################################################################
# ThreatFox IOCs: recent URLs - CSV format                     #
# Last updated: 2026-09-04 08:50:46 UTC                        #
#                                                              #
# Terms Of Use: https://threatfox.abuse.ch/faq/#tos            #
# For questions please contact threatfox [at] abuse.ch         #
################################################################
#
# "first_seen_utc","ioc_id","ioc_value","ioc_type","threat_type","fk_malware","malware_alias","malware_printable","last_seen_utc","confidence_level","is_compromised","reference","tags","anonymous","reporter"
"2026-09-04 08:50:46", "1894238", "https://day.sm188dvlv.mom/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "True", "None", "vidar", "0", "crep1x"
"2026-09-04 08:50:45", "1894236", "https://day.13balien.org/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "True", "None", "vidar", "0", "crep1x"
"2026-09-04 07:05:03", "1894211", "https://cdn.jsdelivr.net/gh/frantario/a3744/1-2784", "url", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-09-04 06:42:53", "1894036", "http://223.123.35.122:44628/Mozi.m", "url", "payload_delivery", "elf.mozi", "None", "Mozi", "", "75", "False", "https://honeylabs.net/lookup/223.123.35.122", "elf,iot,Mozi", "0", "HoneyLabs"
"2026-09-04 06:42:52", "1894037", "http://115.57.204.186:60274/Mozi.m", "url", "payload_delivery", "elf.mozi", "None", "Mozi", "", "75", "False", "https://honeylabs.net/lookup/115.57.204.186", "elf,iot,Mozi", "0", "HoneyLabs"
"2026-09-04 06:42:52", "1894038", "http://105.198.0.3:37775/Mozi.m", "url", "payload_delivery", "elf.mozi", "None", "Mozi", "", "75", "False", "https://honeylabs.net/lookup/105.198.0.3", "elf,iot,Mozi", "0", "HoneyLabs"
"2026-09-04 06:42:51", "1894039", "http://139.135.59.203:59228/Mozi.7", "url", "payload_delivery", "elf.mozi", "None", "Mozi", "", "75", "False", "https://honeylabs.net/lookup/139.135.59.203", "elf,iot,Mozi", "0", "HoneyLabs"
"2026-09-04 06:42:48", "1894126", "http://52.249.219.108:3001/api/upload", "url", "botnet_cc", "unknown_rat", "None", "Unknown RAT", "", "50", "True", "https://app.any.run/tasks/4e4105fc-01f7-4a31-bc61-1d3689396097", "exastealer,RAT,stealer", "0", "lucibee"
"2026-09-04 06:42:48", "1894127", "http://52.249.219.108:3001/ws", "url", "botnet_cc", "unknown_rat", "None", "Unknown RAT", "", "50", "True", "https://app.any.run/tasks/4e4105fc-01f7-4a31-bc61-1d3689396097", "exastealer,RAT,stealer", "0", "lucibee"
"2026-09-04 06:42:46", "1894145", "https://d1u70y867zmoi6.cloudfront.net/helper", "url", "payload_delivery", "unknown_rat", "None", "Unknown RAT", "", "75", "False", "None", "RAT", "1", "anonymous"
"2026-09-04 06:42:46", "1894146", "http://18.136.197.129/init", "url", "payload_delivery", "unknown_rat", "None", "Unknown RAT", "", "75", "False", "None", "RAT", "1", "anonymous"
"2026-09-04 06:42:45", "1894147", "https://66.179.31.11/linux/linux_pwn.zip", "url", "payload_delivery", "unknown_rat", "None", "Unknown RAT", "", "75", "False", "None", "RAT", "1", "anonymous"
"2026-09-04 06:42:45", "1894148", "https://66.179.31.11/linux/mac_pwn.zip", "url", "payload_delivery", "unknown_rat", "None", "Unknown RAT", "", "75", "False", "None", "RAT", "1", "anonymous"
"2026-09-04 06:42:42", "1894196", "http://113.255.196.148:47674/Mozi.m", "url", "payload_delivery", "elf.mozi", "None", "Mozi", "", "75", "False", "https://honeylabs.net/lookup/113.255.196.148", "elf,iot,Mozi", "0", "HoneyLabs"
"2026-09-04 06:42:42", "1894197", "http://190.196.253.116:11818/Mozi.m", "url", "payload_delivery", "elf.mozi", "None", "Mozi", "", "75", "False", "https://honeylabs.net/lookup/190.196.253.116", "elf,iot,Mozi", "0", "HoneyLabs"
"2026-09-04 06:42:41", "1894199", "http://72.255.33.66:58752/Mozi.a", "url", "payload_delivery", "elf.mozi", "None", "Mozi", "", "75", "False", "https://honeylabs.net/lookup/72.255.33.66", "elf,iot,Mozi", "0", "HoneyLabs"
"2026-09-04 06:42:40", "1894198", "http://2.26.124.67:889/agustin51", "url", "payload_delivery", "elf.mirai", "Katana", "Mirai", "", "75", "False", "https://honeylabs.net/lookup/2.26.124.67", "elf,iot", "0", "HoneyLabs"
"2026-09-04 02:25:46", "1894142", "https://xi3.sm188dvlv.mom/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "True", "None", "vidar", "0", "crep1x"
"2026-09-04 02:25:45", "1894140", "https://xi3.13balien.org/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "True", "None", "vidar", "0", "crep1x"
"2026-09-04 01:20:27", "1894131", "https://2.29.21.253", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-04 09:53:49", "75", "False", "https://bazaar.abuse.ch/sample/e8ea06ea59484643d43227b3ceb46a914e214ff5744d80c0324b80cf5afbb954/", "vidar", "0", "abuse_ch"
"2026-09-04 00:30:48", "1894040", "https://lesjardinsduchateauperdu.fr/", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "90", "False", "https://clickfix.carsonww.com/domains/lesjardinsduchateauperdu.fr", "ClickFix", "0", "CarsonWilliams"
"2026-09-03 22:35:46", "1894026", "https://gdo.sm188dvlv.mom/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "True", "None", "vidar", "0", "crep1x"
"2026-09-03 22:35:45", "1894024", "https://gdo.13balien.org/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "True", "None", "vidar", "0", "crep1x"
"2026-09-03 22:03:25", "1894019", "https://cdn.jsdelivr.net/gh/cowenrty/60-13-96-DA-AA-3C/2b", "url", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-09-03 21:43:54", "1894017", "https://raw.githubusercontent.com/cowenrty/60-13-96-DA-AA-3C/refs/heads/main/2b", "url", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-09-03 21:24:09", "1894016", "http://http://85.209.87.73/login", "url", "botnet_cc", "unknown_loader", "None", "Unknown Loader", "", "100", "False", "", "kali365", "0", "varysz"
"2026-09-03 20:17:32", "1893907", "https://guiglen.sbs/api/v1/session", "url", "payload_delivery", "js.kongtuke", "TAG-124,js.LandUpdate808", "KongTuke", "2026-09-03 19:36:15", "100", "True", "https://infosec.exchange/@monitorsg/117207736614207041", "KongTuke", "0", "monitorsg"
"2026-09-03 20:17:32", "1893909", "https://guiglen.sbs/api/v1/status", "url", "payload_delivery", "js.kongtuke", "TAG-124,js.LandUpdate808", "KongTuke", "", "100", "True", "https://infosec.exchange/@monitorsg/117207736614207041", "KongTuke", "0", "monitorsg"
"2026-09-03 20:17:31", "1893908", "https://guiglen.sbs/api/v1/verify", "url", "payload_delivery", "js.kongtuke", "TAG-124,js.LandUpdate808", "KongTuke", "2026-09-03 19:36:18", "100", "True", "https://infosec.exchange/@monitorsg/117207736614207041", "KongTuke", "0", "monitorsg"
"2026-09-03 20:17:29", "1893929", "https://workerwing.net/js/all.min.js", "url", "payload_delivery", "unknown", "None", "Unknown malware", "2026-09-03 16:41:51", "80", "False", "None", "ClickFix,Etherhide", "0", "ViriBack"
"2026-09-03 20:17:28", "1893930", "https://identityoneexpress.net/js/all.min.js", "url", "payload_delivery", "unknown", "None", "Unknown malware", "2026-09-03 16:41:52", "80", "False", "None", "ClickFix,Etherhide", "0", "ViriBack"
"2026-09-03 20:17:28", "1893931", "https://sessionstoresys.com/js/all.min.js", "url", "payload_delivery", "unknown", "None", "Unknown malware", "2026-09-03 16:41:53", "80", "False", "None", "ClickFix,Etherhide", "0", "ViriBack"
"2026-09-03 20:17:26", "1893946", "http://223.123.35.123:38629/Mozi.m", "url", "payload_delivery", "elf.mozi", "None", "Mozi", "", "75", "False", "https://honeylabs.net/lookup/223.123.35.123", "elf,iot,Mozi", "0", "HoneyLabs"
"2026-09-03 20:17:25", "1893940", "https://ukrbaz.com", "url", "payload_delivery", "win.gogoogle", "BossiTossi", "GoGoogle", "", "75", "False", "", "clickfix,FakeInstaller,GoogleMeet,Latrodectus,LunarSpider,MSI", "0", "LocalReporter"
"2026-09-03 20:17:24", "1893941", "http://ukrbaz.com", "url", "payload_delivery", "js.fakeupdates", "FakeUpdate,GhoLoader,SocGholish", "FAKEUPDATES", "", "75", "False", "", "ClickFix,FakeInstaller,GoogleMeet,Latrodectus,LunarSpider,MSI,PsychzNetworks", "0", "LocalReporter"
"2026-09-03 18:12:54", "1893945", "https://raw.githubusercontent.com/cowenrty/thinness/refs/heads/main/explicit", "url", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-09-03 18:01:06", "1893943", "https://raw.githubusercontent.com/frantario/step/refs/heads/main/stimulate", "url", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-09-03 17:30:49", "1893942", "https://rccgcrownofglory.com/", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "90", "False", "https://clickfix.carsonww.com/domains/rccgcrownofglory.com", "ClickFix", "0", "CarsonWilliams"
"2026-09-03 16:50:20", "1893935", "https://46.62.133.5", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-04 09:50:29", "75", "False", "https://bazaar.abuse.ch/sample/b88e9c5d6268063be3dfa3733aeb93eb9b870e0258b14f4053882b06df3ea556/", "vidar", "0", "abuse_ch"
"2026-09-03 15:40:46", "1893914", "https://ram.13balien.org/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "True", "None", "vidar", "0", "crep1x"
"2026-09-03 15:40:46", "1893916", "https://ram.sm188dvlv.mom/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "True", "None", "vidar", "0", "crep1x"
"2026-09-03 15:30:49", "1893911", "https://keralafolkloreakademy.com/", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "90", "False", "https://clickfix.carsonww.com/domains/keralafolkloreakademy.com", "ClickFix", "0", "CarsonWilliams"
"2026-09-03 15:30:49", "1893912", "https://cloudflare-protect.net/", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "90", "False", "https://clickfix.carsonww.com/domains/cloudflare-protect.net", "ClickFix", "0", "CarsonWilliams"
"2026-09-03 14:23:07", "1893898", "https://raw.githubusercontent.com/frantario/shrapnel/refs/heads/main/rosy", "url", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-09-03 13:45:22", "1893886", "https://copperlodestar.info/dashboard/beta-cache.js", "url", "botnet_cc", "js.smartapesg", "HANEYMANEY,ZPHP", "SmartApeSG", "", "100", "False", "", "SmartApeSG", "0", "varysz"
"2026-09-03 13:40:48", "1893881", "https://walmagua.cc/complete", "url", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "False", "https://bazaar.abuse.ch/sample/cbc81b4999b5f5dd87ab7cd67da6bce916c28c5f03ad8622c546dc8b5e624c1d/", "None", "0", "abuse_ch"
"2026-09-03 13:40:48", "1893882", "https://walmagua.cc/chunk", "url", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "False", "https://bazaar.abuse.ch/sample/cbc81b4999b5f5dd87ab7cd67da6bce916c28c5f03ad8622c546dc8b5e624c1d/", "None", "0", "abuse_ch"
"2026-09-03 13:40:48", "1893883", "https://walmagua.cc/api/client-tasks", "url", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "False", "https://bazaar.abuse.ch/sample/cbc81b4999b5f5dd87ab7cd67da6bce916c28c5f03ad8622c546dc8b5e624c1d/", "None", "0", "abuse_ch"
"2026-09-03 13:40:47", "1893880", "https://walmagua.cc/connect", "url", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "False", "https://bazaar.abuse.ch/sample/cbc81b4999b5f5dd87ab7cd67da6bce916c28c5f03ad8622c546dc8b5e624c1d/", "None", "0", "abuse_ch"
"2026-09-03 13:16:13", "1893824", "https://saaverra.sbs/api/v1/status", "url", "payload_delivery", "js.kongtuke", "TAG-124,js.LandUpdate808", "KongTuke", "", "100", "True", "None", "KongTuke", "0", "monitorsg"
"2026-09-03 13:00:36", "1893823", "http://zonxh.shop:7728/videos", "url", "botnet_cc", "win.remus", "None", "Remus", "", "75", "False", "https://bazaar.abuse.ch/sample/72f9149a13822fb42eb1b3a4075fb5f42be7474875814405ee46e402e062985c/", "remus", "0", "abuse_ch"
"2026-09-03 13:00:35", "1893822", "http://fresok.top:9048/reviews", "url", "botnet_cc", "win.remus", "None", "Remus", "", "75", "False", "https://bazaar.abuse.ch/sample/72f9149a13822fb42eb1b3a4075fb5f42be7474875814405ee46e402e062985c/", "remus", "0", "abuse_ch"
"2026-09-03 12:30:26", "1893820", "http://neortal.click:8321/workspaces", "url", "botnet_cc", "win.remus", "None", "Remus", "", "75", "False", "https://bazaar.abuse.ch/sample/09dc920440c44799eca2afdd6203e4c336d6c02d61132951a05e69b401a95aea/", "remus", "0", "abuse_ch"
"2026-09-03 12:30:25", "1893819", "http://cdire.shop:9048/permissions", "url", "botnet_cc", "win.remus", "None", "Remus", "", "75", "False", "https://bazaar.abuse.ch/sample/09dc920440c44799eca2afdd6203e4c336d6c02d61132951a05e69b401a95aea/", "remus", "0", "abuse_ch"
"2026-09-03 12:21:58", "1893817", "http://105.184.226.175:60791/Mozi.a", "url", "payload_delivery", "elf.mozi", "None", "Mozi", "", "75", "False", "https://honeylabs.net/lookup/105.184.226.175", "elf,iot,Mozi", "0", "HoneyLabs"
"2026-09-03 12:00:49", "1893814", "https://aksi-tajuk.absolute-water.app/", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "90", "False", "https://clickfix.carsonww.com/domains/aksi-tajuk.absolute-water.app", "ClickFix", "0", "CarsonWilliams"
"2026-09-03 11:43:20", "1893802", "https://raw.githubusercontent.com/frantario/gfyruer/refs/heads/main/djhgjh75034", "url", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-09-03 10:45:45", "1893789", "https://s77.sm188dvlv.mom/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "True", "None", "vidar", "0", "crep1x"
"2026-09-03 10:40:45", "1893787", "https://s77.13balien.org/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "True", "None", "vidar", "0", "crep1x"
"2026-09-03 09:30:49", "1893757", "https://bariel.id/", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "90", "False", "https://clickfix.carsonww.com/domains/bariel.id", "ClickFix", "0", "CarsonWilliams"
"2026-09-03 09:30:49", "1893758", "https://mabuyi.co.za/", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "90", "False", "https://clickfix.carsonww.com/domains/mabuyi.co.za", "ClickFix", "0", "CarsonWilliams"
"2026-09-03 09:30:49", "1893759", "https://david.advancecreative.co.uk/", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "90", "False", "https://clickfix.carsonww.com/domains/david.advancecreative.co.uk", "ClickFix", "0", "CarsonWilliams"
"2026-09-03 09:02:38", "1893746", "https://178.104.22.105/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-09-03 09:02:38", "1893747", "https://2.29.29.217/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-09-03 09:02:37", "1893742", "https://gen.sm188dvlv.lat/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-09-03 09:02:37", "1893743", "https://for.sm188dvlv.lat/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-09-03 09:02:37", "1893744", "https://cle.sm188dvlv.lol/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-09-03 09:02:37", "1893745", "https://m5p.sm188dvlv.lol/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-09-03 09:02:36", "1893740", "https://hot.sm188dvlv.mom/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-03 09:37:14", "100", "False", "", "Vidar", "0", "crep1x"
"2026-09-03 09:02:36", "1893741", "https://fpw.sm188dvlv.mom/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-09-03 08:30:49", "1893730", "https://granoco.com/", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "90", "False", "https://clickfix.carsonww.com/domains/granoco.com", "ClickFix", "0", "CarsonWilliams"
"2026-09-03 08:00:50", "1893711", "https://portaleducoas.org/", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "90", "False", "https://clickfix.carsonww.com/domains/portaleducoas.org", "ClickFix", "0", "CarsonWilliams"
"2026-09-03 08:00:49", "1893708", "https://bhagwatibiscuits.com/", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "90", "False", "https://clickfix.carsonww.com/domains/bhagwatibiscuits.com", "ClickFix", "0", "CarsonWilliams"
"2026-09-03 08:00:49", "1893709", "https://elkon.gr/", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "90", "False", "https://clickfix.carsonww.com/domains/elkon.gr", "ClickFix", "0", "CarsonWilliams"
"2026-09-03 08:00:49", "1893710", "https://atlantasbestconcrete.com/", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "90", "False", "https://clickfix.carsonww.com/domains/atlantasbestconcrete.com", "ClickFix", "0", "CarsonWilliams"
"2026-09-03 07:30:51", "1893697", "https://vertixtech.net/", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "90", "False", "https://clickfix.carsonww.com/domains/vertixtech.net", "ClickFix", "0", "CarsonWilliams"
"2026-09-03 07:30:51", "1893698", "https://alholol-almobtakara.com/", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "90", "False", "https://clickfix.carsonww.com/domains/alholol-almobtakara.com", "ClickFix", "0", "CarsonWilliams"
"2026-09-03 07:30:51", "1893699", "https://web-stakecasino.com/", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "90", "False", "https://clickfix.carsonww.com/domains/web-stakecasino.com", "ClickFix", "0", "CarsonWilliams"
"2026-09-03 07:30:51", "1893700", "https://amazonia4.org/", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "90", "False", "https://clickfix.carsonww.com/domains/amazonia4.org", "ClickFix", "0", "CarsonWilliams"
"2026-09-03 07:30:51", "1893701", "https://www.ricevimentialkamar.it/", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "90", "False", "https://clickfix.carsonww.com/domains/www.ricevimentialkamar.it", "ClickFix", "0", "CarsonWilliams"
"2026-09-03 07:30:51", "1893702", "https://laptopgo.co.id/", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "90", "False", "https://clickfix.carsonww.com/domains/laptopgo.co.id", "ClickFix", "0", "CarsonWilliams"
"2026-09-03 07:30:51", "1893703", "https://simospartyprint.co.uk/", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "90", "False", "https://clickfix.carsonww.com/domains/simospartyprint.co.uk", "ClickFix", "0", "CarsonWilliams"
"2026-09-03 07:30:50", "1893690", "https://kala-systems.com/", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "90", "False", "https://clickfix.carsonww.com/domains/kala-systems.com", "ClickFix", "0", "CarsonWilliams"
"2026-09-03 07:30:50", "1893691", "https://staging.elevateconsultinghub.com/", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "90", "False", "https://clickfix.carsonww.com/domains/staging.elevateconsultinghub.com", "ClickFix", "0", "CarsonWilliams"
"2026-09-03 07:30:50", "1893692", "https://mail.sporium.net/", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "90", "False", "https://clickfix.carsonww.com/domains/mail.sporium.net", "ClickFix", "0", "CarsonWilliams"
"2026-09-03 07:30:50", "1893693", "https://kacstonerecords.com/", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "90", "False", "https://clickfix.carsonww.com/domains/kacstonerecords.com", "ClickFix", "0", "CarsonWilliams"
"2026-09-03 07:30:50", "1893694", "https://www.forlagetkompass.se/", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "90", "False", "https://clickfix.carsonww.com/domains/www.forlagetkompass.se", "ClickFix", "0", "CarsonWilliams"
"2026-09-03 07:30:50", "1893695", "https://www.parcelpacky.com/", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "90", "False", "https://clickfix.carsonww.com/domains/www.parcelpacky.com", "ClickFix", "0", "CarsonWilliams"
"2026-09-03 07:30:50", "1893696", "https://harryfernandezf.forgetfulwizard.com/", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "90", "False", "https://clickfix.carsonww.com/domains/harryfernandezf.forgetfulwizard.com", "ClickFix", "0", "CarsonWilliams"
"2026-09-03 07:30:49", "1893679", "https://myvisualstory.de/", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "90", "False", "https://clickfix.carsonww.com/domains/myvisualstory.de", "ClickFix", "0", "CarsonWilliams"
"2026-09-03 07:30:49", "1893680", "https://suitsgreen.com/", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "90", "False", "https://clickfix.carsonww.com/domains/suitsgreen.com", "ClickFix", "0", "CarsonWilliams"
"2026-09-03 07:30:49", "1893681", "https://nutricaocomjo.com/", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "90", "False", "https://clickfix.carsonww.com/domains/nutricaocomjo.com", "ClickFix", "0", "CarsonWilliams"
"2026-09-03 07:30:49", "1893682", "https://www.bookerteeenterprises.com/", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "90", "False", "https://clickfix.carsonww.com/domains/www.bookerteeenterprises.com", "ClickFix", "0", "CarsonWilliams"
"2026-09-03 07:30:49", "1893683", "https://gabariteiros.com.br/", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "90", "False", "https://clickfix.carsonww.com/domains/gabariteiros.com.br", "ClickFix", "0", "CarsonWilliams"
"2026-09-03 07:30:49", "1893684", "https://factspakistan.com/", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "90", "False", "https://clickfix.carsonww.com/domains/factspakistan.com", "ClickFix", "0", "CarsonWilliams"
"2026-09-03 07:30:49", "1893685", "https://strandraeuber-ditzum.de/", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "90", "False", "https://clickfix.carsonww.com/domains/strandraeuber-ditzum.de", "ClickFix", "0", "CarsonWilliams"
"2026-09-03 07:30:49", "1893686", "https://rhuyn.com/", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "90", "False", "https://clickfix.carsonww.com/domains/rhuyn.com", "ClickFix", "0", "CarsonWilliams"
"2026-09-03 07:30:49", "1893687", "https://optimized.net.au/", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "90", "False", "https://clickfix.carsonww.com/domains/optimized.net.au", "ClickFix", "0", "CarsonWilliams"
"2026-09-03 07:30:49", "1893688", "https://agingenieria.com.pe/", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "90", "False", "https://clickfix.carsonww.com/domains/agingenieria.com.pe", "ClickFix", "0", "CarsonWilliams"
"2026-09-03 07:30:49", "1893689", "https://hoh-homecare.com/", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "90", "False", "https://clickfix.carsonww.com/domains/hoh-homecare.com", "ClickFix", "0", "CarsonWilliams"
"2026-09-03 06:27:14", "1893670", "http://223.123.43.33:45481/Mozi.m", "url", "payload_delivery", "elf.mozi", "None", "Mozi", "", "75", "False", "https://honeylabs.net/lookup/223.123.43.33", "elf,iot,Mozi", "0", "HoneyLabs"
"2026-09-03 06:27:13", "1893671", "http://27.77.246.66:44109/Mozi.m", "url", "payload_delivery", "elf.mozi", "None", "Mozi", "", "75", "False", "https://honeylabs.net/lookup/27.77.246.66", "elf,iot,Mozi", "0", "HoneyLabs"
"2026-09-03 06:27:12", "1893672", "http://221.15.20.208:44679/Mozi.m", "url", "payload_delivery", "elf.mozi", "None", "Mozi", "", "75", "False", "https://honeylabs.net/lookup/221.15.20.208", "elf,iot,Mozi", "0", "HoneyLabs"
"2026-09-03 05:39:49", "1893465", "http://vps.atlas101.us.kg", "url", "botnet_cc", "elf.mirai", "Katana", "Mirai", "", "100", "False", "", "FlutterBotnet", "0", "BlinkzSec"
"2026-09-03 05:39:44", "1893472", "http://loveher.dpdns.org", "url", "botnet_cc", "elf.mirai", "Katana", "Mirai", "", "100", "False", "", "FlutterBotnet", "0", "BlinkzSec"
"2026-09-03 05:39:43", "1893473", "http://langec.jewmailer.net:7768", "url", "botnet_cc", "elf.mirai", "Katana", "Mirai", "", "100", "False", "", "AkataruBotnet", "0", "BlinkzSec"
"2026-09-03 05:39:42", "1893474", "http://223.123.71.42:37337/Mozi.m", "url", "payload_delivery", "elf.mozi", "None", "Mozi", "", "75", "False", "https://honeylabs.net/lookup/223.123.71.42", "elf,iot,Mozi", "0", "HoneyLabs"
"2026-09-03 05:39:42", "1893475", "http://153.117.9.176:46305/Mozi.m", "url", "payload_delivery", "elf.mozi", "None", "Mozi", "", "75", "False", "https://honeylabs.net/lookup/153.117.9.176", "elf,iot,Mozi", "0", "HoneyLabs"
"2026-09-03 05:39:22", "1893635", "https://2.29.12.45", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-04 09:40:30", "100", "False", "None", "8796b75de3ef1ea36f4f221928f413b5,c2,loader,stealer,Vidar", "0", "Bitsight"
"2026-09-03 05:39:17", "1893630", "http://160.30.142.218:44307/Mozi.m", "url", "payload_delivery", "elf.mozi", "None", "Mozi", "", "75", "False", "https://honeylabs.net/lookup/160.30.142.218", "elf,iot,Mozi", "0", "HoneyLabs"
"2026-09-03 05:39:16", "1893631", "http://137.59.218.242:50617/Mozi.m", "url", "payload_delivery", "elf.mozi", "None", "Mozi", "", "75", "False", "https://honeylabs.net/lookup/137.59.218.242", "elf,iot,Mozi", "0", "HoneyLabs"
"2026-09-03 05:39:14", "1893632", "http://119.30.117.159:46505/Mozi.m", "url", "payload_delivery", "elf.mozi", "None", "Mozi", "", "75", "False", "https://honeylabs.net/lookup/119.30.117.159", "elf,iot,Mozi", "0", "HoneyLabs"
"2026-09-03 05:39:02", "1893239", "https://v-lan.asia/login", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "None", "0", "g0njxa"
"2026-09-03 05:38:59", "1893236", "https://registration.v-panel.asia/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "None", "0", "g0njxa"
"2026-09-03 05:38:51", "1893231", "https://saaverra.sbs/api/v1/session", "url", "payload_delivery", "js.kongtuke", "TAG-124,js.LandUpdate808", "KongTuke", "2026-09-03 02:07:46", "100", "True", "None", "KongTuke", "0", "monitorsg"
"2026-09-03 05:38:51", "1893232", "https://saaverra.sbs/api/v1/verify", "url", "payload_delivery", "js.kongtuke", "TAG-124,js.LandUpdate808", "KongTuke", "2026-09-03 02:07:46", "100", "True", "None", "KongTuke", "0", "monitorsg"
"2026-09-03 01:45:27", "1893649", "https://46.29.26.47", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-04 00:13:11", "75", "False", "https://bazaar.abuse.ch/sample/7fdd4c3e1a3f88b723d381468107540349533d0665fbc569c6daa739a37c8efc/", "vidar", "0", "abuse_ch"
"2026-09-02 23:37:38", "1893623", "https://raw.githubusercontent.com/cowenrty/empathic/refs/heads/main/cornea", "url", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-09-02 23:15:45", "1893618", "https://hot.13balien.org/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-04 09:54:30", "100", "True", "None", "vidar", "0", "crep1x"
"2026-09-02 23:13:15", "1893616", "https://raw.githubusercontent.com/frantario/cloud/refs/heads/main/situated", "url", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-09-02 16:54:16", "1893463", "https://io.honeysucklefolio.co/status/legacy-view.js", "url", "botnet_cc", "js.smartapesg", "HANEYMANEY,ZPHP", "SmartApeSG", "", "100", "False", "", "SmartApeSG", "0", "varysz"
"2026-09-02 16:28:45", "1893240", "https://31.77.220.180", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "https://bazaar.abuse.ch/sample/d2249e83f7d0f34eaf6ba237c9323f0145ec486509393c69be010b3627e81b10/", "Vidar", "1", "anonymous"
"2026-09-02 16:10:26", "1893229", "https://community.fandom.com/wikia.php?controller=UserProfile&method=getUserData&format=json&userId=63727183", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-04 09:51:12", "75", "False", "https://bazaar.abuse.ch/sample/79eaae1564c6c7cd8a7dd779e124225c9bbeed4b34a59ce8441531231a936748/", "vidar", "0", "abuse_ch"
"2026-09-02 16:05:34", "1893227", "https://telegram.me/nag0e", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-03 09:02:36", "75", "False", "https://bazaar.abuse.ch/sample/a06640a646e810a679fb059e288e8083912022147209ab83d345c06ad72e5633/", "vidar", "0", "abuse_ch"
"2026-09-02 16:05:28", "1893226", "https://dev.epicgames.com/community/api/user_profiles/profile.json?hash_id=XmE5L", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-03 09:02:36", "75", "False", "https://bazaar.abuse.ch/sample/a06640a646e810a679fb059e288e8083912022147209ab83d345c06ad72e5633/", "vidar", "0", "abuse_ch"
"2026-09-02 16:00:53", "1893224", "https://raw.githubusercontent.com/cowenrty/fidgeting/refs/heads/main/obstacle", "url", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-09-02 14:58:01", "1893214", "https://raw.githubusercontent.com/frantario/nativity/refs/heads/main/landing", "url", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-09-02 13:40:03", "1893194", "http://brain.dynip.se:32722/is-ready", "url", "botnet_cc", "win.houdini", "Hworm,Jenxcus,Kognito,Njw0rm,WSHRAT,dinihou,dunihi", "Houdini", "", "100", "False", "None", "RAT,WSHRAT", "0", "abuse_ch"
"2026-09-02 13:35:45", "1893192", "https://fpw.13balien.org/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-04 09:27:14", "100", "True", "None", "vidar", "0", "crep1x"
"2026-09-02 13:04:19", "1893174", "http://72.255.26.49:39564/Mozi.m", "url", "payload_delivery", "elf.mozi", "None", "Mozi", "", "75", "False", "https://honeylabs.net/lookup/72.255.26.49", "elf,iot,Mozi", "0", "HoneyLabs"
"2026-09-02 13:04:19", "1893175", "http://72.255.15.152:50287/Mozi.m", "url", "payload_delivery", "elf.mozi", "None", "Mozi", "", "75", "False", "https://honeylabs.net/lookup/72.255.15.152", "elf,iot,Mozi", "0", "HoneyLabs"
"2026-09-02 13:04:18", "1893176", "http://103.18.14.56:59567/Mozi.m", "url", "payload_delivery", "elf.mozi", "None", "Mozi", "", "75", "False", "https://honeylabs.net/lookup/103.18.14.56", "elf,iot,Mozi", "0", "HoneyLabs"
"2026-09-02 13:04:18", "1893177", "http://72.255.37.113:54826/Mozi.m", "url", "payload_delivery", "elf.mozi", "None", "Mozi", "", "75", "False", "https://honeylabs.net/lookup/72.255.37.113", "elf,iot,Mozi", "0", "HoneyLabs"
"2026-09-02 11:15:54", "1893166", "https://raw.githubusercontent.com/frantario/tranday/refs/heads/main/ruty4839", "url", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-09-02 10:46:03", "1893158", "https://raw.githubusercontent.com/frantario/tropa47/refs/heads/main/lytkc14", "url", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-09-02 02:39:26", "1892888", "https://46.225.104.177", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-03 09:02:38", "100", "False", "https://bazaar.abuse.ch/sample/aebe2aad890a1ac75492bf2d698269870de3f775813ca806b9b8324343919245/", "Vidar", "1", "anonymous"
"2026-09-02 00:25:45", "1892733", "https://gor.138sportlogin.org/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-04 09:04:35", "100", "True", "None", "vidar", "0", "crep1x"
"2026-09-01 17:10:45", "1892599", "https://cle.138sportlogin.org/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-04 09:50:54", "100", "True", "None", "vidar", "0", "crep1x"
"2026-09-01 00:50:45", "1892066", "https://hkd.138sportlogin.org/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-04 09:53:41", "100", "True", "None", "vidar", "0", "crep1x"
"2026-08-31 19:00:45", "1891959", "https://gaz.138sportlogin.org/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-04 09:52:26", "100", "True", "None", "vidar", "0", "crep1x"
"2026-08-31 11:05:45", "1891840", "https://for.12naga.org/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-04 09:48:56", "100", "True", "None", "vidar", "0", "crep1x"
"2026-08-31 08:34:46", "1891734", "https://46.29.26.41/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-04 09:54:37", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-31 08:34:46", "1891736", "https://62.238.126.31/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-03 16:40:39", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-31 08:34:44", "1891727", "https://62.238.117.133/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-03 22:07:57", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-31 07:47:06", "1891583", "https://95.217.223.130", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-03 10:16:46", "100", "False", "None", "8e3a74868d6a5ab24c7948fba102cc52,c2,loader,stealer,Vidar", "0", "Bitsight"
"2026-08-31 07:47:00", "1891621", "https://jre.12naga.org", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-04 09:51:27", "100", "False", "None", "0760b4f10cfeaeccbae17783b4b59360,c2,loader,stealer,Vidar", "0", "Bitsight"
"2026-08-30 17:39:54", "1891491", "https://zca.12naga.org", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-04 09:51:50", "100", "False", "None", "b8546d0712608b893c6c87d32a5986c5,c2,loader,stealer,Vidar", "0", "Bitsight"
"2026-08-30 07:09:31", "1891243", "https://chi.12naga.org", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-04 09:53:10", "100", "False", "None", "268d1539fef7aab0b99f0b10cc2693b0,c2,loader,stealer,Vidar", "0", "Bitsight"
"2026-08-30 07:09:30", "1891242", "https://ley.123ful.net", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-04 09:54:54", "100", "False", "None", "9e42080fd45ba9f402718ea0d28bb085,c2,loader,stealer,Vidar", "0", "Bitsight"
"2026-08-29 14:08:52", "1891021", "https://playmounthdom.top/", "url", "botnet_cc", "win.stealc", "None", "Stealc", "2026-09-04 09:28:31", "100", "False", "None", "c2,loader,printer,StealC,stealer", "0", "Bitsight"
"2026-08-28 19:27:30", "1890744", "https://46.29.26.35", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-04 09:42:21", "100", "False", "None", "8e8e7920d1ac7f57735398887661bf8d,c2,loader,stealer,Vidar", "0", "Bitsight"
"2026-08-28 19:27:25", "1890760", "https://nsn.12naga.org", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-04 09:53:35", "100", "False", "None", "279244a0387f7d5a1b68137bd9768de8,c2,loader,stealer,Vidar", "0", "Bitsight"
"2026-08-28 16:03:23", "1890650", "https://sss.fbdfsgfwrgerwefew.top/", "url", "botnet_cc", "win.stealc", "None", "Stealc", "2026-09-04 09:38:55", "100", "False", "None", "123,c2,loader,StealC,stealer", "0", "Bitsight"
"2026-08-28 11:55:29", "1890557", "https://proxy.goglehandaz.com", "url", "botnet_cc", "win.stealc", "None", "Stealc", "2026-09-04 09:25:49", "75", "False", "https://bazaar.abuse.ch/sample/9c927df9fdd83af1b57810daa6cc7712a238d31a860bb8d33c6dacb03f53584d/", "stealc", "0", "abuse_ch"
"2026-08-28 06:00:21", "1889552", "http://2.26.126.74/", "url", "botnet_cc", "win.stealc", "None", "Stealc", "2026-09-04 09:21:18", "100", "False", "None", "73f82eed6521,c2,loader,StealC,stealer", "0", "Bitsight"
"2026-08-28 06:00:11", "1889741", "https://kiprihorycom.com/work/", "url", "botnet_cc", "win.latrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "2026-09-04 09:39:25", "100", "False", "None", "c2,Latrodectus", "0", "Bitsight"
"2026-08-27 21:05:47", "1889528", "https://rsc.123ful.net/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-04 09:55:07", "100", "True", "None", "vidar", "0", "crep1x"
"2026-08-27 11:45:54", "1889201", "https://46.29.26.32", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-04 09:52:42", "100", "False", "None", "ac7d2c4b87323734e60ab2166f449356,c2,loader,stealer,Vidar", "0", "Bitsight"
"2026-08-27 02:05:47", "1888915", "https://vcd.123ful.net/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-04 08:55:14", "100", "True", "None", "vidar", "0", "crep1x"
"2026-08-26 18:10:47", "1888397", "https://tak.123ful.net/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-04 09:53:53", "100", "True", "None", "vidar", "0", "crep1x"
"2026-08-26 10:50:47", "1888125", "https://eos.123ful.net/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-04 09:54:33", "100", "True", "None", "vidar", "0", "crep1x"
"2026-08-26 03:05:47", "1887931", "https://uza.123ful.net/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-04 09:54:02", "100", "True", "None", "vidar", "0", "crep1x"
"2026-08-25 20:05:47", "1887631", "https://jij.123ful.net/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-04 09:22:05", "100", "True", "None", "vidar", "0", "crep1x"
"2026-08-25 12:20:23", "1886835", "http://downloadfreemanager.com/", "url", "botnet_cc", "win.stealc", "None", "Stealc", "2026-09-04 09:54:53", "100", "False", "None", "2,c2,loader,StealC,stealer", "0", "Bitsight"
"2026-08-25 09:41:59", "1886720", "http://31.76.30.6/", "url", "botnet_cc", "win.stealc", "None", "Stealc", "2026-09-04 09:43:31", "100", "False", "None", "c2,loader,StealC,stealer,tst100", "0", "Bitsight"
"2026-08-25 07:17:07", "1886682", "https://178.104.211.128/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-04 09:54:58", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-24 23:45:47", "1886525", "https://ibi.123ful.net/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-04 09:51:48", "100", "True", "None", "vidar", "0", "crep1x"
"2026-08-24 18:50:48", "1886368", "https://hit.123ful.net/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-04 09:52:42", "100", "True", "None", "vidar", "0", "crep1x"
"2026-08-24 14:10:48", "1886304", "https://ggk.123ful.net/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-04 09:52:39", "100", "True", "None", "vidar", "0", "crep1x"
"2026-08-24 07:42:36", "1885943", "https://2.29.15.189/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-04 09:52:02", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-23 16:11:13", "1884663", "https://peermangoz.me/live/", "url", "botnet_cc", "win.latrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "2026-09-03 10:29:41", "100", "False", "None", "c2,Latrodectus", "0", "Bitsight"
"2026-08-23 16:11:12", "1884669", "https://aprettopizza.world/live/", "url", "botnet_cc", "win.latrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "2026-09-03 10:38:44", "100", "False", "None", "c2,Latrodectus", "0", "Bitsight"
"2026-08-23 16:11:07", "1884742", "http://5.252.177.69/", "url", "botnet_cc", "win.stealc", "None", "Stealc", "2026-09-02 17:03:26", "100", "False", "None", "auto1,c2,loader,StealC,stealer", "0", "Bitsight"
"2026-08-23 16:11:07", "1884751", "http://31.76.87.171/", "url", "botnet_cc", "win.stealc", "None", "Stealc", "2026-09-02 16:43:11", "100", "False", "None", "AMG63,c2,loader,StealC,stealer", "0", "Bitsight"
"2026-08-20 13:14:57", "1883118", "http://178.16.52.8/", "url", "botnet_cc", "win.stealc", "None", "Stealc", "2026-09-04 09:42:12", "100", "False", "None", "c2,loader,StealC,stealer,test_2", "0", "Bitsight"
"2026-08-20 09:28:25", "1883057", "https://2.29.7.186/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-04 09:51:35", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-17 10:05:22", "1877763", "https://svhost-update-service.casa/", "url", "botnet_cc", "win.stealc", "None", "Stealc", "2026-09-04 09:35:55", "100", "False", "None", "c2,loader,PG,StealC,stealer", "0", "Bitsight"
"2026-08-17 08:00:26", "1877688", "http://158.94.210.108/", "url", "botnet_cc", "win.stealc", "None", "Stealc", "2026-09-03 12:01:27", "100", "False", "None", "c2,loader,StealC,stealer,userr", "0", "Bitsight"
"2026-08-16 13:03:09", "1876556", "http://158.94.209.112/", "url", "botnet_cc", "win.stealc", "None", "Stealc", "2026-09-03 12:10:37", "100", "False", "None", "c2,loader,StealC,stealer,V1", "0", "Bitsight"
"2026-08-15 15:41:43", "1876365", "http://160.20.109.90/", "url", "botnet_cc", "win.stealc", "None", "Stealc", "2026-09-04 09:37:03", "100", "False", "None", "c2,loader,newbuild,StealC,stealer", "0", "Bitsight"
"2026-08-13 08:30:34", "1873504", "http://91.92.34.11/", "url", "botnet_cc", "win.stealc", "None", "Stealc", "2026-09-04 09:17:21", "100", "False", "None", "c2,flka,loader,StealC,stealer", "0", "Bitsight"
"2026-08-13 05:53:05", "1873415", "http://91.202.233.163/", "url", "botnet_cc", "win.stealc", "None", "Stealc", "2026-09-04 09:20:16", "100", "False", "None", "321LL,c2,loader,StealC,stealer", "0", "Bitsight"
"2026-08-12 17:32:12", "1873148", "http://95.135.181.73/", "url", "botnet_cc", "win.stealc", "None", "Stealc", "2026-09-04 09:38:56", "100", "False", "None", "c2,loader,Mewwski,StealC,stealer", "0", "Bitsight"
"2026-08-10 08:19:14", "1871555", "https://78.47.230.34/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-04 05:49:50", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-08 20:36:26", "1871140", "http://193.148.56.206/", "url", "botnet_cc", "win.stealc", "None", "Stealc", "2026-09-04 09:49:15", "100", "False", "https://bazaar.abuse.ch/sample/d490ac7dc0854bea4728b0a4497727fdf74a8b1a4a9dc10d040c71b1814586bd/", "Stealc", "0", "abuse_ch"
"2026-08-03 19:54:25", "1867932", "https://nonobody123.com/a85e9a98b9364c5d8f74.php", "url", "botnet_cc", "win.stealc", "None", "Stealc", "2026-09-04 09:44:20", "100", "False", "None", "c2,loader,NEWN1,StealC,stealer", "0", "Bitsight"
"2026-08-03 08:50:30", "1867712", "https://116.202.186.230/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-02 17:40:44", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-03 08:50:27", "1867694", "https://77.42.79.241/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-03 09:02:37", "100", "False", "", "Vidar", "0", "crep1x"
"2026-07-22 08:06:59", "1855202", "http://vriclactrina.cz/index.php", "url", "botnet_cc", "win.smokeloader", "Dofoil,Sharik,Smoke,Smoke Loader", "SmokeLoader", "2026-09-04 09:06:49", "100", "False", "None", "c2,SmokeLoader", "0", "Bitsight"
"2026-07-05 09:50:45", "1844960", "http://91.202.233.134/4d95d68e3fc64f3bbbf5.php", "url", "botnet_cc", "win.stealc", "None", "Stealc", "2026-09-04 09:22:18", "75", "False", "https://bazaar.abuse.ch/sample/1095cf2951bbc8b1ecd33798afad192449a102aa1b976fb60bf566a08d693587/", "stealc", "0", "abuse_ch"
"2026-06-26 12:25:15", "1838123", "https://k1h.hopesm188.top/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-04 08:23:11", "75", "False", "None", "k5yss1,Vidar", "0", "abuse_ch"
"2026-06-06 05:24:31", "1823853", "https://pas.sm188star.top/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-04 09:22:01", "75", "False", "None", "ar3k0,Vidar", "0", "abuse_ch"
"2026-05-23 22:00:09", "1817758", "https://cyy.turbo88ml.top/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-04 09:21:19", "100", "True", "None", "vidar", "0", "crep1x"
"2026-05-15 16:00:12", "1815074", "https://pgo.fatherchrismas.com/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-04 09:20:58", "100", "True", "None", "vidar", "0", "crep1x"
"2026-05-11 23:00:12", "1811188", "https://mpd.pegasus-77.biz.id/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-04 09:20:37", "100", "True", "None", "vidar", "0", "crep1x"
"2026-05-02 05:24:17", "1803956", "https://arsimonopa.com/live/", "url", "botnet_cc", "win.latrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "2026-09-03 10:30:49", "100", "False", "None", "c2,Latrodectus", "0", "Bitsight"
"2026-05-02 05:24:15", "1803960", "https://lemonimonakio.com/live/", "url", "botnet_cc", "win.latrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "2026-09-03 10:21:47", "100", "False", "None", "c2,Latrodectus", "0", "Bitsight"
"2026-05-01 14:30:24", "1803671", "https://frr.ambil-disini.web.id/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-04 09:20:15", "100", "True", "None", "vidar", "0", "crep1x"
"2026-04-26 19:14:08", "1800528", "http://pillow.riverbridge.site", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-04 09:19:54", "75", "False", "None", "ipocalur,Vidar", "0", "abuse_ch"
"2026-04-26 18:11:00", "1800411", "http://91.92.242.236/oPvjr94jfe/index.php", "url", "botnet_cc", "win.amadey", "None", "Amadey", "2026-09-04 09:52:22", "100", "False", "None", "54e64e,amadey,c2", "0", "Bitsight"
"2026-04-24 15:18:01", "1797247", "https://psy.flise-mesteren.dk/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-04 09:19:32", "75", "False", "None", "r88vry,Vidar", "0", "abuse_ch"
"2026-04-23 04:45:34", "1796426", "http://196.251.107.248/kont2rt/index.php", "url", "botnet_cc", "win.amadey", "None", "Amadey", "2026-09-04 09:52:57", "100", "False", "None", "Amadey", "0", "abuse_ch"
"2026-04-22 11:17:09", "1796067", "http://wrath.bottlevacuum.shop", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-04 09:19:42", "75", "False", "None", "opiusra,Vidar", "0", "abuse_ch"
"2026-04-19 18:25:29", "1794638", "http://213.5.130.87", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-04 06:03:14", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2026-04-17 18:15:06", "1793645", "http://213.5.130.147", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-04 06:03:13", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2026-04-17 17:13:25", "1793616", "https://ask.shurimaster.com/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-04 09:18:49", "75", "False", "None", "a10fsw,Vidar", "0", "abuse_ch"
"2026-04-16 16:13:56", "1792849", "https://pir.rapidphonebuyer.co.uk/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-04 09:16:33", "75", "False", "None", "d0b0p,Vidar", "0", "abuse_ch"
"2026-04-16 11:16:17", "1792718", "http://gusto.brothbridge.space", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-04 09:19:11", "75", "False", "None", "odiznrio,Vidar", "0", "abuse_ch"
"2026-04-15 11:43:19", "1791747", "http://107.189.24.190:80", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-04 09:13:47", "75", "False", "None", "gr00n1,Vidar", "0", "abuse_ch"
"2026-04-15 08:15:13", "1791687", "http://venom.summertunnel.shop", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-04 09:19:00", "75", "False", "None", "ozpifus,Vidar", "0", "abuse_ch"
"2026-04-14 14:11:18", "1790170", "http://dzodu.sparklingideas.space", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-04 09:18:18", "75", "False", "None", "odzdkzo,Vidar", "0", "abuse_ch"
"2026-04-14 14:10:11", "1790169", "http://kdije.weirdthings.site", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-04 09:15:29", "75", "False", "None", "okfueh,Vidar", "0", "abuse_ch"
"2026-04-13 07:46:34", "1785049", "https://pre.hifive.net.au/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-04 09:17:57", "100", "False", "", "Vidar", "0", "crep1x"
"2026-04-07 07:43:55", "1782152", "http://dzdi.serendipityhub.space/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-04 09:17:46", "100", "False", "", "Vidar", "0", "crep1x"
"2026-04-03 16:12:59", "1780716", "https://hor.kaitorinihon.jp/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-04 09:16:54", "100", "False", "", "Vidar", "0", "crep1x"
"2026-03-27 21:24:17", "1777601", "https://pn2.skfilmsint.com/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-04 09:15:40", "100", "False", "", "Vidar", "0", "crep1x"
"2026-03-27 21:24:17", "1777603", "https://gre.syslicense.net/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-04 09:15:07", "100", "False", "", "Vidar", "0", "crep1x"
"2026-03-27 21:24:17", "1777605", "http://fefeo.iknowthat.space/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-04 09:16:01", "100", "False", "", "Vidar", "0", "crep1x"
"2026-03-23 08:01:55", "1774200", "https://msi.swadeshcomputer.com/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-04 09:14:29", "100", "False", "", "Vidar", "0", "crep1x"
"2026-03-20 13:59:49", "1772370", "https://pr2.codetohaven.com/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-04 09:14:18", "100", "False", "", "Vidar", "0", "crep1x"
"2026-03-19 13:11:20", "1771455", "https://dhzuadd.hellothere.sbs", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-04 09:14:55", "75", "False", "None", "drkfiz,Vidar", "0", "abuse_ch"
"2026-03-13 15:05:58", "1765442", "https://pan.paihost.com/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-04 09:13:36", "100", "False", "", "Vidar", "0", "crep1x"
"2026-03-10 18:04:42", "1762899", "https://nonobody123.com", "url", "botnet_cc", "win.stealc", "None", "Stealc", "2026-09-04 09:19:09", "100", "False", "https://tria.ge/260310-t5ja8aew7y", "C2,stealc,stealer,triage", "0", "DonPasci"
"2026-03-09 09:29:17", "1762131", "https://ooe.myserver.com.bd/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-03 01:13:54", "100", "False", "", "Vidar", "0", "crep1x"
"2026-03-05 06:17:58", "1758456", "http://213.5.130.197", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-04 06:03:16", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2026-03-05 06:17:57", "1758457", "http://213.5.130.154", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-04 06:03:16", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2026-03-05 06:17:56", "1758458", "http://213.5.130.200", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-04 06:03:15", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2026-03-05 06:17:55", "1758459", "http://213.5.130.131", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-04 06:03:16", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2026-03-05 06:17:54", "1758460", "http://213.5.130.179", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-04 06:03:15", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2026-03-05 06:17:54", "1758461", "http://213.5.130.189", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-04 06:03:16", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2026-02-13 14:01:02", "1747538", "https://gor.emiraride.com/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-04 09:13:14", "100", "False", "", "Vidar", "0", "crep1x"
"2026-01-26 13:57:13", "1737664", "https://fluraresto.me/live/", "url", "botnet_cc", "win.latrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "2026-09-03 10:33:09", "100", "False", "None", "c2,Latrodectus", "0", "Bitsight"
"2026-01-26 13:57:13", "1737665", "https://mastralakkot.live/live/", "url", "botnet_cc", "win.latrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "2026-09-03 10:24:07", "100", "False", "None", "c2,Latrodectus", "0", "Bitsight"
"2026-01-05 13:21:42", "1691605", "http://213.5.130.122", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-04 06:03:14", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2026-01-05 13:21:41", "1691603", "http://213.5.130.151", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-04 06:03:16", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2026-01-05 13:21:40", "1691604", "http://213.5.130.124", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-04 06:03:15", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2026-01-05 13:21:40", "1691606", "http://213.5.130.187", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-04 06:03:14", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2025-12-01 14:57:52", "1665523", "http://213.5.130.104", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-04 06:03:15", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2025-12-01 14:57:52", "1665524", "http://213.5.130.180", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-04 06:03:14", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2025-12-01 14:57:50", "1665525", "http://213.5.130.106", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-04 06:03:15", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2025-12-01 14:57:49", "1665527", "http://213.5.130.152", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-04 06:03:13", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2025-12-01 14:57:49", "1665528", "http://213.5.130.107", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-04 06:03:15", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2025-12-01 14:57:49", "1665529", "http://213.5.130.153", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-04 06:03:13", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2025-12-01 14:57:48", "1665530", "http://213.5.130.100", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-04 06:03:16", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2025-12-01 14:57:48", "1665531", "http://213.5.130.182", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-04 06:03:13", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2025-11-25 06:01:37", "1649775", "http://213.5.130.84", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-04 06:03:16", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2025-11-25 06:01:36", "1649776", "http://213.5.130.96", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-04 06:03:13", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2025-11-25 06:01:36", "1649777", "http://213.5.130.98", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-04 06:03:15", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2025-11-25 06:01:35", "1649778", "http://213.5.130.160", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-04 06:03:13", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2025-11-17 13:58:09", "1645519", "http://185.132.133.127", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-04 06:03:14", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2025-11-17 13:58:09", "1645520", "http://185.132.133.140", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-04 06:03:17", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2025-11-12 09:18:14", "1639229", "https://rx.fabiankorte.net/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-04 09:12:43", "100", "False", "", "Vidar", "0", "crep1x"
"2025-11-05 03:16:16", "1633640", "https://telegram.me/k0ddr", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-02 10:25:35", "75", "False", "https://bazaar.abuse.ch/sample/df7c74df96c5590ee3b82ee0af43b364b6dd2acf6c270e6414519247bdee48fc/", "vidar", "0", "abuse_ch"
"2025-11-05 03:16:14", "1633639", "https://steamcommunity.com/profiles/76561198772659493", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-02 10:25:31", "75", "False", "https://bazaar.abuse.ch/sample/df7c74df96c5590ee3b82ee0af43b364b6dd2acf6c270e6414519247bdee48fc/", "vidar", "0", "abuse_ch"
"2025-10-21 13:19:24", "1624166", "http://213.5.130.75", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-04 06:03:14", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2025-10-21 13:19:23", "1624167", "http://213.5.130.10", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-04 06:03:13", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2025-10-21 13:19:22", "1624169", "http://213.5.130.90", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-04 06:03:12", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2025-10-21 13:19:22", "1624170", "http://213.5.130.89", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-04 06:03:15", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2025-05-15 13:26:20", "1523369", "http://103.171.35.26:9443/dot.gif", "url", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-04 09:20:20", "75", "False", "https://bazaar.abuse.ch/sample/755b9e89416a664f52a0dfee6de54687f15ae900a7317763b0a4144996724f6a/", "cobaltstrike", "0", "abuse_ch"
"2025-05-11 05:00:18", "1519451", "https://lofiramegi.com/test/", "url", "botnet_cc", "win.latrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "2026-09-03 10:28:02", "100", "False", "", "None", "0", "Rony"
"2025-05-11 05:00:17", "1519450", "https://topguningit.com/test/", "url", "botnet_cc", "win.latrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "2026-09-03 10:37:04", "100", "False", "", "None", "0", "Rony"
"2025-04-28 16:43:41", "1513310", "https://steamcommunity.com/profiles/76561199851454339", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-04 09:21:17", "100", "False", "", "Vidar", "0", "crep1x"
"2025-04-28 16:43:41", "1513311", "https://t.me/m00f3r", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-04 09:21:18", "100", "False", "", "Vidar", "0", "crep1x"
"2025-02-06 13:54:51", "1405307", "https://apworsindos.com/test/", "url", "botnet_cc", "win.latrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "2026-09-03 10:23:45", "100", "False", "", "None", "0", "Rony"
"2025-02-06 13:54:51", "1405308", "https://reminasolirol.com/test/", "url", "botnet_cc", "win.latrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "2026-09-03 10:31:47", "100", "False", "", "None", "0", "Rony"
"2025-02-01 20:47:38", "1402273", "https://vivaforevew.com/test/", "url", "botnet_cc", "win.latrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "2026-09-03 10:29:35", "100", "False", "", "None", "0", "Rony"
"2025-02-01 20:47:38", "1402274", "https://wersogkiwgow.com/test/", "url", "botnet_cc", "win.latrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "2026-09-03 10:39:38", "100", "False", "", "None", "0", "Rony"
"2025-01-18 16:10:00", "1386236", "https://135.181.31.18", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-04 09:10:38", "100", "False", "", "None", "0", "Gi7w0rm"
"2024-12-25 14:55:36", "1359629", "https://95.217.241.133/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-04 09:11:20", "100", "False", "", "Vidar", "0", "crep1x"
"2024-10-22 13:56:41", "1338675", "https://stripplasst.com/live/", "url", "botnet_cc", "win.latrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "2026-09-04 09:43:09", "100", "False", "https://www.vmray.com/latrodectus-a-year-in-the-making/", "c2,latrodectus,vmray", "0", "DonPasci"
"2024-10-22 13:56:39", "1338673", "https://skinnyjeanso.com/live/", "url", "botnet_cc", "win.latrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "2026-09-03 10:36:25", "100", "False", "https://www.vmray.com/latrodectus-a-year-in-the-making/", "c2,latrodectus,vmray", "0", "DonPasci"
"2024-10-22 13:56:34", "1338670", "https://coolarition.com/live/", "url", "botnet_cc", "win.latrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "2026-09-04 09:51:11", "100", "False", "https://www.vmray.com/latrodectus-a-year-in-the-making/", "c2,latrodectus,vmray", "0", "DonPasci"
"2024-10-22 13:56:32", "1338668", "https://aytobusesre.com/live/", "url", "botnet_cc", "win.latrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "2026-09-03 10:38:44", "100", "False", "https://www.vmray.com/latrodectus-a-year-in-the-making/", "c2,latrodectus,vmray", "0", "DonPasci"
"2024-09-19 14:07:53", "1326049", "https://pomaspoteraka.com/test/", "url", "botnet_cc", "win.latrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "2026-09-03 10:37:34", "50", "False", "None", "1.5,Delta", "0", "spamhaus"
"2024-09-19 14:07:52", "1326050", "https://finilamedima.com/test/", "url", "botnet_cc", "win.latrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "2026-09-03 10:28:33", "50", "False", "None", "1.5,Delta", "0", "spamhaus"
"2024-09-19 14:07:51", "1326051", "https://isomicrotich.com/test/", "url", "botnet_cc", "win.latrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "2026-09-03 10:30:33", "50", "False", "None", "1.7,Alpha", "0", "spamhaus"
"2024-09-19 14:07:50", "1326052", "https://rilomenifis.com/test/", "url", "botnet_cc", "win.latrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "2026-09-03 10:39:36", "50", "False", "None", "1.7,Alpha", "0", "spamhaus"
"2024-08-30 07:05:10", "1317376", "https://pikchestop.com/test/", "url", "botnet_cc", "win.lactrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "2026-09-04 09:47:46", "49", "False", "https://www.netskope.com/jp/blog/latrodectus-rapid-evolution-continues-with-latest-new-payload-features", "None", "0", "johannes"
"2024-08-30 07:05:10", "1317377", "https://indepahote.com/test/", "url", "botnet_cc", "win.lactrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "2026-09-04 09:38:42", "49", "False", "https://www.netskope.com/jp/blog/latrodectus-rapid-evolution-continues-with-latest-new-payload-features", "None", "0", "johannes"
"2024-04-18 16:17:26", "1258693", "https://23.88.47.9/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-03 17:17:10", "100", "False", "", "Vidar", "0", "crep1x"
"2024-03-22 19:47:18", "1248363", "https://titnovacrion.top/live/", "url", "botnet_cc", "win.unidentified_111", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Unidentified 111 (Latrodectus)", "2026-09-03 10:30:52", "100", "False", "", "None", "0", "Cryptolaemus1"
"2024-03-11 18:05:31", "1245707", "https://scifimond.com/live/", "url", "botnet_cc", "win.unidentified_111", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Unidentified 111 (Latrodectus)", "2026-09-03 10:28:41", "100", "False", "", "latrodectus", "0", "Cryptolaemus1"
"2024-01-16 08:13:32", "1230963", "https://65.21.187.53/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-04 09:10:17", "100", "False", "", "Vidar", "0", "crep1x"
# Number of entries: 283