Alternative explanation: Pacific Basin decided at some point that they needed an internet presence, and in addition to their main site pacificbasin.com they also registered pacbasin.com to prevent typo-squatting. Some time later, they decided that was no longer necessary and let the domain lapse. Subsequently, it was picked up for cheap to host the glossy marketing website of what appears to be a drone company.
Problems with that website: the social media icons are just for show; the contact email is for the likely unrelated startech.com; I can't find any way to buy their product; the company is called "星彩网平台航拍无人机系统", "星彩" evoking associations to lotteries. It's also completely unrelated to the domain name.
My personal interpretation: the website is intended to scam Chinese investors with a gambling mentality into throwing their money at a fake "high-tech company."
Do you have any data that would be able to distinguish between your hypothesis and my alternative?
To be considered "proven", sure, maybe. But no such thing is needed to merely consider an idea. Look at all the "facts" that have widespread belief, look at all the "not exactly accurate" various organizations broadcast, that turn into very strongly believed "facts" in the public mind.
There's so much obvious lying going on nowadays, and so many perfectly reasonable concerns dismissed as conspiracy theories, that that phrase no longer has any negative connotations for me. In fact, anything remotely complex that doesn't have an air of a conspiracy to it makes me at least as suspicious, kind of in the "which part of this story is untrue, and why" sense.
But hey, each to his own. If you choose to consider only authorized truths, that's your prerogative.
Btw intelligence agencies are using invisible image watermarking technologies to track users.
[email address redacted]
Back it up or nothin'.
But then you will see one subdomain that maps to ASN 4803 or whatever, which then leads to “China Telecom xinjiang”. In fact I encourage you to type:
org:”China Telecom xinjiang” “NSFOCUS” into Shodan.
Also look at the capital expenditures psychz.net claims on their about page. There is no IaaS company in the world that can afford to lay down as much hardware as they are claiming.
Another thing btw is these sites never seem to have job openings. That is common pattern that applies to perhaps 60% of the firms listed.
Generally analysts produce questions which operations runs down to figure out if what they think is going on, is actually going on.
Correct me if I'm wrong here but you're basically saying that you have done the first part and found some suspicious links but not the second part do develop actual evidence one way or the other, is that a fair assessment?
You have my word.
EDIT: 5000 words not pages
Anyone can do this research I want to emphasize. Look at any suspicious VPN company. Now look at 10 of them. Now plug some of those names into Shodan.
Bear with me here, but if you then simply Ctrl-F for ASNs with the same name with the same LLCs, you will construct a perfect circle of peering that is an “internet within an internet”. What it seems to be is a poor man’s TOR. While the US gov built a Tor, this is an alternate Dark Web built by someone...you can pass through 1,000 servers on 500 different hosting companies none of which do legitimate business.
(Hope this counts as a mini blog post for now this must be 250 words).
I'm going to admit I didn't try putting this into Shodan because for whatever reason I don't have access to it right now. But won't this just show a list of servers running a NSFOCUS WAF? How do you connect that to ProtonMail or LeaseWeb?
Are you suggesting they are an "open secret"? EG, They are not "covert", but they are secretive in that they only sell to maybe western intelligence agencies, etc. Could be why they never have real "openings", they got a hot pipeline constantly exiting from the intelligence community looking to make some real money.
No results found
Highwinds - a software company that sold usenet server. 1995 or so. Really high performance one. Later went into usenet hosting.
Choopa - a hosting company that started as a porn DVD ripper. When you provide lots of porn, you get lots of connectivity. At which point someone goes "Why don't we sell the excess? We already paying for it" Sounds familiar?
LeaseWeb - a really old hosting company. Predates Amazon.
Old dying hosting companies were the perfect cover to be acquired by spy agencies.
You’ll notice a large posting of press releases and apparent spending in the last 4-5 years though still for all.
http://dcsmanage.com out of Los Angeles is another one btw...
This extends also to shipping, licensing, and auditing companies.
One example is https://www.pacificbasin.com/en/fleet/fleet.php
Somehow they’ve managed to assemble the worlds 2nd largest cargo fleet in terms of dry weight tonnage, all verifiable on https://marinetraffic.com btw, and yet they appear on NO LISTING ANYWHERE for the top 100 cargo companies.
That company is a front for the Chinese military, because if you do a reverse WHOIS search you will see http://pacbasin.com was also registered by the same organization...it is an autonomous drone hardware and extended flight operations firm. There is more to say there, but I will leave it at that.
Other firms that have been espionage operations since day one, or were acquired at some point and repurposed as spy outfits. This list includes both Western and Eastern powers:
NSFOCUS Global
psychz.net
mimecast.com
terra.net
protonmail.com
creditkarma.com
ipvm.com
ClearDDOS
Neuvector
Multacom
HighWinds
Black Oak Computers
IT7 Networks
Ramnode
Gorilla Servers
Digital Core
InMotion Hosting
Choopa
LeaseWeb
StackPath
Voxility
Perfect International