For the past few weeks, @DomainTools Investigations worked with OSINT analyst and investigative journalist grantees to help uncover connections between websites involved in the harassment of Ukrainian personnel and their families, and the people and infrastructure involved.

We provide a technical writeup below on the observables and data involved.

#infosec #cybersecurity #threatintel #disinformation

https://www.domaintools.com/resources/blog/rdap-and-bgp-in-investigative-journalism/

Oh THIS is funny. I had to add a postscript to our post, as we just noticed something:

As of 2025-07-02, Safe Value AS42745 suddenly has two new clients, after years of having none.

Seychelles-based Safe Value now announces the IP routes for AS210644 and AS216246, both organizations being Aeza Group out of Russia, sanctioned by US OFAC the day before they became Safe Value clients.

https://home.treasury.gov/news/press-releases/sb0185