| Oski | lamol.ddns.net/login.php | 159.223.97.192 | 17-06-2022 |
| Collector | f0671130.xsph.ru/ | 141.8.193.236 | 17-06-2022 |
| Amadey | systemupdate22.cf/d2VxjasuwS/Login.php | 167.99.209.184 | 16-06-2022 |
| AgentTesla | 136.144.41.76/wheel/login.php | 136.144.41.76 | 16-06-2022 |
| Collector | f0671130.xsph.ru/index.php | 141.8.193.236 | 15-06-2022 |
| AgentTesla | 136.144.41.76/bray/login.php | 136.144.41.76 | 13-06-2022 |
| Oski | sedxd.duckdns.org/login.php | 165.227.82.181 | 10-06-2022 |
| Ginzo | holdmy1337.ga/ | 172.67.189.196 | 10-06-2022 |
| Oski | clemody.duckdns.org/login.php | 20.108.6.168 | 10-06-2022 |
| PrivateLoader | 85.202.169.116/auth | 85.202.169.116 | 10-06-2022 |
| Amadey | 185.215.113.15/Lkb2dxj3/Login.php | 185.215.113.15 | 10-06-2022 |
| Amadey | 193.106.191.122/f8dfksdj3/Login.php | 193.106.191.122 | 09-06-2022 |
| PennyWise | 185.246.116.237:5001/login | 185.246.116.237 | 09-06-2022 |
| Oski | masterwork2.co.vu/login.php | 142.4.0.135 | 09-06-2022 |
| AgentTesla | 37.0.8.144/fleet/login.php | 37.0.8.144 | 09-06-2022 |
| Collector | asdqwezxc.ru.xsph.ru/ | 141.8.197.42 | 08-06-2022 |
| Oski | bankemails.ga/login.php | 91.229.90.152 | 08-06-2022 |
| Collector | a0682417.xsph.ru/ | 141.8.192.58 | 07-06-2022 |
| AgentTesla | mobinomomuam.duckdns.org/login.php | 194.31.98.108 | 07-06-2022 |
| AgentTesla | 142.132.185.172/bill/login.php | 142.132.185.172 | 07-06-2022 |
| AgentTesla | mobibanewdan.duckdns.org/login.php | 194.31.98.108 | 06-06-2022 |
| AgentTesla | bakuzamokala.duckdns.org/login.php | 194.31.98.108 | 06-06-2022 |
| AgentTesla | mobibagugu.duckdns.org/login.php | 194.31.98.108 | 06-06-2022 |
| AgentTesla | mubbibun.duckdns.org/login.php | 194.31.98.108 | 06-06-2022 |
| AgentTesla | vncgoga.duckdns.org/login.php | 194.31.98.108 | 03-06-2022 |