"I am guessing that the breachforums[.]hn leak site for ScatteredLAPSUS$Hunters is in the process of being seized."
"A whois lookup now shows that the name servers have been changed to hans.ns.cloudflare.com and surina.ns.cloudflare.com, which I am guessing are government accounts."
"The onion site appears intact."
"This post will be updated as the situation evolves."
A whois lookup shows breachforums[.]hn nameservers changed to hans.ns.cloudflare.com and surina.ns.cloudflare.com. The nameserver change is suspected to indicate government-controlled Cloudflare accounts and suggests an active seizure of the ScatteredLAPSUS$Hunters leak site. The Tor onion mirror remains accessible, indicating partial takedown or preservation of the onion service. DNS and hosting metadata should be monitored for further custody indicators and timing details. Domain registration timestamps, WHOIS records, and DNS change logs should be archived for evidence. Preserve legally relevant content and screenshots while tracking additional updates as the situation develops.
Read at DataBreaches.Net
Unable to calculate read time
Collection
[
|
...
]