⚠️ FBI Watchdog - IP Change (hosting migration) ⚠️
🔗 DarkWebInformer.com - Cyber Threat Intelligence
Domain: handala-hack.tw
Record Type: IP Change (hosting migration)
Time Detected: 2026-04-01 11:57:51 UTC
Previous Records:
New Records:
🔗 DarkWebInformer.com - Cyber Threat Intelligence
Domain: handala-hack.tw
Record Type: IP Change (hosting migration)
Time Detected: 2026-04-01 11:57:51 UTC
Previous Records:
A: 43.169.13.152, 43.169.14.152
AAAA:
New Records:
A: 43.169.13.152, 43.169.14.152 → 43.169.16.152
Classification: Complete IP replacement - likely hosting migration
🇪🇺 Europol Press Release
━━━━━━━━━━━━━━━━━━━━━
From intelligence to conviction: Europol helps dismantle Terrorgram Collective
Full Press Release → europol.europa.eu
━━━━━━━━━━━━━━━━━━━━━
🕵️ Dark Web Informer • Europol Monitor
━━━━━━━━━━━━━━━━━━━━━
From intelligence to conviction: Europol helps dismantle Terrorgram Collective
Full Press Release → europol.europa.eu
━━━━━━━━━━━━━━━━━━━━━
🕵️ Dark Web Informer • Europol Monitor
Europol
From intelligence to conviction: Europol helps dismantle Terrorgram Collective – News from the court | Europol
A Canadian man has been sentenced by the Public Prosecution Service of Canada to 20 years in prison for terrorism-related offences, following an investigation supported by Europol’s European Counter Terrorism Centre (ECTC).
⚠️ FBI Watchdog - IP Change (hosting migration) ⚠️
🔗 DarkWebInformer.com - Cyber Threat Intelligence
Domain: handala-hack.tw
Record Type: IP Change (hosting migration)
Time Detected: 2026-04-01 12:49:43 UTC
Previous Records:
New Records:
🔗 DarkWebInformer.com - Cyber Threat Intelligence
Domain: handala-hack.tw
Record Type: IP Change (hosting migration)
Time Detected: 2026-04-01 12:49:43 UTC
Previous Records:
A: 43.169.16.152
AAAA:
New Records:
A: 43.169.16.152 → 43.169.13.152, 43.169.14.152
Classification: Complete IP replacement - likely hosting migration
⚠️ FBI Watchdog - DNS Change (A) ⚠️
🔗 DarkWebInformer.com - Cyber Threat Intelligence
Domain: handala-hack.tw
Record Type: DNS Change (A)
Time Detected: 2026-04-01 13:19:16 UTC
Previous Records:
New Records:
🔗 DarkWebInformer.com - Cyber Threat Intelligence
Domain: handala-hack.tw
Record Type: DNS Change (A)
Time Detected: 2026-04-01 13:19:16 UTC
Previous Records:
43.169.13.152
43.169.14.152
New Records:
43.169.14.152
⚠️ FBI Watchdog - DNS Change (TXT) ⚠️
🔗 DarkWebInformer.com - Cyber Threat Intelligence
Domain: breachforums.ai
Record Type: DNS Change (TXT)
Time Detected: 2026-04-01 13:19:25 UTC
Previous Records:
New Records:
🔗 DarkWebInformer.com - Cyber Threat Intelligence
Domain: breachforums.ai
Record Type: DNS Change (TXT)
Time Detected: 2026-04-01 13:19:25 UTC
Previous Records:
"postal-verification 8UQlchicwjdZVpzAnt7kf5jFR4brhDVo"
"v=spf1 include:spf.kingmailer.org ~all"
New Records:
"google-site-verification=QrhJDhFiFVmRIfQjHhw7ILBe8vm9h4is-57xoJXwHbE"
"postal-verification 8UQlchicwjdZVpzAnt7kf5jFR4brhDVo"
"v=spf1 include:spf.kingmailer.org ~all"
⚠️ FBI Watchdog - IP Change (ips removed) ⚠️
🔗 DarkWebInformer.com - Cyber Threat Intelligence
Domain: handala-hack.tw
Record Type: IP Change (ips removed)
Time Detected: 2026-04-01 13:22:10 UTC
Previous Records:
New Records:
🔗 DarkWebInformer.com - Cyber Threat Intelligence
Domain: handala-hack.tw
Record Type: IP Change (ips removed)
Time Detected: 2026-04-01 13:22:10 UTC
Previous Records:
A: 43.169.13.152, 43.169.14.152
AAAA:
New Records:
A: 43.169.13.152, 43.169.14.152 → 43.169.14.152
Classification: 1 IP(s) removed
⚠️ FBI Watchdog - DNS Change (A) ⚠️
🔗 DarkWebInformer.com - Cyber Threat Intelligence
Domain: handala-hack.tw
Record Type: DNS Change (A)
Time Detected: 2026-04-01 13:46:17 UTC
Previous Records:
New Records:
🔗 DarkWebInformer.com - Cyber Threat Intelligence
Domain: handala-hack.tw
Record Type: DNS Change (A)
Time Detected: 2026-04-01 13:46:17 UTC
Previous Records:
43.169.14.152
New Records:
43.169.15.152
⚠️ FBI Watchdog - IP Change (hosting migration) ⚠️
🔗 DarkWebInformer.com - Cyber Threat Intelligence
Domain: handala-hack.tw
Record Type: IP Change (hosting migration)
Time Detected: 2026-04-01 13:48:48 UTC
Previous Records:
New Records:
🔗 DarkWebInformer.com - Cyber Threat Intelligence
Domain: handala-hack.tw
Record Type: IP Change (hosting migration)
Time Detected: 2026-04-01 13:48:48 UTC
Previous Records:
A: 43.169.14.152
AAAA:
New Records:
A: 43.169.14.152 → 43.169.15.152
Classification: Complete IP replacement - likely hosting migration
⚠️ FBI Watchdog - IP Change (hosting migration) ⚠️
🔗 DarkWebInformer.com - Cyber Threat Intelligence
Domain: handala-hack.tw
Record Type: IP Change (hosting migration)
Time Detected: 2026-04-01 14:15:26 UTC
Previous Records:
New Records:
🔗 DarkWebInformer.com - Cyber Threat Intelligence
Domain: handala-hack.tw
Record Type: IP Change (hosting migration)
Time Detected: 2026-04-01 14:15:26 UTC
Previous Records:
A: 43.169.15.152
AAAA:
New Records:
A: 43.169.15.152 → 43.169.16.152
Classification: Complete IP replacement - likely hosting migration
⚠️ FBI Watchdog - IP Change (hosting migration) ⚠️
🔗 DarkWebInformer.com - Cyber Threat Intelligence
Domain: handala-hack.tw
Record Type: IP Change (hosting migration)
Time Detected: 2026-04-01 15:11:45 UTC
Previous Records:
New Records:
🔗 DarkWebInformer.com - Cyber Threat Intelligence
Domain: handala-hack.tw
Record Type: IP Change (hosting migration)
Time Detected: 2026-04-01 15:11:45 UTC
Previous Records:
A: 43.169.16.152
AAAA:
New Records:
A: 43.169.16.152 → 43.169.14.152
Classification: Complete IP replacement - likely hosting migration
‼️ New Dark Web Informer Blog Post!
Title: Vulta Intelligence Launches as Credential Lookup Service With 14.2 Billion Indexed Records, Telegram Bot, and Pay-Per-Query ULP Extraction
Link: https://darkwebinformer.com/vulta-intelligence-launches-as-credential-lookup-service-with-14-2-billion-indexed-records-telegram-bot-and-pay-per-query-ulp-extraction/
Title: Vulta Intelligence Launches as Credential Lookup Service With 14.2 Billion Indexed Records, Telegram Bot, and Pay-Per-Query ULP Extraction
Link: https://darkwebinformer.com/vulta-intelligence-launches-as-credential-lookup-service-with-14-2-billion-indexed-records-telegram-bot-and-pay-per-query-ulp-extraction/
Dark Web Informer
Vulta Intelligence Launches as Credential Lookup Service With 14.2 Billion Indexed Records, Telegram Bot, and Pay-Per-Query ULP…
⚠️ FBI Watchdog - IP Change (new ips added) ⚠️
🔗 DarkWebInformer.com - Cyber Threat Intelligence
Domain: handala-hack.tw
Record Type: IP Change (new ips added)
Time Detected: 2026-04-01 15:32:30 UTC
Previous Records:
New Records:
🔗 DarkWebInformer.com - Cyber Threat Intelligence
Domain: handala-hack.tw
Record Type: IP Change (new ips added)
Time Detected: 2026-04-01 15:32:30 UTC
Previous Records:
A: 43.169.14.152
AAAA:
New Records:
A: 43.169.14.152 → 43.169.13.152, 43.169.14.152
Classification: 1 new IP(s) added
‼️ New Dark Web Informer Blog Post!
Title: FulcrumSec Breaches Unique Computing, ReFocus AI, and Gennet AI Exposing 23,000 Insurance Policyholders, $797M in Premiums, Driver Licenses, SSNs, and Proprietary ML Models From a Single Unpatched AWS Account
Link: https://darkwebinformer.com/fulcrumsec-breaches-unique-computing-refocus-ai-and-gennet-ai-exposing-23-000-insurance-policyholders-797m-in-premiums-driver-licenses-ssns-and-proprietary-ml-models-from-a-single-unpat/
Title: FulcrumSec Breaches Unique Computing, ReFocus AI, and Gennet AI Exposing 23,000 Insurance Policyholders, $797M in Premiums, Driver Licenses, SSNs, and Proprietary ML Models From a Single Unpatched AWS Account
Link: https://darkwebinformer.com/fulcrumsec-breaches-unique-computing-refocus-ai-and-gennet-ai-exposing-23-000-insurance-policyholders-797m-in-premiums-driver-licenses-ssns-and-proprietary-ml-models-from-a-single-unpat/
Dark Web Informer
FulcrumSec Breaches Unique Computing, ReFocus AI, and Gennet AI Exposing 23,000 Insurance Policyholders, $797M in Premiums, Driver…
🔥1
‼️ New Dark Web Informer Blog Post!
Title: Alleged Breach of Smarteez Exposes Full Production Database for L'Oreal Morocco Including 296 Pharmacies, 361K Sales Records, OAuth Secrets, and Competitive Intelligence Across Four L'Oreal Brands
Link: https://darkwebinformer.com/alleged-breach-of-smarteez-exposes-full-production-database-for-loreal-morocco-including-296-pharmacies-361k-sales-records-oauth-secrets-and-competitive-intelligence-across-four-loreal-/
Title: Alleged Breach of Smarteez Exposes Full Production Database for L'Oreal Morocco Including 296 Pharmacies, 361K Sales Records, OAuth Secrets, and Competitive Intelligence Across Four L'Oreal Brands
Link: https://darkwebinformer.com/alleged-breach-of-smarteez-exposes-full-production-database-for-loreal-morocco-including-296-pharmacies-361k-sales-records-oauth-secrets-and-competitive-intelligence-across-four-loreal-/
Dark Web Informer
Alleged Breach of Smarteez Exposes Full Production Database for L'Oreal Morocco Including 296 Pharmacies, 361K Sales Records, OAuth…
‼️Airbus allegedly has Artifactory/DevOps data leaked on a popular cybercrime forum.
Threat Actor: AckLine
Date: 04-01-2026
Category: Leak
Victim: Airbus SE
Industry: Aerospace / Defence
Site: airbus.com
Threat actor claims to be leaking Airbus Artifactory/DevOps data. The dump is 16GB compressed, containing 1,220 directories and 6,207 files.
Airbus is a European aerospace corporation primarily known for commercial aircraft manufacturing, with additional divisions for Defence, Space, and Helicopters.
Threat Actor: AckLine
Date: 04-01-2026
Category: Leak
Victim: Airbus SE
Industry: Aerospace / Defence
Site: airbus.com
Threat actor claims to be leaking Airbus Artifactory/DevOps data. The dump is 16GB compressed, containing 1,220 directories and 6,207 files.
Airbus is a European aerospace corporation primarily known for commercial aircraft manufacturing, with additional divisions for Defence, Space, and Helicopters.
‼️ New Dark Web Informer Blog Post!
Title: ShadowByt3s Claims Starbucks Breach With 10GB of Proprietary Source Code, Beverage Machine Firmware, and Global Management Tools From Compromised S3 Bucket
Link: https://darkwebinformer.com/shadowbyt3s-claims-starbucks-breach-with-10gb-of-proprietary-source-code-beverage-machine-firmware-and-global-management-tools-from-compromised-s3-bucket/
Title: ShadowByt3s Claims Starbucks Breach With 10GB of Proprietary Source Code, Beverage Machine Firmware, and Global Management Tools From Compromised S3 Bucket
Link: https://darkwebinformer.com/shadowbyt3s-claims-starbucks-breach-with-10gb-of-proprietary-source-code-beverage-machine-firmware-and-global-management-tools-from-compromised-s3-bucket/
Dark Web Informer
ShadowByt3s Claims Starbucks Breach With 10GB of Proprietary Source Code, Beverage Machine Firmware, and Global Management Tools…
‼️🇺🇸 Handala Hack claims St. Joseph County breached with over 2 terabytes of data allegedly stolen.
‼️ Warframe.com allegedly has data exposed on a popular cybercrime forum.
Threat Actor: xorcat
Category: Breach
Victim: Warframe (Digital Extremes)
Industry: Gaming
Site: warframe.com
Threat actor claims to have uploaded the Warframe.com database containing 3,000,000 user records (345 MB compressed). Compromised data includes user ID, email address, username, password hash (bcrypt), display name, account level, platinum balance, registration date, last login, play time (hours), clan name, country, and IP address.
Threat Actor: xorcat
Category: Breach
Victim: Warframe (Digital Extremes)
Industry: Gaming
Site: warframe.com
Threat actor claims to have uploaded the Warframe.com database containing 3,000,000 user records (345 MB compressed). Compromised data includes user ID, email address, username, password hash (bcrypt), display name, account level, platinum balance, registration date, last login, play time (hours), clan name, country, and IP address.
‼️ Updated XSS forum domains:
Clearnet:
xss[.]ac
Dark Web:
http://xssac4uqtauxumkktnp3knz2ag7qcb3efmb66mokjg5fcqhzvilgwfid[.]onion
Clearnet:
xss[.]ac
Dark Web:
http://xssac4uqtauxumkktnp3knz2ag7qcb3efmb66mokjg5fcqhzvilgwfid[.]onion
❤3