http://2332lbt55y2sh2mmlusktrhwd23mvw2ptimgg623sr6h3ywzpnoe2qqd.onion/indexmain.php
The email headers, when analyzed, revealed details about the hidden server’s origin—specifically its real IP address, and that it was hosted in Germany. Once that internal addressing information was exposed, adversaries launched tests—most notably DDoS attacks—against the revealed IP.