Tomatotech90
security researcher · threat hunter · krakenio.tech
I build tools and contribute to projects focused on threat hunting, ransomware and malware analysis, and network and system security. My work includes static analysis tooling, vulnerability assessment scripts, phishing infrastructure teardowns, and network data analysis to support defensive intelligence.
// focus
→ malware & PE static analysis → phishing infrastructure analysis
→ ransomware group tracking → honeypot & deception systems
→ IOC development & threat hunting → vulnerability assessment tooling
// stack
python bash c c++ · javascript typescript c# java php · docker linux aws flask mysql mongodb
// writing — krakenio.tech
research
| title | tags | |
|---|---|---|
| phishing | Anatomy of a Sophisticated Phishing Campaign: usps.otognluguws.top | DNS infrastructure · domain impersonation |
| infra | Malicious IP Associated with 60+ Subdomains: 47.251.33.8 | Alibaba Cloud · subdomain abuse |
| platform | The Dual-Edged Sword of Cloudflare Workers | serverless phishing · architecture analysis |
| OSINT | The Risk of Day in the Life | deepfake fraud · social engineering |
| squatting | USPS Squatting Campaign — vxhbs.cfd | domain squatting · smishing |
| domain abuse | Fake USPS Scam Using Brazilian Government Domain | gov domain hijack · phishing |
| fraud | Likes and Cards: Instagram's Algorithm and Carding | platform abuse · financial fraud |
| phishing | Six Pivotal Phishing Scams: IP & Hosting Analysis | infrastructure mapping · USPS/Walmart |
| domain abuse | Fake USPS Scam Using Argentina's Domain | domain squatting |
| multi-brand | Phishing via Turkish School Domain — eBay & USPS | domain hijack · brand impersonation |
articles
// find me ^_^
htb app.hackthebox.com/profile/1028599 — Ketchupsauce80 #1028599
ibm exchange.xforce.ibmcloud.com/activity/map
in linkedin.com/in/jonathan-m-858b361a7