Disclaimer: this could be utter dross for all I understand it but mike farb’s work generally seems to be accepted by - admittedly internet -data analysts (although this one is too new to have been internet reviewed)
MikeFarb
@mikefarb1
#unhackthevote
BOOM!
More than 250 Trump Organization Subdomains are in Communication with Computers in Russia!!
Thread.
The Trump Organization, like most large organizations, has a lot of domains registered to it. Let's take a look.
Many of these domains have subdomains - like reservations.trumphotels.com This is a normal practice. But we found something HIGHLY unusual.
They don't have normal names.
They have names like fghft.721fifth.com
Pretty much impossible for the normal user to stumble upon.
These subdomains are not open for normal web traffic. When you browse to them there is nothing there.
The fact that they exist means they can be used for communication, if you know how.
Our team did a traceroute on these subdomains. Checking where traffic on these networks goes.
What we found was shocking.
All of these subdomains follow the same route to Moscow, then take a trip to Siberia, then finally arrive at a server in St. Petersburg.
And what about that location in Siberia?
The coordinates point to the place where the earth was flattened by a meteor explosion in 1908. en.wikipedia.org/wiki/Tunguska_event
Signs Point To This Sever Actually Being Close To The Kremlin in Moscow!!
WTF. Why are there STILL Trump-Owned Subdomains That Can Communicate with Computers in Russia? It Gets More Interesting.
All of the Russian IP's these domains are Routing through are owned by Hostkey.ru, also known as Mir Telematiki LTD. Who else uses them
WTF!! This IP Address Goes to the Same ISP and Purported Physical Location as Two IP Addresses Used by (link: WikiLeaks.org) WikiLeaks.org!!
Here are the Details about the IP Address that the Trump subdomains pass through.
Wikileaks also routes through the supposed Siberian server, although certain signs point to it being very near the Kremlin, in Moscow.
Trump network traffic includes filenames in “leetspeak”, like
(link: n1cEG1rLSatTh1Sw33kEND988.html1.zip) n1cEG1rLSatTh1Sw33kEND988.html1.zip
Nice girls at this weekend 988?
WTF?
What does this even mean? We have figured out a few of these codes, we think. Still unsure about a lot of them.
For a detailed walkthrough, Please Read Our First Self Published Article at
(link: www.unhackthevote.com/our-research/trumps-connections-to-russia-they-are-just-a-ping-away/) unhackthevote.com/our-research/t…