ipv4

172.67.188.32

discovered 2026-07-09

Cloudflare anycast address in passive DNS for api.348672-shakepay.com. Source frames this as origin-hiding, NOT the true attacker origin IP. Low value in isolation.