1. Anti-Attribution and Anonymization

1.1 Work Environment Setup

Host disk encryption: VeraCrypt (https://www.veracrypt.fr)

Virtual machine security setup: - Remove Bluetooth and NAT network adapters; use Shadow Defender - Mount a shared folder to hold files - Separate the pentest machine from the reporting machine; disable WPS document sync - Password management: Mybase + KeePass

Personal information cleanup: - Disable personal IDs, historical passwords, and historical accounts; one account per use, then discard - Anonymous email: ProtonMail / Outlook - SMS-activation service: sms-activate.io - Device purchase (second-hand): watch out for the device ID and WiFi BSSID (netsh wlan show networks mode=bssid) - SIM cards: buy offline / secondary cards; when buying via Telegram, don't bind your own phone number - Crypto money-laundering path: cold wallet / cash (domestic underground-banking transactions) → USDT → multi-currency coin mixing → USDT (anonymous money laundering loses 7%-10%; with laundering-service/underground-banking commissions the total loss is ~30%)

Anti-attribution analysis factors: who the adversary is (BC iGaming platform providers, etc.) → what chains were used → what information leaks at each hop → who can obtain it → time cost → required permissions

1.2 Anonymous Network Chains

Host selection: outside mainland China (shockhosting / psychz.net / Amazon cloud / CF / jtti.cc), prefer providers that accept USDT, spread across different hosting providers, avoid Hong Kong Alibaba Cloud

Chain construction: - overseas data SIM → frp → SoftEther VPN → LunaProxy (dynamic residential proxy) (SoftEtherVPN) - overseas data SIM → LunaProxy → traffic proxy (suying999.net) - domestic data SIM → SoftEther VPN → traffic proxy - Anonymous traffic devices - VPN configuration and trace cleanup

1.3 Pentest Environment and Tool Setup

Account creation: GitHub / SecurityTrails (the world's largest intelligence provider) / Censys (updated daily + rustscan) / FOFA-Hunter (never log in from the live pentest VM)

Tools: ffuf / cloud-drive bundle

Wordlists: 9bie/dict / SecDictionary / MyDict

Reference: lcx.cc anti-attribution

1.4 Understanding the iGaming Platform Provider Business

Financier model: financier → provides site-building / development services → code + deployment / code + deployment + operations / self-built site BC → page association: a large batch of associated sites iGaming platform provider → target decision: take down the provider → control all data / rights enforcement / supply chain (customer account-password payments) / obtain source code / control operations-maintenance-development, at worst control customer support

1.5 Counter-Espionage

Commercial espionage: how to bribe insiders / commercial consulting-firm playbooks / how to investigate and root out insiders / upstream-downstream data analysis and attribution

Geopolitical confrontation: espionage confrontation across political regimes

---