[kaiteisbait]

I didn't mean a fake website, I meant a login page that doesn't let you find it with a dork. It could keep you from getting reported. If your page says "bla bla bla botnet login page" a simple analysis by anyone will get you.

Any analysis can track any cc easily.
And the coder should already have that implemented
It is a big deal for the coder to also keep the login invisible
If you can get the login page without the malware then the coder must be immature