonytor.com | anonytor.cc |
| admin@anonytor.com | anonytor.com |
| admin@securednet.su | ah18.su |
| admin@securednet.su | blacksmm.su |
| admin@securednet.su | esportalen.su |
| admin@securednet.su | impfnachweis.su |
| admin@securednet.su | leakshare.su |
| ads555man@gmail.com | totalnutritions.us |
| afobazol7@gmail.com | ff979834.com |
| afobazol7@gmail.com | globalonlinelink.com |
| afobazol7@gmail.com |