independent security research
Phishing pages, malware drops, C2 servers. I collect the evidence and send it to whoever can actually pull the plug: hosts, registrars, CDNs, CERTs.
Credential phishing and the kits behind it. Sites serving malware, fake browser updates and cracked-software lures. Command-and-control servers and botnet panels. Scam shops and fake investment platforms, when they're clearly fraudulent.
I don't exploit anything. Everything in a report comes from what the server hands to any visitor.
If you're a provider and one of my reports landed in your abuse queue, it should already have URLs, timestamps and screenshots. Need something else, like raw HTTP captures or IOCs? Reply to the report or write to the address below. Actual humans read it.
Leads, questions, false-positive complaints: all welcome.
Typed by hand on purpose. Keeps the scrapers out.