Adversary Attribution & Campaign Tracking Radar

Threat Actor Intelligence Dossiers

Profiled cyber adversaries unmasked via reverse IP telemetry, hardcoded Telegram bot tokens, DNS nameservers, and phishing kit forensics. Generate Law Enforcement dossiers or inspect correlated infrastructure.

ATTRIBUTION RADAR: ACTIVE

Scan Target

Unmasked Actors

PROFILED

Cataloged adversary clusters

Phishing Kits

DOM HASH

Decompiled kit architectures

Telegram Bots

EXFIL

Bot tokens & chat IDs

Operator Emails

HARDCODED

Hardcoded drop inboxes

Admin Panels

EXPOSED

Discovered logins & backdoors

LOADING PROFILED THREAT ACTORS...

Querying threat intelligence database

Attribution Vectors & Campaign Unmasking Methodology

CROSS-CORRELATION ENGINE

1. Reverse IP & SSL Pivoting

Correlates shared TLS alt-names, Anycast ASN footprints, and shared host IPs to cluster multiple deceptive domains under a single hosting entity.

2. Kit Decompilation

Parses raw PHP source, JS scripts, and DOM structures to extract hardcoded operator emails, Telegram bot tokens, and recipient chat IDs.

3. Admin Panel Discovery

Probes for exposed administrative backdoors, leaked ZIP backup archives, and credential exfiltration endpoints to verify operator presence.

4. Cryptographic Attribution

Generates a deterministic SHA-256 fingerprint from structural hashes, nameservers, and drop mechanisms to track actors across evolving campaigns.