################################################################
# ThreatFox IOCs: recent URLs - CSV format                     #
# Last updated: 2026-07-19 23:45:09 UTC                        #
#                                                              #
# Terms Of Use: https://threatfox.abuse.ch/faq/#tos            #
# For questions please contact threatfox [at] abuse.ch         #
################################################################
#
# "first_seen_utc","ioc_id","ioc_value","ioc_type","threat_type","fk_malware","malware_alias","malware_printable","last_seen_utc","confidence_level","is_compromised","reference","tags","anonymous","reporter"
"2026-07-19 23:45:09", "1853972", "http://192.162.199.186/aB7xTy2N/mAjOR.php", "url", "botnet_cc", "win.amadey", "None", "Amadey", "", "100", "False", "None", "Amadey", "0", "abuse_ch"
"2026-07-19 23:45:06", "1853971", "http://196.251.107.186/qK3mRv9L/pLdWr.php", "url", "botnet_cc", "win.amadey", "None", "Amadey", "", "100", "False", "None", "Amadey", "0", "abuse_ch"
"2026-07-19 20:10:47", "1853731", "https://195.201.63.48/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "https://bazaar.abuse.ch/sample/d4e81a7304049c20e0b606220ff924dc48c70d46a8ab466c97d7c6a896e886f5/", "c2,vidar", "0", "burger"
"2026-07-19 20:10:46", "1853733", "https://frolen.life/def.ps1", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "100", "False", "https://bazaar.abuse.ch/sample/76d750e2ddfed6f984d95ab0419a085e21f124924c4ab64be5732a1d93719299", "None", "0", "burger"
"2026-07-19 20:10:44", "1853735", "https://telegram.me/f4g7ha", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "True", "https://bazaar.abuse.ch/sample/76d750e2ddfed6f984d95ab0419a085e21f124924c4ab64be5732a1d93719299", "c2,vidar", "0", "burger"
"2026-07-19 20:10:21", "1853823", "http://telco.snovabits.com/", "url", "payload_delivery", "js.iclickfix", "None", "IClickFix", "", "75", "False", "", "None", "1", "anonymous"
"2026-07-19 20:10:20", "1853856", "https://stac.com.vn/", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "90", "False", "https://clickfix.carsonww.com/domains/stac.com.vn", "ClickFix", "0", "CarsonWilliams"
"2026-07-19 18:15:02", "1853853", "https://thebusinesswebclub.com/", "url", "payload_delivery", "win.vidar", "None", "Vidar", "", "75", "True", "None", "ClickFix,compromised,EtherHiding,Polygon,Vidar,WordPress", "1", "anonymous"
"2026-07-19 17:27:03", "1853839", "https://qar.arizonafamilylawfirm.com/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-07-20 03:26:58", "75", "False", "None", "bhipk,Vidar", "0", "abuse_ch"
"2026-07-19 17:15:02", "1853836", "https://laplateforme93-rh.fr/", "url", "payload_delivery", "win.vidar", "None", "Vidar", "2026-07-19 19:30:16", "75", "True", "None", "ClickFix,compromised,EtherHiding,Polygon,Vidar,WordPress", "1", "anonymous"
"2026-07-19 16:38:26", "1853824", "https://amazon-ny-gifts.com/shellsajshdasd/ftpaksjdkasdjkxnckzxn/ywOVkkem.txt", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "90", "False", "None", "ClickFix", "1", "anonymous"
"2026-07-19 16:38:26", "1853826", "http://193.148.56.98/WQUKDbdzO8yY5asDU6", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "90", "False", "None", "ClickFix", "1", "anonymous"
"2026-07-19 16:38:26", "1853827", "https://recaptcha.boit.cloud/recaptcha-verify", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "90", "False", "None", "ClickFix", "1", "anonymous"
"2026-07-19 15:27:02", "1853805", "https://qrt.arizonafamilylawfirm.com/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-07-19 16:27:01", "75", "False", "None", "bhipk,Vidar", "0", "abuse_ch"
"2026-07-19 14:27:28", "1853789", "https://htk.arizonafamilylawfirm.com/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "75", "False", "None", "bhipk,Vidar", "0", "abuse_ch"
"2026-07-19 13:27:13", "1853778", "https://fsc.arizonafamilylawfirm.com/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "75", "False", "None", "bhipk,Vidar", "0", "abuse_ch"
"2026-07-19 11:27:04", "1853750", "https://rgb.arizonafamilylawfirm.com/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-07-19 12:28:04", "75", "False", "None", "bhipk,Vidar", "0", "abuse_ch"
"2026-07-19 10:14:26", "1853714", "https://markol.pro/", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "90", "False", "https://clickfix.carsonww.com/domains/markol.pro", "ClickFix", "0", "CarsonWilliams"
"2026-07-19 08:15:04", "1853696", "https://afsd.net/", "url", "payload_delivery", "win.vidar", "None", "Vidar", "", "75", "True", "None", "ClickFix,compromised,EtherHiding,Polygon,Vidar,WordPress", "1", "anonymous"
"2026-07-19 07:37:57", "1853682", "https://alababababa.cloud/cVGvQio6.txt", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "90", "False", "None", "ClickFix", "1", "anonymous"
"2026-07-19 07:37:57", "1853683", "https://productionai.shop/recaptcha-verify", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "90", "False", "None", "ClickFix", "1", "anonymous"
"2026-07-19 07:37:56", "1853681", "http://95.164.53.115:5506/do.vbs", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "90", "False", "None", "ClickFix", "1", "anonymous"
"2026-07-19 07:37:55", "1853679", "http://95.164.53.214:5554/d.bat", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "90", "False", "None", "ClickFix", "1", "anonymous"
"2026-07-19 07:37:55", "1853680", "https://natural-health-news.com/Verify.msi?I", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "90", "False", "None", "ClickFix", "1", "anonymous"
"2026-07-19 07:37:54", "1853676", "http://93.152.224.29/VMvDWLT7AqpC45hhHf", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "90", "False", "None", "ClickFix", "1", "anonymous"
"2026-07-19 07:37:54", "1853677", "https://gerenland.click/flask/whales.msi", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "90", "False", "None", "ClickFix", "1", "anonymous"
"2026-07-19 07:37:54", "1853678", "http://178.17.59.195:5506/ll.vbs", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "90", "False", "None", "ClickFix", "1", "anonymous"
"2026-07-19 07:28:19", "1853675", "https://gerenland.click/api/stale.msi", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "90", "False", "None", "ClickFix", "1", "anonymous"
"2026-07-19 07:08:37", "1853574", "http://103.83.87.122/telnet.sh", "url", "payload_delivery", "elf.mirai", "Katana", "Mirai", "", "100", "False", "", "None", "1", "anonymous"
"2026-07-19 07:08:37", "1853575", "http://103.83.87.122/iran.x86_64", "url", "payload_delivery", "elf.mirai", "Katana", "Mirai", "", "100", "False", "", "None", "1", "anonymous"
"2026-07-19 07:08:37", "1853576", "http://103.83.87.122/iran.aarch64", "url", "payload_delivery", "elf.mirai", "Katana", "Mirai", "", "100", "False", "", "None", "1", "anonymous"
"2026-07-19 07:08:36", "1853577", "http://103.83.87.122/iran.m68k", "url", "payload_delivery", "elf.mirai", "Katana", "Mirai", "", "100", "False", "", "None", "1", "anonymous"
"2026-07-19 07:08:36", "1853578", "http://103.83.87.122/iran.mips", "url", "payload_delivery", "elf.mirai", "Katana", "Mirai", "", "100", "False", "", "None", "1", "anonymous"
"2026-07-19 07:08:35", "1853579", "http://103.83.87.122/iran.mipsel", "url", "payload_delivery", "elf.mirai", "Katana", "Mirai", "", "100", "False", "", "None", "1", "anonymous"
"2026-07-19 07:08:34", "1853580", "http://103.83.87.122/iran.powerpc", "url", "payload_delivery", "elf.mirai", "Katana", "Mirai", "", "100", "False", "", "None", "1", "anonymous"
"2026-07-19 07:08:33", "1853581", "http://103.83.87.122/iran.sparc", "url", "payload_delivery", "elf.mirai", "Katana", "Mirai", "", "100", "False", "", "None", "1", "anonymous"
"2026-07-19 07:08:33", "1853582", "http://103.83.87.122/iran.sh4", "url", "payload_delivery", "elf.mirai", "Katana", "Mirai", "", "100", "False", "", "None", "1", "anonymous"
"2026-07-19 07:08:33", "1853583", "http://103.83.87.122/iran.arc", "url", "payload_delivery", "elf.mirai", "Katana", "Mirai", "", "100", "False", "", "None", "1", "anonymous"
"2026-07-19 07:08:32", "1853584", "http://103.83.87.122/iran.i486", "url", "payload_delivery", "elf.mirai", "Katana", "Mirai", "", "100", "False", "", "None", "1", "anonymous"
"2026-07-19 07:08:32", "1853585", "http://103.83.87.122/iran.armv4l", "url", "payload_delivery", "elf.mirai", "Katana", "Mirai", "", "100", "False", "", "None", "1", "anonymous"
"2026-07-19 07:08:32", "1853586", "http://103.83.87.122/iran.armv5l", "url", "payload_delivery", "elf.mirai", "Katana", "Mirai", "", "100", "False", "", "None", "1", "anonymous"
"2026-07-19 07:08:31", "1853587", "http://103.83.87.122/iran.armv6l", "url", "payload_delivery", "elf.mirai", "Katana", "Mirai", "", "100", "False", "", "None", "1", "anonymous"
"2026-07-19 07:08:31", "1853588", "http://103.83.87.122/iran.armv7l", "url", "payload_delivery", "elf.mirai", "Katana", "Mirai", "", "100", "False", "", "None", "1", "anonymous"
"2026-07-19 07:08:21", "1853652", "https://flavaradioandtv.com/", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "90", "False", "https://clickfix.carsonww.com/domains/flavaradioandtv.com", "ClickFix", "0", "CarsonWilliams"
"2026-07-19 07:08:21", "1853663", "https://ws.upgifter.pro/c", "url", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "False", "https://ws.upgifter.pro/c", "backdoor,mtproto,python,stealer,telegram", "1", "anonymous"
"2026-07-19 06:15:03", "1853660", "https://kayhector.com/", "url", "payload_delivery", "win.vidar", "None", "Vidar", "2026-07-19 07:30:16", "75", "True", "None", "ClickFix,compromised,EtherHiding,Polygon,Vidar,WordPress", "1", "anonymous"
"2026-07-19 04:25:06", "1853642", "http://keutbdump3.temp.swtest.ru/pipePhpjsPacketLongpoll.php", "url", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "", "100", "False", "None", "DCRat,RAT", "0", "abuse_ch"
"2026-07-18 20:51:07", "1853544", "https://windows-update-local.rest", "url", "botnet_cc", "win.stealc", "None", "Stealc", "", "75", "False", "https://bazaar.abuse.ch/sample/5679dcddde61ea4ea8ee5199339ba059940b1257211fcf95c80d1d5b4063e85a/", "stealc", "0", "abuse_ch"
"2026-07-18 17:33:08", "1852849", "https://oosterhout.click/api/v1/session", "url", "payload_delivery", "js.kongtuke", "TAG-124,js.LandUpdate808", "KongTuke", "2026-07-18 15:10:19", "100", "True", "https://infosec.exchange/@monitorsg/116935949654273518", "KongTuke", "0", "monitorsg"
"2026-07-18 17:33:07", "1852850", "https://oosterhout.click/api/v1/verify", "url", "payload_delivery", "js.kongtuke", "TAG-124,js.LandUpdate808", "KongTuke", "2026-07-18 15:10:21", "100", "True", "https://infosec.exchange/@monitorsg/116935949654273518", "KongTuke", "0", "monitorsg"
"2026-07-18 17:33:06", "1852851", "https://oosterhout.click/api/v1/status", "url", "payload_delivery", "js.kongtuke", "TAG-124,js.LandUpdate808", "KongTuke", "2026-07-17 18:10:07", "100", "True", "https://infosec.exchange/@monitorsg/116935949654273518", "KongTuke", "0", "monitorsg"
"2026-07-18 17:33:06", "1852859", "https://2hbau.com/", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "90", "False", "https://clickfix.carsonww.com/domains/2hbau.com", "ClickFix", "0", "CarsonWilliams"
"2026-07-18 17:33:03", "1853184", "https://store.julias.makeup/img_094957.png", "url", "payload_delivery", "win.dcrat", "DarkCrystal RAT", "DCRat", "", "50", "False", "", "None", "0", "operador614522"
"2026-07-18 17:32:57", "1853284", "https://www.pressurewashingsacramento.net/", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "90", "False", "https://clickfix.carsonww.com/domains/www.pressurewashingsacramento.net", "ClickFix", "0", "CarsonWilliams"
"2026-07-18 17:32:56", "1853307", "https://jenniferhagen.ch/", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "90", "False", "https://clickfix.carsonww.com/domains/jenniferhagen.ch", "ClickFix", "0", "CarsonWilliams"
"2026-07-18 17:32:56", "1853347", "http://91.92.42.213/phantom.sh", "url", "payload_delivery", "unknown", "None", "Unknown malware", "2026-07-18 10:00:29", "75", "False", "https://greedybear.honeynet.org", "honeypot", "0", "greedybear"
"2026-07-18 17:32:55", "1853365", "https://babelo.pro/", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "90", "False", "https://clickfix.carsonww.com/domains/babelo.pro", "ClickFix", "0", "CarsonWilliams"
"2026-07-18 06:15:02", "1853295", "https://targe.in/", "url", "payload_delivery", "win.vidar", "None", "Vidar", "", "75", "True", "None", "ClickFix,compromised,EtherHiding,Polygon,Vidar,WordPress", "1", "anonymous"
"2026-07-18 04:15:03", "1853273", "https://pressurewashingsacramento.net/", "url", "payload_delivery", "win.vidar", "None", "Vidar", "", "75", "True", "None", "ClickFix,compromised,EtherHiding,Polygon,Vidar,WordPress", "1", "anonymous"
"2026-07-17 22:55:07", "1853180", "https://sei.ambiltogel.net/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-07-20 03:26:37", "100", "True", "None", "vidar", "0", "crep1x"
"2026-07-17 11:10:08", "1852802", "https://okx.kliksm188.top/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-07-20 01:26:45", "100", "True", "None", "vidar", "0", "crep1x"
"2026-07-17 09:14:30", "1852769", "http://144.31.57.94/350be244a2f97a3a4ca8.php", "url", "botnet_cc", "win.stealc", "None", "Stealc", "2026-07-19 20:08:16", "100", "False", "None", "build1,c2,loader,StealC,stealer", "0", "Bitsight"
"2026-07-10 13:27:05", "1848061", "https://bdm.kencangsm188.top/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-07-20 02:26:07", "75", "False", "None", "mp44s1,Vidar", "0", "abuse_ch"
"2026-07-05 09:50:45", "1844960", "http://91.202.233.134/4d95d68e3fc64f3bbbf5.php", "url", "botnet_cc", "win.stealc", "None", "Stealc", "2026-07-20 03:12:13", "75", "False", "https://bazaar.abuse.ch/sample/1095cf2951bbc8b1ecd33798afad192449a102aa1b976fb60bf566a08d693587/", "stealc", "0", "abuse_ch"
"2026-06-26 12:25:15", "1838123", "https://k1h.hopesm188.top/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-07-20 03:25:24", "75", "False", "None", "k5yss1,Vidar", "0", "abuse_ch"
"2026-06-06 05:24:31", "1823853", "https://pas.sm188star.top/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-07-20 03:24:11", "75", "False", "None", "ar3k0,Vidar", "0", "abuse_ch"
"2026-06-03 18:58:52", "1821983", "http://178.16.54.109/sodola", "url", "payload_delivery", "win.phorpiex", "Tldr,Trik,TwizT,phorphiex", "Phorpiex", "2026-07-19 23:33:26", "100", "False", "None", "Download,Phorpiex", "0", "Bitsight"
"2026-05-29 15:30:50", "1819843", "https://mub.depansm188.top/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-07-20 03:23:50", "100", "True", "None", "vidar", "0", "crep1x"
"2026-05-23 22:00:09", "1817758", "https://cyy.turbo88ml.top/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-07-20 03:23:28", "100", "True", "None", "vidar", "0", "crep1x"
"2026-05-15 16:00:12", "1815074", "https://pgo.fatherchrismas.com/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-07-20 03:23:07", "100", "True", "None", "vidar", "0", "crep1x"
"2026-05-11 23:00:12", "1811188", "https://mpd.pegasus-77.biz.id/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-07-20 03:22:46", "100", "True", "None", "vidar", "0", "crep1x"
"2026-05-02 05:24:17", "1803956", "https://arsimonopa.com/live/", "url", "botnet_cc", "win.latrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "2026-07-20 03:57:01", "100", "False", "None", "c2,Latrodectus", "0", "Bitsight"
"2026-05-02 05:24:15", "1803960", "https://lemonimonakio.com/live/", "url", "botnet_cc", "win.latrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "2026-07-20 04:05:03", "100", "False", "None", "c2,Latrodectus", "0", "Bitsight"
"2026-05-01 14:30:24", "1803671", "https://frr.ambil-disini.web.id/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-07-20 03:22:25", "100", "True", "None", "vidar", "0", "crep1x"
"2026-04-26 19:14:08", "1800528", "http://pillow.riverbridge.site", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-07-20 03:22:04", "75", "False", "None", "ipocalur,Vidar", "0", "abuse_ch"
"2026-04-26 18:11:00", "1800411", "http://91.92.242.236/oPvjr94jfe/index.php", "url", "botnet_cc", "win.amadey", "None", "Amadey", "2026-07-20 04:05:03", "100", "False", "None", "54e64e,amadey,c2", "0", "Bitsight"
"2026-04-24 15:18:01", "1797247", "https://psy.flise-mesteren.dk/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-07-20 03:21:43", "75", "False", "None", "r88vry,Vidar", "0", "abuse_ch"
"2026-04-23 04:45:34", "1796426", "http://196.251.107.248/kont2rt/index.php", "url", "botnet_cc", "win.amadey", "None", "Amadey", "2026-07-20 03:42:08", "100", "False", "None", "Amadey", "0", "abuse_ch"
"2026-04-22 11:17:09", "1796067", "http://wrath.bottlevacuum.shop", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-07-20 03:21:53", "75", "False", "None", "opiusra,Vidar", "0", "abuse_ch"
"2026-04-19 18:25:29", "1794638", "http://213.5.130.87", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-07-19 18:01:37", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2026-04-17 18:15:06", "1793645", "http://213.5.130.147", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-07-19 18:01:36", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2026-04-17 17:13:25", "1793616", "https://ask.shurimaster.com/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-07-20 03:20:58", "75", "False", "None", "a10fsw,Vidar", "0", "abuse_ch"
"2026-04-16 16:13:56", "1792849", "https://pir.rapidphonebuyer.co.uk/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-07-20 03:18:40", "75", "False", "None", "d0b0p,Vidar", "0", "abuse_ch"
"2026-04-16 11:16:17", "1792718", "http://gusto.brothbridge.space", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-07-20 03:21:22", "75", "False", "None", "odiznrio,Vidar", "0", "abuse_ch"
"2026-04-15 11:43:19", "1791747", "http://107.189.24.190:80", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-07-20 03:15:57", "75", "False", "None", "gr00n1,Vidar", "0", "abuse_ch"
"2026-04-15 08:15:13", "1791687", "http://venom.summertunnel.shop", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-07-20 03:21:09", "75", "False", "None", "ozpifus,Vidar", "0", "abuse_ch"
"2026-04-14 16:03:10", "1790857", "https://lts.cloudvaly.com/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-07-20 03:13:04", "75", "False", "None", "ho0r1,Vidar", "0", "abuse_ch"
"2026-04-14 14:11:18", "1790170", "http://dzodu.sparklingideas.space", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-07-20 03:20:27", "75", "False", "None", "odzdkzo,Vidar", "0", "abuse_ch"
"2026-04-14 14:10:11", "1790169", "http://kdije.weirdthings.site", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-07-20 03:17:36", "75", "False", "None", "okfueh,Vidar", "0", "abuse_ch"
"2026-04-14 11:32:51", "1787027", "https://cannabis-dna.com/", "url", "payload_delivery", "win.vidar", "None", "Vidar", "2026-07-20 03:15:02", "75", "True", "None", "ClickFix,compromised,EtherHiding,Polygon,Vidar,WordPress", "1", "anonymous"
"2026-04-13 07:46:34", "1785049", "https://pre.hifive.net.au/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-07-20 03:20:06", "100", "False", "", "Vidar", "0", "crep1x"
"2026-04-07 07:43:55", "1782152", "http://dzdi.serendipityhub.space/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-07-20 03:19:55", "100", "False", "", "Vidar", "0", "crep1x"
"2026-04-03 16:12:59", "1780716", "https://hor.kaitorinihon.jp/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-07-20 03:19:02", "100", "False", "", "Vidar", "0", "crep1x"
"2026-03-27 21:24:17", "1777601", "https://pn2.skfilmsint.com/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-07-20 03:17:47", "100", "False", "", "Vidar", "0", "crep1x"
"2026-03-27 21:24:17", "1777603", "https://gre.syslicense.net/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-07-20 03:17:12", "100", "False", "", "Vidar", "0", "crep1x"
"2026-03-27 21:24:17", "1777605", "http://fefeo.iknowthat.space/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-07-20 03:18:08", "100", "False", "", "Vidar", "0", "crep1x"
"2026-03-23 08:01:55", "1774200", "https://msi.swadeshcomputer.com/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-07-20 03:16:40", "100", "False", "", "Vidar", "0", "crep1x"
"2026-03-20 13:59:49", "1772370", "https://pr2.codetohaven.com/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-07-20 03:16:29", "100", "False", "", "Vidar", "0", "crep1x"
"2026-03-19 13:11:20", "1771455", "https://dhzuadd.hellothere.sbs", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-07-20 03:17:01", "75", "False", "None", "drkfiz,Vidar", "0", "abuse_ch"
"2026-03-13 15:05:58", "1765442", "https://pan.paihost.com/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-07-20 03:15:47", "100", "False", "", "Vidar", "0", "crep1x"
"2026-03-09 09:29:17", "1762131", "https://ooe.myserver.com.bd/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-07-20 03:15:36", "100", "False", "", "Vidar", "0", "crep1x"
"2026-03-05 06:17:58", "1758456", "http://213.5.130.197", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-07-19 18:01:37", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2026-03-05 06:17:57", "1758457", "http://213.5.130.154", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-07-19 18:01:35", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2026-03-05 06:17:56", "1758458", "http://213.5.130.200", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-07-19 18:01:36", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2026-03-05 06:17:55", "1758459", "http://213.5.130.131", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-07-19 18:01:37", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2026-03-05 06:17:54", "1758460", "http://213.5.130.179", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-07-19 18:01:37", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2026-03-05 06:17:54", "1758461", "http://213.5.130.189", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-07-19 18:01:37", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2026-03-02 09:30:33", "1756622", "https://ctl.it-bd.com/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-07-20 03:15:04", "100", "False", "", "Vidar", "0", "crep1x"
"2026-02-23 10:06:47", "1753432", "https://glo.gadgetwalabd.com/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-07-20 03:14:31", "100", "False", "", "Vidar", "0", "crep1x"
"2026-02-13 14:01:02", "1747538", "https://gor.emiraride.com/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-07-20 03:14:09", "100", "False", "", "Vidar", "0", "crep1x"
"2026-02-09 11:13:23", "1743622", "https://opa.dokantrack.com/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-07-20 03:13:48", "100", "False", "", "Vidar", "0", "crep1x"
"2026-01-26 13:57:13", "1737664", "https://fluraresto.me/live/", "url", "botnet_cc", "win.latrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "2026-07-20 04:03:24", "100", "False", "None", "c2,Latrodectus", "0", "Bitsight"
"2026-01-26 13:57:13", "1737665", "https://mastralakkot.live/live/", "url", "botnet_cc", "win.latrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "2026-07-20 03:53:22", "100", "False", "None", "c2,Latrodectus", "0", "Bitsight"
"2026-01-23 09:14:26", "1736049", "https://lat.sodstreams.com/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-07-20 03:13:36", "100", "False", "", "Vidar", "0", "crep1x"
"2026-01-05 13:21:42", "1691605", "http://213.5.130.122", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-07-19 18:01:37", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2026-01-05 13:21:41", "1691603", "http://213.5.130.151", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-07-19 18:01:36", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2026-01-05 13:21:40", "1691604", "http://213.5.130.124", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-07-19 18:01:37", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2026-01-05 13:21:40", "1691606", "http://213.5.130.187", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-07-19 18:01:38", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2026-01-05 10:06:50", "1691488", "https://ptn.passadisco.com.br/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-07-20 03:12:31", "100", "False", "", "Vidar", "0", "crep1x"
"2025-12-05 18:46:02", "1668163", "https://penguinpublishers.org/files/audio/meowingcybercat.mp3", "url", "payload_delivery", "unknown", "None", "Unknown malware", "2026-07-19 07:37:54", "100", "False", "", "ClickFix", "0", "HuntYethHounds"
"2025-12-02 17:06:21", "1666197", "https://pizzabyte.com.au/smartdetection/deviceverification/CF/path/captcha", "url", "payload_delivery", "unknown", "None", "Unknown malware", "2026-07-19 07:37:56", "100", "False", "", "ClickFix", "0", "HuntYethHounds"
"2025-12-01 14:57:52", "1665523", "http://213.5.130.104", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-07-19 18:01:38", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2025-12-01 14:57:52", "1665524", "http://213.5.130.180", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-07-19 18:01:38", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2025-12-01 14:57:50", "1665525", "http://213.5.130.106", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-07-19 18:01:36", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2025-12-01 14:57:49", "1665526", "http://213.5.130.102", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-07-19 18:01:36", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2025-12-01 14:57:49", "1665527", "http://213.5.130.152", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-07-19 18:01:37", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2025-12-01 14:57:49", "1665528", "http://213.5.130.107", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-07-19 18:01:37", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2025-12-01 14:57:49", "1665529", "http://213.5.130.153", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-07-19 18:01:37", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2025-12-01 14:57:48", "1665530", "http://213.5.130.100", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-07-19 18:01:36", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2025-12-01 14:57:48", "1665531", "http://213.5.130.182", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-07-19 18:01:36", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2025-12-01 14:57:47", "1665532", "http://213.5.130.181", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-07-19 18:01:38", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2025-11-27 17:05:52", "1651704", "https://configservermu.net/cloudflare/challenge/iamhumanverification/ID537272815/", "url", "payload_delivery", "unknown", "None", "Unknown malware", "2026-07-19 07:37:55", "100", "False", "", "ClickFix", "0", "HuntYethHounds"
"2025-11-25 06:01:37", "1649775", "http://213.5.130.84", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-07-19 18:01:36", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2025-11-25 06:01:36", "1649776", "http://213.5.130.96", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-07-19 18:01:38", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2025-11-25 06:01:36", "1649777", "http://213.5.130.98", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-07-19 18:01:36", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2025-11-25 06:01:35", "1649778", "http://213.5.130.160", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-07-19 18:01:35", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2025-11-17 13:58:09", "1645520", "http://185.132.133.140", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-07-19 18:01:38", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2025-11-04 15:04:37", "1633346", "https://seo-conference.by/wp-themes/Cloudflare/Verification/UserID6389452515832/", "url", "payload_delivery", "unknown", "None", "Unknown malware", "2026-07-19 07:37:55", "100", "False", "", "ClickFix", "0", "HuntYethHounds"
"2025-10-21 13:19:24", "1624166", "http://213.5.130.75", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-07-19 18:01:37", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2025-10-21 13:19:23", "1624167", "http://213.5.130.10", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-07-19 18:01:36", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2025-10-21 13:19:22", "1624170", "http://213.5.130.89", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-07-19 18:01:36", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2025-05-11 05:00:18", "1519451", "https://lofiramegi.com/test/", "url", "botnet_cc", "win.latrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "2026-07-20 04:02:26", "100", "False", "", "None", "0", "Rony"
"2025-05-11 05:00:17", "1519450", "https://topguningit.com/test/", "url", "botnet_cc", "win.latrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "2026-07-20 03:52:24", "100", "False", "", "None", "0", "Rony"
"2025-02-06 13:54:51", "1405307", "https://apworsindos.com/test/", "url", "botnet_cc", "win.latrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "2026-07-20 03:48:41", "100", "False", "", "None", "0", "Rony"
"2025-02-06 13:54:51", "1405308", "https://reminasolirol.com/test/", "url", "botnet_cc", "win.latrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "2026-07-20 03:56:42", "100", "False", "", "None", "0", "Rony"
"2025-02-01 20:47:38", "1402273", "https://vivaforevew.com/test/", "url", "botnet_cc", "win.latrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "2026-07-20 03:59:38", "100", "False", "", "None", "0", "Rony"
"2025-02-01 20:47:38", "1402274", "https://wersogkiwgow.com/test/", "url", "botnet_cc", "win.latrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "2026-07-20 03:49:36", "100", "False", "", "None", "0", "Rony"
"2025-01-18 16:10:00", "1386236", "https://135.181.31.18", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-07-20 03:10:58", "100", "False", "", "None", "0", "Gi7w0rm"
"2024-10-22 13:56:41", "1338675", "https://stripplasst.com/live/", "url", "botnet_cc", "win.latrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "2026-07-20 03:54:20", "100", "False", "https://www.vmray.com/latrodectus-a-year-in-the-making/", "c2,latrodectus,vmray", "0", "DonPasci"
"2024-10-22 13:56:39", "1338673", "https://skinnyjeanso.com/live/", "url", "botnet_cc", "win.latrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "2026-07-20 03:57:34", "100", "False", "https://www.vmray.com/latrodectus-a-year-in-the-making/", "c2,latrodectus,vmray", "0", "DonPasci"
"2024-10-22 13:56:34", "1338670", "https://coolarition.com/live/", "url", "botnet_cc", "win.latrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "2026-07-20 04:02:21", "100", "False", "https://www.vmray.com/latrodectus-a-year-in-the-making/", "c2,latrodectus,vmray", "0", "DonPasci"
"2024-09-19 14:07:51", "1326051", "https://isomicrotich.com/test/", "url", "botnet_cc", "win.latrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "2026-07-20 03:52:30", "50", "False", "None", "1.7,Alpha", "0", "spamhaus"
"2024-09-19 14:07:50", "1326052", "https://rilomenifis.com/test/", "url", "botnet_cc", "win.latrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "2026-07-20 04:02:33", "50", "False", "None", "1.7,Alpha", "0", "spamhaus"
"2024-08-30 07:05:10", "1317376", "https://pikchestop.com/test/", "url", "botnet_cc", "win.lactrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "2026-07-20 03:56:46", "49", "False", "https://www.netskope.com/jp/blog/latrodectus-rapid-evolution-continues-with-latest-new-payload-features", "None", "0", "johannes"
"2024-08-30 07:05:10", "1317377", "https://indepahote.com/test/", "url", "botnet_cc", "win.lactrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "2026-07-20 03:46:43", "49", "False", "https://www.netskope.com/jp/blog/latrodectus-rapid-evolution-continues-with-latest-new-payload-features", "None", "0", "johannes"
"2024-05-27 16:13:21", "1276244", "https://65.108.55.55:9000/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-07-20 03:10:26", "100", "False", "", "Vidar", "0", "crep1x"
"2024-03-22 19:47:18", "1248363", "https://titnovacrion.top/live/", "url", "botnet_cc", "win.unidentified_111", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Unidentified 111 (Latrodectus)", "2026-07-20 03:48:10", "100", "False", "", "None", "0", "Cryptolaemus1"
"2024-01-16 08:13:32", "1230963", "https://65.21.187.53/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-07-20 03:10:15", "100", "False", "", "Vidar", "0", "crep1x"
# Number of entries: 158