Nullsec.us - Full Dox + Infrastructure Analysis
✎ CIVØ
📅 2026-08-05
⏱ 19:15
Yo, what's good? CIVØ checkin' in. Just like we promised, we're droppin' a fat pack of content for y'all.
Lately, a cyber crew callin' themselves NullSec has been blowin' up all over social media. But honestly? They lived up to their name—null security, null protection. We couldn't find a single shred of defense around their main guy (the owner). So, ladies and gentlemen, we're servin' up a full breakdown of nullsec.us, and the cherry on top—a complete de-anonymization of the crew's owner, BeanBagKing.
Target: nullsec.us
Owner: BeanBagKing (Morgan Dixon)
Status: IDENTIFIED + DOXXED
Date: 2026-08-01
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
INFRASTRUCTURE
Domain: nullsec.us
CDN: Cloudflare
Origin IP: 198.199.82.67 (webdata.nullsec.us)
Hosting: Digital Ocean
CMS: Ghost 6.52
Backend: Apache 2.4.58 (Ubuntu), PHP 8.0.30
Analytics: Matomo (Piwik)
Mail: Office 365 (nullsec-us.mail.protection.outlook.com)
Subdomains:
webdata.nullsec.us 198.199.82.67 (Origin - NOT behind CF)
link.nullsec.us 172.67.211.55 (Cloudflare)
www.nullsec.us 104.21.45.74 (Cloudflare)
bi.nullsec.us 44.210.222.22 (AWS EC2 - DNS)
home.nullsec.us 127.0.0.1 (Local)
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
WEBDATA.NULLSEC.US (198.199.82.67)
Open paths:
/js/piwik.js - 200 OK (Matomo)
/js/piwik.min.js - 200 OK
/js/.htaccess - 200 OK (readable)
/js/LICENSE.txt - 200 OK
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
REAL IDENTITY
Full Name: J. Morgan Dixon
(Morgan A Dixon, Morgan Teeter)
AKA: BeanBagKing, BBK, DarkArchon
Age: 30
Email (personal): beanbagking@gmail.com
Email (work): MDixon@dickinsonwright.com
Phone (personal): (814) 952-XXXX (Verizon)
Phone (work): 312-377-7885
Address: Pifer St, Du Bois, PA 15801
Previous: Olive Ave, Du Bois, PA
Myrtle Aly, Du Bois, PA
East Cecil, PA
Philadelphia, PA
Punxsutawney, PA
Work: Dickinson Wright PLLC, Chicago, IL
Position: Associate, Intellectual Property Litigation
Education: LSU (B.S. Biomedical Engineering)
Tulane (M.S., J.D./M.B.A.)
Military: East Cecil PTZ (2008)
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
OSINT CHAIN
1. GitHub + Steam:
- Path in 1029_crack.go: C:\Users\Mike\Downloads\
- Username: Mike
2. YouTube:
- Channel since 2008
- Face visible
- Location: East Cecil PTZ, PA
3. EVE Online:
- 1418+ posts by BeanBagKing (2009-2016)
- Active since 2009
4. Socials:
- Mastodon: @BeanBagKing@infosec.exchange
- PayPal: paypal.me/BeanBagKing
- Reddit: u/BeanBagKing
5. Whitepages / Spokeo:
- Morgan A Dixon, 30
- Du Bois, PA
- Relatives: Ronnie Jo Dixon, Dustin J Teeter, Michael R Dixon
6. LinkedIn:
- Multiple profiles confirmed
7. Mondaq (Legal confirmation):
- J. Morgan Dixon joined Dickinson Wright (2025-08-01)
- IP Litigation Associate, Chicago
8. Direct contacts obtained:
- MDixon@dickinsonwright.com
- 312-377-7885
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
ACCOUNTS
Platform URL
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
GitHub BeanBagKing - Overview
GitLab BeanBagKing · GitLab
Steam Steam Community :: BeanBagKing
YouTube https://www.youtube.com/user/BeanBagKing
Chess.com beanbagking - Chess Profile
Mastodon BBK (@BeanBagKing@infosec.exchange)
Bluesky BBK (@beanbagking.bsky.social)
Reddit Reddit - Please wait for verification
WordPress BeanBagKing's Profile | WordPress.org
GOG beanbagking's profile on GOG.com
PayPal Pay Morgan Dixon using PayPal.Me
EVE-Search EVE Search - Posts by BeanBagKing
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
RELATIVES
- Ronnie Jo Dixon
- Dustin J Teeter
- Michael R Dixon
- Morgan Sakari Dixon
- Belinda Marie Leatherman
- Stephanie L Dixon
- Steven T Dixon
- Nicole R Dixon
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
SUMMARY
1. nullsec.us infrastructure is protected by Cloudflare,
but webdata.nullsec.us (origin) is exposed:
- Apache 2.4.58, PHP 8.0.30
- Matomo Analytics
- Readable .htaccess
2. Owner fully identified:
J. Morgan Dixon, 30, IP Litigation Attorney
Dickinson Wright (Chicago), Du Bois, PA
3. Alias BeanBagKing traced since 2008 via:
- PayPal (linked to Morgan Dixon)
- EVE Online (1418+ posts)
- GitHub (active since 2009)
- LinkedIn (confirmed via Mondaq)
4. Direct contacts obtained:
- MDixon@dickinsonwright.com
- 312-377-7885
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
Contact: @civo_core01
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
If you're lookin' to buy some hacking services or need a full de-anonymization job — hit us up in DMs: @civo_core01