Hey, I ran across this server 93.185.167.73 with a bunch of CW/SC sites via censys.io
https://search.censys.io/hosts/93.185.167.73/data/table
adrcare.help
afdcare.help
bapcare.help
burcare.help
cfgcare.help
cjrcare.help
cvgcare.help
ddycare.help
dnfcare.help
epfcare.help
etdcare.help
ezucare.help
fpzcare.help
fqhcare.help
fskcare.help
gcwcare.help
gmjcare.help
hbjcare.help
ijvcare.help
itwcare.help
jkrcare.help
jtfcare.help
krycare.help
krzcare.help
lpwcare.help
lsfcare.help
mgecare.help
mrtcare.help
nbdcare.help
nfucare.help
oktcare.help
oxfcare.help
pcdcare.help
pmycare.help
qmrcare.help
qrdcare.help
rwacare.help
rwzcare.help
sdrcare.help
svecare.help
tcxcare.help
tmpcare.help
upqcare.help
uywcare.help
vhfcare.help
vzgcare.help
wsacare.help
wspcare.help
xptcare.help
xspcare.help
yqdcare.help
yvucare.help
interesting:
some of them only have a download / cancel button with different logos (Mcaffe, paypal…) and they all try to grab the CW installer via https://atbhu-25.top/
Some with a normal code and variations of “companies”
thought I’d share that maybe someone can work with it
「いいね！」 3
Excellent!! Just copied the link and it brought up a bunch of CW sites. Great work!
「いいね！」 2
thanks, I also found a new site design there (will add it to the clone script).
if you run across a new site that is not hosted on cloudflare we can grab the IP of the server and find some more
「いいね！」 1
here’s a small script we can run that checks a list of CW/SC sites for the IP, I will let it run a bunch of the sites we already found.
It creates a list of non-cloudflare servers extracted from the CW/SC sites and stores it to server.txt
if a new non-cloudflare server was found in another scan it will prompt the new server and add it (so we can check it via censys.io for more sites)
pip install ipwhois
script:
import socket
import os
import re
from ipwhois import IPWhois
from ipwhois.exceptions import IPDefinedError
script_name = os.path.splitext(os.path.basename(__file__))[0]
output_file = f"{script_name}.txt"
servers_file = "servers.txt"
def load_known_servers():
if not os.path.exists(servers_file):
return set(), []
with open(servers_file, "r") as f:
lines = [line.strip() for line in f if line.strip() and not line.startswith("New Servers:") and not line.startswith("Known Servers:")]
return set(lines), lines
def save_servers(new_entries, known_entries):
seen = set()
deduped = []
for entry in new_entries + known_entries:
if entry not in seen:
deduped.append(entry)
seen.add(entry)
with open(servers_file, "w") as f:
if new_entries:
f.write("New Servers:\n")
for line in new_entries:
f.write(f"{line}\n")
f.write("\n")
f.write("Known Servers:\n")
for line in deduped:
f.write(f"{line}\n")
print("Paste your list of domains or URLs below (one per line).")
print("When done, press Enter on an empty line to start:")
domains = []
while True:
line = input()
if line.strip() == "":
break
cleaned = re.sub(r'^https?://', '', line.strip())
cleaned = cleaned.split('/')[0]
domains.append(cleaned)
print(f"\nResolving {len(domains)} domains and checking ASN info...\n")
results = []
known_server_set, known_server_list = load_known_servers()
new_servers = []
for domain in domains:
try:
ip = socket.gethostbyname(domain)
try:
obj = IPWhois(ip)
details = obj.lookup_rdap()
asn = details.get("asn", "N/A")
org = details.get("network", {}).get("name", "N/A")
server_line = f"{ip} | ASN: {asn} | Org: {org}"
if org and "cloudflare" in org.lower():
tag = "(Cloudflare – not helpful)"
else:
tag = "(Likely reverse-searchable)"
if server_line not in known_server_set:
print(f"\n🆕 New server found: {server_line}")
new_servers.append(server_line)
known_server_set.add(server_line)
print(f"{domain}: {ip} | ASN: {asn} | Org: {org} {tag}")
results.append(f"{domain}: {ip} | ASN: {asn} | Org: {org} {tag}")
except IPDefinedError:
print(f"{domain}: {ip} | ASN: Private IP range (ignored)")
results.append(f"{domain}: {ip} | ASN: Private IP range (ignored)")
except Exception as e:
print(f"{domain}: {ip} | ASN lookup failed: {str(e)}")
results.append(f"{domain}: {ip} | ASN lookup failed")
except socket.gaierror:
print(f"{domain}: Failed to resolve")
results.append(f"{domain}: Failed to resolve")
with open(output_file, "w") as f:
f.write("\n".join(results))
if new_servers:
save_servers(new_servers, known_server_list)
print(f"\n{len(new_servers)} new server(s) added to 'servers.txt'")
else:
print("\nNo new servers found.")
print(f"\nScan complete. Results saved to '{output_file}' and 'servers.txt'")
# Pause at end
input("\nPress Enter to exit...")
here’s are some we already found:
Known Servers:
93.185.167.73 | ASN: 200019 | Org: AlexHost
37.221.67.82 | ASN: 200019 | Org: AlexHost
91.208.206.62 | ASN: 200019 | Org: MD-ALEXHOST-20191107
85.239.34.103 | ASN: 200019 | Org: AlexHost
37.221.64.246 | ASN: 200019 | Org: AlexHost
「いいね！」 1
