π½π΄πππ΄ππ΄π²✓
π€
Make a deal with π½π΄πππ΄ππ΄π²
π Paid proposals held safely in escrow β released only when the work's approved.
Followers
1.2K
Account age
3 yrs
π° Suggested sponsorship rate
$40 β $65 / sponsored post
Estimated from audience size & typical reach β every deal is negotiable and held in SocialDB escrow.
Known for
3 views
Is this a new ValleyRAT variant from #SilverFox (ιΆη) or a completely new malware?
Custom protocol over TCP 443. C2 traffic starts with BFuck\0\0\0 = 42 46 75 63 6b 00 00 00
IOCs:
38.76.177.46:443
43.99.101.175:443
https://tria.ge/260527-lq3gjscw4t
https://tria.ge/260525-t6jclsdv5m
![Found an odd Telnet like connection in a Mirai malware execution. Follow these steps to see for yourself:
telnet 45.149.186.18 8080
Enter: newsrv
π₯ nivela.duckdns[.]org:8080
π₯ 45.149.186.18:8080
π₯ b8d37e1ba85e8cebd9802b31747a1689
#Mirai #OWARI](/img?u=https%3A%2F%2Fmedia.infosec.exchange%2Finfosec.exchange%2Fmedia_attachments%2Ffiles%2F116%2F529%2F299%2F141%2F454%2F233%2Fsmall%2F67571d09876a3980.png)
2 views
Found an odd Telnet like connection in a Mirai malware execution. Follow these steps to see for yourself:
telnet 45.149.186.18 8080
Enter: newsrv
π₯ nivela.duckdns[.]org:8080
π₯ 45.149.186.18:8080
π₯ b8d37e1ba85e8cebd9802b31747a1689
#Mirai #OWARI
π Post engagement
5
Avg engagement / post
0.4%
Engagement vs followers
Nov 2022
On Mastodon since
π₯ Top post: PolarProxy 2.0.1 Released π¨ Improved performance π Bug fixes βοΈ Β· 11 likes + reposts
π Activity & format
Posting cadence
1.6 / week
A lower-frequency account β each post lands with more weight.
Content mix
Mostly text
Recent: 9 text Β· 3 image Β· 0 video.
Follower / following
1.9Γ
Follows 653 back. A more reciprocal / networked account.
Recent posts
View on Mastodon β
Pivoting on hashes and IPs β‘οΈ Ping32 RMM and ValleyRAT
πΎ d43fdaa1f0ee09d7e5f0f94ee9df7b6c
π‘ 143.92.37.168:18987 (UDP)
πΎ 8266b00c4e45d728cef78b3f5a865f68
π‘ 143.92.37.168:10086 (UDP)
https://netresec.com/?b=2666e31
Is this a new ValleyRAT variant from #SilverFox (ιΆη) or a completely new malware?
Custom protocol over TCP 443. C2 traffic starts with BFuck\0\0\0 = 42 46 75 63 6b 00 00 00
IOCs:
38.76.177.46:443
43.99.101.175:443
https://tria.ge/260527-β¦
How do You maximize IOC sharing with minimal effort?
Maximizing IOC Impact: Advice on extracting, verifying, and sharing IOCs for fast, broad protection.
https://netresec.com/?b=26653f3
New release of CapLoader
π« JA3/JA4/SNI extraction from multi-segment TLS handshakes
π¨ Alerts on IOCs from @viql's RΓΆsti
π OSINT lookup on @jonasl's ScanMalware
π¦ Extracts packets from more encapsulation protocols
https://netresec.com/?b=2β¦
Which free #threatintel services do you recommend for submitting IOCs (malware hashes, C2 IPs/domains)?
The platform must make submitted IOCs freely available. Wider reach is preferred to maximize impact per IOC submission.
Tell me ChatGPT writes your articles without telling me ChatGPT writes your articles
PolarProxy 2.0 TLS inspection proxy released
π¦ Single self-contained binary release
π Improved HTTP proxy
π³ Builds for Linux musl (Alpine) x64/ARM/ARM64
πͺ Simplified deployment
πͺ Flow cutoff in output PCAP
https://netresec.com/?b=2658a26
Viewing #remcos alerts from FlowCarp in @ish's #EveBox
https://netresec.com/?b=2659fc0
Found an odd Telnet like connection in a Mirai malware execution. Follow these steps to see for yourself:
telnet 45.149.186.18 8080
Enter: newsrv
π₯ nivela.duckdns[.]org:8080
π₯ 45.149.186.18:8080
π₯ b8d37e1ba85e8cebd9802b31747a1689
#Mirai #Oβ¦
New tool released: FlowCarp
π Identifies protocols without port numbers
π¨ Build protocol detection from example traffic
β‘οΈ Input: PCAP or PcapNG
β¬
οΈ Output: Flows and/or Alerts
https://netresec.com/?b=265d268
#FlowCarp
Is this a new ValleyRAT variant from #SilverFox (ιΆη) or a completely new malware?
Custom protocol over TCP 443. C2 traffic starts with BFuck\0\0\0 = 42 46 75 63 6b 00 00 00
IOCs:
38.76.177.46:443
43.99.101.175:443
https://tria.ge/260527-β¦
How do You maximize IOC sharing with minimal effort?
Maximizing IOC Impact: Advice on extracting, verifying, and sharing IOCs for fast, broad protection.
https://netresec.com/?b=26653f3
New release of CapLoader
π« JA3/JA4/SNI extraction from multi-segment TLS handshakes
π¨ Alerts on IOCs from @viql's RΓΆsti
π OSINT lookup on @jonasl's ScanMalware
π¦ Extracts packets from more encapsulation protocols
https://netresec.com/?b=2β¦
Which free #threatintel services do you recommend for submitting IOCs (malware hashes, C2 IPs/domains)?
The platform must make submitted IOCs freely available. Wider reach is preferred to maximize impact per IOC submission.
Tell me ChatGPT writes your articles without telling me ChatGPT writes your articles
PolarProxy 2.0 TLS inspection proxy released
π¦ Single self-contained binary release
π Improved HTTP proxy
π³ Builds for Linux musl (Alpine) x64/ARM/ARM64
πͺ Simplified deployment
πͺ Flow cutoff in output PCAP
https://netresec.com/?b=2658a26
Viewing #remcos alerts from FlowCarp in @ish's #EveBox
https://netresec.com/?b=2659fc0
Found an odd Telnet like connection in a Mirai malware execution. Follow these steps to see for yourself:
telnet 45.149.186.18 8080
Enter: newsrv
π₯ nivela.duckdns[.]org:8080
π₯ 45.149.186.18:8080
π₯ b8d37e1ba85e8cebd9802b31747a1689
#Mirai #Oβ¦
New tool released: FlowCarp
π Identifies protocols without port numbers
π¨ Build protocol detection from example traffic
β‘οΈ Input: PCAP or PcapNG
β¬
οΈ Output: Flows and/or Alerts
https://netresec.com/?b=265d268
#FlowCarp
π Community & instance
Home server
infosec.exchange
A cybersecurity & infosec server β its members and audience skew toward that niche, so expect a community-aligned, engaged following.
β
Link-verified
Verified link
Proved ownership of a website linked on their profile β Mastodon's green-check verification, a real identity signal rather than a paid badge.
On Mastodon since
Nov 2022
Joined in the Twitter-exodus wave of late 2022 β part of the migration that made Mastodon a real destination.
π‘ Facts
ποΈJoined Mastodon in 2022 β 3 years ago.
ποΈAverages 5 views per post.
π€Posts about 1.6Γ per week.
π‘οΈ Audience credibility
75/100
Good
- Est. 92% real, active audience Β· Low fake-follower risk.
- Engagement (~0.4% of followers engage each post) is around typical for Mastodon.
- Verified account.
- Established account (3+ years old).
Est. authentic audience
92%
Fake-follower risk
Low
Data confidence
High
Heuristic estimate from engagement, follower ratios, account age & growth β a screening signal, not a guarantee.
About
Experts in Network Forensics and Network Security Monitoring. Creators of #NetworkMiner, #CapLoader, #PolarProxy, #FlowCarp and #RawCap.
#PCAP or it didn't happen!
πΈ Gallery
π Audience overlap
EstimatedEstimated shared audience with similar creators β useful for avoiding overlap (or doubling down) when planning a campaign.
Computerspielemuseum
14%
Thierry Crouzet
13%
Maike KΓΌper
13%
Doomyflo π§π€π
12%
Miss Jones
11%
Shantell Powell
10%
More like this
Find more β
Mastodon
Doomyflo π§π€π
@doomyflo@framapiaf.org
1.2K
Followers
Mastodon
Thierry Crouzet
@tcrouzet@mamot.fr
1.2K
Followers
Mastodon
Maike KΓΌper
@maikueper@mastodon.social
1.2K
Followers
Mastodon
Computerspielemuseum
@computerspielemuseum@bildung.social
1.2K
Followers
Mastodon
Shantell Powell
@shanmonster@c.im
1.2K
Followers
Mastodon
Miss Jones
@missjonestravel@norden.social
1.2K
Followers
β Message π½π΄πππ΄ππ΄π²
Reaching out to influencers is a Pro feature. Upgrade to message any influencer directly β perfect for brands and agencies booking sponsorships.
- β Message any influencer from their listing
- β The influencer gets notified by email
- β Manage every conversation in one inbox
Already Pro? Log in.
π€ Event / appearance with π½π΄πππ΄ππ΄π²
Booking an event / appearance is a Pro feature. Upgrade to book π½π΄πππ΄ππ΄π² for an in-person or virtual appearance β payment held safely in escrow until the event is done.
- β Book them for events, livestreams, panels & more
- β π½π΄πππ΄ππ΄π² gets notified by email
- β Fee held in escrow, released after the appearance
Already Pro? Log in.
π
You're out of free requests this month
Free accounts get 5 per month. Go Pro for unlimited sponsor pitches, collab requests & sponsorship deals β plus featured placement, the Verified badge, free withdrawals and more.
Upgrade to Pro β $9.95/mo βYour free limit resets on the 1st of next month.