Wednesday, 11 September 2013

Chinese Threat Actor Part 7

According to the HTRAN report published by Dell, is one the command control domains used by threat actor. - -

Other subdomains associated with the domain



Domain: - Whois History
Cache Date:    2010-02-11
Registrar:    ENOM, INC.
Created:    2008-07-14
Updated:    2008-07-18
Expires:    2010-07-14

Reverse Whois:    Click on an email address we found in this whois record
to see which other domains the registrant is associated with:

Registration Service Provided By: Chinese DQ Network Tech Corp.
Domain name:

Registrant Contact:
   Zhang san
   Zhang San ()
   beijing, Beijing 100000

Administrative Contact:
   Zhang san
   Zhang San (
   Fax: +86.1044444444
   beijing, Beijing 100000

Technical Contact:
   Zhang san
   Zhang San (
   Fax: +86.1044444444
   beijing, Beijing 100000

Status: Locked

Name Servers:

In the month of March 2010, Threat actor noticed his mistake that he used his personal email for domain registration. He then changed the registrant email to

July 2008 - Feb 2010  Zhang San ( 

Mar 2010 - July 2010   Tom Hanson (

Actor Attribution

The Sina email "" is the registrant email of Sina community where the registrant posted on a tech forum, Video, Astrology forum and finally a Micro blog where he posted his picture.

Sina Video

20051xue   Newbie    Posted :2005 -07-26 11:31    Show author
Post 39 Posts: 0 Joined :2005-3-8    PM       
Large in small

Of course!
sign this thing is not allowed, but every time I look up, never really had. Anyway, my wife is a lion (818), I am Capricorn (107), the two married four years, and loving too are almost never fight, I live in the compound who recognized that we are the most loving couple.

The most interesting part is his Weibo personal blog where he mentions that he is Alumni of Tsinghua University and follow them, born on Jan 7, 1974 Capricorn and lives in Haidian District, Beijing.

Basic information

Nickname - Riding a white deer visit mountains

Location - Haidian District, Beijing

Gender - Male

Birthday - January 7, 1974, Capricorn

Job Information

Education Information -  Tsinghua University

200051Xue is using Samsung Galaxy S III android phone and he posted one of the picture of his daughter. The geo location listed in the pic was Han Jiachuan Road, Beijing, Haidan District.

He posted his personal picture in the album.