Flows: 43k to the malicious host, 14 various scams including finance, healthcare, non-profit, -e-commerce phishing. In total 3127 domains as per passive DNS bond to the server. Inspected 198 domains, at least 147 newly proved and detected as a scam by TM. 34 blocked already by most of AV vendors.

Referrers: 251 urls from 27 domains, pointing to the malicious host with tracked traffic, in total 1178 urls connected to the host, having 264 different user agents.