Democratizing Threat Intelligence
Joined August 2025
- Tweets126
- Following0
- Followers105
- Likes96
Webamon retweeted
Two possible findings from @webamon_search that may be related: hydra3[.]xyz/login (captured 6 October) and cracksword[.]com/login (9 October).
Each displayed a different product name, but retained the same description and console-title suffix found in the source.
intel.webamon.com
Webamon retweeted
A single fingerprint is often all it takes to track malicious websites. Something Webamon does as standard.
This also allows the malicious campaigns to be tracked and followed with ease. And one of my favourite aspects is turning it around and using it for supply-chain or your own system monitoring as well.
And every day we identify and find something new!
Ten domains. All still live. Fake "BBC News".
Today's Webamon daily hunt: a pixel-level clone of the BBC site pushing a "guaranteed £7,380 a week" Sir Jim Ratcliffe trading scheme, with a lead form that feeds an AI-trading fraud funnel. Ten domains share one content fingerprint, six BBC lookalikes and four with no brand in the name at all, every one still hosting at time of check, drip-registered on NameSilo since late August.
Standing query for anyone on Webamon:
fingerprint.links:b4c50a84aa052aaa602ff8ffd516ff38b3ffb91d7a6d672b7906a897a7ff6bcc
#threatintel #investmentfraud #fakenews