| Gomorrah | acesscanada.com/webpanel/Panel/login.php | 209.126.106.158 | 11-12-2021 |
| Predator | a0608694.xsph.ru/login | 141.8.195.65 | 11-12-2021 |
| AgentTesla | drossmnfg.com/private/login.php | 37.0.9.166 | 11-12-2021 |
| Oski | hp-tv.tk/login.php | 172.67.131.21 | 11-12-2021 |
| AgentTesla | afunshy.duckdns.org/login.php | 79.141.165.134 | 11-12-2021 |
| Gomorrah | extramemarine-me.com/gom_v4/Panel/login.php | 212.1.210.68 | 11-12-2021 |
| Gomorrah | kashdreamz.run/gom_v4/Panel/login.php | 88.214.194.85 | 11-12-2021 |
| Oski | tesorak.ru/login.php | 37.0.9.166 | 11-12-2021 |
| Lokibot | secure01-redirect.net/gb13/PvqDq929BSx_A_D_M1n_a.php | 45.9.72.32 | 10-12-2021 |
| Lokibot | secure01-redirect.net/gb27/PvqDq929BSx_A_D_M1n_a.php | 45.9.72.32 | 10-12-2021 |
| Lokibot | secure01-redirect.net/gb29/PvqDq929BSx_A_D_M1n_a.php | 45.9.72.32 | 10-12-2021 |
| Lokibot | secure01-redirect.net/gb26/PvqDq929BSx_A_D_M1n_a.php | 45.9.72.32 | 10-12-2021 |
| Lokibot | secure01-redirect.net/gb21/PvqDq929BSx_A_D_M1n_a.php | 45.9.72.32 | 10-12-2021 |
| Lokibot | secure01-redirect.net/gb28/PvqDq929BSx_A_D_M1n_a.php | 45.9.72.32 | 10-12-2021 |
| Colibri | 212.109.218.20/panel/login.php | 212.109.218.20 | 10-12-2021 |
| Oski | 103.147.185.68/k4/login.php | 103.147.185.68 | 10-12-2021 |
| Amadey | 185.215.113.118/fkwdoXScn2/login.php | 185.215.113.118 | 10-12-2021 |
| Matanbuchus | 193.56.146.61/GtHODfM/qilZw/ | 193.56.146.61 | 10-12-2021 |
| Matanbuchus | checkingupdatesoftware.at/GtHODfM/qilZw/ | 193.56.146.60 | 10-12-2021 |
| Lokibot | moneyfinders.xyz/cjay/loki/PvqDq929BSx_A_D_M1n_a.php | 104.21.78.49 | 10-12-2021 |
| Lokibot | hdmibonquet.ir/oge/five/PvqDq929BSx_A_D_M1n_a.php | 172.67.183.45 | 10-12-2021 |
| Matanbuchus | 45.9.20.139/KtBruPvUNz/ | 45.9.20.139 | 10-12-2021 |
| Matanbuchus | checkupdate.at:63994/ktbrupvunz/ | 45.9.20.138 | 10-12-2021 |
| Matanbuchus | 45.9.20.136/KtBruPvUNz/ | 45.9.20.136 | 10-12-2021 |
| Matanbuchus | 45.9.20.137:63994/KtBruPvUNz/ | 45.9.20.137 | 10-12-2021 |