I dug deeper than @slimszi
Allow me to hypothesize here:
Information:
- At least 2 of Kerberos mirrors are exposed (Privex Datacenter in Stockholm, using port 81 lol) (not the ones @slimzi posted)
- AB "welcome" page is hosted in the same data center (probably law enforcement), IPs are NOT far...