| Collector |  stealbyartem.ru.xsph.ru/ | 141.8.197.42 | 05-01-2022 |
| Collector |  f0615839.xsph.ru/ | 141.8.193.236 | 05-01-2022 |
| BlackNet |  wealonetogether.com/panel/login.php | 37.0.9.166 | 05-01-2022 |
| AgentTesla |  onyembu.pm/1/login.php | 37.0.9.166 | 05-01-2022 |
| Vulturi |  142.11.241.69:5050/login | 142.11.241.69 | 04-01-2022 |
| AgentTesla |  cdinow.com.br/web/web/login.php | 192.185.177.68 | 03-01-2022 |
| BlackNet |  91.134.238.134:8010/login.php | 91.134.238.134 | 02-01-2022 |
| Azorult |  adreylinkm.temp.swtest.ru/panel/admin.php | 77.222.56.111 | 02-01-2022 |
| BlackNet |  leyzz.xyz/panel/login.php | 192.64.117.211 | 02-01-2022 |
| Mars |  test.akadns9.net/panel/login.php | 194.67.204.76 | 31-12-2021 |
| Mars |  main2.flashysoft.me/panel/login.php | 159.65.9.223 | 31-12-2021 |
| AgentTesla |  microsoftiswear.duckdns.org/y/login.php | 103.151.122.110 | 30-12-2021 |
| DiamondFox |  ceskapostaonline.com/Panel/ | 51.79.168.163 | 30-12-2021 |
| SupremeMiner |  109.107.185.80/index.php | 109.107.185.80 | 29-12-2021 |
| Amadey |  185.215.113.42/f83jd823S/Login.php | 185.215.113.42 | 28-12-2021 |
| BlackNet |  753783-cs86780.tmweb.ru/blacknet/login.php | 87.249.53.203 | 28-12-2021 |
| Ermac |  ermac.icu/ | 185.215.113.100 | 28-12-2021 |
| AgentTesla |  103.151.122.110/k/p7qw/login.php | 103.151.122.110 | 27-12-2021 |
| AgentTesla |  proc-dotgov.us/yaya/login.php | 37.0.9.166 | 27-12-2021 |
| AgentTesla |  rdcrd.ddns.net/login.php | 137.184.32.82 | 27-12-2021 |
| Ermac |  fghjngjkjgy.ga/ | 185.215.113.100 | 27-12-2021 |
| Ermac |  185.215.113.100/ | 185.215.113.100 | 27-12-2021 |
| Vulturi |  20.120.111.184:5050/login | 20.120.111.184 | 27-12-2021 |
| Collector |  f0611237.xsph.ru/ | 141.8.192.151 | 26-12-2021 |
| Oski |  gebebaglanti.com/login.php | 172.67.175.8 | 26-12-2021 |
