| 2026-10-23 16:11 | proxy.insanecppdev.com | RedTail | CVE-2021-41773 CVE-2026-109618 php2shell Redtail ssh telnet xmrig |  Fenestra |
| 2026-10-21 07:10 | epimdev.com | IClickFix | ClickFix etherhiding Polygon |  varysz |
| 2026-10-01 20:01 | https://googlegeminidev.com/ | Unknown malware | ClickFix | CarsonWilliams |
| 2026-10-01 19:53 | googlegeminidev.com | ClearFake | compromised etherhide | Anonymous |
| 2026-09-30 03:31 | knmdev.com | ClearFake | compromised etherhide | Anonymous |
| 2026-09-26 12:13 | comtecdev.com | IClickFix | ClearFake ClickFix |  skocherhan |
| 2026-09-24 07:37 | naingdev.com | Unknown Loader | etherhiding victim | varysz |
| 2026-09-23 16:09 | dutchdev.co.za | IClickFix | ClickFix | varysz |
| 2026-09-15 06:16 | westvillagedev.com | Unknown Loader | etherhiding sepolia | varysz |
| 2026-09-15 06:13 | khuta-dev.com | Unknown Loader | etherhiding sepolia | varysz |
| 2026-09-15 00:54 | womenindev.com | ClearFake | compromised etherhide | Anonymous |
| 2026-09-03 09:49 | thadadev.com | ClearFake | compromised etherhide | Anonymous |
| 2026-08-18 07:19 | lalifedev.com | Unknown Loader | etherhiding | varysz |
| 2026-07-07 05:22 | uliedev.com | IClickFix | ClickFix FakeCaptcha victim | varysz |
| 2026-06-22 09:06 | https://www.comtecdev.com/ | Unknown malware | ClickFix | CarsonWilliams |
| 2026-06-21 22:58 | www.comtecdev.com | Remus | ClickFix etherhiding Polygon Remus | varysz |
| 2026-05-19 05:16 | capcutdev.com | Unknown malware | borland-vcl merlin proxydll THEMIDA | Lenny_3BO |
| 2026-05-19 05:16 | log32-normal.capcutdev.com | Unknown malware | borland-vcl merlin proxydll THEMIDA | Lenny_3BO |
| 2026-05-09 16:50 | dev.coderlap.pics | ClearFake | ClearFake | Anonymous |
| 2026-05-05 10:54 | bebra-dev.com | Unknown malware | |  burger |
| 2026-04-22 17:15 | https://tycoonstrategyforbizdev.com/ | Vidar | ClickFix compromised etherhiding Polygon Vidar WordPress | Anonymous |
| 2026-04-18 13:15 | https://smbownersbizdev.com/ | Vidar | ClickFix compromised etherhiding Polygon Vidar WordPress | Anonymous |
| 2026-04-15 07:15 | https://shrirakeshrajdev.com/ | Vidar | ClickFix compromised etherhiding Polygon Vidar WordPress | Anonymous |
| 2026-04-04 18:40 | https://testio.ecartdev.com/assets/landings/cloudflare/js/loader.js | Unknown malware | ClickFix | HuntYethHounds |
| 2026-04-04 18:40 | https://testio.ecartdev.com/assets/landings/cloudflare/js/clipboard.js | Unknown malware | ClickFix | HuntYethHounds |
| 2026-03-27 20:29 | https://testio.ecartdev.com/bewhqdvaggutiywcmd | Unknown malware | ClickFix | HuntYethHounds |
| 2026-03-27 20:29 | https://testio.ecartdev.com/assets/landings/cloudflare2/js/clipboard.js | Unknown malware | ClickFix | HuntYethHounds |
| 2026-03-27 20:28 | https://testio.ecartdev.com/assets/landings/cloudflare2/js/loader.js | Unknown malware | ClickFix | HuntYethHounds |
| 2026-03-27 20:28 | testio.ecartdev.com | Unknown malware | ClickFix | HuntYethHounds |
| 2026-03-27 16:44 | cl3dev.conditoverwinter.in.net | ClearFake | ClearFake |  threatcat_ch |
| 2026-03-24 07:08 | https://testio.ecartdev.com/yvapavsxhwsesnqkux | Unknown malware | ClickFix | CarsonWilliams |
| 2026-03-16 08:47 | padillabuilding.jmgrepdev.com | StrelaStealer | StrelaStealer | threatcat_ch |
| 2026-02-27 09:17 | lp.blackdev.com.br | StrelaStealer | StrelaStealer | threatcat_ch |
| 2026-02-23 07:17 | gereja.neoxdev.com | IClickFix | ClickFix |  TheRavenFile |
| 2026-02-13 20:13 | thewheel.staging.ebowdev.com | Unknown Stealer | ClickFix validin |  DaveLikesMalwre |
| 2026-02-06 08:21 | https://gereja.neoxdev.com/ | Unknown malware | ClickFix | CarsonWilliams |
| 2026-02-06 06:33 | gereja.neoxdev.com | Unknown Stealer | ClickFix validin | DaveLikesMalwre |
| 2026-01-02 19:06 | portal-markoum.midadedev.com | Unknown Stealer | ClickFix validin | DaveLikesMalwre |
| 2025-12-09 13:35 | extra-company-dev.com | Unknown Stealer | ClickFix validin | DaveLikesMalwre |
| 2025-12-08 19:00 | mail.mirzadev.com | Unknown Stealer | censys ClickFix | DaveLikesMalwre |
| 2025-12-08 19:00 | bullheadinsurance.mirzadev.com | Unknown Stealer | censys ClickFix | DaveLikesMalwre |
| 2025-12-07 20:34 | herconic.mirzadev.com | Unknown Stealer | ClickFix | DaveLikesMalwre |
| 2025-12-07 20:34 | hybrid.mirzadev.com | Unknown Stealer | ClickFix | DaveLikesMalwre |
| 2025-10-17 09:34 | ns.acrobe-dev.com | Unknown malware | APT jewelbug ref7707 |  abuse_ch |
| 2025-06-10 14:37 | https://dev.couplesparks.com/ajaxAction | FAKEUPDATES | fakeupdates SocGholish |  pancak3lullz |
| 2025-06-10 14:37 | dev.couplesparks.com | FAKEUPDATES | fakeupdates SocGholish | pancak3lullz |
| 2025-04-13 06:22 | ecit-dev.com | DarkGate | DarkGate | TheRavenFile |
| 2025-02-27 05:35 | page.jcarterdev.com | Quasar RAT | AS214943 c2 censys RAILNET RAT |  dyingbreeds_ |
| 2025-01-14 10:23 | wpundev.com | FAKEUPDATES | SocGholish | skocherhan |
| 2024-10-30 13:40 | promiseresolverdev.com | FAKEUPDATES | KeitaroTDS SocGholish |  rmceoin |
| 2024-07-01 10:47 | http://bp.killerworkdev.com/agov/ | Poseidon Stealer | agov PoseidonStealer | abuse_ch |
| 2024-06-28 13:51 | newcpp.killerworkdev.com | Poseidon Stealer | PoseidonStealer | abuse_ch |
| 2024-06-05 08:00 | progressivewebappsdev.com | FAKEUPDATES | SocGholish | threatcat_ch |
| 2024-05-16 07:11 | modularfunctiondev.com | FAKEUPDATES | SocGholish |  monitorsg |
| 2024-02-09 02:37 | https://enso.atrevia-dev.com/wp-content/cache/min/1/wp-content/plugins/elementor/assets/lib/eicons/css/css.php | FAKEUPDATES | ParrotTDS SocGholish |  Gi7w0rm |
| 2023-10-25 19:27 | dev.collab.tr4t.io | Unknown malware | c2 censys GOOGLE-CLOUD-PLATFORM interactsh interactsh-HTTP |  thehappydinoa |
| 2023-10-18 12:57 | http://gofreshdev.com/gate.php | CryptBot | c2 cryptbot | Gi7w0rm |
| 2023-10-18 06:38 | https://probono.6600dev.com/news.php | GootLoader | gating gootloader |  Gootloader2 |
| 2023-09-27 15:42 | gofreshdev.com | CryptBot | c2 cryptbot historicalandnew stealer | Gi7w0rm |
| 2023-06-22 21:01 | http://wordpresstest.vledev.com/hjbuuckjqb/hjbuuckjqb.gif | QakBot | js obama271 QakBot qbot Quakbot |  Cryptolaemus1 |
| 2023-06-15 16:20 | https://awaisdev.co/uu/?1 | QakBot | BB32 js QakBot qbot Quakbot | Cryptolaemus1 |
| 2023-05-24 15:50 | ns2.hkappdev.com | Cobalt Strike | CobaltStrike cs-watermark-1359593325 The Constant Company LLC |  drb_ra |
| 2023-05-24 15:50 | ns1.hkappdev.com | Cobalt Strike | CobaltStrike cs-watermark-1359593325 The Constant Company LLC | drb_ra |
| 2023-05-17 13:48 | https://webmasterdev.com/mui/?1 | QakBot | BB28 js QakBot | Cryptolaemus1 |
| 2023-05-16 13:33 | https://torqdev.com/ars/?1 | QakBot | BB28 js QakBot | Cryptolaemus1 |
| 2023-05-15 16:18 | https://valldev.com/doio/?1 | QakBot | BB28 js QakBot | Cryptolaemus1 |
| 2023-05-03 16:59 | http://heangdev.com/gnome2/rentfree.zip | QakBot | obama260 QakBot qbot Quakbot WSF zip | Cryptolaemus1 |
| 2023-04-25 13:01 | https://mypsdev.com.my/seq/namblanditiis.php | QakBot | BB25 QakBot qbot Quakbot TR WSF zip | Cryptolaemus1 |
| 2023-04-25 12:59 | https://calicosdev.com/ss/estipsa.php | QakBot | BB25 QakBot qbot Quakbot TR WSF zip | Cryptolaemus1 |
| 2023-04-12 18:43 | http://shifa365dev.com/at/quaein.php | QakBot | BB23 QakBot qbot Quakbot R89 TR WSF zip | Cryptolaemus1 |
| 2023-03-30 18:50 | https://smaartdev.com/iqn/iqn.php | QakBot | BB21 js QakBot qbot Quakbot TR | Cryptolaemus1 |
| 2022-12-20 20:48 | https://s-dev.co.il/ar/index.php | QakBot | BB11 IMG QakBot qbot Quakbot RR17 TR vhd zip | Cryptolaemus1 |
| 2022-12-20 20:40 | https://h2c-dev.com/gned/index.php | QakBot | BB11 IMG QakBot qbot Quakbot RR17 TR vhd zip | Cryptolaemus1 |
| 2022-12-20 20:39 | s-dev.co.il | QakBot | BB11 IMG QakBot qbot Quakbot RR17 TR vhd zip | Cryptolaemus1 |
| 2022-12-20 17:15 | https://h2c-dev.com/es/index.php | QakBot | BB11 IMG QakBot qbot Quakbot RR17 TR vhd zip | Cryptolaemus1 |
| 2022-12-20 17:14 | https://gamingfordev.com/nin/index.php | QakBot | BB11 IMG QakBot qbot Quakbot RR17 TR vhd zip | Cryptolaemus1 |
| 2022-12-20 17:12 | h2c-dev.com | QakBot | BB11 IMG QakBot qbot Quakbot RR17 TR vhd zip | Cryptolaemus1 |
| 2022-12-19 21:43 | https://mcsistemasdev.com.br/tels/index.php | QakBot | BB11 iso QakBot qbot Quakbot TR TR23 zip | Cryptolaemus1 |
| 2022-12-19 21:38 | https://gamingfordev.com/iqib/index.php | QakBot | BB11 iso QakBot qbot Quakbot TR TR23 zip | Cryptolaemus1 |
| 2022-12-13 21:47 | https://unidev.co.in/dir/index.php?qbot.zip | QakBot | 675 BB10 iso nt005 QakBot qbot Quakbot TR zip | Cryptolaemus1 |
| 2022-12-13 21:43 | https://skilldev.com.br/mm/index.php?qbot.zip | QakBot | 675 BB10 iso nt005 QakBot qbot Quakbot TR zip | Cryptolaemus1 |
| 2022-12-13 21:40 | https://prodigidev.com/ct/index.php?qbot.zip | QakBot | 675 BB10 iso nt005 QakBot qbot Quakbot TR zip | Cryptolaemus1 |
| 2022-12-13 21:39 | unidev.co.in | QakBot | 675 BB10 iso nt005 QakBot qbot Quakbot TR zip | Cryptolaemus1 |
| 2022-12-13 21:37 | skilldev.com.br | QakBot | 675 BB10 iso nt005 QakBot qbot Quakbot TR zip | Cryptolaemus1 |
| 2022-12-13 21:35 | prodigidev.com | QakBot | 675 BB10 iso nt005 QakBot qbot Quakbot TR zip | Cryptolaemus1 |
| 2022-12-05 18:06 | https://dfstrackdev.com/aipe/index.php?QBOT.zip | QakBot | BB09 N54 QakBot qbot Quakbot TR vhd zip | Cryptolaemus1 |
| 2022-11-28 22:05 | https://tecsdev.com/seia/index.php?qakbot.zip | QakBot | BB08 iso P32M QakBot qbot Quakbot TR zip | Cryptolaemus1 |
| 2022-11-17 19:22 | https://mcsistemasdev.com.br/taes/index.php?qbot.zip | QakBot | BB06 iso QakBot qbot Quakbot SK16 TR zip | Cryptolaemus1 |
| 2022-11-17 19:17 | https://gamingfordev.com/qe/index.php?qbot.zip | QakBot | BB06 iso QakBot qbot Quakbot SK16 TR zip | Cryptolaemus1 |
| 2022-11-17 19:15 | mcsistemasdev.com.br | QakBot | BB06 iso QakBot qbot Quakbot SK16 TR zip | Cryptolaemus1 |
| 2022-11-17 19:15 | https://dfstrackdev.com/is/index.php?qbot.zip | QakBot | BB06 iso QakBot qbot Quakbot SK16 TR zip | Cryptolaemus1 |
| 2022-11-17 19:13 | gamingfordev.com | QakBot | BB06 iso QakBot qbot Quakbot SK16 TR zip | Cryptolaemus1 |
| 2022-11-17 19:12 | dfstrackdev.com | QakBot | BB06 iso QakBot qbot Quakbot SK16 TR zip | Cryptolaemus1 |
| 2022-11-16 18:59 | https://tecsdev.com/uo/index.php?qbot.zip | QakBot | BB06 iso QakBot qbot Quakbot SK16 TR zip | Cryptolaemus1 |
| 2022-11-15 21:46 | afrimeddev.com | QakBot | BB06 iso NG11 QakBot qbot Quakbot TR zip | Cryptolaemus1 |
| 2022-11-15 21:45 | https://afrimeddev.com/uu/index.php?qbot.zip | QakBot | BB06 iso NG11 QakBot qbot Quakbot TR zip | Cryptolaemus1 |
| 2022-10-31 17:18 | tecsdev.com | QakBot | BB05 BV1 iso QakBot qbot Quakbot TR zip | Cryptolaemus1 |
| 2022-10-31 17:15 | icreatedev.com.au | QakBot | BB05 BV1 iso QakBot qbot Quakbot TR zip | Cryptolaemus1 |
| 2022-10-31 16:25 | https://tecsdev.com/miee/ | QakBot | BB05 BV1 iso QakBot qbot Quakbot TR zip | Cryptolaemus1 |
| 2022-10-31 16:21 | https://icreatedev.com.au/as/ | QakBot | BB05 BV1 iso QakBot qbot Quakbot TR zip | Cryptolaemus1 |
| 2022-10-13 21:07 | https://alphameaddev.com/il/tuiqoimesesala | QakBot | BB01 BNO87 iso QakBot qbot Quakbot TR zip | Cryptolaemus1 |
| 2022-10-13 21:07 | https://alphameaddev.com/il/offerKorn | QakBot | BB01 BNO87 iso QakBot qbot Quakbot TR zip | Cryptolaemus1 |
| 2022-10-13 21:07 | https://alphameaddev.com/il/aolumhurrmba | QakBot | BB01 BNO87 iso QakBot qbot Quakbot TR zip | Cryptolaemus1 |
| 2022-10-03 16:46 | https://alphameaddev.com/aet/qusdsie | QakBot | bb QakBot qbot Quakbot R871 TR zip | Cryptolaemus1 |
| 2022-10-03 16:46 | https://alphameaddev.com/aet/utoann | QakBot | bb QakBot qbot Quakbot R871 TR zip | Cryptolaemus1 |
| 2022-09-28 21:02 | https://josemidev.com/etre/dpdneersuaeeaianrucda | QakBot | bb H322 H436 QakBot qbot Quakbot TR U425 zip | Cryptolaemus1 |
| 2022-09-28 21:02 | https://josemidev.com/etre/evontitnseer | QakBot | bb H322 H436 QakBot qbot Quakbot TR U425 zip | Cryptolaemus1 |
| 2022-09-28 21:02 | https://josemidev.com/etre/pisidaeoropsitci | QakBot | bb H322 H436 QakBot qbot Quakbot TR U425 zip | Cryptolaemus1 |
| 2022-09-12 12:10 | https://dpbdev.com:4443/logo | Cobalt Strike | CobaltStrike QuadraNet Enterprises LLC | drb_ra |
| 2022-06-28 12:15 | http://dreamitdev.com/oitr/sauetd | QakBot | aa QakBot qbot TR U523 zip | Cryptolaemus1 |
| 2022-04-13 16:53 | http://squarerootdev.com/Content | Cobalt Strike | CobaltStrike CYBERONEDATA | drb_ra |
| 2022-04-07 14:51 | http://senatordev.com/gate.php | Mars Stealer | MarsStealer |  sekoia_io |
| 2022-02-08 07:22 | kakiosk.adsparkdev.com | GootLoader | |  stoerchl |
| 2022-01-26 23:10 | crisbdev.com | Emotet | emotet |  nickkuechel |
| 2022-01-25 10:18 | http://crisbdev.com/wp-content/2dmXYgLVdkV/ | Emotet | | Cryptolaemus1 |
| 2021-12-07 06:49 | http://skiyodldev.com/autsunt/enimnesciunt-10068504 | QakBot | chaserldr QakBot TR | Cryptolaemus1 |
| 2021-12-07 06:49 | http://skiyodldev.com/autsunt/veroomnis-10062088 | QakBot | chaserldr QakBot TR | Cryptolaemus1 |
| 2021-12-06 20:30 | http://skiyodldev.com/autsunt/autvoluptatem-6524939 | QakBot | chaserldr QakBot TR zip | Cryptolaemus1 |
| 2021-12-06 18:27 | http://skiyodldev.com/autsunt/utamet-10476523 | QakBot | chaserldr QakBot TR zip | Cryptolaemus1 |
| 2021-12-06 18:27 | http://skiyodldev.com/autsunt/voluptatumnulla-3125005 | QakBot | chaserldr QakBot TR zip | Cryptolaemus1 |
| 2021-12-05 23:41 | https://nlmwebdev.com/threeaminos/wp-content/RsCmnBDTrf7l7m622qxe7o9Wjn0L/ | Emotet | emotet epoch4 xlsm | Cryptolaemus1 |
| 2021-10-01 23:29 | https://rdadev.com:1443/massaction | Cobalt Strike | CobaltStrike SERVERSTADIUM | drb_ra |
| 2021-05-18 14:18 | linesdev.com | QakBot | QakBot qbot TR |  lazyactivist192 |
| 2021-04-28 16:00 | https://dev.comptoir-dentaire.com/aplenty.php | Hancitor | doc Hancitor | Cryptolaemus1 |
| 2021-03-29 14:45 | http://kristen.sbddev.com/ds/2803.gif | IcedID | IcedID | abuse_ch |