| Date | IP Address |
| 2024-02-26 | 107.20.241.192 (ClassC) |
| 2025-07-18 | 52.21.233.66 (ClassC) |
| 2025-09-30 | 3.87.166.27 (ClassC) |
| 2025-10-25 | 52.207.67.196 (ClassC) |
| 2025-11-19 | 52.70.6.111 (ClassC) |
| Date | Domain | IP |
| office365.cert-sha256.com | 2025-02-05 | 52.201.44.23 |
| tinyurl-83921349.cert-sha256.com | 2025-07-18 | 52.21.233.66 |
| secure.cert-sha256.com | 2025-02-12 | 54.208.113.182 |
| microsotf.cert-sha256.com | 2025-09-23 | 3.215.246.31 |
| majordrilling.cert-sha256.com | 2025-09-30 | 3.87.166.27 |
| derv-zoom.cert-sha256.com | 2025-02-17 | 44.212.164.197 |
| decathlon.cert-sha256.com | 2025-01-29 | 3.219.150.243 |
| document.cert-sha256.com | 2025-01-15 | 54.159.237.118 |
| protect-us-mimecast.cert-sha256.com | 2025-10-19 | 18.213.104.52 |
| do-not-click-me-i-am-a-phishing-test.cert-sha256.com | 2024-06-12 | 100.25.249.234 |