Security Intelligence

JexBoss Exploit Scan

Summary

Wapack Labs observed multiple attempts to exploit JBoss Application Servers using the JexBoss Exploit Tool staring in November of 2018.  Research into these incidents shows most of these scans originate in China.  In addition to scanning for JBoss, the scans attempt to exploit Tomcat management pages, PHP Weathermap, Microsoft Windows Server 2003 and Apache Hadoop YARN Resource Manager.  Wapack Labs provides details on Jexboss, the IP’s used to scan for…

Read more…

Virtual Chief Trust Officer (vCTO) Program

In a recent blog by Nitzan Daube, CTO of NanoLock¸ he provides an explanation regarding the importance of security focus on both IT hardware, physical security and cyber security consequences.  Wapack Labs agrees whole heartedly, and is providing solutions.

Wapack Labs participated in a recent lecture at the October 2018 ASIS Conference, held in Las Vegas NV.  Our joint lecture specifically addressed hardware compromise, adherence to physical security and the psychology of…

Read more…

Blockchain for the Supply Chain

The Air Force Institute of Technology[1] (AFIT) has releases free “Blockchain for Supply Chain” tools for supply chain professionals to learn about and use the power of block chain technology.  AFIT recently published a live blockchain application that can be accessed from any computer or smart phone, along with a complementary series of tutorial videos that presents blockchain simulation.  These videos can be used as a stand-alone…

Read more…

Cyber security professionals often get focused on dangers which appear inside their networks or within company messages, sometimes overlooking physical threats.  Laptops and devices routinely leave the confines of network cyber security parameters.  In this circumstance, a hacker can easily get physically next to a vulnerable laptop, which may permit firewall rules and DNS Security inoperable to a bad guy hacking into “your” laptop.…

Read more…

SNIPR Credential Stuffing

Summary

Wapack Labs identified a new credential stuffing tool named SNIPR for sale online by its developer and through other third-party hacking sites. SNIPR maintains its own public repository for configurations and is currently in the process of expanding the list of companies targeted by the tool. This report provides background information on the SNIPR tool, identifies companies targeted for credential stuffing, and inventories known configurations.

Credential Stuffin is a type of cyberattack where stolen account credentials typically consisting of lists of usernames and/or email addresses and the corresponding passwords (often from a data breach) are used to gain unauthorized access to user accounts through large-scale automated login requests directed against a web application.[1]

 

Analysis

SNIPR advertises online as a multiple account checker used to verify username and passwords. The tool sells on the developer’s website “snipr.gg” for US$20, however free cracked versions are available online. To operate to the tool, a user needs a list of username / password combinations and a list of proxy servers, both are available on the SNIPR forums. It then checks all the credentials from the input list against a maximum of four different companies consecutively to attempt credential stuffing.

 

Proxy Scraping

To deter credential stuffing, companies often put limits on how many times an IP can attempt automated account validation. These limits include temporary time outs and blacklisting for IP’s making multiple requests. SNIPR’s proxy scraping capability allows the user to enter a large list of proxy IP’s to prevent these types of countermeasures.

 

Proxy finding software is readily available and often sold alongside Credential stuffing software like the Kidux Proxy Scraper v1.0.2 found bundled with cracked versions of SNIPR.

 

Configurations

SNIPR uses configurations stored locally or retrieves configurations from its online repository at repo.snipr.gg.

 

 

The website was created in March 2018 and currently has configurations for 164 companies available in its public repository. Forum posts by the main administrator indicate they are in the process of verifying additional configurations and an additional 100 were identified not currently available in the public repository list. A full list of companies with configurations on SNIPR identified so far will be included at the end of this report. There is an active community on the websites with people providing proxy lists, username / password combo’s and account checkers actively checking new username combo dumps for active accounts. The following users contributed the most configurations to the public repository.

 

 

Conclusion

Credential abuse is becoming easier with the use of powerful tools like SNIPR that allow novice users full credential stuffing capabilities. The community supporting SNIPR is active and growing with contributors verifying regular username and password dumps with SNIPR and actively adding new configurations to the repository. Wapack Labs continues to monitor this credential abuse activity to provide early warnings to our customers.

 

Mitigation

The following Yara rule identifies SNIPR configurations.

 

rule sniprconfig

{

meta:

author = "chall@wapacklabs.com"

 

strings:

$s1 = "proxyType" fullword

$s3 = "comboType" fullword

$s4 = "actionUrl" fullword

$s5 = "postData" fullword

 

condition:

all of them

}

 

 

Companies

Configuration files for the following legitimate companies were identified as being used by SNIPR making them susceptible to credential stuffing[1] activities.

actionURL

Config_Name

+region|1+.battle.net

Blizzard.json

178.132.5.15:8000

Flix - Copy.ini

185.71.66.108:8000

Universe.ini

198.16.82.50:8080

FHD3IPTV - Copy.ini

1fichier.com

1fichier.com (souljanboy).json

217.182.133.110

TheOne.ini

78.46.85.236:8000

IPTVmania.ini

access.totalwar.com

Total War Access (tudorrus26).json

account.aq.com

AQ.com.json

account.hotstar.com

Hotstar.json

account.ipvanish.com

IPVanish.ini

account-api.jcpenney.com

jcpenny.ini

accounts.ea.com

Origin (Capture).ini

accounts.epicgames.com

Fortnite (impolaron).json

accounts.gifts.com

gifts.com.json

accounts.launcher-website-prod07.ol.epicgames.com

Epic Games.json

accounts.nvgs.nvidia.com

Nvidea (choempiee).json

accounts.spotify.com

Spotify.ini

addmefast.com

Addmefast.ini

addonfreak.com:8080

Dexter.ini

adfoc.us

Adfocus.ini

adultfriendfinder.com

Adult Friend Finder.json

aeg-umsgw.quickplay.com

DIRECTVNOW.ini

aimware.net

Aimware(Super Fast) (tudorrus26).json

airvpn.org

AirVPN.ini

aj-https.my.com

Email Access.ini

alein.org

Alein.org (souljanboy).json

alexa.starbucks.com

Starbucks.ini

amazingrdp.com

AmazingRDP.ini

android.moviepass.com

MoviePass.json

android-api.fitbit.com

Fitbit.ini

api.7-eleven.com

7Rewards (US).json

api.alldebrid.com

AllDebrid.ini

api.blocktrail.com

Btc.com.ini

api.crunchyroll.com

Crunchyroll.ini

api.dominos.com

Dominos (US).json

api.goldenfrog.com

VyprVPN.ini

api.greggs.co.uk

Greggs.ini

api.jinnapp.com

Myjin_capture.json

api.macys.com

Macy's (thelittletrain17).json

api.mojang.com

Minecraft.ini

api.myfreecams.com

MyFreeCams (7iz).json

api.nordvpn.com

NordVPN.ini

api.papajohns.co.uk

PapaJohns (UK

api.payrange.com

payrange.json

api.pornhub.com

PornHub.ini

api.readly.com

readly.json

api.roblox.com

Roblox.ini

api.skillshare.com

Skillshare (thelittletrain17).json

api.staples.com

Staples (Anonymous).json

api.tidal.com

Tidal.ini

api.ulta.com

Ulta (Fixed) (impolaron).json

api.wowcher.co.uk

Wowcher.json

api.zbigz.com

zbigz.json

api.zenguard.biz

ZenMate.ini

api-global.netflix.com

Netflix.ini

api-ubiservices.ubi.com

Uplay.json

api-ubiservices.ubi.com:443

Uplay.ini

app.giftbit.com

Giftbit.json

app.swagbucks.com

Swagbucks.ini

app.swellrewards.com

gfuel.json

app.wehkamp.nl

wehkamp.json

app-api.coinify.com

Coinify_Trade.ini

appnana2.mapiz.com

AppNana.ini

arenabg.ch

Arenabg (souljanboy).json

as.dtvce.com

DIRECTV.ini

audience.nba.com

NBA.ini

auth.daybreakgames.com

Daybreak.json

auth.grammarly.com

Grammarly.ini

auth.hulu.com

Hulu.ini

auth.iqoption.com

IQ Option.ini

auth.liquidsky.com

LiquidSky.ini

auth.macys.com

Macy's (thelittletrain17).json

auth.riotgames.com

League of Legends (BR).ini

auth.uber.com

Uber.ini

authserver.mojang.com

Minecraft.ini

b2m.carlsonhotels.com

ClubCarlson (choempiee).json

bestbuyiptv.link:6969

BestBuy.ini

bestbuyrdp.com

BestBuyRDP.ini

beyond-api.shopkick.com

Shopkick (tharealbremmy).json

bighits4u.com

Bighits4u.ini

bitport.io

Bitport.io.json

bkm-us-prod-ord-app.tillster.com

Burgerking (choempiee).json

blacksinner.com

Blacksinner (7iz).json

blueturtle.xyz:6562

BlueTurtle.ini

brilliant.org

Brilliant (Anonymous).json

btguard.com

BTGuard.ini

captcha24.com

Captcha24.ini

cciptv.xyz:8080

CCIPTV.ini

cheapcaptcha.com

CheapCaptcha (tudorrus26).json

cleeng.com

reidmylips.json

cloud-api.yandex.net

Yandex.Disk (Anonymous).json

cloudservices.predictspring.com

Skechers (nilsdomstad03).json

coinpot.co

CoinPot.ini

comet.api.hbo.com

HBO NOW.json

connect.bein.net

beinsportconnect.ini

connect.cineplex.com

Cineplex.ini

console.adsptp.com

ADSptp.ini

core.api.stockx.com

StockX.ini

costa-platform.com

CostaUK (xoduccool).json

cprodmasx.att.com

DirectTV.json

crypterra.net

Crypterra.ini

deviceapi.amctheatres.com

AMC Theatres.ini

diamondjackson.com

Diamondjackson.ini

direct.rhapsody.com

Napster (7iz).json

discordapp.com

Discord (thelittletrain17).json

eat24hours.com

Eat24.ini

empirestreams.club

Empire.ini

en.chaturbate.com

Chaturbate.ini

engine.mybcasino.ag

Mybcasino.json

epicstream.net

epicstream.json

epoch.com

EPOCH.json

espaceclientcanal.canal-plus.com

myCANAL.ini

eu.battle.net

Battle.netEU.ini

extremo.dyndns.ws:25461

FutureStreams.ini

fabiptv.com

fabiptv.json

fapi.molotov.tv

MolotovTV.json

femalecelebrities.com

Femalecelebrities (Anonymous).json

flawless-iptv.net:4545

Flawless - Copy.ini

floodcrm.net

Floodcrm (choempiee).json

fortuneiptv.eu:8080

Fortune.ini

fringe-iptv.co.uk:4545

Fringe.ini

fubo.auth0.com

FubotvUSA.ini

g.api.mega.co.nz

MEGA.json

gateway.ea.com

Origin (Capture).ini

genius.com

genius.com (tudorrus26).json

gfuel.com

gfuel.json

ghostproxies.com

ghostproxies.ini

global.ipsatpro.tv:8000

SatPro.ini

go.teamexpat.ninja:80

TeamXpat.ini

go.ziggosporttotaal.nl

ziggosport.json

gopuff.com

Gopuff.ini

gorilladick4.us:2086

Gears.ini

graph.amctheatres.com

AMC theaters.json

graphql.depop.com

Depop (choempiee).json

hashtoolkit.com

hashtoolkit (De-Hasher).ini

hdpiano.com

HDpiano (7iz).json

heatiptv.biz:8000

Ironhide.ini

hexui.com

Hexui.ini

highroller.space:25461

HighRollerIPTV.ini

hitleap.com

Hitleap.ini

home.bt.com

BT Sport (7iz).json

home.hulu.com

Hulu.ini

hoth.udacity.com

Udacity.ini

hub.chegg.com

chegg.ini

icons8.com

Icons8.ini

id.virginmedia.com

Viginmedatv.json

idp.dtvce.com

DIRECTV.ini

imgsrc.ru

imgsrc.ru (tudorrus26).json

imgur.com

Imgur.json

inkbox.com

InkBox.json

intranet.strongvpn.com

StrongVPN (hangatbaru).json

io.papayaplay.com

Papaya Play.json

IPHnTlXCvJD8raPjwkXz

CostaUK (xoduccool).json

iptv.embratoria.com

Embratoria.ini

iptv.jinbox.nl:1339

Jinbox.ini

iptv.madnlooney.co.uk

MadLooney.ini

iptv.vipstreams.xyz:8000

VipStreams.ini

iptvsetups.com:25461

Setups.ini

launcher-website-prod07.ol.epicgames.com

Epic Games.json

live.thecableguytv.com:25461

Thecableguy.ini

login.gamestop.com

Gamestop (US).ini

login.gearbest.com

GearBest.ini

login.live.com

Microsoft Registration.ini

login.skype.com

Skype Registration.ini

login.usgobuy.com

USGObuy.ini

login.yahoo.com

Yahoo (Registration).json

lomaag.site

Super_Cash_Rewards.ini

luxsocks.ru

LuxurySocks.ini

m.audiobooks.com

Audiobooks (thelittletrain17).json

m.gamestop.com

Gamestop (US).ini

m.gilt.com

Gilt.ini

m.members.teamskeet.com

teamskeet.json

m.nudetube.com

Chaturbate v2 (Anonymous).json

m.willow.tv

WillowTV.json

ma.playboyplus.com

PlayBoyPlus (badaouipokemon).json

ma.wicked.com

Wicked.ini

mads.amazon.com

Amazon (CA).ini

main.cctvlive.org:8000

MainIPTV.ini

main.tvstreams.xyz:83

Hyper.ini

mancaveiptv.biz:8000

ManCave.ini

maniahd.rocks

ManiaHD.ini

marveliptv.ddns.net:25461

Marvels.ini

maxiweb.ddns.net:4545

MaxiWeb.ini

mayfairguides.com

MayFairGearsTv.ini

mbitcasino.com

mbitcasino (choempiee).json

member.hide.me

hide.me.ini

members.babes.com

BABES.ini

members.bangbros.com

BangBros.ini

members.bet365.com

BET365.ini

members.blacksinner.com

Blacksinner (7iz).json

members.ftvgirls.com

FTVGirls (tudorrus26).json

members.rapidseedbox.com

RapidSeedbox (impolaron).json

members.twistys.com

Twistys.ini

members.vivid.com

vivid.ini

members.vixenx.com

Propertysex (Anonymous).json

members2.iknowthatgirl.com

IknowThatGirl.ini

members2.mofos.com

Mofos.ini

members2.mofosworldwide.com

MOFOS (7iz).json

membres.nudeinfrance.com

NudeinFrance (7iz).json

ml.cashbacksrv.com

Quidco (thelittletrain17).json

mlsh.co:2086

OTTTV.ini

mobile.api.hmageo.com

HideMyAss VPN.ini

mobile.bet365.com

BET365.ini

mobile.twitter.com

Twitter.ini

mobileapi.flipkart.net

Flipkart (choempiee).json

mobileproxy.passport.yandex.net

Yandex.Disk (Anonymous).json

motionarray.com

MotionArray (Anonymous).json

msi.timhortons.com

Tim Hortons.ini

mutv.manutd.com

MUTV (badaouipokemon).json

my.bitdefender.com

Bitdefender.ini

my.blazingfast.io

BlazingFast.ini

my.cigabuy.com

cigabuy (badaouipokemon).json

my.malwarebytes.com

Malware Bytes.ini

my.personalvpn.com

Witopia.ini

my.tinydeal.com

TinyDeal.ini

my.vultr.com

Vultr.ini

myaccount.avg.com

AVG (tudorrus26).json

namemc.com

NameMC.ini

nds-card.com

nds-card.json

netsporhd.net:4587

NetSport.ini

new.members.rk.com

RealityKings.ini

nfbusty.com

nfbusty.ini

nitrotv.for-the.biz:25461

Nitro.ini

nubilefilms.com

nubilesfilm.ini

nubiles.net

nubiles.ini

nubiles-porn.com

nubiles-porn.ini

ok2.se:8000

OK2.ini

oldnanny.com

Oldnanny (7iz).json

omegaclub.info:8000

Omega.ini

omegastreams.pw:8080

Hurricane.ini

orbit-iptv.com:2500

Orbit.ini

order.apache.ie

ApachePizza.ini

order.dominos.ca

Dominos (CA).ini

order.dominos.com

Dominos (US).ini

osu.ppy.sh

Osu (choempiee).json

painel.iptvmove.com:25461

PanelMove.ini

panel.seedbox.io

Seedbox.io (impolaron).json

pass.canal-plus.com

myCANAL.ini

passport.abv.bg

Abv.bg (souljanboy).json

passport.aliexpress.com:80

Aliexpress.ini

passport.dx.com

dx.com (badaouipokemon).json

passport.twitch.tv

Twitch.json

pastebin.com

Pastebin.json

pearsbrokers.com:25461

Pear.ini

perfectiptv.ddns.net:25461

Perfect.ini

pitv-iptv.co.za:4545

Flawless2 - Copy.ini

platform.costa.co.uk

Costa (UK).ini

play.mediasetpremium.it

Mediaset_Premium_Play.json

plex.tv

Plex.tv (1).ini

portal.goosevpn.com

goosevpn.json

poster.de-captcher.com

Decaptcher.ini

prd-dun-api01.cfrprd.com

Dunkin Donuts (US).ini

prd-tac-api01.cfrprd.com

Taco Bell.ini

primestreams.tv:826

PrimeStreams.ini

privacy.com

Privacy.com.ini

prod-api-funimationnow.dadcdigital.com

FunimationNow (Anonymous).json

prodmobloy2.finishline.com

Finish Line (impolaron).json

production-gameflip.fingershock.com

GameFlip.ini

profile.callofduty.com

CallOfDuty (badaouipokemon).json

propertysex.com

Propertysex (Anonymous).json

proxies-beinmena.portail.alphanetworks.be

beinsportconnect.ini

proxy.shop

Proxy.shop.ini

public-api.livingsocial.co.uk

Living Social (bossisbaby123).json

public-api.wowcher.co.uk

Wowcher.json

public-ubiservices.ubi.com:443

Uplay.ini

quickiptv.pro:8080

Quick.ini

ra4wvpn.com

Ra4wvpn.ini

rapidgator.net

Rapidgator.ini

reg.ebay.com

Ebay Reg Checker[SITE] (souljanboy).json

reloadednow.com:2086

GearsReloadedIPTV.ini

res.windscribe.com

Windscribe.json

restmws.fuelrewards.com

fuelrewards.json

root-hosting.ddns.net:25461

Root.ini

royaltv.xyz:25461

Royalty.ini

s1.electru.biz:8080

S1.ini

sadeemrdp.com

SadeemRDP.ini

scondoo.de

ScondooCapture (choempiee).json

sec.ebooks.com

ebooks.com.json

secure.adultfriendfinder.com

Adult Friend Finder.json

secure.espaceclientcanal.canal-plus.com

myCANAL.ini

secure.louisvuitton.com

LOUIS VUITTON.ini

secure.net.wwe.com

WWE.ini

secure.runescape.com

Runescape.json

secure.showtime.com

Showtime.json

services.timewarnercable.com

Spectrum.ini

services.walgreens.com

Walgreens.ini

services-mob.panerabread.com

panera.json

signin.ea.com

Origin (Capture).ini

signin.ebay.com

Ebay (thelittletrain17).json

signupservice.ubi.com

Uplay.json

skyaccess.skytv.co.nz

sky.co.nz.json

snthostings.com

SnTHostings.ini

sportsaccess.se

SportsAccess.ini

sportsbet.io

sportsbet.json

sportsdonkey.club

Sportsdonkey.ini

sportsmania.rocks

SportsMania.ini

sso.godaddy.com

GoDaddy.ini

store

 

store.steampowered.com

Steam.ini

stormproxies.com

StormProxies.ini

streams.priiism.tk:5454

Priiism.ini

study.com

study.com.json

subcarduk.altaineapps.com

Subway (UK-IE).ini

subscription.grammarly.com

Grammarly.ini

susi.bigfishgames.com

bigfishgames (Anonymous).json

teamninja.biz:25461

TeamNinja.ini

thepk.co:2086

PlayerKlub.ini

thezumiezstash.com

TheZumiezStash (Anonymous).json

tickets.amtrak.com

Amtrak_Rewards.ini

trackspread.spreadshirt.net

spreadshirt.json

trueflip.io

True Flip.ini

tv.iptvsensation.com:6500

Sensationiptv.ini

twitter.com

Twitter Registration (Hint Capture).ini

ultimatemania.rocks

UltimateMania.ini

uploaded.net

Uploaded.Net.ini

uproar.gg

Uproar.ini

us.battle.net

Blizzard.json

user.gearbest.com

GearBest.ini

user.hbonow.com

HBO NOW.ini

vaders.tv

Vaders.ini

vaders.tv:80

Vader.ini

vip.groupiptv.com:7000

GroupIPTV.json

wallet-ethereum.org

Wallet-Etherium.ini

watch.ustvnow.com

ustvnow (badaouipokemon).json

web.dm.origin.com

Origin (Capture).ini

web-api.perk.com

Perk.ini

webapi-blu.p.sling.com

Slingtv.ini

webapi-grn.p.sling.com

SlingTVnew.ini

webmail.strato.com

Strato Webmail (souljanboy).json

websvc.jetblue.com

JetBlue.ini

windscribe.com

Windscribe.ini

wspuplay-ext.ubi.com

Uplay.ini

wspuplay-ext.ubi.com:443

Uplay.ini

wtfpass.com

wtfpass.ini

www.4shared.com

4shared.com (souljanboy).json

www.7digital.com

7digital.json

www.9kw.eu

9kw.eu (tudorrus26).json

www.aeriagames.com

aeriagames.json

www.amazon.ca

Amazon (CA).ini

www.amazon.co.uk

Amazon (UK).ini

www.amazon.com

Amazon (US).ini

www.audiobooks.com

Audiobooks (thelittletrain17).json

www.avg.com

AVG (tudorrus26).json

www.bannersnack.com

bannersnack (1).ini

www.biblesociety.org.uk

Biblesociety (choempiee).json

www.bigfishgames.com

bigfishgames (Anonymous).json

www.bitcoincasino.us

BitCoinCasino.US (retuos).json

www.bitstarz.com

BitStarz (Anonymous).json

www.blackdesertonline.com

Black_Desert_Online.ini

www.blackhatworld.com

BlackHatWorld.json

www.booktopia.com.au

booktopia.com.au.json

www.boomrdp.com

BoomRDP.ini

www.bovada.lv

bovada.ini

www.captchasolutions.com

Captcha Solution (tudorrus26).json

www.captchatronix.com

captchatronix (badaouipokemon).json

www.cbs.com

CBS.ini

www.cdkeyhouse.com

cdkeyhouse (badaouipokemon).json

www.codecademy.com

codecademy.json

www.coinbase.com

Coinbase (thelittletrain17).json

www.dankhax.net

DankHax (tudorrus26).json

www.deezer.com

Deezer.ini

www.delivery.com

Delivery.ini

www.deltamediaplayer.com

Delta_Media_Player.ini

www.depop.com

Depop (choempiee).json

www.deviantart.com

DeviantArt (badaouipokemon).json

www.directv.com

DirectTV.json

www.dominos.co.uk

Dominos (UK).ini

www.epicgames.com

Fortnite (impolaron).json

www.escapefromtarkov.com

Escape from Tarkov.json

www.expressvpn.com

expressvpn.ini

www.facebook.com

Facebook.ini

www.femalecelebrities.com

Femalecelebrities (Anonymous).json

www.fidgetspinner.co.uk

fidgetspinner (choempiee).json

www.filefactory.com

FileFacroty (Caprute).json

www.forbiddenfruitsfilms.com

Forbiddenfruitsfilms (7iz).json

www.formula1.com

Formula1 (choempiee).json

www.free-ebooks.net

free-ebooks.net.json

www.goat.com

Goat.ini

www.grailed.com

Grailed (choempiee).json

www.gucci.com

Gucci.ini

www.hegre.com

hegre_art.ini

www.hideman.net

HidemanVPN.ini

www.hotstar.com

Hotstar.json

www.imagetyperz.com

Image Typerz (tudorrus26).json

www.iniuria.us

Inuria.ini

www.instagram.com

Instagram Email Checker (Anonymous).json

www.internet.am

Abcdomain (souljanboy).json

www.jcpenney.com

jcpenny.ini

www.jfciocb.net

ExpressVPN.json

www.jomyson.com:8000

JomySon.ini

www.journeys.com

Journeys (Anonymous).json

www.kohls.com

Kohls.json

www.laly-officiel.com

Laly-Officiel (7iz).json

www.libertyshield.com

Liberty Shield (tudorrus26).json

www.louisvuitton.com

LOUIS VUITTON.ini

www.lynda.com

Lynda.ini

www.maxrdp.com

MaxRDP.ini

www.mbitcasino.com

mbitcasino (choempiee).json

www.mediafire.com

Mediafire.json

www.minicabit.com

Minicabit.ini

www.mistersmoke.com

MisterSmoke (Anonymous).json

www.moshimonsters.com

MoshiMonsters (Anonymous).json

www.motionelements.com

Motion Elements (Anonymous).json

www.moviepass.com

Moviepass.ini

www.mp3mixx.com

Mp3Mixx (badaouipokemon).json

www.mp3va.com

mp3va.json

www.myfreecams.com

MyFreeCams (7iz).json

www.myprivateproxy.net

mpp.json

www.nds-card.com

nds-card.json

www.netflix.com

Netflix.json

www.newsensations.com

NewSensations.ini

www.nvidia.com

Nvidea (choempiee).json

www.paddypower.com

Burgerking (choempiee).json

www.pandora.com

Pandora.ini

www.papajohns.com

PapaJohns (US).ini

www.papayaplay.com

Papaya Play.json

www.pathe-thuis.nl

Pathehthuis.ini

www.patreon.com

Patreon.json

www.pizzahut.com

PizzaHut (US

www.priceminister.com

Price Minister.json

www.privatecheatz.com

Privatecheatz.ini

www.proxies24.com

Proxies24 (Anonymous).json

www.proxyrack.com

proxyrack.json

www.qhoster.com

QHoster.ini

www.rarefile.net

RarefileNet.ini

www.rdparena.com

RDPArena.ini

www.reddit.com

Reddit (thelittletrain17).json

www.reship.com

Reship.ini

www.saavn.com

saavn (badaouipokemon).json

www.scribd.com

Scribd.json

www.sendspace.com

Sendspace.ini

www.share-online.biz

Share-Online (7iz).json

www.shopkick.com

Shopkick (tharealbremmy).json

www.showtime.com

Showtime.json

www.skipthedishes.com

SKIPtheDISHES.ini

www.slicethepie.com

SliceThePie.ini

www.sling.com

Slingtv.ini

www.spotify.com

Spotify.ini

www.tastecard.co.uk

tastecard.ini

www.textnow.com

Textnow (7iz).json

www.theanimenetwork.com

TheAnimeNetwork (Anonymous).json

www.thinkgeek.com

ThinkGeek.ini

www.tinydeal.com

TinyDeal.ini

www.torrentleech.org

Torrentleech (Anonymous).json

www.tunnelbear.com

TunnelBear.ini

www.twitch-viewerbot.com

Twitch-Viewbot.json

www.udemy.com

Udemy.ini

www.ufc.tv

UFC.ini

www.virwox.com

VirWox.json

www.wattpad.com

Wattpad.ini

www.win-vps.com

win-vps.json

www.wish.com

wish.json

www.wizard101.com

Wizard 101.ini

www.youlikehits.com

YouLikeHits.ini

www.youporncams.com

Youporncam.json

www.yourprivateproxy.com

yourprivateproxy (thelittletrain17).json

www.zevera.com

Zevera.json

www.zippyshare.com

Zippyshare.ini

www.zumiez.com

zumies.json

youlikehits.com

YouLikeHits (7iz).json

zorrovpn.com

ZorroVPN (tudorrus26).json

zwyr157wwiu6eior.com

NordVPN (Fast) (impolaron).json

[1] Credential stuffing is a type of cyberattack where stolen account credentials typically consisting of lists of usernames and/or email addresses and the corresponding passwords (often from a data breach) are used to gain unauthorized access to user accounts through large-scale automated login requests directed against a web application.

 

[1] https://en.wikipedia.org/wiki/Credential_stuffing

You need to be a member of Red Sky Alliance to add comments!

Join Red Sky Alliance

Email me when people reply –