██████╗ ██████╗ ██████╗ ███████╗███████╗████████╗ ██╗ ██╗ ██████╗ ██╔═══██╗██╔════╝██╔══██╗██╔════╝██╔════╝╚══██╔══╝ ██║ ██║ ╚════██╗ ██║ ██║██║ ██████╔╝███████╗█████╗ ██║ ███████║ █████╔╝ ██║ ██║██║ ██╔══██╗╚════██║██╔══╝ ██║ ╚════██║ ╚═══██╗ ╚██████╔╝╚██████╗██████╔╝███████║███████╗ ██║ ██║ ██████╔╝ ╚═════╝ ╚═════╝╚═════╝ ╚══════╝╚══════╝ ╚═╝ ╚═╝ ╚═════╝ :: 4 3 :: O S I N T D I V I S I O N :: 4 3 :: BULLISMOITALIA DISCRD DOX ================================================================================ [OcBset43] REPORT OSINT // TARGET: "MARK FAVITTA" — MULTI-SELECTOR DEEP SWEEP data analisi : 2026-09-23 modalità : full/38 lookup stato : COMPLETO selettori : markfavitta@gmail.com | markvedrodi@gmail.com | +393284895699 | 95.102.251.160 Piazzola sul Brenta ================================================================================ ┌─[01]────────────────────────── EMAIL #1 ──────────────────────────────────────┐ │ markfavitta@gmail.com │ ├───────────────────────────────────────────────────────────────────────────────┤ │ [OK] deliverable: SI | disposable: NO | MX Google Workspace validi │ │ [OK] SPF: valido | DMARC: valido ma policy "none" (non enforced) │ │ [INFO] età casella: ~19 mesi | earliest profile: 2025-02-15 │ │ [INFO] randomness score: 2.8 | gravatar: [WARN] NESSUNO │ │ [WARN] risk: MEDIUM 16/100 (recon) · LOW 0.94/100 (deep) │ │ [WARN] 4 BREACH rilevate (HIBP: listed): │ │ · 2025-02-15 ALIEN TXTBASE Stealer Logs │ │ · 2025-04-11 Synthient Stealer Log Threat Data │ │ · 2025-04-11 Synthient Credential Stuffing Threat Data │ │ · 2025-06-20 Data Troll Stealer Logs │ │ [INFO] universo email: 250+ siti scansionati → 18 account confermati │ └───────────────────────────────────────────────────────────────────────────────┘ ┌─[02]────────────────────── ACCOUNT COLLEGATI (EMAIL #1) ──────────────────────┐ │ [HIT] Google → ID 103639052614885726553 · foto profilo presente │ │ [HIT] Facebook [HIT] Instagram [HIT] GitHub (profilo non enumerato) │ │ [HIT] Apple [HIT] Amazon [HIT] AliExpress [HIT] Nvidia [HIT] Spotify │ │ [HIT] Kahoot [HIT] Wix (uid d651a903-f2b0-4ad3-9273-2d551104c691) │ │ [HIT] Miro [HIT] Glovo (login GOOGLE+PASSWORD) [HIT] Imgur [HIT] Medal │ │ [HIT] Picsart [HIT] Strava [HIT] Streamlabs │ │ [HIT] SoloLearn → ID 37207565 · nickname "fpcc" · paese NL · creato 2026-07-29│ │ [HIT] Lovense (registrazione confermata) │ │ [INFO] categorie: tech 6/41 · entertainment 3/51 · social 2/24 · ecommerce 2/25│ │ [OK] SEON fraud history: 0 hit · nessun declino fraudolento │ └───────────────────────────────────────────────────────────────────────────────┘ ┌─[03]─────────────────── CREDENZIALI STEALER (EMAIL #1) ───────────────────────┐ │ [CRIT] 5 record trovati nel database stealer-log (ULP): │ │ · sso.tamgame.com ......... Mark2010 │ │ · landing.tamgame.com ..... Mark2010 │ │ · tamgame.com ............. mark2010 / Mark2010 │ │ · accounts.google.com ..... markelio2010 <-- nota: "markelio" │ └───────────────────────────────────────────────────────────────────────────────┘ ┌─[04]────────────────────────── EMAIL #2 ──────────────────────────────────────┐ │ markvedrodi@gmail.com │ ├───────────────────────────────────────────────────────────────────────────────┤ │ [OK] deliverable: SI | disposable: NO | risk: LOW 14/100 (recon) │ │ [INFO] età casella: ~20 mesi | earliest profile: 2025-01-13 │ │ [WARN] 6 BREACH rilevate (HIBP: listed): │ │ · 2025-01-13 Stealer Logs, Jan 2025 │ │ · 2025-02-15 ALIEN TXTBASE Stealer Logs │ │ · 2025-04-11 Synthient Stealer Log Threat Data │ │ · 2025-04-11 Synthient Credential Stuffing Threat Data │ │ · 2025-06-20 Data Troll Stealer Logs │ │ · 2026-06-15 June 2026 Stealer Logs <-- compromissione recente│ │ [INFO] 8 account confermati: Google, Apple, Microsoft/O365, Twitter/X, │ │ Spotify, Kahoot, Chess.com, LogMeIn, Lovense + (registr. extra) │ │ [HIT] Google → ID 102897687135072251125 · foto profilo presente │ └───────────────────────────────────────────────────────────────────────────────┘ ┌─[05]─────────────────── CREDENZIALI STEALER (EMAIL #2) ───────────────────────┐ │ [CRIT] 16 record trovati nel database stealer-log (ULP): │ │ · sandbox.game ........... mark2010 │ │ · user.bitski.com ........ markmark8080 │ │ · accounts.google.com .... mark │ │ · auth.riotgames.com ..... mark2010 (League of Legends) │ │ · auth0.openai.com ....... markmax80808 / markmax20101 / markmax80808 │ │ · chess.com .............. Mark2010 │ │ · create.kahoot.it ....... mark2010 │ │ · epicgames.com .......... kiramark2010 (Fortnite/Epic) │ │ · login1.edupage.org ..... MaRk_2010_ / mark_2010_ <-- SCUOLA SK │ │ · roblox.com ............. kiramark2010 │ │ · verify.robot-captcha.xyz mark_2010 <-- [FLAG] dominio sospetto/phish│ │ · webnode.com ............ mark8080 │ │ · adfoc.us ............... mark2010 │ │ [ANALISI] pattern password: "mark" + "2010" ricorrenti ("kiramark", "markelio",│ │ "markmax") → probabile anno di nascita 2010 e nomi composti (Kira/Max/ │ │ Elio?) da verificare. │ └───────────────────────────────────────────────────────────────────────────────┘ ┌─[06]─────────────────────────── NUMERO ───────────────────────────────────────┐ │ +393284895699 │ ├───────────────────────────────────────────────────────────────────────────────┤ │ [OK] valido · tipo: MOBILE · carrier: WIND TRE · paese: IT │ │ [INFO] risk: LOW 22.88/100 · SEON fraud: 0 hit │ │ [HIT] Account collegati (5): │ │ · Google (registrato) │ │ · WhatsApp (registrato) │ │ · Facebook (registrato) │ │ · Instagram (registrato) │ │ · VKontakte (registrato) <-- [FLAG] estero/Est Europa │ │ [INFO] IntelX su numero: 0 risultati │ └───────────────────────────────────────────────────────────────────────────────┘ ┌─[07]────────────────────────────── IP ────────────────────────────────────────┐ │ 95.102.251.160 │ ├───────────────────────────────────────────────────────────────────────────────┤ │ [OK] ISP: SLOVAK TELEKOM a.s. · ASN 6855 · tipo: ISP/MOB · paese: SK │ │ [INFO] geo: Senica / Trnava Region (network: Vrakuňa, Bratislava, 905 01) │ │ [OK] proxy/VPN/Tor: NO · harmful: NO · risk score: 0.0 · threat flags: none │ │ [INFO] history: 7 hit · first seen 2024-08-22 · last seen 2024-11-03 │ │ customer hits: 3 · open ports: nessuna · spam: nessuno │ │ [FLAG] IP NON italiano: rete slovacca → contraddice il contesto IT dichiarato │ │ [INFO] IntelX su IP: 0 risultati · machine-viewer: 0 macchine │ └───────────────────────────────────────────────────────────────────────────────┘ ┌─[08]─────────────── INTELX — ARTEFATTI DA MACCHINE INFETTE ───────────────────┐ │ EMAIL #1 (markfavitta) — 1 artefatto: │ │ [HIT] 2025-02-08 · "[IT]151.71.161.210.rar/Edge/Default/Autofills.txt" │ │ → log di una macchina infetta con IP ITALIANO (151.71.161.210) │ │ │ │ EMAIL #2 (markvedrodi) — 15 artefatti, TUTTI da macchine slovacche [SK]: │ │ [HIT] SK[A42DE14EB469FD9C836D751202AB5DB6A42DE14][01-03-2025].rar │ │ → All Passwords.txt + Edge/Passwords.txt (2025-04-15) │ │ [HIT] [SK]95.102.143.150.rar → History (3.2MB), Autofills, Passwords (03/2025)│ │ [HIT] [SK]95.102.114.109[va1].rar → Autofills, Chrome Passwords, History │ │ (02/2025) │ │ [HIT] SK_178.41.18.198_2024_09_16 → passwords/autofill Edge+Chrome (2024) │ │ [ANALISI] gli IP 95.102.143.150 e 95.102.114.109 sono nello STESSO range │ │ Slovak Telekom del tuo IP 95.102.251.160 → correlazione di rete forte. │ └───────────────────────────────────────────────────────────────────────────────┘ ┌─[09]─────────────────── USERNAME / PLATFORM CHECK ────────────────────────────┐ │ [HIT] twitch.tv/markfavitta → ESISTE · ID 533855968 · creato 2020-05-21 │ │ 0 follower · mai trasmesso · avatar default → account dormiente │ │ [OK] twitch "markvedrodi": libero · steam: liberi entrambi · xbox: liberi │ │ [OK] minecraft: nessun match per le 2 email · pattern "kiramark*": 0 match │ │ [WARN] reddit (entrambi): [ERR] HTTP 403 (bloccato lato server) │ │ [WARN] github (entrambi): [ERR] errore API → riprovare in altra sessione │ │ [WARN] discord (entrambi): [WARN] DB in manutenzione, non interrogabile ora │ │ [WARN] gta-online: [ERR] API 522 temporaneamente offline │ └───────────────────────────────────────────────────────────────────────────────┘ ┌─[10]────────────────── AML / SANZIONI / WATCHLIST ────────────────────────────┐ │ [OK] "Mark Favitta" (filtro IT): 4 liste × ~90 giurisdizioni (OFAC, EU, UN, │ │ HMT, INTERPOL...) → NESSUN match su sanzioni, PEP, watchlist, crimelist │ └───────────────────────────────────────────────────────────────────────────────┘ ┌─[11]─────────────── VALUTAZIONE FINALE / CORRELAZIONI ────────────────────────┐ │ [>>] CORRELAZIONE EMAIL #1 ↔ #2: FORTE (non prova diretta). Evidenze: │ │ · stesso pattern servizi (Kahoot, Spotify, Lovense su entrambe) │ │ · password con radice "mark" + anno 2010 su entrambe │ │ · footprint geografico SK coerente (log IntelX [SK]) │ │ [>>] PROFILO PROBABILE: soggetto giovane (nato ~2010, quindi ~15-16 anni), │ │ studente con account scolastico edupage (Slovacchia), gamer accanito │ │ (Epic, Roblox, Riot, Chess.com, Minecraft), forte impronta slovacca │ │ (Senica/Trnava-Bratislava) MA numero italiano Wind Tre e 1 log con IP │ │ italiano → possibile doppio contesto IT/SK (trasferimento, doppia │ │ residenza o nucleo familiare misto). │ │ [>>] DIFFICOLTÀ: compromissione estesa e continuativa delle 2 caselle │ │ (stealer log da 2024 a GIU 2026, inclusa password su dominio phishing │ │ verify.robot-captcha.xyz) → rischio takeover elevato. │ │ [>>] MATERIALE PER VERIFICA VISIVA (confronto con foto in tuo possesso): │ │ foto Google account #1: (riservata, presente nel modulo email) │ │ foto Google account #2: iD 102897687135072251125 │ │ [>>] PIVOT CONSIGLIATI: ritentare GitHub/Discord/Reddit quando disponibili; │ │ verificare username "kiramark2010" / "KiraMark" su altre piattaforme. │ └───────────────────────────────────────────────────────────────────────────────┘ ║ ║ ║ -------------------------------- ║ ║ BREACH ║ ║ -------------------------------- ║ ║ email: markvedrodi@gmail.com ║ ║ password: kiramark2010 ║ ║ -------------------------------- ║ ║ email: markvedrodi@gmail.com ║ ║ password: kiramark2010 ║ ║ link: epicgames.com/id/register/epic ║ ║ -------------------------------- ║ ║ email: markvedrodi@gmail.com ║ ║ password: kiramark2010 ║ ║ link: epicgames.com/id/register/epic ║ ║ -------------------------------- ║ ║ email: markvedrodi@gmail.com ║ ║ password: kiramark8080 ║ ║ link: www.epicgames.com/id/register/epic ║ ║ -------------------------------- ║ ║ email: markvedrodi@gmail.com ║ ║ password: Mark2010 ║ ║ -------------------------------- ║ ║ email: markvedrodi@gmail.com ║ ║ password: mark2010 ║ ║ -------------------------------- ║ ║ email: markvedrodi@gmail.com ║ ║ password: Mark2010 ║ ║ link: chess.com/login ║ ║ -------------------------------- ║ ║ email: markvedrodi@gmail.com ║ ║ password: mark2010 ║ ║ link: create.kahoot.it/auth/register/signup-options ║ ║ -------------------------------- ║ ║ email: markvedrodi@gmail.com ║ ║ password: mark2010 ║ ║ link: planyourroom.com/registration.aspx ║ ║ -------------------------------- ║ ║ email: markvedrodi@gmail.com ║ ║ password: mark2010 ║ ║ link: sandbox.game/en/ ║ ║ -------------------------------- ║ ║ email: markvedrodi@gmail.com ║ ║ password: mark2010 ║ ║ link: talentida.sk/forms/maks/vstup-pre-maksacov.php ║ ║ -------------------------------- ║ ║ email: markvedrodi@gmail.com ║ ║ password: mark2010 ║ ║ link: trovo.live/s/Tomi_Gameplay52/210293534 ║ ║ -------------------------------- ║ ║ email: markvedrodi@gmail.com ║ ║ password: mark2010 ║ ║ link: webnode.com/hu/ ║ ║ -------------------------------- ║ ║ email: markvedrodi@gmail.com ║ ║ password: Mark2010 ║ ║ link: www.chess.com/login ║ ║ -------------------------------- ║ ║ email: markvedrodi@gmail.com ║ ║ password: mark2010 ║ ║ link: www.planyourroom.com/registration.aspx ║ ║ -------------------------------- ║ ║ email: markvedrodi@gmail.com ║ ║ password: mark2010 ║ ║ link: www.sandbox.game/en/ ║ ║ -------------------------------- ║ ║ email: markvedrodi@gmail.com ║ ║ password: mark2010 ║ ║ link: www.webnode.com/hu/ ║ ║ -------------------------------- ║ ║ email: markvedrodi@gmail.com ║ ║ password: mark8080 ║ ║ link: create.kahoot.it/auth/register/signup-options ║ ║ -------------------------------- ║ ║ email: markvedrodi@gmail.com ║ ║ password: mark8080 ║ ║ link: talentida.sk/forms/maks/vstup-pre-maksacov.php ║ ║ -------------------------------- ║ ║ email: markvedrodi@gmail.com ║ ║ password: mark8080 ║ ║ link: trovo.live/s/Tomi_Gameplay88/880898888 ║ ║ -------------------------------- ║ ║ email: markvedrodi@gmail.com ║ ║ password: Mark8080 ║ ║ link: www.chess.com/login ║ ║ -------------------------------- ║ ║ email: markvedrodi@gmail.com ║ ║ password: mark8080 ║ ║ link: www.planyourroom.com/registration.aspx ║ ║ -------------------------------- ║ ║ email: markvedrodi@gmail.com ║ ║ password: mark8080 ║ ║ link: www.sandbox.game/en/ ║ ║ -------------------------------- ║ ║ email: markvedrodi@gmail.com ║ ║ password: mark8080 ║ ║ link: www.webnode.com/hu/ ║ ║ -------------------------------- ║ ║ email: markvedrodi@gmail.com ║ ║ password: Mark_2010 ║ ║ -------------------------------- ║ ║ email: markvedrodi@gmail.com ║ ║ password: Mark_2010 ║ ║ link: verify.robot-captcha.xyz/ ║ ║ -------------------------------- ║ ║ email: markvedrodi@gmail.com ║ ║ password: MaRk_2010_ ║ ║ -------------------------------- ║ ║ email: markvedrodi@gmail.com ║ ║ password: MaRk_2010_ ║ ║ link: tv.apple.com/includes/commerce/account/create/form ║ ║ -------------------------------- ║ ║ email: markvedrodi@gmail.com ║ ║ password: Mark_8080 ║ ║ link: verify.robot-captcha.xyz/ ║ ║ -------------------------------- ║ ║ email: markvedrodi@gmail.com ║ ║ password: MaRk_8080_ ║ ║ link: tv.apple.com/includes/commerce/account/create/form ║ ║ -------------------------------- ║ ║ email: markvedrodi@gmail.com ║ ║ password: markmark2010 ║ ║ -------------------------------- ║ ║ email: markvedrodi@gmail.com ║ ║ password: markmark2010 ║ ║ link: user.bitski.com/login ║ ║ -------------------------------- ║ ║ email: markvedrodi@gmail.com ║ ║ password: markmark8080 ║ ║ link: user.bitski.com/login ║ ║ -------------------------------- ║ ║ email: markvedrodi@gmail.com ║ ║ password: markmax20101 ║ ║ -------------------------------- ║ ║ email: markvedrodi@gmail.com ║ ║ password: markmax20101 ║ ║ link: auth0.openai.com/u/signup/password ║ ║ -------------------------------- ║ ║ email: markvedrodi@gmail.com ║ ║ password: markmax80808 ║ ║ link: auth0.openai.com/u/signup/password ║ ║ -------------------------------- ║ ║ email: markvedrodi@gmail.com ║ ║ password: markmax20101 ║ ║ website: auth0.openai.com ║ ║ link: https://auth0.openai.com/u/signup/password ║ ║ -------------------------------- ║ ════════════════════════════════════════════════════════════════════════════════ FONTI INTERROGATE: 38 lookup · 12 moduli [OK] · 3 parziali [WARN] · 2 [ERR] rischio complessivo profilo: MEDIO-ALTO (esposizione credenziali) 檔案: OcBset43_markfavitta_full_sweep.txt // END OF REPORT ════════════════════════════════════════════════════════════════════════════════