Seven Hostnames, One Timestamp: Mapping the yazanboss Dynamic-DNS Block
Seven near-identical no-ip.biz hostnames were all created at the same second under one Vitalwerks/No-IP.com account with matching Reno, Nevada contacts — a batch-provisioned rotation pool, not seven coincidental registrations. None show AV detections, though reputation heuristics from alphaMountain.ai and Forcepoint flag them as dynamic DNS.
Seven near-identical hostnames — 1yazanboss.no-ip.biz through 6yazanboss.no-ip.biz, plus a bare yazanboss.no-ip.biz — were all created at the exact same second, 2001-11-22T23:09:02Z, under a single Vitalwerks Internet Solutions, LLC / No-IP.com account, with matching admin and billing contacts listed out of Reno, Nevada on every WHOIS record.
Members-only article
This story is members-only. Sign in to read the full body, indicators of compromise, and VirusTotal context.
Sign in to read