Finding WEIRD Phishing Websites

jh.live/censys || Get started with the leading Internet Intelligence Platform for threat hunting and attack surface management -- find what is exposed out on the open Internet with Censys! jh.live/censys
Learn Cybersecurity - Name Your Price Training with John Hammond: nameyourpricet...
WATCH MORE:
Dark Web & Cybercrime Investigations: • Tracking Cybercrime on...
Malware & Hacker Tradecraft: • Malware Analysis & Thr...
📧JOIN MY NEWSLETTER ➡ jh.live/email
🙏SUPPORT THE CHANNEL ➡ jh.live/patreon
🤝 SPONSOR THE CHANNEL ➡ jh.live/sponsor
🌎FOLLOW ME EVERYWHERE ➡ jh.live/twitter ↔ jh.live/linkedin ↔ jh.live/discord ↔ jh.live/instagram ↔ jh.live/tiktok
💥 SEND ME MALWARE ➡ jh.live/malware
🔥KZbin ALGORITHM ➡ Like, Comment, & Subscribe!

[@blinking_dodo]

I often get spam mails with links to those pages. One of the actors fails to protect their backdoor, so i can just walk in open the file manager they keep exposed. Then i rename the index files to break the landing pages. Really want to automate it, but *legal* is evil.

[@SzaboB33]

You constrained by the sponsorship: cannot use "screw you" as an email address Me, a free individual: deleting their databases with SQL injection

[@uhh6785]

you're a hero to some bro

[@_tr11]

YOU'RE A HERO

[@thepythoncodez]

based

[@PopperOfCorn]

You know, all the information you should never share with a stranger on the internet.

[@taxibutler1858]

A certain shrimp applauds your knowledge

[@godzamoongus]

Are you a small boy?

[@godzamoongus]

someone call Mange Tout

[@pelijot]

yup, thats Dynmap, a web Minecraft map.

[@BillAnt]

Gotta love going down rabbit holes... hehe

[@awesomekalin55]

And Railway System Map is from Minecraft Transit Railway

[@Apple_Beshy]

hwhwhw

[@shinris3n]

How could you tease us like that with the exe file! Follow up vid?!

[@s1lverposting]

hey, you found my Minecraft server!

[@BendaCZ]

I hope you are joking 🤣

[@gameshoot8571]

Is it for serious?

[@BritishEngineer]

lmao

[@Redstoneprojrjr]

😂

[@user-eh1fd2pz3s]

Yy🎉🎉y🎉@@BendaCZ❤

[@coder_117]

I've been getting spam texts for months telling me my USPS package has arrived at the warehouse but can't be delivered due to incomplete address information. It then asks me to confirm my address at an obviously fake link.

[@tobixnator9314]

That's a real Minecraft server

[@stavros222]

Live overflow will absolutely love it 🤣

[@3N18AKPzmGOsBgWKH]

Truth be told, i just love you exploring the internet and see what happens :P Hope these will show up more in the future. Sure, phishing was in focus, but you ended up going in all other different directions and even cracking the password for the zipfile xD Love it!

[@Sufi_Gamer]

I agree hope he does another follow up vid

[@spencerkeys]

That is actually hilarious you found someone’s Minecraft server map

[@drabspirit]

The Minecraft server looks interesting! That map view you opened seemed to be Dynmap, which is a mod/plugin to create a Google maps like view of your server, definitely someone with quite the world and those color blocks on the maps were likely player claims within the game using another mod/plugin!

[@exoexe1555]

The Minecraft Map is a plugin called DynMap, which uses an open port to process and host that live map you were interacting with. It can be configured to show players, mobs, waypoints and more

[@radscientist]

I've gotten a bunch of these as well as the "Thank you for your payment" with a transaction number that is a link and, of course, a downloadable file. They are usually sent from a Gmail address with a person's name and the sender's name is different.

[@vectoralphaSec]

How much does Censys cost??

[@deaddead698]

There’s a free version that gives you 250 searches a month with 10 pages worth of results. Tbh not bad for basic usage. To go up to 500 searches tho, you gotta pay $69 US. That right there’s a ripoff

[@nickadams2361]

I love how you said “hosted in Ohio apparently”

[@BillAnt]

Well it could be located on a server just about anywhere.

[@_tr11]

it's so fun to write scripts to fill their databases with garbage bro

[@nickadams2361]

Never been so excited for front desk information

[@j_r_-]

Green spotlight makes that background foam look good

[@AkiiiMatcha]

Super fun video! Thanks for making this. :)

[@SperkSan]

Hey John I was wondering when you send requests to these actual *bad* websites (not some CTF challenge), do you use a VPN? If no then if the guys behind the website check their logs and see your IP has made some weird requests to their server then won't they target you?

[@nordgaren2358]

IP address is worthless

[@chrissametrinequartz9389]

also I am like 99% certain that he would be using a vpn

[@vader567]

Oh please he is a cybersec expert

[@kymtoobe]

censys not for usual user :P

[@rbw9692]

Awsome fun video!

[@luketurner314]

17:45 that almost sounds like Owen Wilson's "wow"

[@luketurner314]

17:50 that colab would be so cool

[@ctjk1982]

i gotten so many text messages about this. the websites that the links lead to. are all owned by a company in china.

[@aplcc323]

So, you're fishing for phishing websites? We're getting too meta...

[@htjmartin]

Today I learned that there is an open source phising tool... interesting.

[@cyber_space09]

Hmm🫠 you found Minecraft server 😂

[@maddyfromcartoon]

is brave browser safer than chrome?

[@arthur979]

if you are smart, every browser is the same

[@nicholas4839]

Nos all the same

[@linux_for_noobs]

Just don't use chrome, edge, opera or safari. Those are basically spyware.

[@maddyfromcartoon]

@@linux_for_noobs how? Can you pls explain? I am using chrome rn.

[@maddyfromcartoon]

@@linux_for_noobs Can you explain how? btw I am using Chrome

[@cat_fury]

this work?

[@Milonsarkar-xn7db]

On eBay s3

[@jon9509]

11:27 xD

[@Apple_Beshy]

love

[@kalidoom1674]

finds sites like this and writes code to send bogus info ;)~

[@CyberSecJourn]

Dude seriously, why are all your sponsors pretty expensive? If I'm to assume beginners, and people just learning Cybersecurity to gain information to pass a cert or get a job, are they really going to be interested in purchasing these tools, services, etc? I mean, I won't say scammy but it is SURE looking like you're here for the money if I'm to be honest.

[@lacedupangel]

thats crazy its almost like.. people do youtube as a job or something... and you do jobs exclusively for the money.... insane tbh

[@GamerBekodie]

Its a real dynamap lol

[@grudge290]

I get this all the time lol

[@Cubeocheez]

Here before viral

[@dorikksigma]

first! i love ur videos

[@mongmanmarkyt2897]

Bro got the angy discord pfp

[@eirik874]

1st

[@notkazoolover]

Nope

[@Olflix]

3rd

[@notkazoolover]

Correct!!

[@floppa.flo88a]

Jesus loves you John