Takedown Operations

Total Requests

Drafts

awaiting send

In Flight

sent / acked

Actioned

Success Rate

of sent requests

Avg Time to Action

—

Takedown Pipeline

Draft

→

Sent

→

Acknowledged

→

Actioned

→

Closed

Requests Over Time (30d)

By Target Type

Abuse Contact Performance

Abuse Contact	Requests	Rate
`trustandsafety@support.aws.com`	2	0%
`abuse@cloudflare.com`	1	0%
`csg-network@cisco.com`	1	0%
`abuse@modat.io'`	1	0%
`info@finegroupservers.com`	1	0%
`search-apnic-not-arin@apnic.net`	1	0%
`abuse@domru.ru`	1	0%
`abuse@ripe.net`	1	0%
`google-cloud-compliance@google.com`	1	0%
`abuse@lacnic.net`	1	0%
`abuse@wildwestdomains.com`	1	0%
`support@howickdigital.com`	1	0%

Takedown Toolchain

Bulk Takedown Link Analysis ASN Analysis Infra Lookup DNS Audit Legal Escalation Cases WHOIS cache: 16,170 records

Abuse Contact Discovery

🔄 Pivot:🌐 AS57026 🏢 Jsc Er-🌎 RU

WHOIS Intelligence — `5.167.71.169`

Registrar	Unknown
Abuse Email	`abuse@domru.ru`
Organization	Jsc Er-
Country	RU

Draft Requests by Target

REGISTRAR (unknown registrar)

To: abuse@domru.ru
Date: 2026-08-24
Subject: Abuse Report / Takedown Request: 5.167.71.169

To whom it may concern,

We are reporting malicious activity associated with the following indicator, which is using your domain registration:

  Indicator: 5.167.71.169
  Organization: JSC "ER-Telecom Holding" Cheboksary Branch
  ASN: AS57026
  Observed: threat intelligence correlation across multiple sources
  Report date: 2026-08-24

This indicator has been identified as associated with malicious activity (malware, phishing, C2, or fraud). Please investigate and take appropriate action per your acceptable use policy.

Please provide a reference/ticket number for tracking.

Regards,
Threat Intelligence Platform
Threat Intelligence & Abuse Operations

HOSTING JSC "ER-Telecom Holding" Cheboksary Branch

To: abuse@domru.ru
Date: 2026-08-24
Subject: Abuse Report / Takedown Request: 5.167.71.169

To whom it may concern,

We are reporting malicious activity associated with the following indicator, which is using your hosting service:

  Indicator: 5.167.71.169
  Organization: JSC "ER-Telecom Holding" Cheboksary Branch
  ASN: AS57026
  Observed: threat intelligence correlation across multiple sources
  Report date: 2026-08-24

This indicator has been identified as associated with malicious activity (malware, phishing, C2, or fraud). Please investigate and take appropriate action per your acceptable use policy.

Please provide a reference/ticket number for tracking.

Regards,
Threat Intelligence Platform
Threat Intelligence & Abuse Operations

NETWORK AS57026

To: abuse@domru.ru
Date: 2026-08-24
Subject: Abuse Report / Takedown Request: 5.167.71.169

To whom it may concern,

We are reporting malicious activity associated with the following indicator, which is using your network / ASN:

  Indicator: 5.167.71.169
  Organization: JSC "ER-Telecom Holding" Cheboksary Branch
  ASN: AS57026
  Observed: threat intelligence correlation across multiple sources
  Report date: 2026-08-24

This indicator has been identified as associated with malicious activity (malware, phishing, C2, or fraud). Please investigate and take appropriate action per your acceptable use policy.

Please provide a reference/ticket number for tracking.

Regards,
Threat Intelligence Platform
Threat Intelligence & Abuse Operations

NAMESERVER (name servers)

To: abuse@domru.ru
Date: 2026-08-24
Subject: Abuse Report / Takedown Request: 5.167.71.169

To whom it may concern,

We are reporting malicious activity associated with the following indicator, which is using your DNS / name servers:

  Indicator: 5.167.71.169
  Organization: JSC "ER-Telecom Holding" Cheboksary Branch
  ASN: AS57026
  Observed: threat intelligence correlation across multiple sources
  Report date: 2026-08-24

This indicator has been identified as associated with malicious activity (malware, phishing, C2, or fraud). Please investigate and take appropriate action per your acceptable use policy.

Please provide a reference/ticket number for tracking.

Regards,
Threat Intelligence Platform
Threat Intelligence & Abuse Operations

Request Tracker & Workflow

Indicator	Target	Contact	Created
`ns2.bdm.microsoftonline.com (22 indi…`	NAMESERVER	-	5h ago
`ns3.bdm.microsoftonline.com (22 indi…`	NAMESERVER	-	5h ago
`ns4.bdm.microsoftonline.com (22 indi…`	NAMESERVER	-	5h ago
`ns1.afternic.com (21 indicators)`	NAMESERVER	-	5h ago
`ns2.afternic.com (21 indicators)`	NAMESERVER	-	5h ago
`ns1.dns-parking.com (20 indicators)`	NAMESERVER	-	5h ago
`ns10.dnsmadeeasy.com (20 indicators)`	NAMESERVER	-	5h ago
`ns11.dnsmadeeasy.com (20 indicators)`	NAMESERVER	-	5h ago
`ns12.dnsmadeeasy.com (20 indicators)`	NAMESERVER	-	5h ago
`ns13.dnsmadeeasy.com (20 indicators)`	NAMESERVER	-	5h ago
`ns14.dnsmadeeasy.com (20 indicators)`	NAMESERVER	-	5h ago
`ns15.dnsmadeeasy.com (20 indicators)`	NAMESERVER	-	5h ago
`ns2.dns-parking.com (20 indicators)`	NAMESERVER	-	5h ago
`nsg1.namebrightdns.com (19 indicator…`	NAMESERVER	-	5h ago
`nsg2.namebrightdns.com (19 indicator…`	NAMESERVER	-	5h ago
`Cisco Webex LLC (94 indicators)`	HOSTING	csg-network@cisco.com	5h ago
`FINE GROUP SERVERS SOLUTIONS LLC (89…`	HOSTING	info@finegroupservers.com	5h ago
`JSC "ER-Telecom Holding" Cheboksary …`	HOSTING	abuse@domru.ru	5h ago
`Latin American and Caribbean IP addr…`	HOSTING	abuse@lacnic.net	5h ago
`dante.ns.cloudflare.com (43 indicato…`	NAMESERVER	-	5h ago
`mimi.ns.cloudflare.com (43 indicator…`	NAMESERVER	-	5h ago
`dns1.registrar-servers.com (26 indic…`	NAMESERVER	-	5h ago
`dns2.registrar-servers.com (26 indic…`	NAMESERVER	-	5h ago
`ns1.bdm.microsoftonline.com (22 indi…`	NAMESERVER	-	5h ago
`African Network Information Center -…`	HOSTING	-	5h ago
`AS4766 (20 indicators)`	NETWORK	-	1d ago
`AS174 (31 indicators)`	NETWORK	-	2d ago
`AS13445 (22 indicators)`	NETWORK	-	3d ago
`AS16276 (21 indicators)`	NETWORK	-	3d ago
`AS9009 (20 indicators)`	NETWORK	-	3d ago
`AS46475 (19 indicators)`	NETWORK	-	3d ago
`AS34665 (19 indicators)`	NETWORK	-	3d ago
`AS24560 (17 indicators)`	NETWORK	-	3d ago
`AS212238 (17 indicators)`	NETWORK	-	3d ago
`AS205565 (15 indicators)`	NETWORK	-	3d ago
`AS200373 (37 indicators)`	NETWORK	-	3d ago
`AS55286 (29 indicators)`	NETWORK	-	3d ago
`AS36352 (28 indicators)`	NETWORK	-	3d ago
`AS10439 (27 indicators)`	NETWORK	-	3d ago
`AS58065 (23 indicators)`	NETWORK	-	3d ago
`AS206092 (43 indicators)`	NETWORK	-	3d ago
`AS396982 (60 indicators)`	NETWORK	-	3d ago
`RIPE Network Coordination Centre (41…`	HOSTING	abuse@ripe.net	Aug 15, 2026
`Domains By Proxy, LLC (240 indicator…`	HOSTING	abuse@wildwestdomains.com	Aug 15, 2026
`REDACTED FOR PRIVACY (183 indicators…`	HOSTING	westabuse@gmail.com	Aug 15, 2026
`Censys, Inc. (140 indicators)`	HOSTING	scan-abuse@censys.io	Aug 15, 2026
`Registrant Street: 5335 Gate Parkway…`	HOSTING	domain.operations@web.com	Aug 15, 2026
`TechTies Inc. (111 indicators)`	HOSTING	abuse@tech-ties.net	Aug 15, 2026
`DigitalOcean, LLC (90 indicators)`	HOSTING	abuse@digitalocean.com	Aug 15, 2026
`Privacy service provided by Withheld…`	HOSTING	abuse@namecheap.com	Aug 15, 2026
`Cloudflare, Inc. (46 indicators)`	HOSTING	abuse@cloudflare.com	Aug 15, 2026
`Modat B.V. (41 indicators)`	HOSTING	abuse@modat.io'	Aug 15, 2026
`Asia Pacific Network Information Cen…`	HOSTING	search-apnic-not-arin@apnic.net	Aug 15, 2026
`Google LLC (29 indicators)`	HOSTING	google-cloud-compliance@google.com	Aug 15, 2026
`Private Customer (28 indicators)`	HOSTING	support@howickdigital.com	Aug 15, 2026
`African Network Information Center (…`	HOSTING	abusepoc@afrinic.net	Aug 15, 2026
`Amazon Technologies Inc. (27 indicat…`	HOSTING	trustandsafety@support.aws.com	Aug 15, 2026
`Super Privacy Service LTD c/o Dynado…`	HOSTING	abuse@dynadot.com	Aug 15, 2026
`Eonix Corporation (26 indicators)`	HOSTING	net-admin@eonix.net	Aug 15, 2026
`Microsoft Corporation (25 indicators…`	HOSTING	abuse@microsoft.com	Aug 15, 2026
`c/o whoisproxy.com (20 indicators)`	HOSTING	trustandsafety@support.aws.com	Aug 15, 2026
`LayerSwitch B.V. (19 indicators)`	HOSTING	abuse-reports@vpnconsumer.com	Aug 15, 2026
`AS4134 (44 indicators)`	NETWORK	-	Aug 13, 2026
`AS16509 (35 indicators)`	NETWORK	-	Aug 13, 2026
`AS61317 (19 indicators)`	NETWORK	-	Aug 13, 2026
`AS13335 (17 indicators)`	NETWORK	-	Aug 13, 2026
`AS14618 (15 indicators)`	NETWORK	-	Aug 13, 2026

Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports

🤖 AI Copilot

💡 Recommendations

⚙ Automation

Auto-draft top providers

Cron: 0 * * * * php /home/zaptf0zdggll/public_html/threats/cron.php

📜 Playbook

Open Response Playbook

🔗 Related Tools

Bulk Takedown Link Analysis Legal

Total Requests

Drafts

In Flight

Actioned

Success Rate

Avg Time to Action

Takedown Pipeline

Requests Over Time (30d)

By Target Type

Abuse Contact Performance

Takedown Toolchain

Abuse Contact Discovery

WHOIS Intelligence — 5.167.71.169

Draft Requests by Target

Request Tracker & Workflow

🤖 AI Copilot

⚡ AI Skills

🔍 Lookup & Enrich

📚 Docs & Reports

💡 Recommendations

⚙ Automation

📜 Playbook

🔗 Related Tools

WHOIS Intelligence — `5.167.71.169`