# Vidar Stealer C&C Server List **docs.google.com/spreadsheets/d/1nx42rdMdkCrvlmACDi3CHseyG87iSV1Y6rGZYq_-oDk** **A** **B** **C** **D** **E** **F** **G** **H** **I** **J** **K** **L** **M** **N** **O** **1** Source C&C server Detected **2** Hardcoded inside Malware shirleyhorn.com 22.Jan.21 **3** Hardcoded inside Malware centos8lts.com 25.Jan.21 **4** Hardcoded inside Malware guilmettemoron.com 30.Jan.21 **5** Hardcoded inside Malware customkitchaid.com 1.Feb.21 **6** Hardcoded inside Malware protestbonjer.ml 3.Feb.21 **7** https://api.faceit.com/core/v1/nicknames/yetveirrifcu dockclock.pro 4.Feb.21 **8** https://api.faceit.com/core/v1/nicknames/yetveirrifcu kenutduk.duckdns.org 5.Feb.21 **9** https://api.faceit.com/core/v1/nicknames/yetveirrifcu fuckspha.com 5.Feb.21 **10** https://api.faceit.com/core/v1/nicknames/yetveirrifcu duckclack.com 8.Feb.21 **11** https://api.faceit.com/core/v1/nicknames/yetveirrifcu centoswiki.co.ug 11.Feb.21 **12** https://api.faceit.com/core/v1/nicknames/yetveirrifcu goodssogood.com 11.Feb.21 **13** https://api.faceit.com/core/v1/nicknames/yetveirrifcu bittracker.co.ug 13.Feb.21 **14** https://api.faceit.com/core/v1/nicknames/yetveirrifcu didntreadlol.com 15.Feb.21 ----- **A** **B** **C** **D** **E** **F** **G** **H** **I** **J** **K** **L** **M** **N** **O** **15** https://api.faceit.com/core/v1/nicknames/yetveirrifcu 185.99.133.43 16.Feb.21 **16** https://api.faceit.com/core/v1/nicknames/yetveirrifcu 85.217.222.195 17.Feb.21 **17** https://api.faceit.com/core/v1/nicknames/yetveirrifcu hydrakupi.co.ug 18.Feb.21 **18** https://api.faceit.com/core/v1/nicknames/yetveirrifcu paperone.co.ug 19.Feb.21 **19** https://api.faceit.com/core/v1/nicknames/tronhack brainstormer.co.ug 23.Feb.21 **20** https://api.faceit.com/core/v1/nicknames/tronhack fastkisel.co.ug 24.Feb.21 **21** https://api.faceit.com/core/v1/nicknames/slowyen flinstonehouse.co.ug 2.Mar.21 **22** https://api.faceit.com/core/v1/nicknames/slowyen mail.kiselev.co.ug 3.Mar.21 **23** https://api.faceit.com/core/v1/nicknames/slowyen 92.222.241.84 4.Mar.21 **24** https://api.faceit.com/core/v1/nicknames/slowyen bocksmoke.com 5.Mar.21 **25** https://api.faceit.com/core/v1/nicknames/slowyen 209.141.45.236 5.Mar.21 **26** https://api.faceit.com/core/v1/nicknames/slowyen 111.90.150.162 5.Mar.21 **27** https://api.faceit.com/core/v1/nicknames/slowyen blockbock.com 10.Mar.21 **28** https://api.faceit.com/core/v1/nicknames/slowyen bockbock.top 10.Mar.21 **29** https://api.faceit.com/core/v1/nicknames/sergeevih zockzock.top 13.Mar.21 **30** https://api.faceit.com/core/v1/nicknames/sergeevih lookluck.net 16.Mar.21 **31** https://api.faceit.com/core/v1/nicknames/sergeevih djalil.top 18.Mar.21 **32** https://api.faceit.com/core/v1/nicknames/sergeevih yourpro.top 18.Mar.21 **33** https://api.faceit.com/core/v1/nicknames/sergeevih juhjuh.com 19.Mar.21 **34** https://api.faceit.com/core/v1/nicknames/sergeevih choohchooh.com 22.Mar.21 **35** https://api.faceit.com/core/v1/nicknames/sergeevih ciaociaoline.top 24.Mar.21 **36** https://api.faceit.com/core/v1/nicknames/sergeevih ciaociaoline.com 25.Mar.21 **37** https://api.faceit.com/core/v1/nicknames/sergeevih data.parafia-strumiany.pl 26.Mar.21 static.parafiastrumiany.pl **38** **39** https://api.faceit.com/core/v1/nicknames/xeronxik123 https://api.faceit.com/core/v1/nicknames/vyh62lapin https://api.faceit.com/core/v1/nicknames/vyh62lapin promo.parafiastrumiany.pl 29.Mar.21 4.Apr.21 **40** https://api.faceit.com/core/v1/nicknames/vyh62lapin cache.krishgarden.com 6.Apr.21 ----- **A** **B** **C** **D** **E** **F** **G** **H** **I** **J** **K** **L** **M** **N** **O** **41** https://api.faceit.com/core/v1/nicknames/dendytest gate.akadns9.net 14.Apr.21 **42** https://api.faceit.com/core/v1/nicknames/vyh62lapin upload.krishgarden.com 14.Apr.21 **43** https://api.faceit.com/core/v1/nicknames/vyh62lapin smtp.omplcement.com 15.Apr.21 **44** https://api.faceit.com/core/v1/nicknames/vyh62lapin static.helpmybusiness.ga 16.Apr.21 16.Apr.21 **45** https://api.faceit.com/core/v1/nicknames/vyh62lapin static.acceleratorintrolab.ml **46** https://api.faceit.com/core/v1/nicknames/vyh62lapin ftp.dwysokinski.me 19.Apr.21 **47** https://api.faceit.com/core/v1/nicknames/dendytest 163.172.40.27 19.Apr.21 **48** https://api.faceit.com/core/v1/nicknames/vyh62lapin 88.198.106.10 19.Apr.21 **49** https://api.faceit.com/core/v1/nicknames/vyh62lapin 49.12.77.13 20.Apr.21 205.185.127.90 23.Apr.21 **50** https://api.faceit.com/core/v1/nicknames/vyh62lapin https://api.faceit.com/core/v1/nicknames/ramilgame **51** https://api.faceit.com/core/v1/nicknames/vyh62lapin 78.47.87.144 23.Apr.21 198.98.55.103 24.Apr.21 **52** https://api.faceit.com/core/v1/nicknames/vyh62lapin https://api.faceit.com/core/v1/nicknames/sslamlssa **53** https://api.faceit.com/core/v1/nicknames/vyh62lapin 168.119.226.10 24.Apr.21 78.47.81.226 26.Apr.21 **54** https://api.faceit.com/core/v1/nicknames/vyh62lapin https://api.faceit.com/core/v1/nicknames/sslamlssa **55** https://api.faceit.com/core/v1/nicknames/sslamlssa 116.203.140.224 29.Apr.21 176.123.4.140 1.May.21 188.34.193.205 1.May.21 **56** **57** https://api.faceit.com/core/v1/nicknames/sslamlssa https://api.faceit.com/core/v1/nicknames/ramilgame https://api.faceit.com/core/v1/nicknames/sslamlssa https://api.faceit.com/core/v1/nicknames/ramilgame **58** https://api.faceit.com/core/v1/nicknames/ramilgame 159.69.87.239 7.May.21 185.99.133.218 10.May.21 **59** https://api.faceit.com/core/v1/nicknames/ramilgame https://api.faceit.com/core/v1/nicknames/legomind https://api.faceit.com/core/v1/nicknames/pavel23puef https://api.faceit.com/core/v1/nicknames/dimashub **60** https://api.faceit.com/core/v1/nicknames/ramilgame 195.201.94.135 10.May.21 94.130.58.199 17.May.21 **61** https://api.faceit.com/core/v1/nicknames/legomind https://api.faceit.com/core/v1/nicknames/pavel23puef **62** https://api.faceit.com/core/v1/nicknames/pavel23puef 162.55.189.102 26.May.21 **63** https://api.faceit.com/core/v1/nicknames/pavel23puef 162.55.189.141 31.May.21 ----- **A** **B** **C** **D** **E** **F** **G** **H** **I** **J** **K** **L** **M** **N** **O** **64** https://bandakere.tumblr.com https://dimashub.tumblr.com 159.69.20.131 3.Jun.21 **65** https://sergeevih43.tumblr.com 159.69.20.131 20.Jun.21 **66** https://sergeevih43.tumblr.com 176.123.2.239 28.Jun.21 **67** https://sergeevih43.tumblr.com 157.90.127.76 28.Jun.21 **68** https://sergeevih43.tumblr.com 162.55.223.232 6.Jul.21 **69** https://olegf9844.tumblr.com 116.202.183.50 13.Jul.21 **70** https://sslamlssa1.tumblr.com 116.202.183.50 15.Jul.21 **71** https://shpak125.tumblr.com 116.202.183.50 20.Jul.21 **72** https://xeronxikxxx.tumblr.com 116.202.183.50 27.Jul.21 **73** https://prophefliloc.tumblr.com 23.88.49.119 3.Aug.21 **74** https://prophefliloc.tumblr.com 176.123.2.239 9.Aug.21 **75** https://lenak513.tumblr.com 116.203.127.162 10.Aug.21 **76** https://eduarroma.tumblr.com 116.203.127.162 18.Aug.21 **77** https://eduarroma.tumblr.com 79.124.78.139 18.Aug.21 **78** https://eduarroma.tumblr.com 188.34.200.103 18.Aug.21 **79** https://kipriauka.tumblr.com 49.12.198.69 30.Aug.21 **80** https://lenko349.tumblr.com 49.12.198.69 1.Sep.21 **81** https://romkaxarit.tumblr.com 49.12.198.69 3.Sep.21 **82** https://gheorghip.tumblr.com 162.55.179.90 7.Sep.21 **83** https://dimonbk83.tumblr.com 116.203.165.54 14.Sep.21 **84** https://petrenko96.tumblr.com 116.203.165.54 19.Sep.21 **85** https://petrenko96.tumblr.com 79.124.78.139 20.Sep.21 **86** https://pavlovoler.tumblr.com 159.69.203.58 21.Sep.21 **87** https://stacenko668.tumblr.com 159.69.203.58 22.Sep.21 **88** **89** **90** ----- **A** **B** **C** **D** **E** **F** **G** **H** **I** **J** **K** **L** **M** **N** **O** **91** **92** **93** **94** **95** **96** **97** **98** **99** **100** -----