𝙽𝙴𝚃𝚁𝙴𝚂𝙴𝙲✓ Add us as a preferred source on Google
🔄 Data last refreshed 11 days ago
🤝
Make a deal with 𝙽𝙴𝚃𝚁𝙴𝚂𝙴𝙲
🔒 Paid proposals held safely in escrow — released only when the work's approved.
Followers
1.3K
Account age
3 yrs
💰 Suggested sponsorship rate
$40 – $65 / sponsored post
Estimated from audience size & typical reach — every deal is negotiable and held in SocialDB escrow.
🎁 Free analysisfor 𝙽𝙴𝚃𝚁𝙴𝚂𝙴𝙲
Known for
3 views
Is this a new ValleyRAT variant from #SilverFox (银狐) or a completely new malware?
Custom protocol over TCP 443. C2 traffic starts with BFuck\0\0\0 = 42 46 75 63 6b 00 00 00
IOCs:
38.76.177.46:443
43.99.101.175:443
https://tria.ge/260527-lq3gjscw4t
https://tria.ge/260525-t6jclsdv5m
![Found an odd Telnet like connection in a Mirai malware execution. Follow these steps to see for yourself:
telnet 45.149.186.18 8080
Enter: newsrv
🔥 nivela.duckdns[.]org:8080
🔥 45.149.186.18:8080
🔥 b8d37e1ba85e8cebd9802b31747a1689
#Mirai #OWARI](/img?u=https%3A%2F%2Fmedia.infosec.exchange%2Finfosec.exchange%2Fmedia_attachments%2Ffiles%2F116%2F529%2F299%2F141%2F454%2F233%2Fsmall%2F67571d09876a3980.png)
2 views
Found an odd Telnet like connection in a Mirai malware execution. Follow these steps to see for yourself:
telnet 45.149.186.18 8080
Enter: newsrv
🔥 nivela.duckdns[.]org:8080
🔥 45.149.186.18:8080
🔥 b8d37e1ba85e8cebd9802b31747a1689
#Mirai #OWARI
📊 Post engagement
Recent posts · likes + reposts
May 4latest
5
Avg engagement / post
3–5
Typical post (engagement)
0.4%
Engagement vs followers
77/100
Very consistent reach
Nov 2022
On Mastodon since
Half of recent posts land between 3 and 5 likes + reposts (median 5) — a dependable floor a sponsored post can count on.
🔥 Top post: PolarProxy 2.0.1 Released 💨 Improved performance 🐞 Bug fixes ⚖️ · 11 likes + reposts
📊 Activity & format
Posting cadence
1.6 / week
A lower-frequency account — each post lands with more weight.
Content mix
Mostly text
Recent: 9 text · 3 image · 0 video.
Follower / following
1.9×
Follows 677 back. A more reciprocal / networked account.
Recent posts
View on Mastodon ↗
Pivoting on hashes and IPs ➡️ Ping32 RMM and ValleyRAT
👾 d43fdaa1f0ee09d7e5f0f94ee9df7b6c
📡 143.92.37.168:18987 (UDP)
👾 8266b00c4e45d728cef78b3f5a865f68
📡 143.92.37.168:10086 (UDP)
https://netresec.com/?b=2666e31
Is this a new ValleyRAT variant from #SilverFox (银狐) or a completely new malware?
Custom protocol over TCP 443. C2 traffic starts with BFuck\0\0\0 = 42 46 75 63 6b 00 00 00
IOCs:
38.76.177.46:443
43.99.101.175:443
https://tria.ge/260527-…
How do You maximize IOC sharing with minimal effort?
Maximizing IOC Impact: Advice on extracting, verifying, and sharing IOCs for fast, broad protection.
https://netresec.com/?b=26653f3
New release of CapLoader
JA3/JA4/SNI extraction from multi-segment TLS handshakes
🚨 Alerts on IOCs from @viql's Rösti
👀 OSINT lookup on @jonasl's ScanMalware
📦 Extracts packets from more encapsulation protocols
https://netresec.com/?b=2…
Which free #threatintel services do you recommend for submitting IOCs (malware hashes, C2 IPs/domains)?
The platform must make submitted IOCs freely available. Wider reach is preferred to maximize impact per IOC submission.
Tell me ChatGPT writes your articles without telling me ChatGPT writes your articles
PolarProxy 2.0 TLS inspection proxy released
📦 Single self-contained binary release
🔀 Improved HTTP proxy
🐳 Builds for Linux musl (Alpine) x64/ARM/ARM64
🪄 Simplified deployment
🔪 Flow cutoff in output PCAP
https://netresec.com/?b=2658a26
Viewing #remcos alerts from FlowCarp in @ish's #EveBox
https://netresec.com/?b=2659fc0
Found an odd Telnet like connection in a Mirai malware execution. Follow these steps to see for yourself:
telnet 45.149.186.18 8080
Enter: newsrv
🔥 nivela.duckdns[.]org:8080
🔥 45.149.186.18:8080
🔥 b8d37e1ba85e8cebd9802b31747a1689
#Mirai #O…
New tool released: FlowCarp
🔍 Identifies protocols without port numbers
🔨 Build protocol detection from example traffic
➡️ Input: PCAP or PcapNG
⬅️ Output: Flows and/or Alerts
https://netresec.com/?b=265d268
#FlowCarp
Is this a new ValleyRAT variant from #SilverFox (银狐) or a completely new malware?
Custom protocol over TCP 443. C2 traffic starts with BFuck\0\0\0 = 42 46 75 63 6b 00 00 00
IOCs:
38.76.177.46:443
43.99.101.175:443
https://tria.ge/260527-…
How do You maximize IOC sharing with minimal effort?
Maximizing IOC Impact: Advice on extracting, verifying, and sharing IOCs for fast, broad protection.
https://netresec.com/?b=26653f3
New release of CapLoader
JA3/JA4/SNI extraction from multi-segment TLS handshakes
🚨 Alerts on IOCs from @viql's Rösti
👀 OSINT lookup on @jonasl's ScanMalware
📦 Extracts packets from more encapsulation protocols
https://netresec.com/?b=2…
Which free #threatintel services do you recommend for submitting IOCs (malware hashes, C2 IPs/domains)?
The platform must make submitted IOCs freely available. Wider reach is preferred to maximize impact per IOC submission.
Tell me ChatGPT writes your articles without telling me ChatGPT writes your articles
PolarProxy 2.0 TLS inspection proxy released
📦 Single self-contained binary release
🔀 Improved HTTP proxy
🐳 Builds for Linux musl (Alpine) x64/ARM/ARM64
🪄 Simplified deployment
🔪 Flow cutoff in output PCAP
https://netresec.com/?b=2658a26
Viewing #remcos alerts from FlowCarp in @ish's #EveBox
https://netresec.com/?b=2659fc0
Found an odd Telnet like connection in a Mirai malware execution. Follow these steps to see for yourself:
telnet 45.149.186.18 8080
Enter: newsrv
🔥 nivela.duckdns[.]org:8080
🔥 45.149.186.18:8080
🔥 b8d37e1ba85e8cebd9802b31747a1689
#Mirai #O…
New tool released: FlowCarp
🔍 Identifies protocols without port numbers
🔨 Build protocol detection from example traffic
➡️ Input: PCAP or PcapNG
⬅️ Output: Flows and/or Alerts
https://netresec.com/?b=265d268
#FlowCarp
🐘 Community & instance
Home server
infosec.exchange
A cybersecurity & infosec server — its members and audience skew toward that niche, so expect a community-aligned, engaged following.
✅ Link-verified
Verified link
Proved ownership of a website linked on their profile — Mastodon's green-check verification, a real identity signal rather than a paid badge.
On Mastodon since
Nov 2022
Joined in the Twitter-exodus wave of late 2022 — part of the migration that made Mastodon a real destination.
💡 Facts
🗓️Joined Mastodon in 2022 — 3 years ago.
👁️Averages 5 views per post.
📤Posts about 1.6× per week.
🕵️ Fake follower check
Estimated52/100
Fair
Credibility score
76%
Mixed
Real audience
Medium
Fake-follower risk
High
Data confidence
- Est. 76% real, active audience · Medium fake-follower risk.
- Low engagement (~0.4% of followers engage each post) — a sign of an inflated or inactive audience.
- Verified account.
- Established account (3+ years old).
Heuristic estimate from engagement, follower ratios, account age & growth — a screening signal, not a guarantee.
About
Experts in Network Forensics and Network Security Monitoring. Creators of #NetworkMiner, #CapLoader, #PolarProxy, #FlowCarp and #RawCap.
#PCAP or it didn't happen!
📸 Gallery
🔀 Audience overlap
EstimatedEstimated shared audience with similar creators — useful for avoiding overlap (or doubling down) when planning a campaign.
Looking for explanations…
16%
The Dinosaur Dave
14%
Evil Hat Productions
12%
Vicky Outen Photo DPAGB
11%
Nicolas Fränkel 🇪🇺🇺🇦🇬🇪
11%
too many names
10%
More like this
Find more →
Mastodon
＋
too many names
@mikeymikey@hachyderm.io
1.3K
Followers
Mastodon
＋
The Dinosaur Dave
@thedinosaurdave@sauropods.win
1.3K
Followers
Mastodon
＋
Vicky Outen Photo DPAGB
@vickyouten@mastodon.world
1.3K
Followers
Mastodon
＋
Evil Hat Productions
@evilhat@dice.camp
1.3K
Followers
Mastodon
＋
Nicolas Fränkel 🇪🇺🇺🇦🇬🇪 ✓
@frankel@mastodon.top
1.3K
Followers
Mastodon
＋
Looking for explanations…
@susan60@aus.social
1.3K
Followers
Frequently asked questions
How much does 𝙽𝙴𝚃𝚁𝙴𝚂𝙴𝙲 charge for a sponsorship?
𝙽𝙴𝚃𝚁𝙴𝚂𝙴𝙲 hasn't published fixed prices yet. Send a proposal through SocialDB and agree terms directly — your payment is held in escrow until the work is approved.
How do I contact 𝙽𝙴𝚃𝚁𝙴𝚂𝙴𝙲 for a brand deal or collaboration?
Send a paid deal or collab request right here on SocialDB — we notify 𝙽𝙴𝚃𝚁𝙴𝚂𝙴𝙲, and once they accept, your payment is held safely in escrow and released when the work is approved. You don't need to track down an email.
How many followers does 𝙽𝙴𝚃𝚁𝙴𝚂𝙴𝙲 have?
𝙽𝙴𝚃𝚁𝙴𝚂𝙴𝙲 has 1,274 followers on Mastodon.
✉ Message 𝙽𝙴𝚃𝚁𝙴𝚂𝙴𝙲
Reaching out to influencers is a Pro feature. Upgrade to message any influencer directly — perfect for brands and agencies booking sponsorships.
- ✓ Message any influencer from their listing
- ✓ The influencer gets notified by email
- ✓ Manage every conversation in one inbox
Already Pro? Log in.
🎤 Event / appearance with 𝙽𝙴𝚃𝚁𝙴𝚂𝙴𝙲
Booking an event / appearance is a Pro feature. Upgrade to book 𝙽𝙴𝚃𝚁𝙴𝚂𝙴𝙲 for an in-person or virtual appearance — payment held safely in escrow until the event is done.
- ✓ Book them for events, livestreams, panels & more
- ✓ 𝙽𝙴𝚃𝚁𝙴𝚂𝙴𝙲 gets notified by email
- ✓ Fee held in escrow, released after the appearance
Already Pro? Log in.
🚀
You're out of free requests this month
Free accounts get 5 per month. Go Pro for unlimited sponsor pitches, collab requests & sponsorship deals — plus featured placement, the Verified badge, free withdrawals and more.
Upgrade to Pro — $9.95/mo →Your free limit resets on the 1st of next month.
Auto-generated from Mastodon's public data — no affiliation with or endorsement by SocialDB. Is this you? Claim it · Remove