This may be the last time you see a post from us from this top-level domain. Several long years ago, we launched this website to provide a platform for “admiration” of the jovial ursine activities of a set of state-sponsored threat actors and their rent-a-hacker colleagues, and to attract others who would like to contribute…

Does that traffic to commercial public cloud services and web-based applications seem legitimate to you? Bad actors are abusing the shit out of cloud services: Google Docs, Google Forms, Discord, and others, concealing their badness in TLS and the reputation of big cloud brands. This post is an ongoing notebook on both found abuses of…