Takedown Operations

Total Requests

Drafts

awaiting send

In Flight

sent / acked

Actioned

Success Rate

of sent requests

Avg Time to Action

—

Takedown Pipeline

Draft

→

Sent

→

Acknowledged

→

Actioned

→

Closed

Requests Over Time (30d)

By Target Type

Abuse Contact Performance

Abuse Contact	Requests	Rate
`trustandsafety@support.aws.com`	2	0%
`abuse@tech-ties.net`	1	0%
`net-admin@eonix.net`	1	0%
`abuse@digitalocean.com`	1	0%
`abuse@microsoft.com`	1	0%
`abuse@namecheap.com`	1	0%
`abuse-reports@vpnconsumer.com`	1	0%
`abuse@cloudflare.com`	1	0%
`abuse@modat.io'`	1	0%
`search-apnic-not-arin@apnic.net`	1	0%
`abuse@ripe.net`	1	0%
`google-cloud-compliance@google.com`	1	0%

Takedown Toolchain

Bulk Takedown Link Analysis ASN Analysis Infra Lookup DNS Audit Legal Escalation Cases WHOIS cache: 14,082 records

Abuse Contact Discovery

🔄 Pivot:🏢 Privacy Provided 🌎 IS

WHOIS Intelligence — `intersfrom.rest`

Registrar	NAMECHEAP INC
Abuse Email	`abuse@namecheap.com`
Organization	Privacy Provided
Country	IS
Name Servers	`dalary.ns.cloudflare.com, jermaine.ns.cloudflare.com`

Draft Requests by Target

REGISTRAR NAMECHEAP INC

To: abuse@namecheap.com
Date: 2026-08-23
Subject: Abuse Report / Takedown Request: intersfrom.rest

To whom it may concern,

We are reporting malicious activity associated with the following indicator, which is using your domain registration:

  Indicator: intersfrom.rest
  Organization: Privacy service provided by Withheld for Privacy ehf
  Registrar: NAMECHEAP INC
  Observed: threat intelligence correlation across multiple sources
  Report date: 2026-08-23

This indicator has been identified as associated with malicious activity (malware, phishing, C2, or fraud). Please investigate and take appropriate action per your acceptable use policy.

Please provide a reference/ticket number for tracking.

Regards,
Threat Intelligence Platform
Threat Intelligence & Abuse Operations

HOSTING Privacy service provided by Withheld for Privacy ehf

To: abuse@namecheap.com
Date: 2026-08-23
Subject: Abuse Report / Takedown Request: intersfrom.rest

To whom it may concern,

We are reporting malicious activity associated with the following indicator, which is using your hosting service:

  Indicator: intersfrom.rest
  Organization: Privacy service provided by Withheld for Privacy ehf
  Registrar: NAMECHEAP INC
  Observed: threat intelligence correlation across multiple sources
  Report date: 2026-08-23

This indicator has been identified as associated with malicious activity (malware, phishing, C2, or fraud). Please investigate and take appropriate action per your acceptable use policy.

Please provide a reference/ticket number for tracking.

Regards,
Threat Intelligence Platform
Threat Intelligence & Abuse Operations

NETWORK (network operator)

To: abuse@namecheap.com
Date: 2026-08-23
Subject: Abuse Report / Takedown Request: intersfrom.rest

To whom it may concern,

We are reporting malicious activity associated with the following indicator, which is using your network / ASN:

  Indicator: intersfrom.rest
  Organization: Privacy service provided by Withheld for Privacy ehf
  Registrar: NAMECHEAP INC
  Observed: threat intelligence correlation across multiple sources
  Report date: 2026-08-23

This indicator has been identified as associated with malicious activity (malware, phishing, C2, or fraud). Please investigate and take appropriate action per your acceptable use policy.

Please provide a reference/ticket number for tracking.

Regards,
Threat Intelligence Platform
Threat Intelligence & Abuse Operations

NAMESERVER dalary.ns.cloudflare.com, jermaine.ns.cloudflare.com

To: abuse@namecheap.com
Date: 2026-08-23
Subject: Abuse Report / Takedown Request: intersfrom.rest

To whom it may concern,

We are reporting malicious activity associated with the following indicator, which is using your DNS / name servers:

  Indicator: intersfrom.rest
  Organization: Privacy service provided by Withheld for Privacy ehf
  Registrar: NAMECHEAP INC
  Observed: threat intelligence correlation across multiple sources
  Report date: 2026-08-23

This indicator has been identified as associated with malicious activity (malware, phishing, C2, or fraud). Please investigate and take appropriate action per your acceptable use policy.

Please provide a reference/ticket number for tracking.

Regards,
Threat Intelligence Platform
Threat Intelligence & Abuse Operations

Request Tracker & Workflow

Indicator	Target	Contact	Created
`AS4766 (20 indicators)`	NETWORK	-	8h ago
`AS174 (31 indicators)`	NETWORK	-	1d ago
`AS13445 (22 indicators)`	NETWORK	-	1d ago
`AS16276 (21 indicators)`	NETWORK	-	1d ago
`AS9009 (20 indicators)`	NETWORK	-	1d ago
`AS46475 (19 indicators)`	NETWORK	-	1d ago
`AS34665 (19 indicators)`	NETWORK	-	1d ago
`AS24560 (17 indicators)`	NETWORK	-	1d ago
`AS212238 (17 indicators)`	NETWORK	-	1d ago
`AS205565 (15 indicators)`	NETWORK	-	1d ago
`AS200373 (37 indicators)`	NETWORK	-	1d ago
`AS55286 (29 indicators)`	NETWORK	-	1d ago
`AS36352 (28 indicators)`	NETWORK	-	1d ago
`AS10439 (27 indicators)`	NETWORK	-	1d ago
`AS58065 (23 indicators)`	NETWORK	-	1d ago
`AS206092 (43 indicators)`	NETWORK	-	1d ago
`AS396982 (60 indicators)`	NETWORK	-	1d ago
`RIPE Network Coordination Centre (41…`	HOSTING	abuse@ripe.net	Aug 15, 2026
`Domains By Proxy, LLC (240 indicator…`	HOSTING	abuse@wildwestdomains.com	Aug 15, 2026
`REDACTED FOR PRIVACY (183 indicators…`	HOSTING	westabuse@gmail.com	Aug 15, 2026
`Censys, Inc. (140 indicators)`	HOSTING	scan-abuse@censys.io	Aug 15, 2026
`Registrant Street: 5335 Gate Parkway…`	HOSTING	domain.operations@web.com	Aug 15, 2026
`TechTies Inc. (111 indicators)`	HOSTING	abuse@tech-ties.net	Aug 15, 2026
`DigitalOcean, LLC (90 indicators)`	HOSTING	abuse@digitalocean.com	Aug 15, 2026
`Privacy service provided by Withheld…`	HOSTING	abuse@namecheap.com	Aug 15, 2026
`Cloudflare, Inc. (46 indicators)`	HOSTING	abuse@cloudflare.com	Aug 15, 2026
`Modat B.V. (41 indicators)`	HOSTING	abuse@modat.io'	Aug 15, 2026
`Asia Pacific Network Information Cen…`	HOSTING	search-apnic-not-arin@apnic.net	Aug 15, 2026
`Google LLC (29 indicators)`	HOSTING	google-cloud-compliance@google.com	Aug 15, 2026
`Private Customer (28 indicators)`	HOSTING	support@howickdigital.com	Aug 15, 2026
`African Network Information Center (…`	HOSTING	abusepoc@afrinic.net	Aug 15, 2026
`Amazon Technologies Inc. (27 indicat…`	HOSTING	trustandsafety@support.aws.com	Aug 15, 2026
`Super Privacy Service LTD c/o Dynado…`	HOSTING	abuse@dynadot.com	Aug 15, 2026
`Eonix Corporation (26 indicators)`	HOSTING	net-admin@eonix.net	Aug 15, 2026
`Microsoft Corporation (25 indicators…`	HOSTING	abuse@microsoft.com	Aug 15, 2026
`c/o whoisproxy.com (20 indicators)`	HOSTING	trustandsafety@support.aws.com	Aug 15, 2026
`LayerSwitch B.V. (19 indicators)`	HOSTING	abuse-reports@vpnconsumer.com	Aug 15, 2026
`AS4134 (44 indicators)`	NETWORK	-	Aug 13, 2026
`AS16509 (35 indicators)`	NETWORK	-	Aug 13, 2026
`AS61317 (19 indicators)`	NETWORK	-	Aug 13, 2026
`AS13335 (17 indicators)`	NETWORK	-	Aug 13, 2026
`AS14618 (15 indicators)`	NETWORK	-	Aug 13, 2026

Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports

🤖 AI Copilot

💡 Recommendations

⚙ Automation

Auto-draft top providers

Cron: 0 * * * * php /home/zaptf0zdggll/public_html/threats/cron.php

📜 Playbook

Open Response Playbook

🔗 Related Tools

Bulk Takedown Link Analysis Legal

Total Requests

Drafts

In Flight

Actioned

Success Rate

Avg Time to Action

Takedown Pipeline

Requests Over Time (30d)

By Target Type

Abuse Contact Performance

Takedown Toolchain

Abuse Contact Discovery

WHOIS Intelligence — intersfrom.rest

Draft Requests by Target

Request Tracker & Workflow

🤖 AI Copilot

⚡ AI Skills

🔍 Lookup & Enrich

📚 Docs & Reports

💡 Recommendations

⚙ Automation

📜 Playbook

🔗 Related Tools

WHOIS Intelligence — `intersfrom.rest`