Sirklan Dox

dad is a fucking legend
----------------------------------
"IF I get the DDoSers IP, can I DDoS back with LOIC? Does LOIC actually work for DDoS?"

Come @ me SirKlan

Another day, another child trying to act like a hacker online.
Fueled by his ego, Zlatan, the infamous leader of SirKlan, ran himself straight into the ground.
Zlatan, there are people whom have been doing this for years.
You picked the wrong eFight.

Aliases: ZlatanYT, RandomZ3, Starky69, Technohopper97
----------------------------------
Name: Zlatan Haseljić
Age: 17/18
Address: Jalija 14, Zenica 72000, Bosnia and Herzegovina
Photo: https://fbcdn-sphotos-d-a.akamaihd.net/hphotos-ak-prn2/t31.0-8/1091197_311133722365549_401814171_o.jpg
----------------------------------
Emails:
8127113@gmail.com, Paypal, Uses for SirKlan.org hosting24 account.  Reset #: **********11
randomwebdesign@live.com, Reset mail: technohopper@live.com, Reset #: ** ****11
technohopper@live.com, Reset mail: randomwebdesign@live.com, Reset #: ** ****11
unwantedattention@outlook.com, Reset #: ********36
----------------------------------
Skypes:
SirKlanZ
unwantedattention, Attached to 8127113@gmail.com
ZlatanYT
Technohopper97
t3chnohopper
----------------------------------
Accounts and Social Media
----------------------------------
https://www.twitter.com/sirklan, Name is RandomZ3, Attached to 8127113@gmail.com
https://www.twitter.com/sirklanofficial, Attached to unwantedattention@outlook.com
https://www.twitter.com/technohopper, Attached to z_**@live.com
https://www.pastebin.com/u/unwantedattention, LOL removed
https://www.facebook.com/unattention
https://www.facebook.com/Av4.zlatan
https://www.steamcommunity.com/groups/SirKlanZ
https://www.steamcommunity.com/id/ZlatanYT
https://www.twitch.tv/randomz3
https://www.youtube.com/user/ZlatanYT
https://www.youtube.com/channel/UCjC8Pv7TlyDb4r5CJllgUIg
https://plus.google.com/112711345255511934226
https://plus.google.com/+ZlatanYT3/
https://www.alphas.sx/User-touchingmyBUTT
https://www.goodreads.com/user/show/19019599-zlatan-haselji
https://classic.xfire.com/profile/technoboy97/
https://join.me/hacker444
https://www.hackforums.net/member.php?action=profile&uid=2652821
----------------------------------
Website
----------------------------------
As of the morning 04/17/2015, https://www.sirklan.org has been suspended once again!
As of late night 04/16/2015, https://www.sirklan.org has been suspended for various violations of hosting24.com's TOS.

He fails to properly configure his MX records for Cloudflare.

dad@sunrise:~# python cfpass.py sirklan.org
[+] Bypassed: dc-dfc9a056.sirklan.org with address of 185.28.23.25

The hostname of 185.28.23.25 is srv23-25.hosting24.com
Which means he's using hosting24.com for his website.
To verify, I checked to see if any of his emails were registered.
8127113@gmail.com is attached to his hosting24 account
----------------------------------
Proof
----------------------------------
On Google, there is a cached result linking SirKlan to his past alias "RandomZ3"

        1. Tweets with replies by RandomZ3 (@SirKlan) | Twitter
        https://twitter.com/sirklan
        The latest Tweets and replies from RandomZ3 (@SirKlan).
        Screenshot: http://i.gyazo.com/8df813839555ae6a3335348f73996be0.png

On Google+, we can link RandomZ3 to ZlatanYT:

        2. https://plus.google.com/+ZlatanYT3/posts/7e1jCpSQLFv
        Screenshot: http://i.gyazo.com/5247ab6ec51c901c859bc6ffde612c17.png

Searching "ZlatanYT" on the back-pages of Google yields the following result:

        3. ZlatanYT  January 5, 2015 at 10:01 pm
        Anyone wanna skype or some shit i’m bored as fuck add technohopper97 <_ < ..
        really bored >_>
        Screenshot: http://i.gyazo.com/cf249fb950cd8986cabc536596054a14.png

Here we can link technohopper97 to technohopper and starky69:

        4. http://www.mpgh.net/forum/showthread.php?t=620623
        Screenshot: http://i.gyazo.com/df145c635e30a3a0ee3e83cf82f39e54.png

And we identify technohopper with Zlatan Haseljic here:

        5. http://profileengine.com/people/Technohopper/zllatan.haselji
        Screenshot: http://i.gyazo.com/a98c3202e01ef5a5fddf01f9f1ce775b.png

Finally, Googling "domaintools zlatan haseljic" shows:

        6. http://whois.domaintools.com/sirklan.org (need premium membership to see the goods)
        Screenshot: http://i.gyazo.com/c95bc4db7eb3046a3f1556de1d53fe1e.png (proof of address)
        Screenshot: http://i.gyazo.com/16f28d7c86ca7216d164c346372e7c47.png (proof of address)