&gt; Let’s explore.

Sinkholed DigiCert UltraDNS medium severity Malicious

Infrastructure & activity

13.248.169.48United States AS16509 Amazon.com, Inc.

Hosts: 7
Requests: 40
Received: 2.59 MB
Sent: 32.1 KB

Notable observed hosts

Captured page Enlarge ↗ ytfun.com is for sale — Buy for $ 500 or Lease to Own | GoDaddy

ytfun.com

http://ytfun.com

22 Oct 2026 · 05:02 UTC

Final URL Different hostname

https://forsale.godaddy.com/forsale/ytfun.com?utm_source=TDFS_BINNS2&utm_medium=parkedpages&utm_campaign=x_corp_tdfs-binns2_base&traffic_type=TDFS_BINNS2&traffic_id=binns2&

Detection highlights

No detections reported.

Infrastructure & activity

13.248.169.48United States AS16509 Amazon.com, Inc.

Hosts: 7
Requests: 56
Received: 2.94 MB
Sent: 51.5 KB

Notable observed hosts

Captured page Enlarge ↗ drchangellc.com

drchangellc.com

http://drchangellc.com

22 Oct 2026 · 05:00 UTC

Final URL

https://drchangellc.com/

Detection highlights

No detections reported.

Infrastructure & activity

76.223.105.230United States AS16509 Amazon.com, Inc.

Hosts: 4
Requests: 54
Received: 1.32 MB
Sent: 28.0 KB

Notable observed hosts

Captured page Enlarge ↗ ballerina.life/lander

ballerina.life

http://ballerina.life

22 Oct 2026 · 05:00 UTC

Final URL

https://ballerina.life/lander

Detection highlights

Sinkholed DNS4EU medium severity Malicious

Infrastructure & activity

3.33.130.190United States AS16509 Amazon.com, Inc.

Hosts: 4
Requests: 17
Received: 857.7 KB
Sent: 9.8 KB

Notable observed hosts

Captured page Enlarge ↗ AMBITIONX

monakhanna.com

http://monakhanna.com

22 Oct 2026 · 05:00 UTC

Final URL Different hostname

https://ambitionx.com/

Detection highlights

No detections reported.

Infrastructure & activity

3.33.251.168United States AS16509 Amazon.com, Inc.

Hosts: 5
Requests: 45
Received: 1.48 MB
Sent: 23.4 KB

Notable observed hosts

2 more · View hosts →

http://hellodeerfieldbeach.com

hellodeerfieldbeach.com

22 Oct 2026 · 04:09 UTC

Captured page Enlarge ↗ Hello

Final URL

https://hellodeerfieldbeach.com/

Detection highlights

No detections reported.

Infrastructure & activity

13.248.243.5United States AS16509 Amazon.com, Inc.

Hosts: 11
Requests: 92
Received: 11.98 MB
Sent: 73.3 KB

Notable observed hosts

8 more · View hosts →

Submit tags

http://earth-aromatherapie.com

earth-aromatherapie.com

22 Oct 2026 · 04:08 UTC

Captured page Enlarge ↗ Earth Aromatherapie

Final URL

https://earth-aromatherapie.com/

Detection highlights

No detections reported.

Infrastructure & activity

13.248.243.5United States AS16509 Amazon.com, Inc.

Hosts: 9
Requests: 71
Received: 3.39 MB
Sent: 38.3 KB

Notable observed hosts

6 more · View hosts →

Submit tags

http://neconstructionllp.com

neconstructionllp.com

22 Oct 2026 · 04:07 UTC

Captured page Enlarge ↗ NE Construction, LLP - Multifamily General Contractor

Final URL

https://neconstructionllp.com/

Detection highlights

No detections reported.

Infrastructure & activity

104.21.75.5zz AS13335 Cloudflare, Inc.

Hosts: 10
Requests: 60
Received: 6.30 MB
Sent: 51.6 KB

Notable observed hosts

Captured page Enlarge ↗ Martinsburg-Berkeley County Public Libraries

mbcplibraries.org

http://mbcplibraries.org

22 Oct 2026 · 04:06 UTC

Final URL

https://mbcplibraries.org/

Detection highlights

No detections reported.

Infrastructure & activity

132.148.179.97United States AS398101 GoDaddy.com, LLC

Hosts: 10
Requests: 59
Received: 7.78 MB
Sent: 45.7 KB

Notable observed hosts

http://powerballpartners.com

powerballpartners.com

22 Oct 2026 · 04:06 UTC

Captured page Enlarge ↗ 50% Off Domains

Final URL Different hostname

https://www.secureserver.net/?pl_id=542012&isc=PLPPT02003&isRedirect=1

Detection highlights

No detections reported.

Infrastructure & activity

76.223.67.189United States AS16509 Amazon.com, Inc.

Hosts: 14
Requests: 64
Received: 6.51 MB
Sent: 112.2 KB

Notable observed hosts

11 more · View hosts →

http://reshapeaesthetics.com

reshapeaesthetics.com

22 Oct 2026 · 03:58 UTC

Captured page Enlarge ↗ HOME

Final URL

https://reshapeaesthetics.com/

Detection highlights

No detections reported.

Infrastructure & activity

76.223.105.230United States AS16509 Amazon.com, Inc.

Hosts: 4
Requests: 53
Received: 1.78 MB
Sent: 28.3 KB

Notable observed hosts

Captured page Enlarge ↗ bailalert.com/lander

bailalert.com

http://bailalert.com

22 Oct 2026 · 03:50 UTC

Final URL

https://bailalert.com/lander

Detection highlights

No detections reported.

Infrastructure & activity

15.197.148.33United States AS16509 Amazon.com, Inc.

Hosts: 4
Requests: 17
Received: 857.8 KB
Sent: 9.8 KB

Notable observed hosts

Captured page Enlarge ↗ md11.online/lander

md11.online

http://md11.online

22 Oct 2026 · 03:41 UTC

Final URL

http://md11.online/lander

Detection highlights

Sinkholed DNS4EU medium severity Malicious

Infrastructure & activity

172.67.158.32zz AS13335 Cloudflare, Inc.

Hosts: 4
Requests: 18
Received: 867.3 KB
Sent: 9.8 KB

Notable observed hosts

Captured page Enlarge ↗ gianforti.com

gianforti.com

http://gianforti.com

22 Oct 2026 · 03:34 UTC

Final URL

https://gianforti.com/

Detection highlights

No detections reported.

Infrastructure & activity

13.248.243.5United States AS16509 Amazon.com, Inc.

Hosts: 7
Requests: 65
Received: 3.19 MB
Sent: 34.1 KB

Notable observed hosts

Captured page Enlarge ↗ CMD Concepts

cmdconcepts.com

http://cmdconcepts.com

22 Oct 2026 · 02:06 UTC

Final URL

https://cmdconcepts.com/

Detection highlights

No detections reported.

Infrastructure & activity

13.248.243.5United States AS16509 Amazon.com, Inc.

Hosts: 8
Requests: 68
Received: 3.59 MB
Sent: 36.2 KB

Notable observed hosts

5 more · View hosts →

Captured page Enlarge ↗ aorxpartners.com/lander

aorxpartners.com

http://aorxpartners.com

22 Oct 2026 · 01:36 UTC

Final URL

https://aorxpartners.com/lander

Detection highlights

No detections reported.

Infrastructure & activity

3.33.130.190United States AS16509 Amazon.com, Inc.

Hosts: 4
Requests: 17
Received: 858.2 KB
Sent: 9.9 KB

Notable observed hosts

http://yourpleasureshop.com

yourpleasureshop.com

22 Oct 2026 · 01:22 UTC

Captured page Enlarge ↗ Your Guide to UK Online Shopping and Fast Shipping | .Shopping

Final URL Different hostname

https://www.dot-shopping.org/articles/your-guide-to-uk-online-shopping-and-fast-shipping.html?psystem=PW&domain=yourpleasureshop.com&oref=https%3A%2F%2Fyourpleasureshop.com%2F&trafficTarget=gd

Detection highlights

Sinkholed DNS4EU medium severity Malicious

Infrastructure & activity

15.197.148.33United States AS16509 Amazon.com, Inc.

Hosts: 10
Requests: 39
Received: 756.9 KB
Sent: 32.0 KB

Notable observed hosts

Captured page Enlarge ↗ Men's Health: ED Meds and Online Consultations | .Health

techmed.app

http://techmed.app

22 Oct 2026 · 01:21 UTC

Final URL Different hostname

https://www.dot-health.org/articles/mens-health-ed-meds-and-online-consultations.html?psystem=PW&domain=techmed.app&oref=https%3A%2F%2Ftechmed.app%2F&trafficTarget=gd

Detection highlights

No detections reported.

Infrastructure & activity

3.33.130.190United States AS16509 Amazon.com, Inc.

Hosts: 10
Requests: 39
Received: 725.3 KB
Sent: 31.7 KB

Notable observed hosts

http://reeftradingllc.com

reeftradingllc.com

22 Oct 2026 · 01:20 UTC

Captured page Enlarge ↗ Home - Al Reef Tr. LLC Sole Proprietorship

Final URL

https://reeftradingllc.com/

Detection highlights

Detects SocGholish obfuscated variant first observed in July 2022 YARAhub by abuse.ch medium severity malware

Infrastructure & activity

160.153.0.154United States AS209242 Cloudflare London, LLC

Hosts: 3
Requests: 20
Received: 1.11 MB
Sent: 13.4 KB

Notable observed hosts

View hosts →

Submit tags

http://eliteportfolioresidential.com

eliteportfolioresidential.com

22 Oct 2026 · 01:19 UTC

Captured page Enlarge ↗ eliteportfolioresidential.com/lander

Final URL

http://eliteportfolioresidential.com/lander

Detection highlights

Sinkholed DNS4EU medium severity Malicious

Infrastructure & activity

15.197.148.33United States AS16509 Amazon.com, Inc.

Hosts: 4
Requests: 18
Received: 860.1 KB
Sent: 10.5 KB

Notable observed hosts

Captured page Enlarge ↗ The Gila Herald - Your trusted source for news of the Gila Valley and more.

gilaherald.com

http://gilaherald.com

21 Oct 2026 · 23:48 UTC

Final URL

https://gilaherald.com/

Detection highlights

No detections reported.

Infrastructure & activity

192.124.249.53United States AS30148 Sucuri

Hosts: 4
Requests: 34
Received: 2.57 MB
Sent: 18.6 KB

Notable observed hosts

Submit tags

Captured page Enlarge ↗ heffu.com is for sale — Buy now for $ 1 999 | GoDaddy

heffu.com

http://heffu.com

21 Oct 2026 · 23:47 UTC

Final URL Different hostname

https://forsale.godaddy.com/forsale/heffu.com?utm_source=TDFS_BINNS&utm_medium=parkedpages&utm_campaign=x_corp_tdfs-binns_base&traffic_type=TDFS_BINNS&traffic_id=binns&

Detection highlights

No detections reported.

Infrastructure & activity

76.223.54.146United States AS16509 Amazon.com, Inc.

Hosts: 7
Requests: 40
Received: 2.58 MB
Sent: 32.1 KB

Notable observed hosts

Captured page Enlarge ↗ The Gila Herald - Your trusted source for news of the Gila Valley and more.

gilaherald.com

http://gilaherald.com

21 Oct 2026 · 23:42 UTC

Final URL

https://gilaherald.com/

Detection highlights

No detections reported.

Infrastructure & activity

192.124.249.53United States AS30148 Sucuri

Hosts: 4
Requests: 37
Received: 2.60 MB
Sent: 20.7 KB

Notable observed hosts

http://convergencehealingteas.com

convergencehealingteas.com

21 Oct 2026 · 23:39 UTC

Captured page Enlarge ↗ Home -

Final URL Different hostname

https://convergencehealing.com/

Detection highlights

No detections reported.

Infrastructure & activity

3.33.152.147United States AS16509 Amazon.com, Inc.

Hosts: 16
Requests: 70
Received: 7.34 MB
Sent: 58.0 KB

Notable observed hosts

13 more · View hosts →

Submit tags