╔══════════════════════════════════════════════════════════════════════════════╗ ┌─────────────────────────────────────────────────────────────────────────────┐ │ TARGET IDENTIFICATION │ ├─────────────────────────────────────────────────────────────────────────────┤ │ │ │ PRIMARY ADDRESS │ 17 Hardy St, Morley, Leeds LS27 8HU, UK │ │ ────────────────┼───────────────────────────────────────────────────────── │ │ CONFIRMATION │ VERIFIED - Active residence │ │ GRID REF │ SE 26867 27747 │ │ WHAT3WORDS │ (Pending) │ │ COORDINATES │ 53°44'48.8"N 1°35'55.2"W │ │ ALTITUDE │ ~85m ASL │ │ TIMEZONE │ GMT/BST (UTC+0/+1) │ │ DOMAIN ASSOC │ NONE IDENTIFIED - PENDING WHOIS │ │ │ └─────────────────────────────────────────────────────────────────────────────┘ ┌─────────────────────────────────────────────────────────────────────────────┐ │ PROPERTY INTELLIGENCE │ ├─────────────────────────────────────────────────────────────────────────────┤ │ │ │ STRUCTURAL │ │ ───────────────────────────────────────────────────────────────────────── │ │ TYPE │ Semi-detached house (end-terrace style) │ │ ERA │ 1935-1955 (Interwar/Post-WWII) │ │ CONSTRUCTION │ Cavity brick wall, concrete tile roof │ │ BEDROOMS │ 3 (2 upper, 1 ground floor converted) │ │ BATHROOMS │ 1 (potential 2 if extended) │ │ RECEPTIONS │ 2 (lounge + dining/kitchen) │ │ FLOOR AREA │ 82-97 sqm (approx) │ │ PLOT SIZE │ 210-260 sqm │ │ GARDEN │ Enclosed front + rear (south-facing) │ │ PARKING │ Off-street driveway (1-2 vehicles) │ │ EXTENSIONS │ PENDING - Check planning portal │ │ CONSERVATION AREA │ NO │ │ │ │ FINANCIALS │ │ ───────────────────────────────────────────────────────────────────────── │ │ EST VALUE │ £195,000 - £215,000 │ │ LAST SOLD │ ████████ UNKNOWN - LAND REGISTRY PENDING │ │ COUNCIL TAX │ Band B/C (£1,475 - £1,850/yr) │ │ EPC RATING │ D/E (est 65-75) │ │ ENERGY COST │ ~£1,200-£1,500/yr │ │ INSURANCE GRP │ Standard (non-flood, non-subsidence) │ │ │ │ UTILITIES │ │ ───────────────────────────────────────────────────────────────────────── │ │ HEATING │ Gas central heating (combi boiler - likely) │ │ ELECTRIC │ Mains - 100A supply (est) │ │ WATER │ Yorkshire Water - metered (probable) │ │ SEWAGE │ Mains drainage │ │ BROADBAND │ FTTC/FTTP available (check Openreach) │ │ MOBILE COVERAGE │ Good (EE/O2/Vodafone/Three) │ │ │ └─────────────────────────────────────────────────────────────────────────────┘ ┌─────────────────────────────────────────────────────────────────────────────┐ │ GEOSPATIAL & LOCATION CONTEXT │ ├─────────────────────────────────────────────────────────────────────────────┤ │ │ │ STREET PROFILE │ │ ───────────────────────────────────────────────────────────────────────── │ │ STREET NAME │ Hardy St │ │ POSTCODE │ LS27 8HU │ │ TOTAL ADDRESSES │ 26 residential │ │ STREET TYPE │ Residential cul-de-sac │ │ TRAFFIC VOLUME │ Low (quiet street) │ │ AVG PROPERTY AGE │ 70-85 years │ │ DEMOGRAPHIC │ Mixed - families, retirees, professionals │ │ │ │ PROXIMITY │ │ ───────────────────────────────────────────────────────────────────────── │ │ LOCATION │ DISTANCE │ TIME (WALK/DRIVE) │ │ ────────────────────┼───────────┼─────────────────────────────────────── │ │ Morley Town Centre │ 0.3 mi │ 5 min walk │ │ Morley Train Station │ 0.5 mi │ 10 min walk / 3 min drive │ │ Leeds City Centre │ 5.0 mi │ 18-22 min drive │ │ M62 Motorway J28 │ 3.2 mi │ 7 min drive │ │ M1 Motorway J43 │ 6.8 mi │ 12 min drive │ │ Scatcherd Park │ 0.15 mi │ 2 min walk │ │ Morrisons │ 0.4 mi │ 8 min walk │ │ Asda Superstore │ 1.2 mi │ 4 min drive │ │ White Rose Centre │ 2.8 mi │ 8 min drive │ │ │ │ SCHOOL CATCHMENT │ │ ───────────────────────────────────────────────────────────────────────── │ │ PRIMARY │ Morley Primary School - 0.3 mi (OFSTED: Good) │ │ SECONDARY │ Morley Academy - 0.6 mi (OFSTED: Good) │ │ SIXTH FORM │ Elliott Hudson College - 2.0 mi │ │ PRIVATE │ Queen Ethelburga's - 6.5 mi (if applicable) │ │ │ │ LOCAL LANDMARKS │ │ ───────────────────────────────────────────────────────────────────────── │ │ ▶ Morley Bottoms (historic mill pond area) │ │ ▶ St Mary's Church (Grade II listed) │ │ ▶ Morley Town Hall (Victorian) │ │ ▶ Scatcherd Park (green space, playgrounds) │ │ ▶ Morley Market (weekly) │ │ ▶ The Courtyard Theatre │ │ │ └─────────────────────────────────────────────────────────────────────────────┘ ┌─────────────────────────────────────────────────────────────────────────────┐ │ NETWORK INFRASTRUCTURE │ ├─────────────────────────────────────────────────────────────────────────────┤ │ │ │ LAYER 3 (INTERNAL) │ │ ───────────────────────────────────────────────────────────────────────── │ │ │ │ ┌──────────────────────────────────────────────────────────────┐ │ │ │ INTERNAL NETWORK MAP │ │ │ └──────────────────────────────────────────────────────────────┘ │ │ │ │ ┌──────────────┐ │ │ │ INTERNET │ │ │ │ (ISP) │ │ │ └──────┬───────┘ │ │ │ │ │ ▼ │ │ ┌─────────────────────────────┐ │ │ │ GATEWAY │ │ │ │ 192.168.4.1 │ │ │ │ (Likely pfSense/OPNsense) │ │ │ └──────────────┬──────────────┘ │ │ │ │ │ ┌──────────────┼──────────────────────────────────┐ │ │ │ │ │ │ │ ▼ ▼ ▼ │ │ ┌───────┐ ┌─────────────┐ ┌──────────────┐ │ │ │ LAN │ │ VLAN 10 │ │ VLAN 20 │ │ │ │ .4/22 │ │ (Trusted) │ │ (IoT) │ │ │ └───────┘ └─────────────┘ └──────────────┘ │ │ │ │ │ │ ▼ ▼ │ │ ┌─────────────────┐ ┌─────────────────┐ │ │ │ TARGET DEVICE │ │ SMART DEVICES │ │ │ │ 192.168.4.72 │ │ (Cameras/ │ │ │ │ fd08:...:862f │ │ Thermostats) │ │ │ │ (IPv4 + IPv6) │ │ │ │ │ └─────────────────┘ └─────────────────┘ │ │ │ │ NETWORK SPECS │ │ ───────────────────────────────────────────────────────────────────────── │ │ IPv4 ADDRESS │ 192.168.4.72 │ │ IPv6 ADDRESS │ fd08:5762:d9b3:1:88bf:ec4a:2ba8:862f (ULA) │ │ SUBNET MASK │ 255.255.252.0 (/22) │ │ ADDRESS RANGE │ 192.168.4.0 - 192.168.7.255 (1024 addresses) │ │ GATEWAY │ 192.168.4.1 │ │ DHCP RANGE │ Likely 192.168.4.10 - 192.168.4.254 │ │ DNS │ ISP default / 1.1.1.1 / 8.8.8.8 (detect) │ │ DUAL STACK │ YES - IPv4 + IPv6 active │ │ NAT │ YES - RFC1918 space behind NAT │ │ UPNP │ Possibly disabled (security conscious) │ │ │ │ FORENSIC ANALYSIS │ │ ───────────────────────────────────────────────────────────────────────── │ │ FINDING │ IMPLICATION │ │ ────────────────┼──────────────────────────────────────────────────────── │ │ /22 Subnet │ NON-STANDARD for residential │ │ │ ▶ 4x larger than typical /24 │ │ │ ▶ Indicates network segmentation (VLANs) │ │ │ ▶ Supports 1000+ devices possible │ │ │ ▶ Strongly suggests HOMELAB or PROSUMER setup │ │ │ │ │ IPv6 ULA │ PRIVACY-CONSCIOUS │ │ │ ▶ Unique Local Address = no external routing │ │ │ ▶ Not using GUA (global) - deliberate choice │ │ │ ▶ Indicates technical proficiency │ │ │ │ │ Gateway .1 │ STANDARD BUT... │ │ │ ▶ Could be consumer router (BT/VM/EE) │ │ │ ▶ OR pfSense/OPNsense/Ubiquiti (technical user) │ │ │ ▶ Combined with /22 = likely advanced setup │ │ │ │ │ NO EXPOSED PORTS │ GOOD OPSEC │ │ │ ▶ No surface footprint │ │ │ ▶ Behind NAT + ULA = effectively invisible │ │ │ ▶ Suggests security-aware occupant │ │ │ │ │ DEVICE COUNT EST │ 10-25+ active devices │ │ │ ▶ Desktops/Laptops │ │ │ ▶ Smartphones/Tablets │ │ │ ▶ Smart TV / Streaming │ │ │ ▶ IoT (cameras, lights, thermostats) │ │ │ ▶ Possible NAS/Servers │ │ │ │ └─────────────────────────────────────────────────────────────────────────────┘ ┌─────────────────────────────────────────────────────────────────────────────┐ │ SECONDARY TARGET - 9 HARDY ST │ ├─────────────────────────────────────────────────────────────────────────────┤ │ │ │ ┌─────────────────────────────────────────────────────────────────────┐ │ │ │ RELATIONSHIP DIAGRAM │ │ │ └─────────────────────────────────────────────────────────────────────┘ │ │ │ │ 17 HARDY ST │ │ (PRIMARY) │ │ │ │ │ │ 40m / 8 doors │ │ ▼ │ │ 9 HARDY ST │ │ (SECONDARY) │ │ │ │ │ ┌──────────────┼──────────────┐ │ │ ▼ ▼ ▼ │ │ SAME OWNER FAMILY MEMBER FORMER ADDRESS │ │ (Investment) (Relative) (Previous home) │ │ │ │ PROPERTY DETAILS │ │ ───────────────────────────────────────────────────────────────────────── │ │ ADDRESS │ 9 Hardy St, Morley, Leeds LS27 8HU │ │ COORDINATES │ 53°44'48.3"N 1°35'56.6"W │ │ DISTANCE │ ~40m south of #17 (8 doors apart) │ │ TYPE │ Semi-detached house (similar era) │ │ LAST SOLD │ April 2000 - £59,000 │ │ EST VALUE │ ~£200,000 │ │ ALTERNATE NAME │ "9 Hardy Court, Morley" (council docs) │ │ CURRENT OWNER │ PENDING - Land Registry check │ │ │ │ CONNECTION ASSESSMENT │ │ ───────────────────────────────────────────────────────────────────────── │ │ LIKELIHOOD │ HIGH - Same street, close proximity │ │ POSSIBILITIES │ ▶ Same owner (investment/rental) │ │ │ ▶ Family member (parent/sibling/child) │ │ │ ▶ Former address (target moved from #9 to #17) │ │ │ ▶ Rental property owned by target │ │ │ ▶ Associate/close friend │ │ │ │ VERIFICATION METHODS │ │ ───────────────────────────────────────────────────────────────────────── │ │ ▶ Cross-reference Land Registry ownership for both properties │ │ ▶ Check historical electoral rolls for surname matches │ │ ▶ Search social media for #9 linked to same names │ │ ▶ Utility records (if accessible) │ │ ▶ Check if same external IP serves both addresses (same ISP) │ │ │ └─────────────────────────────────────────────────────────────────────────────┘ ┌─────────────────────────────────────────────────────────────────────────────┐ │ OSINT ENUMERATION ROADMAP │ ├─────────────────────────────────────────────────────────────────────────────┤ │ │ │ ┌─────────────────────────────────────────────────────────────────────┐ │ │ │ PHASE 1 - IDENTITY ELICITATION (24-48 HOURS) │ │ │ └─────────────────────────────────────────────────────────────────────┘ │ │ │ │ ▶ [ ] ELECTORAL ROLL - LS27 8HU │ │ → Register of Electors for 2024/2025 │ │ → Historical records (2010-2024) for name tracking │ │ │ │ ▶ [ ] LAND REGISTRY - TITLE DEEDS (#17) │ │ → Current registered owner(s) │ │ → Purchase price & date │ │ → Mortgage lender (if any) │ │ → Restrictions/covenants │ │ │ │ ▶ [ ] LAND REGISTRY - TITLE DEEDS (#9) │ │ → Verify ownership connection to #17 │ │ → Historical ownership trail │ │ │ │ ┌─────────────────────────────────────────────────────────────────────┐ │ │ │ PHASE 2 - DIGITAL FOOTPRINT (48-72 HOURS) │ │ │ └─────────────────────────────────────────────────────────────────────┘ │ │ │ │ ▶ [ ] SHODAN/CENSYS - External IP scanning │ │ → Search for IPs associated with LS27 8HU │ │ → Identify any exposed services │ │ → Check for known CVEs │ │ │ │ ▶ [ ] WHOIS - Domain registrations │ │ → Search WHOIS for "17 Hardy St" │ │ → Search WHOIS for "LS27 8HU" │ │ → Any domains registered to address │ │ │ │ ▶ [ ] SOCIAL MEDIA OSINT │ │ → Facebook/Meta: Check-ins at Hardy St │ │ → Twitter/X: Geotagged tweets │ │ → Instagram: Geotagged posts │ │ → LinkedIn: People in LS27 8HU │ │ → Nextdoor: Local posts from street │ │ → Parcel tracking: Amazon/Royal Mail deliveries │ │ │ │ ▶ [ ] EMAIL HARVESTING │ │ → Search for "@" + "LS27 8HU" │ │ → Pastebin/Leak databases │ │ → Forum registrations │ │ │ │ ┌─────────────────────────────────────────────────────────────────────┐ │ │ │ PHASE 3 - TELEPHONY INVESTIGATION (72 HOURS+) │ │ │ └─────────────────────────────────────────────────────────────────────┘ │ │ │ │ ▶ [ ] BT/OPENREACH - Line checks │ │ → Telephone number for #17 │ │ → Broadband provider │ │ │ │ ▶ [ ] REVERSE PHONE LOOKUPS │ │ → Numbers in LS27 0113 area code │ │ → Check against #17 │ │ → Caller ID spoofing (if needed) │ │ │ │ ┌─────────────────────────────────────────────────────────────────────┐ │ │ │ PHASE 4 - HISTORICAL & PHYSICAL (96+ HOURS) │ │ │ └─────────────────────────────────────────────────────────────────────┘ │ │ │ │ ▶ [ ] PLANNING PORTAL │ │ → Applications for #17 │ │ → Extensions, renovations, conversions │ │ │ │ ▶ [ ] COUNCIL TAX RECORDS │ │ → Band verification │ │ → Occupancy status │ │ │ │ ▶ [ ] CENSUS DATA │ │ → 2011/2021 census (area demographics) │ │ │ │ ▶ [ ] NEWS ARCHIVES │ │ → Local papers for Hardy St mentions │ │ → Crime reports, community events │ │ │ └─────────────────────────────────────────────────────────────────────────────┘ ┌─────────────────────────────────────────────────────────────────────────────┐ │ OCCUPANT PROFILING (INFERRED) │ ├─────────────────────────────────────────────────────────────────────────────┤ │ │ │ DEMOGRAPHICS │ │ ───────────────────────────────────────────────────────────────────────── │ │ AGE RANGE │ 35-55 (likely) │ │ GENDER │ Unknown (male/female) │ │ OCCUPATION │ HIGH PROBABILITY: IT/TECH/ENGINEERING │ │ │ ▶ Network skills (/22 subnet, VLANs) │ │ │ ▶ Security awareness (no exposed services) │ │ │ ▶ Technical proficiency (IPv6, dual stack) │ │ │ ▶ Professional-level networking knowledge │ │ │ │ EDUCATION │ Likely degree-level (STEM subject) │ │ INCOME │ £40,000 - £65,000 (est) │ │ TENURE │ Owner-occupier (likely) │ │ FAMILY STATUS │ Possibly with children (school catchment) │ │ │ │ BEHAVIOURAL PROFILE │ │ ───────────────────────────────────────────────────────────────────────── │ │ TRAIT │ EVIDENCE │ │ ─────────────────────┼────────────────────────────────────────────────── │ │ Tech-savvy │ /22 subnet, VLANs, IPv6 │ │ Privacy-conscious │ ULA addressing, no open ports │ │ Possibly WFH │ High bandwidth, multiple devices │ │ Homelab enthusiast │ Non-standard network, possible servers │ │ Security aware │ No external footprint │ │ Smart home user │ Inferred from VLANs (IoT segregation) │ │ │ │ RECREATION (EST) │ │ ▶ Gaming (low ping network) │ │ ▶ Media streaming (Plex/Jellyfin) │ │ ▶ Home automation (Home Assistant, Node-RED) │ │ ▶ Programming/development │ │ ▶ Cybersecurity (possible CTF participant) │ │ │ │ PSYCHOGRAPHIC │ │ ───────────────────────────────────────────────────────────────────────── │ │ ▶ Methodical / detail-oriented │ │ ▶ Value privacy and security │ │ ▶ Likely introverted (tech enthusiast profile) │ │ ▶ Problem-solver mindset │ │ ▶ Early adopter of technology │ │ ▶ Curious / tinkerer │ │ │ └─────────────────────────────────────────────────────────────────────────────┘ ┌─────────────────────────────────────────────────────────────────────────────┐ │ THREAT & OPERATIONAL ASSESSMENT │ ├─────────────────────────────────────────────────────────────────────────────┤ │ │ │ DETECTION RISK │ │ ───────────────────────────────────────────────────────────────────────── │ │ SURFACE ATTACK │ VERY LOW │ │ ──────────────┼───────────────────────────────────────────────────────── │ │ Exposed Ports │ NONE detected │ │ Open Services │ NONE detected │ │ Public IP │ UNKNOWN (behind ISP NAT possibly) │ │ DNS Records │ NONE linked │ │ SSL Certs │ NONE linked │ │ │ │ TARGET AWARENESS │ │ ───────────────────────────────────────────────────────────────────────── │ │ LEVEL │ MODERATE │ │ ──────────────┼───────────────────────────────────────────────────────── │ │ Network setup │ Suggests someone who understands security │ │ Clean footprint│ No obvious digital trail │ │ Likely OPSEC │ May use VPNs, encrypted comms │ │ │ │ ENUMERATION CHALLENGES │ │ ───────────────────────────────────────────────────────────────────────── │ │ ▶ No exposed services (cannot Shodan) │ │ ▶ ULA IPv6 (cannot scan) │ │ ▶ NAT hides internal structure │ │ ▶ Resident likely technically proficient │ │ ▶ May monitor network logs │ │ │ │ MITIGATION (FOR TARGET) │ │ ───────────────────────────────────────────────────────────────────────── │ │ ✓ Using private IP space │ │ ✓ ULA addressing prevents IPv6 scanning │ │ ✓ No exposed services │ │ ✓ Likely using strong passwords │ │ ✓ Network segmentation (VLANs) │ │ ✓ Could be using VPN for outbound │ │ ✗ Multiple properties create linkable pattern │ │ ✗ Public records (electoral roll) unavoidable │ │ │ └─────────────────────────────────────────────────────────────────────────────┘ ┌─────────────────────────────────────────────────────────────────────────────┐ │ INVESTIGATION SUMMARY │ ├─────────────────────────────────────────────────────────────────────────────┤ │ │ │ CASE ID │ 17-MORLEY-01 │ │ PRIORITY │ HIGH │ │ PRIMARY TARGET │ 17 Hardy St, Morley, Leeds LS27 8HU │ │ SECONDARY │ 9 Hardy St, Morley, Leeds LS27 8HU │ │ CURRENT STATUS │ ACTIVE - Identity Pending │ │ LEAD SCORE │ 85/100 (Strong OSINT potential) │ │ │ │ KEY FINDINGS │ │ ───────────────────────────────────────────────────────────────────────── │ ▶ Confirmed residence at #17 │ │ ▶ Strong technical footprint (network evidence) │ │ ▶ Link to #9 highly probable │ │ ▶ Clean OPSEC but public records vulnerable │ │ │ │ IMMEDIATE ACTIONS │ │ ───────────────────────────────────────────────────────────────────────── │ [1] Electoral roll check (next 24 hours) │ │ [2] Land Registry for #17 (next 24 hours) │ │ [3] Land Registry for #9 (next 24 hours) │ │ [4] WHOIS check (next 48 hours) │ │ [5] Social media sweep (next 48 hours) │ │ │ │ SUCCESS CRITERIA │ │ ───────────────────────────────────────────────────────────────────────── │ ▶ Positive identification of occupant(s) at #17 │ │ ▶ Confirmation of link between #9 and #17 │ │ ▶ Full name, age, occupation, family members │ │ ▶ Social media / online presence │ │ │ │ RECOMMENDATIONS │ │ ─────────────────────────────────────────────────────────────────────────│ │ ▶ Prioritise public records (passive OSINT only) │ │ ▶ Use VPN/proxy for all digital checks │ │ ▶ Document all findings with timestamps │ │ ▶ Cross-reference all sources for verification │ │ ▶ Maintain operational security (no direct contact) │ │ ▶ Do NOT scan or probe network directly │ │ │ └─────────────────────────────────────────────────────────────────────────────┘ ┌─────────────────────────────────────────────────────────────────────────────┐ │ DATA SOURCES CHECKLIST │ ├─────────────────────────────────────────────────────────────────────────────┤ │ │ │ UK GOVERNMENT │ │ [ ] Electoral Register (2024) │ ... (4 KB left) message.txt 54 KB