So I'm starting a project about a small focalized phishing campaing, but for that I need a strong OpSec enviroment and I got into something that I don't know how to proceed, the domain and sever.
So, until now I was working with a good OpSec concerning various VM, with whonix, personally configured VPN and getting neighbors routers, but now I need something static and the possibility of get traffic in and out of my machine maybe and probably working on my own router as it should be running 24h.
I was looking the various possibilities, using cloudflare as a DNS proxy, buying a domain with the country lvl, buying a VPS or running into an own machine, but most of it has nothing to do in Darknet as i was researching. So I ask for help on how to do it, and not only for this little campaign, but to know how to do maybe for future jobs or making websites.
My first thought was to do a proper server in an Ubuntu VM, and bridge the conexion through a whonix vm as I've done normally, but for that i would like to have a proxy to hidde the server and avoid problems with that and cloudflare is not an option as with any legal problem they will sell you probably. So maybe it is better to do it in a VPS, but then the same question as the Domain appera: where can I buy that and still being anonymous? Most of the places to buy, specially for domains, need your personal data and bank account or similar, so not an option.
The main intention is to deploy into the clearnet and if it's possible with a country lvl domain (not .com) and then i will use evilginx or similar so I don't need a huge server or anything, just for a reverse proxy phish attack
Will be useful every tip or info about what's better and how the best way to do it, VPS or own server, using ubuntu or another OS, and if you consider that i can reinforce my OpSec for that.
Any suggestion on VPS provider or domain registrar? I'm not familiarize with those that have strong anonimity
for domain you can use incognet.io for vps there is privateweb.is they have VPS DMCA