Nation-State Campaign Explorer & Dynamic DNS Fast-Flux Radar

Real-time monitoring of revolving IP pools, double-flux mothership C2 nodes, bulletproof hosting ASNs, and historical IOC correlation matrices across global geopolitical cyber adversaries.

Active Campaign:

Threat Actor & Origin

Lazarus Group (APT38 / BlueNoroff)

Sponsor: North Korea (DPRK RGB)

Primary Impact & Target

$2.4 Billion USD Total Stolen

Cryptocurrency Exchanges, DeFi Protocols

C2 Architecture

FAST_FLUX_DNS

Avg TTL: 120s (Revolving Pool)

Dynamic Infrastructure Topology: Operation Troy / AppleJeus Cryptocurrency Thefts(4 Revolving IPs, 3 Bulletproof ASNs)

Mothership Fast-Flux Pool Bulletproof ASN

Infrastructure Inspector

Click any node on the Passive DNS radar to inspect active resolving TTLs, BGP paths, and SSL fingerprints.