Finding WEIRD Phishing Websites

jh.live/censys || Get started with the leading Internet Intelligence Platform for threat hunting and attack surface management -- find what is exposed out on the open Internet with Censys! jh.live/censys
Learn Cybersecurity - Name Your Price Training with John Hammond: nameyourpricetraining.com
WATCH MORE:
Dark Web & Cybercrime Investigations: • Tracking Cybercrime on...
Malware & Hacker Tradecraft: • Malware Analysis & Thr...
📧JOIN MY NEWSLETTER ➡ jh.live/email
🙏SUPPORT THE CHANNEL ➡ jh.live/patreon
🤝 SPONSOR THE CHANNEL ➡ jh.live/sponsor
🌎FOLLOW ME EVERYWHERE ➡ jh.live/twitter ↔ jh.live/linkedin ↔ jh.live/discord ↔ jh.live/instagram ↔ jh.live/tiktok
💥 SEND ME MALWARE ➡ jh.live/malware
🔥UA-cam ALGORITHM ➡ Like, Comment, & Subscribe!

[@blinking_dodo]

I often get spam mails with links to those pages.
One of the actors fails to protect their backdoor, so i can just walk in open the file manager they keep exposed.
Then i rename the index files to break the landing pages.
Really want to automate it, but *legal* is evil.

[@PopperOfCorn]

You know, all the information you should never share with a stranger on the internet.

[@taxibutler1858]

A certain shrimp applauds your knowledge

[@godzamoongus]

Are you a small boy?

[@godzamoongus]

someone call Mange Tout

[@shinris3n]

How could you tease us like that with the exe file! Follow up vid?!

[@pelijot]

yup, thats Dynmap, a web Minecraft map.

[@BillAnt]

Gotta love going down rabbit holes... hehe

[@awesomekalin55]

And Railway System Map is from Minecraft Transit Railway

[@Apple_Beshy]

hwhwhw

[@SzaboB33]

You constrained by the sponsorship: cannot use "screw you" as an email address
Me, a free individual: deleting their databases with SQL injection

[@uhh6785]

you're a hero to some bro

[@_tr11]

YOU'RE A HERO

[@thepythoncodez]

based

[@coder_117]

I've been getting spam texts for months telling me my USPS package has arrived at the warehouse but can't be delivered due to incomplete address information. It then asks me to confirm my address at an obviously fake link.

[@tobixnator9314]

That's a real Minecraft server

[@stavros222]

Live overflow will absolutely love it 🤣

[@3N18AKPzmGOsBgWKH]

Truth be told, i just love you exploring the internet and see what happens :P Hope these will show up more in the future. Sure, phishing was in focus, but you ended up going in all other different directions and even cracking the password for the zipfile xD Love it!

[@drabspirit]

The Minecraft server looks interesting! That map view you opened seemed to be Dynmap, which is a mod/plugin to create a Google maps like view of your server, definitely someone with quite the world and those color blocks on the maps were likely player claims within the game using another mod/plugin!

[@s1lverposting]

hey, you found my Minecraft server!

[@BendaCZ]

I hope you are joking 🤣

[@gameshoot8571]

Is it for serious?

[@BritishEngineer]

lmao

[@Redstoneprojrjr]

😂

[@user-eh1fd2pz3s]

Yy🎉🎉y🎉@@BendaCZ❤

[@exoexe1555]

The Minecraft Map is a plugin called DynMap, which uses an open port to process and host that live map you were interacting with. It can be configured to show players, mobs, waypoints and more

[@nickadams2361]

Never been so excited for front desk information

[@_tr11]

it's so fun to write scripts to fill their databases with garbage bro

[@vectoralphaAI]

How much does Censys cost??

[@deaddead698]

There’s a free version that gives you 250 searches a month with 10 pages worth of results. Tbh not bad for basic usage. To go up to 500 searches tho, you gotta pay $69 US. That right there’s a ripoff

[@j_r_-]

Green spotlight makes that background foam look good

[@AkiiiMatcha]

Super fun video! Thanks for making this. :)

[@radscientist]

I've gotten a bunch of these as well as the "Thank you for your payment" with a transaction number that is a link and, of course, a downloadable file. They are usually sent from a Gmail address with a person's name and the sender's name is different.

[@luketurner314]

17:50 that colab would be so cool

[@SperkSan]

Hey John I was wondering when you send requests to these actual *bad* websites (not some CTF challenge), do you use a VPN? If no then if the guys behind the website check their logs and see your IP has made some weird requests to their server then won't they target you?

[@nordgaren2358]

IP address is worthless

[@chrissametrinequartz9389]

also I am like 99% certain that he would be using a vpn

[@vader567]

Oh please he is a cybersec expert

[@luketurner314]

17:45 that almost sounds like Owen Wilson's "wow"

[@nickadams2361]

I love how you said “hosted in Ohio apparently”

[@BillAnt]

Well it could be located on a server just about anywhere.

[@kymtoobe]

censys not for usual user :P

[@htjmartin]

Today I learned that there is an open source phising tool... interesting.

[@cat_fury]

this work?

[@Milonsarkar-xn7db]

On eBay s3

[@maddyfromcartoon]

is brave browser safer than chrome?

[@arthur979]

if you are smart, every browser is the same

[@nicholas4839]

Nos all the same

[@linux_for_noobs]

Just don't use chrome, edge, opera or safari. Those are basically spyware.

[@maddyfromcartoon]

@@linux_for_noobs how? Can you pls explain? I am using chrome rn.

[@maddyfromcartoon]

@@linux_for_noobs Can you explain how? btw I am using Chrome

[@Apple_Beshy]

love

[@jon9509]

11:27 xD

[@n18y]

first! i love ur videos

[@mongmanmarkyt2897]

Bro got the angy discord pfp

[@kalidoom1674]

finds sites like this and writes code to send bogus info ;)~

[@grudge290]

I get this all the time lol

[@Cubeocheez]

Here before viral

[@GamerBekodie]

Its a real dynamap lol

[@cyber_space09]

Hmm🫠 you found Minecraft server 😂

[@CyberSecJourn]

Dude seriously, why are all your sponsors pretty expensive? If I'm to assume beginners, and people just learning Cybersecurity to gain information to pass a cert or get a job, are they really going to be interested in purchasing these tools, services, etc? I mean, I won't say scammy but it is SURE looking like you're here for the money if I'm to be honest.

[@moppupaws]

thats crazy its almost like.. people do youtube as a job or something... and you do jobs exclusively for the money.... insane tbh

[@floppa.flo88a]

Jesus loves you John

[@Smurfsmith-os5ip]

4th

[@kazoolover_lol]

Correct!!! (Yeah!!)

[@eirik874]

1st

[@kazoolover_lol]

Nope

[@Olflix]

3rd

[@kazoolover_lol]

Correct!!