| 2026-09-15 06:15 | readspeakersite.com | Unknown Loader | etherhiding sepolia |  varysz |
| 2026-09-10 19:50 | homebasedbusinesssite.com | Unknown Loader | etherhiding sepolia | varysz |
| 2026-09-08 05:46 | onaironsite.com | Unknown Loader | etherhiding | varysz |
| 2026-08-28 10:50 | giaodienwebsite.com | Unknown Loader | etherhiding sepolia | varysz |
| 2026-08-28 10:48 | cazenasite.com | Unknown Loader | etherhiding sepolia | varysz |
| 2026-08-19 09:20 | burnpeakofficialsite.com | ClearFake | ClearFake |  threatcat_ch |
| 2026-08-19 06:05 | thechesswebsite.com | IClickFix | ClearFake ClickFix |  skocherhan |
| 2026-08-01 23:58 | thecgisite.com | IClickFix | ClickFix etherhiding | varysz |
| 2026-07-26 20:18 | nutrafigvitalsite.com | ClearFake | ClearFake ClickFix | skocherhan |
| 2026-07-26 10:54 | darkslateblue-gnu-453682.hostingersite.com | KongTuke | | skocherhan |
| 2026-07-21 04:04 | ndpyt.mechanic-on-site.com | ClearFake | ClearFake win-0x4679 Windows | Anonymous |
| 2026-07-21 03:59 | mechanic-on-site.com | ClearFake | ClearFake | threatcat_ch |
| 2026-06-10 01:18 | yhsgyl.pishbinisite.com | ClearFake | ClearFake | Anonymous |
| 2026-06-09 08:45 | gyayod.pishbinisite.com | ClearFake | ClearFake | Anonymous |
| 2026-04-15 03:15 | https://thehealthsite.com.au/ | Vidar | ClickFix compromised etherhiding Polygon Vidar WordPress | Anonymous |
| 2026-04-14 13:17 | https://sedragaragedaytona6163.live-website.com/ | Vidar | ClickFix compromised etherhiding Polygon Vidar WordPress | Anonymous |
| 2026-04-14 13:17 | https://darkorange-ferret-449201.hostingersite.com/ | Vidar | ClickFix compromised etherhiding Polygon Vidar WordPress | Anonymous |
| 2026-04-14 13:15 | https://ptepower4132.live-website.com/ | Vidar | ClickFix compromised etherhiding Polygon Vidar WordPress | Anonymous |
| 2026-04-14 12:16 | https://darkslateblue-gnu-453682.hostingersite.com/ | Vidar | ClickFix compromised etherhiding Polygon Vidar WordPress | Anonymous |
| 2026-04-14 12:15 | https://midnightblue-termite-395025.hostingersite.com/ | Vidar | ClickFix compromised etherhiding Polygon Vidar WordPress | Anonymous |
| 2026-04-14 12:15 | https://growingorganic3440.live-website.com/ | Vidar | ClickFix compromised etherhiding Polygon Vidar WordPress | Anonymous |
| 2026-04-14 11:35 | https://lightblue-narwhal-529766.hostingersite.com/ | Vidar | ClickFix compromised etherhiding Polygon Vidar WordPress | Anonymous |
| 2026-04-14 11:34 | https://project1-n9r5vdrzri.live-website.com/ | Vidar | ClickFix compromised etherhiding Polygon Vidar WordPress | Anonymous |
| 2026-04-14 09:47 | https://score4more-uhn4lprkyj.live-website.com/ | Vidar | ClickFix compromised etherhiding Polygon Vidar WordPress | Anonymous |
| 2026-04-14 09:44 | https://mediumpurple-kingfisher-578294.hostingersite.com/ | Vidar | ClickFix compromised etherhiding Polygon Vidar WordPress | Anonymous |
| 2026-03-28 08:34 | https://retainedsite.com | Unknown malware | ClickFix Zillow |  HuntYethHounds |
| 2026-03-28 08:34 | retainedsite.com | Unknown malware | ClickFix Zillow | HuntYethHounds |
| 2026-03-26 06:49 | https://chinasite.com.br/MSI_180922.png | XpertRAT | emoji-obfuscation vbs XpertRAT | Lenny_3BO |
| 2026-03-14 03:00 | navajowhite-capybara-119115.hostingersite.com | StrelaStealer | StrelaStealer | threatcat_ch |
| 2026-03-13 11:30 | teal-goat-784716.hostingersite.com | Unknown Stealer | c2 SentinelStealer |  juroots |
| 2026-03-10 08:32 | chatwithsite.com | Unknown Stealer | c2 domain MacSync stealer |  DonPasci |
| 2025-12-09 13:35 | grunaumetals.pairsite.com | Unknown Stealer | ClickFix validin |  DaveLikesMalwre |
| 2025-12-08 19:00 | securenetapp-site.com | Unknown Stealer | censys ClickFix | DaveLikesMalwre |
| 2025-12-07 20:34 | tenryu-site.com | Unknown Stealer | ClickFix | DaveLikesMalwre |
| 2025-11-04 13:28 | https://tema-com-ua-568517.hostingersite.com/public/js/cloudflare.txt | Unknown malware | ClickFix | HuntYethHounds |
| 2025-10-04 07:31 | https://irp.cdn-website.com/24fc562c/files/uploaded/34.ps1 | Unknown malware | FakeCaptcha | juroots |
| 2025-05-21 11:34 | brightbytesite.com | Unknown malware | FakeCaptcha | RacWatchin8872 |
| 2025-04-13 06:22 | teuwebsite.com | DarkGate | DarkGate |  TheRavenFile |
| 2025-04-13 06:22 | nustreamdevsite.com | DarkGate | DarkGate | TheRavenFile |
| 2025-03-16 18:25 | http://royalblue-eland-361971.hostingersite.com/index.php | Azorult | AZORult |  abuse_ch |
| 2025-01-20 20:52 | https://irp.cdn-website.com/45d8c6e0/files/uploaded/32.ps1 | Lumma Stealer | Lumma ps1 | juroots |
| 2025-01-14 20:17 | test-site.com.s61.hhos.net | DCRat | c2 domain RAT VirusTotal | DonPasci |
| 2024-07-07 11:37 | mybadsite.com | Havoc | Havoc |  myceliumbroker |
| 2024-06-06 23:34 | raslack.axwebsite.com | Oski Stealer | c2 Oski |  Gi7w0rm |
| 2024-06-06 23:34 | quisha.axwebsite.com | Oski Stealer | c2 Oski | Gi7w0rm |
| 2024-06-06 23:34 | accdemo.axwebsite.com | Oski Stealer | c2 Oski | Gi7w0rm |
| 2024-01-29 14:01 | https://miner.eastestsite.com/6CdvjJMFDOWMBVW+3hRDrptTCvzKHU38mkIM5I1EBNOCVDDqmkgB+I1VHeOaBUOujVUd45oFVb3EBR2u0gUG6p5fF/6DXxzmkU4Y+pgFEg== | FAKEUPDATES | | Gi7w0rm |
| 2024-01-29 14:01 | https://miner.eastestsite.com/UUo0FipoV381aA4kZ3kYNCI+UWZzcBZmIy9XfjQpX0k7OWtwIyVaYjQ4RnkjaBg0NDhGeSNoDiR9aEY0a2hYdCcyRXEzOV1nMyVYNCw= | FAKEUPDATES | | Gi7w0rm |
| 2024-01-29 14:01 | https://miner.eastestsite.com/rpmKpNW76c3Ku7CWmKqmht3t79SMo6jFwPjm3dT81cLeu6aG3Luwhsf9+N3W/f7Hx/Tlysfz8NTf+u2G0w== | FAKEUPDATES | | Gi7w0rm |
| 2024-01-29 13:53 | miner.eastestsite.com | FAKEUPDATES | | Gi7w0rm |
| 2023-09-27 14:03 | http://yoursite.com/index.php | Azorult | AZORult c2 historicalandnew | Gi7w0rm |
| 2023-09-27 13:58 | http://mysite.com/d36ls5q/index.php | Azorult | AZORult c2 historicalandnew | Gi7w0rm |
| 2023-07-30 09:53 | backupboxsite.com | SystemBC | | Gi7w0rm |
| 2023-05-24 22:03 | http://quickfixwebsite.com/qdasczxaxj/rentfree.zip | QakBot | |  Cryptolaemus1 |
| 2023-05-17 13:48 | https://yanisite.com/erer/?1 | QakBot | BB28 js QakBot | Cryptolaemus1 |
| 2023-05-17 13:23 | https://getaprofessionalwebsite.com/li/?1 | QakBot | BB28 js QakBot | Cryptolaemus1 |
| 2023-05-10 17:26 | https://yanisite.com/baop/ | QakBot | BB27 js QakBot qbot Quakbot TR | Cryptolaemus1 |
| 2023-04-26 00:10 | http://lapakwebsite.com/cache/rentfree.zip | QakBot | obama256 QakBot qbot Quakbot WSF zip | Cryptolaemus1 |
| 2023-02-02 23:16 | https://mysite.com.ng/UTIC.php | QakBot | BB12 ONE QakBot qbot Quakbot TR zip | Cryptolaemus1 |
| 2022-12-21 00:41 | https://goanywebsite.com/esmr/index.php | QakBot | BB11 IMG QakBot qbot Quakbot RR17 TR vhd zip | Cryptolaemus1 |
| 2022-12-20 17:15 | https://goanywebsite.com/dpor/index.php | QakBot | BB11 IMG QakBot qbot Quakbot RR17 TR vhd zip | Cryptolaemus1 |
| 2022-12-20 17:12 | goanywebsite.com | QakBot | BB11 IMG QakBot qbot Quakbot RR17 TR vhd zip | Cryptolaemus1 |
| 2022-12-05 18:39 | https://shop4website.com/et/index.php?QBOT.zip | QakBot | BB09 N54 QakBot qbot Quakbot TR vhd zip | Cryptolaemus1 |
| 2022-12-05 18:38 | shop4website.com | QakBot | BB09 N54 QakBot qbot Quakbot TR vhd zip | Cryptolaemus1 |
| 2022-11-28 22:04 | https://redsite.com.mx/ttee/index.php?qakbot.zip | QakBot | BB08 iso P32M QakBot qbot Quakbot TR zip | Cryptolaemus1 |
| 2022-11-22 16:33 | jurisite.com.br | QakBot | BB07 iso QakBot qbot Quakbot TR VX21 zip | Cryptolaemus1 |
| 2022-11-22 16:32 | https://jurisite.com.br/pasi/index.php?qbot.zip | QakBot | BB07 iso QakBot qbot Quakbot TR VX21 zip | Cryptolaemus1 |
| 2022-11-18 06:07 | t1pixelsite.com | Unknown malware | BatLoader | abuse_ch |
| 2022-11-16 22:00 | redsite.com.mx | QakBot | BB06 iso QakBot qbot Quakbot SK16 TR zip | Cryptolaemus1 |
| 2022-11-16 21:59 | https://redsite.com.mx/aiuo/index.php?qbot.zip | QakBot | BB06 iso QakBot qbot Quakbot SK16 TR zip | Cryptolaemus1 |
| 2022-11-16 21:59 | https://redsite.com.mx/ilv/index.php?qbot.zip | QakBot | BB06 iso QakBot qbot Quakbot SK16 TR zip | Cryptolaemus1 |
| 2022-10-19 01:51 | https://jurisite.com.br/ut/rsloomdonmei | QakBot | BB03 FYN09 iso QakBot qbot Quakbot TR zip | Cryptolaemus1 |
| 2022-10-13 20:06 | https://redsite.com.mx/qust/ranmorriei | QakBot | BB01 BNO87 iso QakBot qbot Quakbot TR zip | Cryptolaemus1 |
| 2022-10-11 22:10 | https://ahoysite.com/oee/ttumnusea | QakBot | bb iso L875 QakBot qbot Quakbot TR zip | Cryptolaemus1 |
| 2022-10-11 22:10 | https://ahoysite.com/oee/uactaeaiotmcec | QakBot | bb iso L875 QakBot qbot Quakbot TR zip | Cryptolaemus1 |
| 2022-10-11 22:10 | https://ahoysite.com/oee/rlesdeooferac | QakBot | bb iso L875 QakBot qbot Quakbot TR zip | Cryptolaemus1 |
| 2022-10-11 22:10 | https://ahoysite.com/oee/rorromlurode | QakBot | bb iso L875 QakBot qbot Quakbot TR zip | Cryptolaemus1 |
| 2022-10-11 22:10 | https://ahoysite.com/oee/rumrhrerao | QakBot | bb iso L875 QakBot qbot Quakbot TR zip | Cryptolaemus1 |
| 2022-10-11 22:10 | https://ahoysite.com/oee/afectifoi | QakBot | bb iso L875 QakBot qbot Quakbot TR zip | Cryptolaemus1 |
| 2022-10-11 22:10 | https://ahoysite.com/oee/ounetrpdsuraaq | QakBot | bb iso L875 QakBot qbot Quakbot TR zip | Cryptolaemus1 |
| 2022-10-11 00:38 | https://rodrigueswebsite.com/ad/recalueacfp | QakBot | bb iso QakBot qbot Quakbot TR X353 X873 zip | Cryptolaemus1 |
| 2022-10-10 19:01 | https://rodrigueswebsite.com/ad/vtaltnupsotauum | QakBot | bb iso QakBot qbot Quakbot TR X353 X873 zip | Cryptolaemus1 |
| 2022-10-10 19:01 | https://rodrigueswebsite.com/ad/qaetumamu | QakBot | bb iso QakBot qbot Quakbot TR X353 X873 zip | Cryptolaemus1 |
| 2022-10-10 19:01 | https://rodrigueswebsite.com/ad/tantpseeie | QakBot | bb iso QakBot qbot Quakbot TR X353 X873 zip | Cryptolaemus1 |
| 2022-10-10 19:01 | https://rodrigueswebsite.com/ad/uptbvsoavualipttoslu | QakBot | bb iso QakBot qbot Quakbot TR X353 X873 zip | Cryptolaemus1 |
| 2022-10-10 19:01 | https://rodrigueswebsite.com/ad/utandliemaut | QakBot | bb iso QakBot qbot Quakbot TR X353 X873 zip | Cryptolaemus1 |
| 2022-10-10 19:01 | https://rodrigueswebsite.com/ad/oneeaqnu | QakBot | bb iso QakBot qbot Quakbot TR X353 X873 zip | Cryptolaemus1 |
| 2022-10-05 16:29 | https://ahoysite.com/pn/utmee | QakBot | bb L375 QakBot qbot Quakbot TR xlsb | Cryptolaemus1 |
| 2022-10-05 16:29 | https://ahoysite.com/pn/euvmentqiaai | QakBot | bb L375 QakBot qbot Quakbot TR xlsb | Cryptolaemus1 |
| 2022-10-05 16:29 | https://ahoysite.com/pn/nctoiocidaifiifts | QakBot | bb L375 QakBot qbot Quakbot TR xlsb | Cryptolaemus1 |
| 2022-10-05 16:29 | https://ahoysite.com/pn/tiqesu | QakBot | bb L375 QakBot qbot Quakbot TR xlsb | Cryptolaemus1 |
| 2022-10-03 16:49 | https://gosavesite.com/oiii/telsaraiuoqaomb | QakBot | bb QakBot qbot Quakbot R871 TR zip | Cryptolaemus1 |
| 2022-10-03 16:49 | https://gosavesite.com/oiii/aluulmnunmqa | QakBot | bb QakBot qbot Quakbot R871 TR zip | Cryptolaemus1 |
| 2022-07-26 15:35 | http://quisha.axwebsite.com/5.jpg | Oski Stealer | OskiStealer | abuse_ch |
| 2022-07-26 15:35 | http://quisha.axwebsite.com/7.jpg | Oski Stealer | OskiStealer | abuse_ch |
| 2022-07-26 15:35 | http://quisha.axwebsite.com/4.jpg | Oski Stealer | OskiStealer | abuse_ch |
| 2022-07-26 15:35 | http://quisha.axwebsite.com/3.jpg | Oski Stealer | OskiStealer | abuse_ch |
| 2022-07-26 15:35 | http://quisha.axwebsite.com/2.jpg | Oski Stealer | OskiStealer | abuse_ch |
| 2022-07-26 15:35 | http://quisha.axwebsite.com/1.jpg | Oski Stealer | OskiStealer | abuse_ch |
| 2022-07-26 15:35 | http://quisha.axwebsite.com/6.jpg | Oski Stealer | OskiStealer | abuse_ch |
| 2022-07-21 19:30 | http://raslack.axwebsite.com/7.jpg | Oski Stealer | OskiStealer | abuse_ch |
| 2022-07-21 19:30 | http://raslack.axwebsite.com/5.jpg | Oski Stealer | OskiStealer | abuse_ch |
| 2022-07-21 19:30 | http://raslack.axwebsite.com/4.jpg | Oski Stealer | OskiStealer | abuse_ch |
| 2022-07-21 19:30 | http://raslack.axwebsite.com/3.jpg | Oski Stealer | OskiStealer | abuse_ch |
| 2022-07-21 19:30 | http://raslack.axwebsite.com/2.jpg | Oski Stealer | OskiStealer | abuse_ch |
| 2022-07-21 19:30 | http://raslack.axwebsite.com/1.jpg | Oski Stealer | OskiStealer | abuse_ch |
| 2022-07-21 19:30 | http://raslack.axwebsite.com/6.jpg | Oski Stealer | OskiStealer | abuse_ch |
| 2022-06-10 19:32 | https://secure.redirectionsite.com:8443/index.html | Cobalt Strike | CobaltStrike OVH |  drb_ra |
| 2022-06-10 19:32 | https://www.redirectionsite.com:8443/index.html | Cobalt Strike | CobaltStrike OVH | drb_ra |
| 2022-06-10 19:32 | https://redirectionsite.com:8443/massaction.html | Cobalt Strike | CobaltStrike OVH | drb_ra |
| 2022-05-16 12:49 | http://hullsite.com/0a61/nm6lxocqt/ | Emotet | | Cryptolaemus1 |
| 2022-05-12 08:37 | http://www.clasite.com/blogs/uaWi/ | Emotet | emotet epoch4 |  proxylife |
| 2022-04-08 18:14 | http://stive.axwebsite.com/3.jpg | Vidar | Vidar |  Struct_Cons |
| 2022-04-08 18:14 | http://stive.axwebsite.com/2.jpg | Vidar | Vidar | Struct_Cons |
| 2022-04-08 18:14 | http://stive.axwebsite.com/6.jpg | Vidar | Vidar | Struct_Cons |
| 2022-03-25 17:56 | http://www.clasite.com/blogs/bhaAB/ | Emotet | | Cryptolaemus1 |
| 2021-08-11 12:46 | http://accdemo.axwebsite.com/7.jpg | Oski Stealer | OskiStealer | abuse_ch |
| 2021-08-11 12:46 | http://accdemo.axwebsite.com/5.jpg | Oski Stealer | OskiStealer | abuse_ch |
| 2021-08-11 12:46 | http://accdemo.axwebsite.com/4.jpg | Oski Stealer | OskiStealer | abuse_ch |
| 2021-08-11 12:46 | http://accdemo.axwebsite.com/3.jpg | Oski Stealer | OskiStealer | abuse_ch |
| 2021-08-11 12:46 | http://accdemo.axwebsite.com/2.jpg | Oski Stealer | OskiStealer | abuse_ch |
| 2021-08-11 12:46 | http://accdemo.axwebsite.com/1.jpg | Oski Stealer | OskiStealer | abuse_ch |
| 2021-08-11 12:46 | http://accdemo.axwebsite.com/6.jpg | Oski Stealer | OskiStealer | abuse_ch |
| 2021-05-18 14:18 | previewyourwebsite.com.au | QakBot | QakBot qbot TR |  lazyactivist192 |
| 2021-05-18 14:17 | comprarumsite.com.br | QakBot | QakBot qbot TR | lazyactivist192 |