🤝
Make a deal with 𝙽𝙴𝚃𝚁𝙴𝚂𝙴𝙲
🔒 Paid proposals held safely in escrow — released only when the work's approved.
Followers
1.2K
Account age
3 yrs
💰 Suggested sponsorship rate
$40 – $65 / sponsored post
Estimated from audience size & typical reach — every deal is negotiable and held in SocialDB escrow.
🧰 Free analysis for 𝙽𝙴𝚃𝚁𝙴𝚂𝙴𝙲
Known for
3 views
Is this a new ValleyRAT variant from #SilverFox (银狐) or a completely new malware?
Custom protocol over TCP 443. C2 traffic starts with BFuck\0\0\0 = 42 46 75 63 6b 00 00 00
IOCs:
38.76.177.46:443
43.99.101.175:443
https://tria.ge/260527-lq3gjscw4t
https://tria.ge/260525-t6jclsdv5m
![Found an odd Telnet like connection in a Mirai malware execution. Follow these steps to see for yourself:
telnet 45.149.186.18 8080
Enter: newsrv
🔥 nivela.duckdns[.]org:8080
🔥 45.149.186.18:8080
🔥 b8d37e1ba85e8cebd9802b31747a1689
#Mirai #OWARI](/img?u=https%3A%2F%2Fmedia.infosec.exchange%2Finfosec.exchange%2Fmedia_attachments%2Ffiles%2F116%2F529%2F299%2F141%2F454%2F233%2Fsmall%2F67571d09876a3980.png)
2 views
Found an odd Telnet like connection in a Mirai malware execution. Follow these steps to see for yourself:
telnet 45.149.186.18 8080
Enter: newsrv
🔥 nivela.duckdns[.]org:8080
🔥 45.149.186.18:8080
🔥 b8d37e1ba85e8cebd9802b31747a1689
#Mirai #OWARI
📊 Post engagement
5
Avg engagement / post
0.4%
Engagement vs followers
Nov 2022
On Mastodon since
🔥 Top post: PolarProxy 2.0.1 Released 💨 Improved performance 🐞 Bug fixes ⚖️ · 11 likes + reposts
📊 Activity & format
Posting cadence
1.6 / week
A lower-frequency account — each post lands with more weight.
Content mix
Mostly text
Recent: 9 text · 3 image · 0 video.
Follower / following
1.9×
Follows 654 back. A more reciprocal / networked account.
Recent posts
View on Mastodon ↗
Pivoting on hashes and IPs ➡️ Ping32 RMM and ValleyRAT
👾 d43fdaa1f0ee09d7e5f0f94ee9df7b6c
📡 143.92.37.168:18987 (UDP)
👾 8266b00c4e45d728cef78b3f5a865f68
📡 143.92.37.168:10086 (UDP)
https://netresec.com/?b=2666e31
Is this a new ValleyRAT variant from #SilverFox (银狐) or a completely new malware?
Custom protocol over TCP 443. C2 traffic starts with BFuck\0\0\0 = 42 46 75 63 6b 00 00 00
IOCs:
38.76.177.46:443
43.99.101.175:443
https://tria.ge/260527-…
How do You maximize IOC sharing with minimal effort?
Maximizing IOC Impact: Advice on extracting, verifying, and sharing IOCs for fast, broad protection.
https://netresec.com/?b=26653f3
New release of CapLoader
JA3/JA4/SNI extraction from multi-segment TLS handshakes
🚨 Alerts on IOCs from @viql's Rösti
👀 OSINT lookup on @jonasl's ScanMalware
📦 Extracts packets from more encapsulation protocols
https://netresec.com/?b=2…
Which free #threatintel services do you recommend for submitting IOCs (malware hashes, C2 IPs/domains)?
The platform must make submitted IOCs freely available. Wider reach is preferred to maximize impact per IOC submission.
Tell me ChatGPT writes your articles without telling me ChatGPT writes your articles
PolarProxy 2.0 TLS inspection proxy released
📦 Single self-contained binary release
🔀 Improved HTTP proxy
🐳 Builds for Linux musl (Alpine) x64/ARM/ARM64
🪄 Simplified deployment
🔪 Flow cutoff in output PCAP
https://netresec.com/?b=2658a26
Viewing #remcos alerts from FlowCarp in @ish's #EveBox
https://netresec.com/?b=2659fc0
Found an odd Telnet like connection in a Mirai malware execution. Follow these steps to see for yourself:
telnet 45.149.186.18 8080
Enter: newsrv
🔥 nivela.duckdns[.]org:8080
🔥 45.149.186.18:8080
🔥 b8d37e1ba85e8cebd9802b31747a1689
#Mirai #O…
New tool released: FlowCarp
🔍 Identifies protocols without port numbers
🔨 Build protocol detection from example traffic
➡️ Input: PCAP or PcapNG
⬅️ Output: Flows and/or Alerts
https://netresec.com/?b=265d268
#FlowCarp
Is this a new ValleyRAT variant from #SilverFox (银狐) or a completely new malware?
Custom protocol over TCP 443. C2 traffic starts with BFuck\0\0\0 = 42 46 75 63 6b 00 00 00
IOCs:
38.76.177.46:443
43.99.101.175:443
https://tria.ge/260527-…
How do You maximize IOC sharing with minimal effort?
Maximizing IOC Impact: Advice on extracting, verifying, and sharing IOCs for fast, broad protection.
https://netresec.com/?b=26653f3
New release of CapLoader
JA3/JA4/SNI extraction from multi-segment TLS handshakes
🚨 Alerts on IOCs from @viql's Rösti
👀 OSINT lookup on @jonasl's ScanMalware
📦 Extracts packets from more encapsulation protocols
https://netresec.com/?b=2…
Which free #threatintel services do you recommend for submitting IOCs (malware hashes, C2 IPs/domains)?
The platform must make submitted IOCs freely available. Wider reach is preferred to maximize impact per IOC submission.
Tell me ChatGPT writes your articles without telling me ChatGPT writes your articles
PolarProxy 2.0 TLS inspection proxy released
📦 Single self-contained binary release
🔀 Improved HTTP proxy
🐳 Builds for Linux musl (Alpine) x64/ARM/ARM64
🪄 Simplified deployment
🔪 Flow cutoff in output PCAP
https://netresec.com/?b=2658a26
Viewing #remcos alerts from FlowCarp in @ish's #EveBox
https://netresec.com/?b=2659fc0
Found an odd Telnet like connection in a Mirai malware execution. Follow these steps to see for yourself:
telnet 45.149.186.18 8080
Enter: newsrv
🔥 nivela.duckdns[.]org:8080
🔥 45.149.186.18:8080
🔥 b8d37e1ba85e8cebd9802b31747a1689
#Mirai #O…
New tool released: FlowCarp
🔍 Identifies protocols without port numbers
🔨 Build protocol detection from example traffic
➡️ Input: PCAP or PcapNG
⬅️ Output: Flows and/or Alerts
https://netresec.com/?b=265d268
#FlowCarp
🐘 Community & instance
Home server
infosec.exchange
A cybersecurity & infosec server — its members and audience skew toward that niche, so expect a community-aligned, engaged following.
✅ Link-verified
Verified link
Proved ownership of a website linked on their profile — Mastodon's green-check verification, a real identity signal rather than a paid badge.
On Mastodon since
Nov 2022
Joined in the Twitter-exodus wave of late 2022 — part of the migration that made Mastodon a real destination.
💡 Facts
🗓️Joined Mastodon in 2022 — 3 years ago.
👁️Averages 5 views per post.
📤Posts about 1.6× per week.
🕵️ Fake follower check
Estimated75/100
Good
Credibility score
92%
Real
Real audience
Low
Fake-follower risk
High
Data confidence
- Est. 92% real, active audience · Low fake-follower risk.
- Engagement (~0.4% of followers engage each post) is around typical for Mastodon.
- Verified account.
- Established account (3+ years old).
Heuristic estimate from engagement, follower ratios, account age & growth — a screening signal, not a guarantee.
About
Experts in Network Forensics and Network Security Monitoring. Creators of #NetworkMiner, #CapLoader, #PolarProxy, #FlowCarp and #RawCap.
#PCAP or it didn't happen!
📸 Gallery
🔀 Audience overlap
EstimatedEstimated shared audience with similar creators — useful for avoiding overlap (or doubling down) when planning a campaign.
More like this
Find more →
Mastodon
Jonathan Carroll ✓
@jonocarroll@fosstodon.org
1.2K
Followers
Mastodon
Cooperativa Tierra Común ✓
@tierra_comun@social.coop
1.2K
Followers
Mastodon
hkz
@hkz@chinwag.org
1.2K
Followers
Mastodon
Chaotica ✓
@chaotica@nrw.social
1.2K
Followers
Mastodon
Ali
@grissallia@aus.social
1.2K
Followers
Mastodon
trickykat
@trickykat@beige.party
1.2K
Followers
✉ Message 𝙽𝙴𝚃𝚁𝙴𝚂𝙴𝙲
Reaching out to influencers is a Pro feature. Upgrade to message any influencer directly — perfect for brands and agencies booking sponsorships.
- ✓ Message any influencer from their listing
- ✓ The influencer gets notified by email
- ✓ Manage every conversation in one inbox
Already Pro? Log in.
🎤 Event / appearance with 𝙽𝙴𝚃𝚁𝙴𝚂𝙴𝙲
Booking an event / appearance is a Pro feature. Upgrade to book 𝙽𝙴𝚃𝚁𝙴𝚂𝙴𝙲 for an in-person or virtual appearance — payment held safely in escrow until the event is done.
- ✓ Book them for events, livestreams, panels & more
- ✓ 𝙽𝙴𝚃𝚁𝙴𝚂𝙴𝙲 gets notified by email
- ✓ Fee held in escrow, released after the appearance
Already Pro? Log in.
🚀
You're out of free requests this month
Free accounts get 5 per month. Go Pro for unlimited sponsor pitches, collab requests & sponsorship deals — plus featured placement, the Verified badge, free withdrawals and more.
Upgrade to Pro — $9.95/mo →Your free limit resets on the 1st of next month.
Auto-generated from Mastodon's public data — no affiliation with or endorsement by SocialDB. Is this you? Claim it · Remove