WHOIS for raidforums.as
Domain: raidforums.as
Registered On: 2026-07-26 20:15:40 UTC
Expires On: 2027-07-26 20:15:40 UTC
Updated On: Unknown
Status:
clientTransferProhibited
Name Servers:
ns2.ddos-guard.net
ns1.ddos-guard.net
Registrar: Not Available
IANA ID: 201-gdns
URL: Not Available
Abuse Email: abuse@inwx.com
Abuse Phone: Not Available
Domain: raidforums.as
Registered On: 2026-07-26 20:15:40 UTC
Expires On: 2027-07-26 20:15:40 UTC
Updated On: Unknown
Status:
clientTransferProhibited
Name Servers:
ns2.ddos-guard.net
ns1.ddos-guard.net
Registrar: Not Available
IANA ID: 201-gdns
URL: Not Available
Abuse Email: abuse@inwx.com
Abuse Phone: Not Available
IP Information for 95.216.247.178
ASN: 24940
ISP / Org: HETZNER-AS - Hetzner Online GmbH, DE
Country: FI
Network Range: 95.216.0.0/15
ASN: 24940
ISP / Org: HETZNER-AS - Hetzner Online GmbH, DE
Country: FI
Network Range: 95.216.0.0/15
🔪 Slice For Life - Part 2 🔪
WHOIS for raidforums.as Domain: raidforums.as Registered On: 2026-07-26 20:15:40 UTC Expires On: 2027-07-26 20:15:40 UTC Updated On: Unknown Status: clientTransferProhibited Name Servers: ns2.ddos-guard.net ns1.ddos-guard.net Registrar: Not Available…
95[.]216[.]247[.]178
😭1
🚨🇲🇾 RDP access to Malaysian retail or e-commerce company allegedly offered for sale
A forum actor is advertising access to an unidentified retail or e-commerce company in Malaysia, claiming the organization generates between $25 million and $50 million in revenue and operates a network of approximately 2,500 hosts.
The listing advertises RDP access with domain user privileges and states that Symantec Endpoint is deployed within the environment. The access is priced at 0.01834560 BTC.
This claim is currently unverified.
💥 Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: http://darkwebinformer.com/pricing
A forum actor is advertising access to an unidentified retail or e-commerce company in Malaysia, claiming the organization generates between $25 million and $50 million in revenue and operates a network of approximately 2,500 hosts.
The listing advertises RDP access with domain user privileges and states that Symantec Endpoint is deployed within the environment. The access is priced at 0.01834560 BTC.
This claim is currently unverified.
💥 Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: http://darkwebinformer.com/pricing
‼️ SafePay ransomware claims 9 victims
🇺🇸 BNP Distributing - A New York-based distributor supplying wine and specialty beverages to restaurants, hotels, retailers, and wine merchants.
🇩🇪 WEIER - A manufacturers’ representative specializing in plumbing, heating, water treatment, pumping, drainage, and building-services equipment.
🇬🇧 Braywood Church of England First School - A historic primary school founded in 1858 that provides education for children from the early years onward.
🇩🇪 HST Maschinenbau - A mechanical engineering company based in Kressbronn am Bodensee with expertise in specialized industrial and tea-processing machinery.
🇩🇪 Landesmuseum Württemberg - A cultural history museum presenting more than 50,000 years of regional heritage, from prehistoric artifacts to modern collections.
🇩🇪 Haug Bürsten - A family-owned German manufacturer of professional brushes and cleaning equipment with roots dating back to 1836.
🇩🇪 Der Paritätische NRW - A welfare association representing thousands of independent social-service organizations across North Rhine-Westphalia.
🇩🇪 Möbel Mayer - A family-owned furniture retailer based in Ahrensburg that has served customers since 1952.
🇩🇪 ZINORM - A German provider of technical standards, industry regulations, and standards-management information for businesses.
💥 Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: http://darkwebinformer.com/pricing
🇺🇸 BNP Distributing - A New York-based distributor supplying wine and specialty beverages to restaurants, hotels, retailers, and wine merchants.
🇩🇪 WEIER - A manufacturers’ representative specializing in plumbing, heating, water treatment, pumping, drainage, and building-services equipment.
🇬🇧 Braywood Church of England First School - A historic primary school founded in 1858 that provides education for children from the early years onward.
🇩🇪 HST Maschinenbau - A mechanical engineering company based in Kressbronn am Bodensee with expertise in specialized industrial and tea-processing machinery.
🇩🇪 Landesmuseum Württemberg - A cultural history museum presenting more than 50,000 years of regional heritage, from prehistoric artifacts to modern collections.
🇩🇪 Haug Bürsten - A family-owned German manufacturer of professional brushes and cleaning equipment with roots dating back to 1836.
🇩🇪 Der Paritätische NRW - A welfare association representing thousands of independent social-service organizations across North Rhine-Westphalia.
🇩🇪 Möbel Mayer - A family-owned furniture retailer based in Ahrensburg that has served customers since 1952.
🇩🇪 ZINORM - A German provider of technical standards, industry regulations, and standards-management information for businesses.
💥 Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: http://darkwebinformer.com/pricing
🚨🇫🇷 Personal information linked to alleged ChatControl supporters leaked
A forum actor claims to have published personal information belonging to individuals allegedly involved in supporting or implementing ChatControl, the proposed European Union framework aimed at detecting child sexual abuse material in online communications.
A published sample contains a person’s name, date and place of birth, nationality, phone number, email address, home address, and sports club affiliation.
This claim is currently unverified.
💥 No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing
A forum actor claims to have published personal information belonging to individuals allegedly involved in supporting or implementing ChatControl, the proposed European Union framework aimed at detecting child sexual abuse material in online communications.
A published sample contains a person’s name, date and place of birth, nationality, phone number, email address, home address, and sports club affiliation.
This claim is currently unverified.
💥 No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing
❤3
‼️ New Darknet Market being advertised on Dread called Rampage.
Dread Thread: https://dreadytofatroptsdj6io7l3xptbet6onoyno2yv7jicoxknyazubrad[.]onion/post/7a59f91b957f189d4c12
Dark Web IOC: http://rampagel6own7ds6iwwhnwmfgkkpnwgdl27bruf3johkxpdf4xfsy2yd[.]onion
IOC 2: http://ijzibzoxgkwougv7lx43wigora2bbplht3zkzmnqfrspakg5yhjsldyd[.]onion
Dread Thread: https://dreadytofatroptsdj6io7l3xptbet6onoyno2yv7jicoxknyazubrad[.]onion/post/7a59f91b957f189d4c12
Dark Web IOC: http://rampagel6own7ds6iwwhnwmfgkkpnwgdl27bruf3johkxpdf4xfsy2yd[.]onion
IOC 2: http://ijzibzoxgkwougv7lx43wigora2bbplht3zkzmnqfrspakg5yhjsldyd[.]onion
😈4❤1🔥1
🚨🇫🇷 L’Assurance Maladie healthcare provider registry allegedly leaked
A forum actor claims to have leaked a 2026 healthcare provider registry associated with L’Assurance Maladie, France’s national health insurance system. The listing advertises more than 9.8 million records in a 1.98GB file, although the thread title claims approximately 12 million records.
The data allegedly includes healthcare professional names and identifiers, qualifications, profession codes, medical specialties, workplace and establishment identifiers such as SIRET, SIREN, and FINESS numbers, organization details, addresses, phone numbers, fax numbers, email addresses, administrative classifications, regulatory codes, and professional activity information.
This claim is currently unverified.
💥 Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: http://darkwebinformer.com/pricing
________________________________________
Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Telegram CVE Feed: https://t.me/DWI_CVE_Alerts
FBI Watchdog Alerts: https://t.me/FBI_Watchdog
Website: https://darkwebinformer.com
Pricing (Includes Crypto): https://darkwebinformer.com/pricing
API Access: https://darkwebinformer.com/api-details
Socials: https://darkwebinformer.com/socials
A forum actor claims to have leaked a 2026 healthcare provider registry associated with L’Assurance Maladie, France’s national health insurance system. The listing advertises more than 9.8 million records in a 1.98GB file, although the thread title claims approximately 12 million records.
The data allegedly includes healthcare professional names and identifiers, qualifications, profession codes, medical specialties, workplace and establishment identifiers such as SIRET, SIREN, and FINESS numbers, organization details, addresses, phone numbers, fax numbers, email addresses, administrative classifications, regulatory codes, and professional activity information.
This claim is currently unverified.
💥 Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: http://darkwebinformer.com/pricing
________________________________________
Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Telegram CVE Feed: https://t.me/DWI_CVE_Alerts
FBI Watchdog Alerts: https://t.me/FBI_Watchdog
Website: https://darkwebinformer.com
Pricing (Includes Crypto): https://darkwebinformer.com/pricing
API Access: https://darkwebinformer.com/api-details
Socials: https://darkwebinformer.com/socials
🚨🇪🇬 Egyptian pharmaceutical manufacturer ERP database allegedly offered for sale
A forum actor claims to be selling a complete 20GB production ERP database belonging to an unidentified Egyptian pharmaceutical manufacturer. The alleged Microsoft SQL Server export contains 4,138 tables covering manufacturing, customers, suppliers, finance, and human resources.
The listing advertises 19,371 pharmaceutical items, 1,080 chemical formulations, 5,006 production orders, 7,610 customer records, 1,598 supplier records, bank account and payment data, and 3,504 employee records. The actor also claims the database includes transaction histories, credit limits, ingredient quantities, salaries, departments, and account balances of up to EGP 440 million.
This claim is currently unverified.
💥 No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing
________________________________________
Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Telegram CVE Feed: https://t.me/DWI_CVE_Alerts
FBI Watchdog Alerts: https://t.me/FBI_Watchdog
Website: https://darkwebinformer.com
Pricing (Includes Crypto): https://darkwebinformer.com/pricing
API Access: https://darkwebinformer.com/api-details
Socials: https://darkwebinformer.com/socials
A forum actor claims to be selling a complete 20GB production ERP database belonging to an unidentified Egyptian pharmaceutical manufacturer. The alleged Microsoft SQL Server export contains 4,138 tables covering manufacturing, customers, suppliers, finance, and human resources.
The listing advertises 19,371 pharmaceutical items, 1,080 chemical formulations, 5,006 production orders, 7,610 customer records, 1,598 supplier records, bank account and payment data, and 3,504 employee records. The actor also claims the database includes transaction histories, credit limits, ingredient quantities, salaries, departments, and account balances of up to EGP 440 million.
This claim is currently unverified.
💥 No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing
________________________________________
Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Telegram CVE Feed: https://t.me/DWI_CVE_Alerts
FBI Watchdog Alerts: https://t.me/FBI_Watchdog
Website: https://darkwebinformer.com
Pricing (Includes Crypto): https://darkwebinformer.com/pricing
API Access: https://darkwebinformer.com/api-details
Socials: https://darkwebinformer.com/socials
🚨🇪🇬 Alfa Coatings ERP database allegedly offered for sale
A forum actor claims to be selling a complete ERP database belonging to Alfa Coatings, an Egyptian manufacturer of coatings and chemical products. The alleged SQL export contains 4,345 tables and approximately 2.5GB of raw data covering accounting, human resources, inventory, production, and customer management systems.
The listing advertises records for 320 employees, 3,211 B2B customers, 318 suppliers, 4,181 inventory items, 1,103 sales invoices, 629 purchase invoices, 24 ERP users, eight bank accounts, and 194 external contacts. Published samples allegedly include names, corporate email addresses, phone numbers, customer and supplier details, transaction records, bank information, and ERP password hashes.
This claim is currently unverified.
💥 Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: http://darkwebinformer.com/pricing
________________________________________
Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Telegram CVE Feed: https://t.me/DWI_CVE_Alerts
FBI Watchdog Alerts: https://t.me/FBI_Watchdog
Website: https://darkwebinformer.com
Pricing (Includes Crypto): https://darkwebinformer.com/pricing
API Access: https://darkwebinformer.com/api-details
Socials: https://darkwebinformer.com/socials
A forum actor claims to be selling a complete ERP database belonging to Alfa Coatings, an Egyptian manufacturer of coatings and chemical products. The alleged SQL export contains 4,345 tables and approximately 2.5GB of raw data covering accounting, human resources, inventory, production, and customer management systems.
The listing advertises records for 320 employees, 3,211 B2B customers, 318 suppliers, 4,181 inventory items, 1,103 sales invoices, 629 purchase invoices, 24 ERP users, eight bank accounts, and 194 external contacts. Published samples allegedly include names, corporate email addresses, phone numbers, customer and supplier details, transaction records, bank information, and ERP password hashes.
This claim is currently unverified.
💥 Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: http://darkwebinformer.com/pricing
________________________________________
Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Telegram CVE Feed: https://t.me/DWI_CVE_Alerts
FBI Watchdog Alerts: https://t.me/FBI_Watchdog
Website: https://darkwebinformer.com
Pricing (Includes Crypto): https://darkwebinformer.com/pricing
API Access: https://darkwebinformer.com/api-details
Socials: https://darkwebinformer.com/socials
🚨🇮🇳 Nukkad Shops customer data allegedly offered for sale
A forum actor claims to be selling customer data belonging to Nukkad Shops, an Indian retail technology company. The listing advertises approximately 6.6 million records for $5,000.
The exposed data allegedly includes customer names, mobile numbers, email addresses, street addresses, states, cities, and localities. Published samples contain records associated with customers in Hyderabad and other locations across Telangana.
This claim is currently unverified.
💥 No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing
________________________________________
Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Telegram CVE Feed: https://t.me/DWI_CVE_Alerts
FBI Watchdog Alerts: https://t.me/FBI_Watchdog
Website: https://darkwebinformer.com
Pricing (Includes Crypto): https://darkwebinformer.com/pricing
API Access: https://darkwebinformer.com/api-details
Socials: https://darkwebinformer.com/socials
A forum actor claims to be selling customer data belonging to Nukkad Shops, an Indian retail technology company. The listing advertises approximately 6.6 million records for $5,000.
The exposed data allegedly includes customer names, mobile numbers, email addresses, street addresses, states, cities, and localities. Published samples contain records associated with customers in Hyderabad and other locations across Telangana.
This claim is currently unverified.
💥 No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing
________________________________________
Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Telegram CVE Feed: https://t.me/DWI_CVE_Alerts
FBI Watchdog Alerts: https://t.me/FBI_Watchdog
Website: https://darkwebinformer.com
Pricing (Includes Crypto): https://darkwebinformer.com/pricing
API Access: https://darkwebinformer.com/api-details
Socials: https://darkwebinformer.com/socials
🚨🇲🇽 National Institute of Anthropology and History systems allegedly compromised
A forum actor claims to have compromised systems belonging to Mexico’s National Institute of Anthropology and History, a federal agency responsible for preserving and managing the country’s archaeological, anthropological, historical, and cultural heritage.
Published screenshots allegedly show access to an internal case management portal and documents containing personal information. The exposed data appears to include names, government identification numbers, addresses, phone numbers, email addresses, application details, case numbers, submission dates, and internal workflow records.
This claim is currently unverified.
💥 No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing
A forum actor claims to have compromised systems belonging to Mexico’s National Institute of Anthropology and History, a federal agency responsible for preserving and managing the country’s archaeological, anthropological, historical, and cultural heritage.
Published screenshots allegedly show access to an internal case management portal and documents containing personal information. The exposed data appears to include names, government identification numbers, addresses, phone numbers, email addresses, application details, case numbers, submission dates, and internal workflow records.
This claim is currently unverified.
💥 No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing
XSS is now actively being tracked on the threat feed. Currently the thread view is not native. I pushed a fix and I am waiting for the cycle to complete.
❤1🔥1