A brand-new, empty website that nobody was told about. Within hours, bots arrive hunting for leaked passwords and admin pages. Every square lights up when a bot hunts for it today. Live, updated every 30 seconds.
The decoy serves fake files only; nothing real is behind it. No IP addresses are stored or shown: just country, network name, what was asked for and the tool's name. Countries come from where the bot's server sits, usually a cloud data centre, not the person behind it.