As many members of the EXETOOLS forum would have been no doubt aware by now, the site was mostly down for a greater part of the last 2 days as the site operators struggled to move their illegal site back to China from where it is presently operating from, at this time.
Earlier on, this illegal site (forum.exetools.com) was hosted on the IT7 Servers with an IP address of 172.96.197.208 , which they tried to go to great lengths to conceal, through the use of CloudFlare services.
Due to the unrelenting efforts on the part of LEAs from various jurisdictions, the site operators were forced to retreat back to China where they continue to host the site behind their home-grown reverse-proxy firewall, at the time of this writing.
It is of note that they even use their mobile phone’s internet connection to serve out the web content from their PC which they use as a server for that illegal site at this time.
Of course, the operators of the site including Chants and Ahmadmansoor attempted to geo-block a few IP address ranges belonging mapping to the US and some parts of Europe.
Of course, in these days where VPNs have become a fact of life and where even laymen use the VPNs for their daily browsing needs, the jokers (admins of EXETOOLS) who attempted that IP block with their home-grown firewall should learn that they are not fooling anyone lol.
Readers may recall that it was only after the sad demise of Aaron and Zenix, the founders of this site, in a tragic accident last December, that the forum started to get rolling into this treacherous and slippery slope of Major Crime, including recruitment of Terrorists and Child Sex Abuse.
Of course, as everyone is well aware, the site specializes in software and hardware piracy, with even a dedicated REQUESTS sections where members can request cracks for software and hardware (dongles) for a price. I had already posted in another blog post of mine earlier as to how the admins actually encourage the sales of pirated material in the forum.
A screenshot of the “requests” section from that illegal website is posted as evidence below, for all to see. It is current as at that time of this writing of this blog.
