AN OSINT CASE STUDY: NON-CONSENSUAL IMAGERY WEBSITE MYWAPE.COM

MyWape.com is an image and video sharing platform. The implementation is interesting given it appears to have been developed from scratch.

The main developers landing page is located at https://wape.dev/. Clicking on "get started" redirects to the main platform.

MyWape.com hosts large amounts of non-consensual imagery and videos, which can be retrieved from their respective links on the main page. There are trending and popular pages which displays content with high view counts.

Content is displayed in a similar method to Instagram.

Interestingly, there is a statistics page located at: https://mywape.com/stat. The website gets approximately 500k views per day. There is a high-amount of data throughput - 32TB at the time of writing.

Content appears to be "purged" semi-frequently - I have not investigated to see whether content remains persistent.

What are your thoughts regarding the content on the website? Do you (the reader) think that it is fair the owner is granted anonymity while allowing the platform to operate?

ADVERTISING

Interacting with the Page Source code reveals the various methods the administrator uses to earn revenue.

There are several references to https://a.pemsrv.com/ and https://a.magsrv.com/, which is a domain operated by https://exoclick.com/.

There are https://www.juicyads.com/ banners when clicking on individual images or videos.

Lastly, there are frequent StripChat.com pop-ups.

The URL humoristshamrockzap.com is embedded within the page source of individual images or videos, which directs to a "ClickAdu" splash page - in reference to the revenue provider https://www.clickadu.com/.

Given the number of revenue streams and page views, I would imagine the website produces good earnings for the developer.

HOSTING

Interesting, all video files reside in directories retrievable through the https://storage.ahrj.top/ domain name.

For example the file path for video files resembles the following:

https://ahrj.top/p/abc43cab5f5b8c09226bfdafbf6c9f6b/videos__live/6893/FILENAME.mp4

Where images are concerned, MyWape.com uses the domain name https://add.openw.top. For example images are retrieved through the following structure:

https://add.openw.top/i/previews/photos/6904/IMAGE.jpg.

The current IP address for ahrj.top is:

95.216.16.252 (FINLAND) Autononmous System: 24940 (HETZNER-AS)

https://urlscan.io/result/0d79bf26-f405-4f96-abbb-67813daff07e/

The current IP address for add.openw.top is:

51.15.18.238 (UNITED KINGDOM) Autonomous System: 12876 (Online SAS, FR)

https://urlscan.io/result/2d58399e-ef27-4806-9085-5c6f69b77909/

OWNER

The owner responds to support tickets within the platform, including requests for deletion and concerns.

After asking about content deletion, and the large amount of non-consensual imagery on the website, this was the response:

"Thank you for your message! We delete about 1000 publications daily. No one sees these publications. We ask you to leave complaints about publications that for some reason get into the feed, all complaints are reviewed manually.

We suffer greatly from such content, we need a lot of effort and resources to filter it, and I ask you to help us if possible."

The owner is a Russian national with a large internet footprint (to be continued).

Contact

osintblogxyz@protonmail.com

Personal blog about OSINT discoveries and techniques.