Zach Edwards
banner
thezedwards.bsky.social
Zach Edwards
@thezedwards.bsky.social
data supply auditor | privacy & ad tech expert | internet threats

Personal @ victorymedium.com
Sr Threat Analyst @ SilentPush.com
appreciate the link!
September 9, 2025 at 4:59 AM
fwiw it was formerly owned by Elizabeth Wurtzel
September 9, 2025 at 4:29 AM
It's possible but really no clue - got it at an estate sale from another author
September 9, 2025 at 4:26 AM
cheers thanks very much!! 🖖
August 6, 2025 at 8:37 PM
Congrats! Very well deserved. 🖖🏻
July 22, 2025 at 12:41 AM
Our team looks forward to providing updates on the FUNNULL CDN and the owner over the coming weeks and months. This network isn’t done and much stronger efforts need to be taken in the U.S. by a wide range of companies to deal w/ this ongoing persistent threat out of China. 🖖
July 3, 2025 at 4:56 PM
I’ve got my own personal non-lawyer opinions (seems quite risky to host accounts for the owner of the largest CDN hosting scams targeting Americans), but I gotta assume that this is complex and there is currently a grey area that the U.S. Treasury needs to clarify.
July 3, 2025 at 4:56 PM
It seems clear that serious enterprise lawyers from major tech companies may not agree on what U.S. Treasury sanctions require them to do when an individual is sanctioned who has accounts on their service.
July 3, 2025 at 4:56 PM
Our research confirmed Lizhi still has active accounts on services including:
Twitter
GitHub
LinkedIn
Facebook
Google Code / Google Groups
Medium
PayPal
WordPress
HuggingFace
Gravatar / WordPress
Vercel
Deviant Art / Wix
Flickr / SmugMug
About Me / Vendasta
Tawk[.]to
July 3, 2025 at 4:56 PM
Krebs put it nicely in his piece, “However, as Mr. Lizhi’s case makes clear, just because someone is sanctioned doesn’t necessarily mean big tech companies are going to suspend their online accounts.”
July 3, 2025 at 4:56 PM
Do U.S. Treasury sanctions really have no teeth to require companies to ban accounts?

In this publishing process, we learned that different enterprise companies currently have different interpretations of what U.S. Treasury Sanctions / SDN processes require.
July 3, 2025 at 4:56 PM
FUNNULL hosted websites have caused over $200 million in losses to U.S. victims, with an average loss of $150,000 per individual.

And yet the FUNNULL admin, who was also directly sanctioned, still has dozens of accounts on various Western enterprise services. So what gives?
July 3, 2025 at 4:56 PM
FUNNULL CDN and the admin Liu Lizhi (aka Steve / Steven Lizihi) were both sanctioned by the U.S. Treasury in May 2025 – and in the announcement it was noted that “Funnull is linked to the majority of virtual currency investment scam websites reported to the FBI.”
July 3, 2025 at 4:56 PM
We found tons of interesting details including some anti-American and anti-Japanese statements on his personal blog.

Brian Krebs was also able to cover the research and helped to engage the enterprise organizations who are still hosting his accounts.
July 3, 2025 at 4:56 PM
Our SP piece can be viewed @ "Numerous Western Companies May Still Need to Ban FUNNULL Admin Accounts to Comply with U.S. Treasury Sanctions" @ www.silentpush.com/blog/funnull...
Numerous Western Companies May Still Need to Ban FUNNULL Admin Accounts to Comply with U.S. Treasury Sanctions
Numerous western companies may still need to ban FUNNULL Admin accounts to comply with U.S. Treasury Sanctions.
www.silentpush.com
July 3, 2025 at 4:56 PM
Reposted by Zach Edwards
More on Funnull in this Silent Push report from January: www.silentpush.com/blog/infrast...

These are also Funnull IPs and domains: bsky.app/profile/camp...
The FBI has released pages of IOCs related to cyber scam infrastructure that has been active between October 2023 and April 2025

PDF: www.ic3.gov/CSA/2025/250...
May 29, 2025 at 5:37 PM