| Date | IP Address |
| 2024-12-17 | 34.225.242.38 (ClassC) |
| 2025-01-29 | 3.219.150.243 (ClassC) |
| 2025-02-13 | 3.208.54.79 (ClassC) |
| 2025-06-18 | 3.233.76.233 (ClassC) |
| 2025-08-17 | 18.233.55.22 (ClassC) |
| 2026-01-15 | 3.231.197.217 (ClassC) |
| Date | Domain | IP |
| office365.cert-sha256.com | 2025-02-05 | 52.201.44.23 |
| tinyurl-83921349.cert-sha256.com | 2025-07-18 | 52.21.233.66 |
| secure.cert-sha256.com | 2025-02-12 | 54.208.113.182 |
| microsotf.cert-sha256.com | 2025-09-23 | 3.215.246.31 |
| majordrilling.cert-sha256.com | 2025-09-30 | 3.87.166.27 |
| bad-actor-redirect-link.cert-sha256.com | 2026-01-12 | 3.233.117.99 |
| zooom.cert-sha256.com | 2025-11-25 | 44.218.104.188 |
| derv-zoom.cert-sha256.com | 2025-02-17 | 44.212.164.197 |
| decathlon.cert-sha256.com | 2025-01-29 | 3.219.150.243 |
| quadmedicalbenefits.cert-sha256.com | 2025-11-28 | 13.219.217.167 |
| document.cert-sha256.com | 2025-01-15 | 54.159.237.118 |
| protect-us-mimecast.cert-sha256.com | 2025-10-19 | 18.213.104.52 |
| do-not-click-me-i-am-a-phishing-test.cert-sha256.com | 2024-06-12 | 100.25.249.234 |