Takedown Operations

Total Requests

Drafts

awaiting send

In Flight

sent / acked

Actioned

Success Rate

of sent requests

Avg Time to Action

—

Takedown Pipeline

Draft

→

Sent

→

Acknowledged

→

Actioned

→

Closed

Requests Over Time (30d)

By Target Type

Abuse Contact Performance

Abuse Contact	Requests	Rate
`trustandsafety@support.aws.com`	2	0%
`abuse@cloudflare.com`	1	0%
`csg-network@cisco.com`	1	0%
`abuse@modat.io'`	1	0%
`info@finegroupservers.com`	1	0%
`search-apnic-not-arin@apnic.net`	1	0%
`abuse@domru.ru`	1	0%
`abuse@ripe.net`	1	0%
`google-cloud-compliance@google.com`	1	0%
`abuse@lacnic.net`	1	0%
`abuse@wildwestdomains.com`	1	0%
`support@howickdigital.com`	1	0%

Takedown Toolchain

Bulk Takedown Link Analysis ASN Analysis Infra Lookup DNS Audit Legal Escalation Cases WHOIS cache: 16,205 records

Abuse Contact Discovery

WHOIS Intelligence — `z.hi`

Registrar	Unknown
Abuse Email	`Not found`
Organization	Unknown
Country	-

Draft Requests by Target

REGISTRAR (unknown registrar)

To: [abuse contact]
Date: 2026-08-24
Subject: Abuse Report / Takedown Request: z.hi

To whom it may concern,

We are reporting malicious activity associated with the following indicator, which is using your domain registration:

  Indicator: z.hi
  Observed: threat intelligence correlation across multiple sources
  Report date: 2026-08-24

This indicator has been identified as associated with malicious activity (malware, phishing, C2, or fraud). Please investigate and take appropriate action per your acceptable use policy.

Please provide a reference/ticket number for tracking.

Regards,
Threat Intelligence Platform
Threat Intelligence & Abuse Operations

HOSTING (hosting provider)

To: [abuse contact]
Date: 2026-08-24
Subject: Abuse Report / Takedown Request: z.hi

To whom it may concern,

We are reporting malicious activity associated with the following indicator, which is using your hosting service:

  Indicator: z.hi
  Observed: threat intelligence correlation across multiple sources
  Report date: 2026-08-24

This indicator has been identified as associated with malicious activity (malware, phishing, C2, or fraud). Please investigate and take appropriate action per your acceptable use policy.

Please provide a reference/ticket number for tracking.

Regards,
Threat Intelligence Platform
Threat Intelligence & Abuse Operations

NETWORK (network operator)

To: [abuse contact]
Date: 2026-08-24
Subject: Abuse Report / Takedown Request: z.hi

To whom it may concern,

We are reporting malicious activity associated with the following indicator, which is using your network / ASN:

  Indicator: z.hi
  Observed: threat intelligence correlation across multiple sources
  Report date: 2026-08-24

This indicator has been identified as associated with malicious activity (malware, phishing, C2, or fraud). Please investigate and take appropriate action per your acceptable use policy.

Please provide a reference/ticket number for tracking.

Regards,
Threat Intelligence Platform
Threat Intelligence & Abuse Operations

NAMESERVER (name servers)

To: [abuse contact]
Date: 2026-08-24
Subject: Abuse Report / Takedown Request: z.hi

To whom it may concern,

We are reporting malicious activity associated with the following indicator, which is using your DNS / name servers:

  Indicator: z.hi
  Observed: threat intelligence correlation across multiple sources
  Report date: 2026-08-24

This indicator has been identified as associated with malicious activity (malware, phishing, C2, or fraud). Please investigate and take appropriate action per your acceptable use policy.

Please provide a reference/ticket number for tracking.

Regards,
Threat Intelligence Platform
Threat Intelligence & Abuse Operations

Request Tracker & Workflow

Indicator	Target	Contact	Created
`ns2.bdm.microsoftonline.com (22 indi…`	NAMESERVER	-	5h ago
`ns3.bdm.microsoftonline.com (22 indi…`	NAMESERVER	-	5h ago
`ns4.bdm.microsoftonline.com (22 indi…`	NAMESERVER	-	5h ago
`ns1.afternic.com (21 indicators)`	NAMESERVER	-	5h ago
`ns2.afternic.com (21 indicators)`	NAMESERVER	-	5h ago
`ns1.dns-parking.com (20 indicators)`	NAMESERVER	-	5h ago
`ns10.dnsmadeeasy.com (20 indicators)`	NAMESERVER	-	5h ago
`ns11.dnsmadeeasy.com (20 indicators)`	NAMESERVER	-	5h ago
`ns12.dnsmadeeasy.com (20 indicators)`	NAMESERVER	-	5h ago
`ns13.dnsmadeeasy.com (20 indicators)`	NAMESERVER	-	5h ago
`ns14.dnsmadeeasy.com (20 indicators)`	NAMESERVER	-	5h ago
`ns15.dnsmadeeasy.com (20 indicators)`	NAMESERVER	-	5h ago
`ns2.dns-parking.com (20 indicators)`	NAMESERVER	-	5h ago
`nsg1.namebrightdns.com (19 indicator…`	NAMESERVER	-	5h ago
`nsg2.namebrightdns.com (19 indicator…`	NAMESERVER	-	5h ago
`Cisco Webex LLC (94 indicators)`	HOSTING	csg-network@cisco.com	5h ago
`FINE GROUP SERVERS SOLUTIONS LLC (89…`	HOSTING	info@finegroupservers.com	5h ago
`JSC "ER-Telecom Holding" Cheboksary …`	HOSTING	abuse@domru.ru	5h ago
`Latin American and Caribbean IP addr…`	HOSTING	abuse@lacnic.net	5h ago
`dante.ns.cloudflare.com (43 indicato…`	NAMESERVER	-	5h ago
`mimi.ns.cloudflare.com (43 indicator…`	NAMESERVER	-	5h ago
`dns1.registrar-servers.com (26 indic…`	NAMESERVER	-	5h ago
`dns2.registrar-servers.com (26 indic…`	NAMESERVER	-	5h ago
`ns1.bdm.microsoftonline.com (22 indi…`	NAMESERVER	-	5h ago
`African Network Information Center -…`	HOSTING	-	5h ago
`AS4766 (20 indicators)`	NETWORK	-	1d ago
`AS174 (31 indicators)`	NETWORK	-	2d ago
`AS13445 (22 indicators)`	NETWORK	-	3d ago
`AS16276 (21 indicators)`	NETWORK	-	3d ago
`AS9009 (20 indicators)`	NETWORK	-	3d ago
`AS46475 (19 indicators)`	NETWORK	-	3d ago
`AS34665 (19 indicators)`	NETWORK	-	3d ago
`AS24560 (17 indicators)`	NETWORK	-	3d ago
`AS212238 (17 indicators)`	NETWORK	-	3d ago
`AS205565 (15 indicators)`	NETWORK	-	3d ago
`AS200373 (37 indicators)`	NETWORK	-	3d ago
`AS55286 (29 indicators)`	NETWORK	-	3d ago
`AS36352 (28 indicators)`	NETWORK	-	3d ago
`AS10439 (27 indicators)`	NETWORK	-	3d ago
`AS58065 (23 indicators)`	NETWORK	-	3d ago
`AS206092 (43 indicators)`	NETWORK	-	3d ago
`AS396982 (60 indicators)`	NETWORK	-	3d ago
`RIPE Network Coordination Centre (41…`	HOSTING	abuse@ripe.net	Aug 15, 2026
`Domains By Proxy, LLC (240 indicator…`	HOSTING	abuse@wildwestdomains.com	Aug 15, 2026
`REDACTED FOR PRIVACY (183 indicators…`	HOSTING	westabuse@gmail.com	Aug 15, 2026
`Censys, Inc. (140 indicators)`	HOSTING	scan-abuse@censys.io	Aug 15, 2026
`Registrant Street: 5335 Gate Parkway…`	HOSTING	domain.operations@web.com	Aug 15, 2026
`TechTies Inc. (111 indicators)`	HOSTING	abuse@tech-ties.net	Aug 15, 2026
`DigitalOcean, LLC (90 indicators)`	HOSTING	abuse@digitalocean.com	Aug 15, 2026
`Privacy service provided by Withheld…`	HOSTING	abuse@namecheap.com	Aug 15, 2026
`Cloudflare, Inc. (46 indicators)`	HOSTING	abuse@cloudflare.com	Aug 15, 2026
`Modat B.V. (41 indicators)`	HOSTING	abuse@modat.io'	Aug 15, 2026
`Asia Pacific Network Information Cen…`	HOSTING	search-apnic-not-arin@apnic.net	Aug 15, 2026
`Google LLC (29 indicators)`	HOSTING	google-cloud-compliance@google.com	Aug 15, 2026
`Private Customer (28 indicators)`	HOSTING	support@howickdigital.com	Aug 15, 2026
`African Network Information Center (…`	HOSTING	abusepoc@afrinic.net	Aug 15, 2026
`Amazon Technologies Inc. (27 indicat…`	HOSTING	trustandsafety@support.aws.com	Aug 15, 2026
`Super Privacy Service LTD c/o Dynado…`	HOSTING	abuse@dynadot.com	Aug 15, 2026
`Eonix Corporation (26 indicators)`	HOSTING	net-admin@eonix.net	Aug 15, 2026
`Microsoft Corporation (25 indicators…`	HOSTING	abuse@microsoft.com	Aug 15, 2026
`c/o whoisproxy.com (20 indicators)`	HOSTING	trustandsafety@support.aws.com	Aug 15, 2026
`LayerSwitch B.V. (19 indicators)`	HOSTING	abuse-reports@vpnconsumer.com	Aug 15, 2026
`AS4134 (44 indicators)`	NETWORK	-	Aug 13, 2026
`AS16509 (35 indicators)`	NETWORK	-	Aug 13, 2026
`AS61317 (19 indicators)`	NETWORK	-	Aug 13, 2026
`AS13335 (17 indicators)`	NETWORK	-	Aug 13, 2026
`AS14618 (15 indicators)`	NETWORK	-	Aug 13, 2026

Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports

🤖 AI Copilot

💡 Recommendations

⚙ Automation

Auto-draft top providers

Cron: 0 * * * * php /home/zaptf0zdggll/public_html/threats/cron.php

📜 Playbook

Open Response Playbook

🔗 Related Tools

Bulk Takedown Link Analysis Legal

Total Requests

Drafts

In Flight

Actioned

Success Rate

Avg Time to Action

Takedown Pipeline

Requests Over Time (30d)

By Target Type

Abuse Contact Performance

Takedown Toolchain

Abuse Contact Discovery

WHOIS Intelligence — z.hi

Draft Requests by Target

Request Tracker & Workflow

🤖 AI Copilot

⚡ AI Skills

🔍 Lookup & Enrich

📚 Docs & Reports

💡 Recommendations

⚙ Automation

📜 Playbook

🔗 Related Tools

WHOIS Intelligence — `z.hi`