Remix.run Logo
krebsonsecurity 10 hours ago

Sometimes just a little bit DNS research can yield a lot of useful results.

Looking at the passive DNS records for the domain chanceletikva.org shows it references the email address davidm@yeahdim.co.il.That email address is tied to multiple website registrations for a person by the name of David Margaliot, and also Shoshana Margaliot.

A search on this name in Domaintools finds the name David Margaliot tied to at least 25 domains, including ezri.org.il, which is a very odd site that features a huge image of a young child who is apparently in the hospital holding a gift wrapped box with a teddy bear. The site asks for donations but has a strange mission statement: Ezri Association promotes life-saving innovation through a surveillance drone project for emergency response teams, the establishment of an international medical knowledge database, along with other technological initiatives".

I'll probably continue the rest of this in a follow-up story.