&gt; Let’s explore.

Infrastructure & activity

103.224.182.238United States AS133618 Trellian Pty. Limited

Hosts: 9
Requests: 25
Received: 866.9 KB
Sent: 24.5 KB

Notable observed hosts

6 more · View hosts →

Captured page Enlarge ↗ ww17.ngebut.net/

ngebut.net

http://ngebut.net/

26 Sep 2026 · 05:41 UTC

Final URL Different hostname

http://ww17.ngebut.net/

Detection highlights

Infrastructure & activity

103.224.212.113Australia AS133618 Trellian Pty. Limited

Hosts: 9
Requests: 25
Received: 868.8 KB
Sent: 25.0 KB

Notable observed hosts

6 more · View hosts →

Captured page Enlarge ↗ u041jq.top/?qrBWeo9RvW6J4cmI

158010.cc

http://158010.cc/

26 Sep 2026 · 01:00 UTC

Final URL Different hostname

https://u041jq.top/?qrBWeo9RvW6J4cmI

Detection highlights

Infrastructure & activity

43.229.153.108Hong Kong AS153706 Stack Network Sdn. Bhd.

Hosts: 5
Requests: 17
Received: 91.88 MB
Sent: 8.8 KB

Notable observed hosts

2 more · View hosts →

Captured page Enlarge ↗ 正在下载中 ...

7128257.top

http://7128257.top/

25 Sep 2026 · 23:19 UTC

Final URL Different hostname

https://xn--jdv702c.kijwsks.com/uoxynvxp/p8Yig.html

Detection highlights

URLQuery 0IDS 0TDS 1

Sinkholed DNS4EU medium severity Malicious

Infrastructure & activity

65.52.162.43Hong Kong AS8075 Microsoft Corporation

Hosts: 5
Requests: 13
Received: 2.06 MB
Sent: 7.2 KB

Notable observed hosts

2 more · View hosts →

https://accounts.ebay.com/acctxs/user?src=me

accounts.ebay.com

24 Sep 2026 · 14:38 UTC

Captured page Enlarge ↗ Get help signing in

Detection highlights

No detections reported.

Infrastructure & activity

95.101.11.170Norway AS20940 Akamai International B.V.

Hosts: 17
Requests: 116
Received: 7.74 MB
Sent: 194.4 KB

Notable observed hosts

14 more · View hosts →

http://shuttletv.su/movies

shuttletv.su

24 Sep 2026 · 13:48 UTC

Captured page Enlarge ↗ NTE: Neverness to Everness on Steam

Final URL Different hostname

https://store.steampowered.com/app/4508340/NTE_Neverness_to_Everness/

Detection highlights

Sinkholed DigiCert UltraDNS medium severity Malicious

Infrastructure & activity

150.40.126.140Serbia AS211619 MAXKO d.o.o.

Hosts: 14
Requests: 253
Received: 48.36 MB
Sent: 145.5 KB

Notable observed hosts

11 more · View hosts →

http://www.28885963-2348-ex.unrertivermalous.com/

www.28885963-2348-ex.unrertivermalous.com

24 Sep 2026 · 09:26 UTC

Captured page Enlarge ↗ 28885963-2348-ex.unrertivermalous.com/

Detection highlights

Infrastructure & activity

199.191.50.130British Virgin Islands AS40034 Confluence Networks Inc

Hosts: 6
Requests: 19
Received: 865.5 KB
Sent: 21.3 KB

Notable observed hosts

Captured page Enlarge ↗ Rechter VS oordeelt dat Witte Huis verbannen media weer moet toelaten

nos.nl

http://nos.nl

24 Sep 2026 · 08:15 UTC

Final URL

https://nos.nl/artikel/2632259-rechter-vs-oordeelt-dat-witte-huis-verbannen-media-weer-moet-toelaten

Detection highlights

No detections reported.

Infrastructure & activity

65.9.46.122United States AS16509 Amazon.com, Inc.

Hosts: 13
Requests: 186
Received: 6.74 MB
Sent: 127.8 KB

Notable observed hosts

10 more · View hosts →

Captured page Enlarge ↗ us-jnj.com/

us-jnj.com

http://us-jnj.com

24 Sep 2026 · 05:41 UTC

Final URL

http://us-jnj.com/

Detection highlights

Sinkholed DigiCert UltraDNS medium severity Malicious

Infrastructure & activity

208.91.197.27British Virgin Islands AS40034 Confluence Networks Inc

Hosts: 6
Requests: 22
Received: 893.7 KB
Sent: 23.4 KB

Notable observed hosts

Captured page Enlarge ↗ Fox News - Breaking News Updates | Latest News Headlines | Photos & News Videos

foxnews.com

http://foxnews.com

23 Sep 2026 · 19:22 UTC

Final URL Different hostname

https://www.foxnews.com/

Detection highlights

No detections reported.

Infrastructure & activity

184.24.145.146Sweden AS16625 Akamai Technologies, Inc.

Hosts: 61
Requests: 238
Received: 21.80 MB
Sent: 164.3 KB

Notable observed hosts

58 more · View hosts →

https://vimeo.com/1229604444?share=copy&fl=sv&fe=ci

vimeo.com

23 Sep 2026 · 16:40 UTC

Captured page Enlarge ↗ FAQ's�How to Speak Directly at Southwest Airlines Representative? | Videos & Movies on Vimeo

Detection highlights

No detections reported.

Infrastructure & activity

162.159.128.61United States AS13335 Cloudflare, Inc.

Hosts: 16
Requests: 226
Received: 12.41 MB
Sent: 134.0 KB

Notable observed hosts

13 more · View hosts →

https://vimeo.com/1229604444?share=copy&fl=sv&fe=ci

vimeo.com

23 Sep 2026 · 16:40 UTC

Captured page Enlarge ↗ FAQ's�How to Speak Directly at Southwest Airlines Representative? | Videos & Movies on Vimeo

Detection highlights

No detections reported.

Infrastructure & activity

162.159.128.61United States AS13335 Cloudflare, Inc.

Hosts: 14
Requests: 222
Received: 12.88 MB
Sent: 132.1 KB

Notable observed hosts

11 more · View hosts →

https://vimeo.com/1229175151/2d3ce42c3f

vimeo.com

23 Sep 2026 · 14:57 UTC

Captured page Enlarge ↗ Sep 17 2026 Exposure Management | Working with the Unknown: Threat Hunting Workshop | Videos & Movies on Vimeo

Detection highlights

No detections reported.

Infrastructure & activity

162.159.138.60United States AS13335 Cloudflare, Inc.

Hosts: 11
Requests: 208
Received: 10.60 MB
Sent: 128.1 KB

Notable observed hosts

8 more · View hosts →

http://tommyonlineus.com/

tommyonlineus.com

22 Sep 2026 · 01:31 UTC

Captured page Enlarge ↗ tommyonlineus.com/

Detection highlights

Sinkholed DigiCert UltraDNS medium severity Malicious

Infrastructure & activity

208.91.197.27British Virgin Islands AS40034 Confluence Networks Inc

Hosts: 6
Requests: 21
Received: 892.7 KB
Sent: 21.3 KB

Notable observed hosts

Captured page Enlarge ↗ null

null.freebuff.app

http://null.freebuff.app

21 Sep 2026 · 15:12 UTC

Final URL

https://null.freebuff.app/

Detection highlights

No detections reported.

Infrastructure & activity

216.150.1.1United States AS16509 Amazon.com, Inc.

Hosts: 3
Requests: 9
Received: 1.47 MB
Sent: 4.4 KB

Notable observed hosts

View hosts →

http://www.ritsunabi.com/

www.ritsunabi.com

20 Sep 2026 · 09:38 UTC

Captured page Enlarge ↗ ritsunabi.com/

Detection highlights

Infrastructure & activity

208.91.197.46British Virgin Islands AS40034 Confluence Networks Inc

Hosts: 6
Requests: 20
Received: 885.4 KB
Sent: 20.8 KB

Notable observed hosts

http://belivepandp.online/

belivepandp.online

20 Sep 2026 · 07:39 UTC

Captured page Enlarge ↗ belivepandp.online/

Detection highlights

URLQuery 0IDS 0TDS 2

Sinkholed DigiCert UltraDNS medium severity Malicious

Infrastructure & activity

208.91.197.13British Virgin Islands AS40034 Confluence Networks Inc

Hosts: 6
Requests: 21
Received: 899.5 KB
Sent: 21.5 KB

Notable observed hosts

http://www.28963752-22554-ex.unrertivermalous.com/

www.28963752-22554-ex.unrertivermalous.com

20 Sep 2026 · 03:59 UTC

Captured page Enlarge ↗ 28963752-22554-ex.unrertivermalous.com/

Detection highlights

Infrastructure & activity

199.191.50.130British Virgin Islands AS40034 Confluence Networks Inc

Hosts: 6
Requests: 19
Received: 864.5 KB
Sent: 21.1 KB

Notable observed hosts

Captured page Enlarge ↗ fretpsd.com

www.fretpsd.com

http://www.fretpsd.com/

20 Sep 2026 · 03:57 UTC

Final URL

https://www.fretpsd.com/

Detection highlights

URLQuery 0IDS 0TDS 6

Infrastructure & activity

185.53.179.136Germany AS206834 Team Internet AG

Hosts: 9
Requests: 29
Received: 1.02 MB
Sent: 28.6 KB

Notable observed hosts

6 more · View hosts →

http://www.id.khepo.site/

www.id.khepo.site

20 Sep 2026 · 03:25 UTC

Captured page Enlarge ↗ ww17.id.khepo.site/

Final URL Different hostname

http://ww17.id.khepo.site/

Detection highlights

Infrastructure & activity

103.224.182.242United States AS133618 Trellian Pty. Limited

Hosts: 7
Requests: 20
Received: 859.4 KB
Sent: 18.8 KB

Notable observed hosts

4 more · View hosts →

http://www.xocasino-bonus.com/

www.xocasino-bonus.com

20 Sep 2026 · 02:57 UTC

Captured page Enlarge ↗ xocasino-bonus.com

Final URL

https://www.xocasino-bonus.com/

Detection highlights

URLQuery 0IDS 0TDS 6

Infrastructure & activity

185.53.179.128Germany AS206834 Team Internet AG

Hosts: 10
Requests: 30
Received: 1.02 MB
Sent: 30.1 KB

Notable observed hosts

7 more · View hosts →

Captured page Enlarge ↗ yfdabv8.com/?dn=www.whl2.xyz&accid=710956738&spfwd=1&spmsg=nschttp%3A504

www.whl2.xyz

http://www.whl2.xyz/

20 Sep 2026 · 02:18 UTC

Final URL Different hostname

https://yfdabv8.com/?dn=www.whl2.xyz&accid=710956738&spfwd=1&spmsg=nschttp%3A504

Detection highlights

Infrastructure & activity

103.224.182.250United States AS133618 Trellian Pty. Limited

Hosts: 7
Requests: 20
Received: 857.4 KB
Sent: 17.9 KB

Notable observed hosts

4 more · View hosts →

http://s1.migrationagency.com.au/

s1.migrationagency.com.au

19 Sep 2026 · 23:37 UTC

Captured page Enlarge ↗ s1.migrationagency.com.au/

Final URL

https://s1.migrationagency.com.au/

Detection highlights

Infrastructure & activity

103.224.182.242United States AS133618 Trellian Pty. Limited

Hosts: 7
Requests: 19
Received: 865.5 KB
Sent: 20.7 KB

Notable observed hosts

4 more · View hosts →

http://28929539-2348-ex.unrertivermalous.com/

28929539-2348-ex.unrertivermalous.com

19 Sep 2026 · 22:50 UTC

Captured page Enlarge ↗ 28929539-2348-ex.unrertivermalous.com/

Detection highlights

Infrastructure & activity

199.191.50.130British Virgin Islands AS40034 Confluence Networks Inc

Hosts: 6
Requests: 19
Received: 864.5 KB
Sent: 21.0 KB

Notable observed hosts