| Date | IP Address |
| 2022-10-10 | 54.160.15.16 (ClassC) |
| 2025-10-25 | 54.196.95.39 (ClassC) |
| 2025-11-02 | 100.27.240.208 (ClassC) |
| 2025-11-08 | 54.236.117.241 (ClassC) |
| 2025-11-16 | 50.16.181.98 (ClassC) |
| Date | Domain | IP |
| swift.news.events.iso.2oo22.user-account.online | 2024-02-03 | 3.216.14.142 |
| o365.user-account.online | 2025-07-22 | 3.226.121.61 |
| fb.user-account.online | 2024-11-01 | 54.85.170.157 |
| officialnotice.user-account.online | 2025-09-30 | 52.6.154.71 |
| updateprofile.user-account.online | 2025-10-26 | 54.196.95.39 |
| hallmark.user-account.online | 2025-10-14 | 52.2.1.121 |
| instagram.user-account.online | 2025-09-30 | 52.6.154.71 |
| login.user-account.online | 2025-09-10 | 35.173.19.140 |
| www.vaco.secuirty-education.user-account.online | 2025-07-26 | 52.2.115.176 |
| twitter.user-account.online | 2025-08-01 | 3.217.139.239 |
| expensesolutions.user-account.online | 2025-10-13 | 44.199.53.160 |
| apacpayments.user-account.online | 2024-07-07 | 54.84.3.15 |
| intuit.user-account.online | 2025-09-30 | 52.6.154.71 |
| www.user-account.online | 2024-11-02 | 54.210.54.162 |
| verify.user-account.online | 2025-10-25 | 54.196.95.39 |