Thread by @dcuthbert

The Sun truly is a despicable rag and recent events have shown how we have to cut off their revenue supply. Many say block the sun, but how?

I've mapped out their entire footprint on the web so you can easily import and block it via your hosts file or firewall. #TheScum

You can get the latest lists from github.com/danielcuthbert…

There are 3 files:
- thesun_ips.csv (all of their infrastructure in IP format)
- thesun_web.csv (all of their domains and sub-domains)
- thesun.png (a large view of how they look on the web)

How do you block?

Windows: gist.github.com/zenorocha/18b1…
Mac OS X: hostinger.co.uk/tutorials/how-…

Thanks to @FarsightSecInc for their epic DNSDB, which makes life easier in Maltego.

Ill update the repo when I find more, but this is how you stop hate from spreading, hit them where the money comes in

@FarsightSecInc For those who are rightly wondering wtf this is all about, here is a good start vice.com/en_uk/article/…

@FarsightSecInc The png file is zoomable, so you can see their reach.

@FarsightSecInc Ok inundated by DMs to add more to this. I've started on the daily mail, another blog masquerading as a paper. Results added to git repo listed above.

@FarsightSecInc A few are seemingly concerned this could be illegal. It is not, this is how the Internet works, DNS is open and queryable for all, it is not sensitive or secret. Touching their servers could be, but this doesn't go anywhere near them.

@FarsightSecInc daily express added as requested. I'm turning my attention to the ad networks as this is where they make their revenue, so it's good to see who supports hatred

@FarsightSecInc Modified my original stalking framework to start hunting ad networks and trackers for these rags. Pushed an extended list of CNAMEs for both *.domain and domain.*

It does include ad networks and trackers. You can't hide on the Internet

@FarsightSecInc Now we are cooking with gas..
Combining all extended sets and you get 6343 entities, so transforming them into IP addresses. My machine is on fire

@FarsightSecInc Just a friendly reminder: print is all but dead, people consume via the web now, so this is where you hurt papers who publish hatred #DontReadTheSun #dontbuythemail

@FarsightSecInc Data is so sexy

@FarsightSecInc For all the bugbounty hunters out there, this often brings much love and joy when done right. Often companies do add RFC1918 A records, which give insight into internal networks. That and stuff they forgot about. #bugbountytips

@FarsightSecInc Ok I've just been bollocked for pissing around on the internet and not sorting los diablos out.

If this has sparked any interest in Maltego and data visualisation, watch my good friend @AndrewMohawk explain how to get addicted like we are

He's dreamy

@FarsightSecInc @AndrewMohawk @threadreaderapp unroll please

@FarsightSecInc @AndrewMohawk @threadreaderapp Whilst Caroline’s law would be a welcome addition, there are other ways to hurt the gutter press like they hurt others: revenue. They cannot survive if people don't click/visit and access their clickbait.

theguardian.com/media/2020/feb…

Tabloids in the UK are just scum

@FarsightSecInc @AndrewMohawk @threadreaderapp the telegraph has a vast reach too...