Zach Edwards(@thezedwards) 's Twitter Profile Photo

The Media Rating Council was founded in the 1960’s after a contentious Congressional hearing where broadcast advertising companies argued they would more effectively oversee the ad industry than if government stepped in. Imo we need an “SEC for ads” or else this never improves.

The Media Rating Council was founded in the 1960’s after a contentious Congressional hearing where broadcast advertising companies argued they would more effectively oversee the ad industry than if government stepped in. Imo we need an “SEC for ads” or else this never improves.
account_circle
Zach Edwards(@thezedwards) 's Twitter Profile Photo

And seeing the response from orgs who were responsible for catching and stopping digital ads abuse - while impacted buyers quietly work on refunds (not making it public) further proves it’s a broken system without any responsible entity at the top who gets real financial justice.

account_circle
Zach Edwards(@thezedwards) 's Twitter Profile Photo

Even old research threads like this December 22 Bellingcat (twitter.com/bellingcat/sta…) post about a phishing email that came to them can be useful if you've got fresh data to pivot on.

fwiw everything in my thread below can be done on the free version of Silent Push - godspeed!🖖🏻

account_circle
Zach Edwards(@thezedwards) 's Twitter Profile Photo

And sorry for not adding context ;D

This thread is about Sandworm / APT 44 and some of the few pivots that are public / still fresh.
Details @ x.com/EliotHiggins/s…

account_circle
Zach Edwards(@thezedwards) 's Twitter Profile Photo

Final thought: if you read the Adalytics research and don’t understand there’s a ton of other work behind the scenes by those same folks - and some of them are getting quiet refunds you better damn believe it - then you don’t understand ad tech or the lies around every corner.

account_circle
Zach Edwards(@thezedwards) 's Twitter Profile Photo

alex lanstein Ziarul de Gardă amazon-fr[.]amzxrxvwc[.]com
amazon-fr[.]oln91[.]com
amazon-fr[.]subscription7033[.]com
amazon-fr[.]subscription7031[.]com
amazon[.]fr[.]amzrvxws[.]com
amazon-fr[.]subscription7025[.]com
amazon-fr[.]subscription7032[.]com
amazon-fr[.]subscription7034[.]com
amazon-fr[.]amzpv26[.]fr

account_circle
Zach Edwards(@thezedwards) 's Twitter Profile Photo

Until ad tech gets serious and dumps the MRC and starts to lean on the U.S. government to spin up a regulatory body to address the corporate and individual harms that can occur in these public markets, there won’t ever be real transparency or justice in ad tech.

account_circle
Zach Edwards(@thezedwards) 's Twitter Profile Photo

It’s been over 60 years since Congress had a serious hearing about the state of the ad tech industry and so called “self governing” frameworks that would make every other industry blush. Our industry is a stock market on everyone’s phone - it passes the Howey test in spades.

account_circle
Zach Edwards(@thezedwards) 's Twitter Profile Photo

If the ad tech industry continues to flounder from one scandal or global deprecation to the next, just hoping it never gets held accountable for problematic global behavior, then at some point government must intervene. We have antitrust violations via global bid streams. Yet 🦗?

account_circle
Zach Edwards(@thezedwards) 's Twitter Profile Photo

This isn't public data (requires login / agreement with TOS) so the folks doing this scraping are going to get a fun surprise letter from Discord imnlo

account_circle
Zach Edwards(@thezedwards) 's Twitter Profile Photo

I have almost no faith in most folks who work in ad tech fraud and abuse because they are cowards for clients - they hide problems as the course of business. When in other industries they would be required to disclose conflicts and face potential public investigations.

account_circle
Zach Edwards(@thezedwards) 's Twitter Profile Photo

alex lanstein Ziarul de Gardă And 185.185.71[.]250 is even🌶️🔥 w/ 53 domains that includes both news4you[.]top + pdf-online[.]top a potential developer-targeting domain of google-tag[.]com + a couple dozen domains that seem to be structured for targeting the Amazon ecosystem.👀 Sharing the full list here:

account_circle
Zach Edwards(@thezedwards) 's Twitter Profile Photo

alex lanstein Ziarul de Gardă amazon-fr[.]primevideo45781[.]com
amazon-fr[.]subscription7023[.]com
amzvrswx[.]com
amzrsxcw[.]com
www[.]amzrvxws[.]com
subscription7023[.]com
amazon-fr[.]amzrsxcw[.]com
amazon-fr[.]amzvrswx[.]com
amazon-fr[.]subscription7030[.]com
amazon-fr[.]subscription7024[.]com

account_circle
Zach Edwards(@thezedwards) 's Twitter Profile Photo

alex lanstein Ziarul de Gardă amazon-fr[.]amzsxwvn[.]com
google-tag[.]com
cc-check[.]cash
mail[.]xn--80aplkfdr[.]xn--p1ai
xn--80aplkfdr[.]xn--p1ai
www[.]xn--80aplkfdr[.]xn--p1ai
zataclub[.]shop

</thread> Best of luck to folks researching this network. Will update if anything new. Thanks for ya'lls work! 🖖🏻

account_circle
Zach Edwards(@thezedwards) 's Twitter Profile Photo

alex lanstein Ziarul de Gardă primevideo45781[[.]]com
amzpv26[.]fr
subscription7033[.]com
subscription7032[.]com
subscription7025[.]com
oln91[.]com
amzrvxws[.]com
amzxrxvwc[.]com
subscription7030[.]com
subscription7034[.]com
subscription7031[.]com
www[.]amzvrswx[.]com
subscription7024[.]com

account_circle
Zach Edwards(@thezedwards) 's Twitter Profile Photo

It’s a shame that other public markets are protected by the SEC and regulatory bodies built to stop market manipulations and auction shenanigans but ad tech thinks they can do it all ourselves, relying on the MRC and a few expert research firms who put out fabulous research.

account_circle
Zach Edwards(@thezedwards) 's Twitter Profile Photo

alex lanstein Ziarul de Gardă The beaconing domain, pdf-online[.]top - we've seen 2 IPs on it 158.160.129[.]176 + 185.185.71[.]250 both have unique hits.

158.160.129[.]176 has the same news4you[.]top + pdf-online[.]top domains but also a domain for potentially targeting developers @ cdn-bootstrapcdn[.]com

@alex_lanstein @ziarul_de_garda The beaconing domain, pdf-online[.]top - we've seen 2 IPs on it 158.160.129[.]176 + 185.185.71[.]250 both have unique hits. 

158.160.129[.]176 has the same news4you[.]top + pdf-online[.]top domains but also a domain for potentially targeting developers @ cdn-bootstrapcdn[.]com
account_circle
Zach Edwards(@thezedwards) 's Twitter Profile Photo

alex lanstein Ziarul de Gardă amzvrwrx[.]com
amazon-fr[.]amzvrwrx[.]com
amzvrwcx[.]com
amazon-fr[.]amzvrwcx[.]com
diju[.]ru
www[.]diju[.]ru
mail[.]diju[.]ru
news4you[.]top
pdf-online[.]top
amzsxwvn[.]com
amazon[.]fr[.]amzsxwvn[.]com
primevideo98341[.]com
mail[.]amazon-fr[.]amzsxwvn[.]com
mail[.]amzsxwvn[.]com

account_circle