IP Information for 154.29.74.158
ASN: 397423
ISP / Org: TIER-NET - Tier.Net Technologies LLC, US
Country: US
Network Range: 154.29.64.0/20
ASN: 397423
ISP / Org: TIER-NET - Tier.Net Technologies LLC, US
Country: US
Network Range: 154.29.64.0/20
๐ญ3
๐ช Slice For Life - Part 2 ๐ช
IP Information for 154.29.74.158 ASN: 397423 ISP / Org: TIER-NET - Tier.Net Technologies LLC, US Country: US Network Range: 154.29.64.0/20
X (formerly Twitter)
DarkJester (@DarkJstr) on X
๐จ NightSpire ransomware DLS exposed on clearnet.
154.29.74[.]158 - AS397423 / https://t.co/FnxpLYGowc Technologies LLC (US)
Laravel backend (XSRF-TOKEN + session cookie), HTTP title: "RaaS Serviโฆ
154.29.74[.]158 - AS397423 / https://t.co/FnxpLYGowc Technologies LLC (US)
Laravel backend (XSRF-TOKEN + session cookie), HTTP title: "RaaS Serviโฆ
๐จ๐ท๐บ Russian state-backed hackers can steal 90 days of Zimbra emails when a victim simply views a message
A joint international advisory warns that LAUNDRY BEAR is exploiting CVE-2025-66376 against unpatched Zimbra Collaboration Suite servers.
The malicious JavaScript executes when an email is viewed in a vulnerable version of Zimbra webmail. No link click, attachment, or additional interaction is required.
The groupโs Ulej tool attempts to steal:
โข The victimโs last 90 days of emails
โข Email addresses and organization directories
โข Saved passwords
โข 2FA recovery codes
โข Newly created application passwords
The attackers can also enable IMAP and create an application password named โZimbraWebโ to maintain access to compromised mailboxes.
The vulnerability was patched in Zimbra 10.0.18 and 10.1.13. Organizations running older versions should update immediately and investigate for signs of compromise.
Full details: https://www.ic3.gov/CSA/2026/260723.pdf
A joint international advisory warns that LAUNDRY BEAR is exploiting CVE-2025-66376 against unpatched Zimbra Collaboration Suite servers.
The malicious JavaScript executes when an email is viewed in a vulnerable version of Zimbra webmail. No link click, attachment, or additional interaction is required.
The groupโs Ulej tool attempts to steal:
โข The victimโs last 90 days of emails
โข Email addresses and organization directories
โข Saved passwords
โข 2FA recovery codes
โข Newly created application passwords
The attackers can also enable IMAP and create an application password named โZimbraWebโ to maintain access to compromised mailboxes.
The vulnerability was patched in Zimbra 10.0.18 and 10.1.13. Organizations running older versions should update immediately and investigate for signs of compromise.
Full details: https://www.ic3.gov/CSA/2026/260723.pdf
๐จโผ๏ธ The Gentlemen ransomware claims 31 victims
๐ฆ๐น Wunschkind Klinik Dr Brunbauer - A fertility clinic in Vienna specializing in IVF, insemination, diagnostics, and reproductive medicine.
๐บ๐ธ Conecsus - A Texas-based metal recycler and refiner specializing in recovering valuable metals from industrial waste.
๐บ๐ธ MatTek - A biotechnology company developing human tissue models for research, product testing, and drug development.
๐บ๐ธ Optiforms - An Arizona-based precision manufacturer producing electroformed, machined, and optical metal components.
๐จ๐ฆ Custom Foam Systems - A Canadian manufacturer of fabricated and molded polyurethane foam components.
๐ญ๐บ Herbahaz - A Hungarian health and wellness retailer specializing in herbs, vitamins, cosmetics, and organic products.
๐จ๐ฟ ฤeskรก filharmonie - The Czech Republic's leading symphony orchestra, based at the Rudolfinum in Prague.
๐ซ๐ท Velum - A French manufacturer of professional lighting systems for commercial and industrial environments.
๐ฆ๐บ Lenrose - An Australian jewelry manufacturer specializing in precious-metal casting, design, and production services.
๐บ๐ธ Affinity Designs - A New York-based jewelry wholesaler and manufacturer specializing in bridal and gemstone jewelry.
๐ต๐ฑ LSN - A Polish software development company providing full-stack, cloud, and custom technology services.
๐ฎ๐ณ DayNDay - An Indian integrated facility-management company serving commercial and industrial organizations.
๐บ๐ธ SMRTR - A workflow automation company providing document management, compliance, and business process solutions.
๐บ๐ธ Henry Frerk Sons - A long-established Chicago supplier of masonry, plaster, concrete, and historic restoration materials.
๐ต๐ฑ Raben Group - A European logistics provider offering road transport, warehousing, contract logistics, and supply-chain services.
๐ต๐ฑ Agapit - A Polish supplier of professional cleaning equipment, robotics, chemicals, and maintenance services.
๐ฆ๐บ HBS Group - An Australian construction company specializing in heritage restoration, conservation, and remedial projects.
๐จ๐ฎ Compagnie des Caoutchoucs du Pakidiรฉ - An Ivorian rubber producer involved in farming, processing, and exporting natural rubber.
๐ซ๐ท Gloria Maris Groupe - A French aquaculture company farming and distributing premium Mediterranean fish.
๐ซ๐ท SICSOE - A French wine logistics company providing storage, bottling, order preparation, and shipping services.
๐จ๐ฆ Clarke Radiology - A Quebec medical imaging provider offering MRI, ultrasound, mammography, X-ray, and related diagnostic services.
๐บ๐ธ Title Resources - A Texas title company providing property searches, title insurance, and real-estate closing services.
๐ณ๐ฑ Thialf - A major Dutch ice-skating arena and training center located in Heerenveen.
๐ซ๐ท Dรฉcoupe Laser Services - A French metalworking company specializing in laser cutting, bending, welding, and machining.
๐ฆ๐ท Oldelval Oleoductos del Valle - An Argentine midstream energy company operating a major crude-oil pipeline network.
๐ฆ๐บ TC Printing - An Australian commercial printing company providing offset, digital, signage, and marketing-material production.
๐ฎ๐ณ Tikona Infinet - An Indian telecommunications provider offering broadband and wireless internet services.
๐ต๐น Guerreiros Seguros - A Portuguese insurance brokerage serving individuals, families, and businesses.
๐บ๐ธ MK Jewelry - A New York jewelry manufacturer and supplier specializing in bridal, gemstone, and fashion collections.
๐จ๐ฆ European Design - A Toronto-based wholesale supplier of jewelry, gemstones, findings, tools, and manufacturing equipment.
๐บ๐ธ Disney Family / Shamrock Holdings - A private investment firm and family office established by Roy E. Disney.
๐ฅ Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: https://darkwebinformer.com/pricing
๐ฆ๐น Wunschkind Klinik Dr Brunbauer - A fertility clinic in Vienna specializing in IVF, insemination, diagnostics, and reproductive medicine.
๐บ๐ธ Conecsus - A Texas-based metal recycler and refiner specializing in recovering valuable metals from industrial waste.
๐บ๐ธ MatTek - A biotechnology company developing human tissue models for research, product testing, and drug development.
๐บ๐ธ Optiforms - An Arizona-based precision manufacturer producing electroformed, machined, and optical metal components.
๐จ๐ฆ Custom Foam Systems - A Canadian manufacturer of fabricated and molded polyurethane foam components.
๐ญ๐บ Herbahaz - A Hungarian health and wellness retailer specializing in herbs, vitamins, cosmetics, and organic products.
๐จ๐ฟ ฤeskรก filharmonie - The Czech Republic's leading symphony orchestra, based at the Rudolfinum in Prague.
๐ซ๐ท Velum - A French manufacturer of professional lighting systems for commercial and industrial environments.
๐ฆ๐บ Lenrose - An Australian jewelry manufacturer specializing in precious-metal casting, design, and production services.
๐บ๐ธ Affinity Designs - A New York-based jewelry wholesaler and manufacturer specializing in bridal and gemstone jewelry.
๐ต๐ฑ LSN - A Polish software development company providing full-stack, cloud, and custom technology services.
๐ฎ๐ณ DayNDay - An Indian integrated facility-management company serving commercial and industrial organizations.
๐บ๐ธ SMRTR - A workflow automation company providing document management, compliance, and business process solutions.
๐บ๐ธ Henry Frerk Sons - A long-established Chicago supplier of masonry, plaster, concrete, and historic restoration materials.
๐ต๐ฑ Raben Group - A European logistics provider offering road transport, warehousing, contract logistics, and supply-chain services.
๐ต๐ฑ Agapit - A Polish supplier of professional cleaning equipment, robotics, chemicals, and maintenance services.
๐ฆ๐บ HBS Group - An Australian construction company specializing in heritage restoration, conservation, and remedial projects.
๐จ๐ฎ Compagnie des Caoutchoucs du Pakidiรฉ - An Ivorian rubber producer involved in farming, processing, and exporting natural rubber.
๐ซ๐ท Gloria Maris Groupe - A French aquaculture company farming and distributing premium Mediterranean fish.
๐ซ๐ท SICSOE - A French wine logistics company providing storage, bottling, order preparation, and shipping services.
๐จ๐ฆ Clarke Radiology - A Quebec medical imaging provider offering MRI, ultrasound, mammography, X-ray, and related diagnostic services.
๐บ๐ธ Title Resources - A Texas title company providing property searches, title insurance, and real-estate closing services.
๐ณ๐ฑ Thialf - A major Dutch ice-skating arena and training center located in Heerenveen.
๐ซ๐ท Dรฉcoupe Laser Services - A French metalworking company specializing in laser cutting, bending, welding, and machining.
๐ฆ๐ท Oldelval Oleoductos del Valle - An Argentine midstream energy company operating a major crude-oil pipeline network.
๐ฆ๐บ TC Printing - An Australian commercial printing company providing offset, digital, signage, and marketing-material production.
๐ฎ๐ณ Tikona Infinet - An Indian telecommunications provider offering broadband and wireless internet services.
๐ต๐น Guerreiros Seguros - A Portuguese insurance brokerage serving individuals, families, and businesses.
๐บ๐ธ MK Jewelry - A New York jewelry manufacturer and supplier specializing in bridal, gemstone, and fashion collections.
๐จ๐ฆ European Design - A Toronto-based wholesale supplier of jewelry, gemstones, findings, tools, and manufacturing equipment.
๐บ๐ธ Disney Family / Shamrock Holdings - A private investment firm and family office established by Roy E. Disney.
๐ฅ Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: https://darkwebinformer.com/pricing
Just a reminder... you can find all of my repositories that were on my GitHub now on my Git...
https://git.darkwebinformer.com
https://git.darkwebinformer.com
โค1
โผ๏ธ๐บ๐ธ๐ช๐ธ PLAY ransomware claims 3 victims
๐บ๐ธ The DeBruler - An Illinois real estate firm that develops, builds, and manages residential properties.
๐บ๐ธ Restaurant Depot - A wholesale supplier of food, equipment, and other essentials for restaurants and foodservice businesses.
๐ช๐ธ Record Go Alquiler - A Spanish vehicle rental company serving major tourist destinations and airports.
๐ฅ No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing
________________________________________
Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Telegram CVE Feed: https://t.me/DWI_CVE_Alerts
FBI Watchdog Alerts: https://t.me/FBI_Watchdog
Website: https://darkwebinformer.com
Pricing (Includes Crypto): https://darkwebinformer.com/pricing
API Access: https://darkwebinformer.com/api-details
Socials: https://darkwebinformer.com/socials
๐บ๐ธ The DeBruler - An Illinois real estate firm that develops, builds, and manages residential properties.
๐บ๐ธ Restaurant Depot - A wholesale supplier of food, equipment, and other essentials for restaurants and foodservice businesses.
๐ช๐ธ Record Go Alquiler - A Spanish vehicle rental company serving major tourist destinations and airports.
๐ฅ No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing
________________________________________
Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Telegram CVE Feed: https://t.me/DWI_CVE_Alerts
FBI Watchdog Alerts: https://t.me/FBI_Watchdog
Website: https://darkwebinformer.com
Pricing (Includes Crypto): https://darkwebinformer.com/pricing
API Access: https://darkwebinformer.com/api-details
Socials: https://darkwebinformer.com/socials
๐ฅ1
๐ช Slice For Life - Part 2 ๐ช
https://x.com/DarkJstr/status/2080308644625965331
154[.]29[.]74[.]158:3389
๐ช Slice For Life - Part 2 ๐ช
154[.]29[.]74[.]158:3389
๐จ Here is some info on this NightSpire ransomware DLS IP leak...
NetBIOS_Domain_Name: WIN-5JQB7URNH1R
Windows Server 2022
Ports: 135, 139, 445, 3389, 5985, 47001, 49666, 49669, 49670
/.htaccess
/database/database
/database/phpmyadmin
/index.php::$DATA
/index.php.
NetBIOS_Domain_Name: WIN-5JQB7URNH1R
Windows Server 2022
Ports: 135, 139, 445, 3389, 5985, 47001, 49666, 49669, 49670
/.htaccess
/database/database
/database/phpmyadmin
/index.php::$DATA
/index.php.
โค1
๐จ๐ฒ๐ฝ Michoacรกn government procurement documents allegedly leaked
Forum actors homercracker and cenfecracked claim to have leaked data from the Comitรฉ de Adquisiciones del Poder Ejecutivo, the procurement and administrative platform used by the Michoacรกn state government.
The post advertises more than 37,000 files totaling over 58GB. The actors claim the material contains supplier and contractor records used for procurement processes, public tenders, and administrative registrations.
The allegedly exposed documents include INE voter credentials, full names, CURP and RFC identifiers, tax domicile certificates, professional licenses, proof of tax status, photographs of fiscal addresses, official identification belonging to business owners and legal representatives, financial statements, email addresses, SAT compliance opinions, payment receipts, corporate charters, and other legal and fiscal records.
This claim is currently unverified.
๐ฅ Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: http://darkwebinformer.com/pricing
Forum actors homercracker and cenfecracked claim to have leaked data from the Comitรฉ de Adquisiciones del Poder Ejecutivo, the procurement and administrative platform used by the Michoacรกn state government.
The post advertises more than 37,000 files totaling over 58GB. The actors claim the material contains supplier and contractor records used for procurement processes, public tenders, and administrative registrations.
The allegedly exposed documents include INE voter credentials, full names, CURP and RFC identifiers, tax domicile certificates, professional licenses, proof of tax status, photographs of fiscal addresses, official identification belonging to business owners and legal representatives, financial statements, email addresses, SAT compliance opinions, payment receipts, corporate charters, and other legal and fiscal records.
This claim is currently unverified.
๐ฅ Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: http://darkwebinformer.com/pricing
๐จ๐ง๐ฉ Bangladesh education ministry student data allegedly held for ransom
A forum actor claiming affiliation with the Ongryeok group says it exploited vulnerabilities in a Bangladeshi government education system and obtained private files belonging to thousands of students.
The post threatens to publish the allegedly stolen dataset unless the government pays 350 XMR within seven days.
The actor did not disclose an exact record count, archive size, or breakdown of the allegedly compromised information.
This claim is currently unverified.
๐ฅ No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing
A forum actor claiming affiliation with the Ongryeok group says it exploited vulnerabilities in a Bangladeshi government education system and obtained private files belonging to thousands of students.
The post threatens to publish the allegedly stolen dataset unless the government pays 350 XMR within seven days.
The actor did not disclose an exact record count, archive size, or breakdown of the allegedly compromised information.
This claim is currently unverified.
๐ฅ No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing
๐จ๐ฏ๐ต PeakManager customer dataset allegedly listed for sale
A forum actor claims to have breached PeakManager, a Japanese reservation platform used by salons, clinics, and other appointment-based businesses, and extracted more than 32.5 million database rows.
The seller says a deduplicated version contains approximately 6.1 million records. The listing also advertises PeakManager source code, access to its intranet, and remote database access, with a reported asking price of $70,000.
Advertised data includes:
โช๏ธCustomer names and phonetic name readings
โช๏ธDates of birth and genders
โช๏ธPhone numbers and email addresses
โช๏ธPostal codes, prefectures, and street addresses
โช๏ธPassword-related fields
โช๏ธCustomer IDs, membership details, and account statuses
โช๏ธAppointment, sales, and communication metadata
Internal company, shop, and administrator identifiers
This claim is currently unverified.
๐ฅ Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: http://darkwebinformer.com/pricing
A forum actor claims to have breached PeakManager, a Japanese reservation platform used by salons, clinics, and other appointment-based businesses, and extracted more than 32.5 million database rows.
The seller says a deduplicated version contains approximately 6.1 million records. The listing also advertises PeakManager source code, access to its intranet, and remote database access, with a reported asking price of $70,000.
Advertised data includes:
โช๏ธCustomer names and phonetic name readings
โช๏ธDates of birth and genders
โช๏ธPhone numbers and email addresses
โช๏ธPostal codes, prefectures, and street addresses
โช๏ธPassword-related fields
โช๏ธCustomer IDs, membership details, and account statuses
โช๏ธAppointment, sales, and communication metadata
Internal company, shop, and administrator identifiers
This claim is currently unverified.
๐ฅ Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: http://darkwebinformer.com/pricing
โค1
โผ๏ธ New Dark Web Informer Blog Post!
Title: Moroccan Medical Provider Distamed Allegedly Breached, Patient Records and 13 Years of Company Archive Claimed
Link: https://darkwebinformer.com/moroccan-medical-provider-distamed-allegedly-breached-patient-records-and-13-years-of-company-archive-claimed/
๐ฅ Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: https://darkwebinformer.com/pricing
Title: Moroccan Medical Provider Distamed Allegedly Breached, Patient Records and 13 Years of Company Archive Claimed
Link: https://darkwebinformer.com/moroccan-medical-provider-distamed-allegedly-breached-patient-records-and-13-years-of-company-archive-claimed/
๐ฅ Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: https://darkwebinformer.com/pricing
Dark Web Informer
Moroccan Medical Provider Distamed Allegedly Breached, Patient Records and 13 Years of Company Archive Claimed
A threat actor posting as anisanas2 claims to have extracted the full database of Distamed Morocco, a supplier of medical devices and healthcare solutions to hospitals, clinics, and practitioners, with a stated focus on cardiology, pulmonology, neurologyโฆ