| Oski | spacelogsapp.com/login.php | 66.29.146.24 | 15-12-2021 |
| Amadey | 185.215.113.110/Gv93xs2Nz/login.php | 185.215.113.110 | 15-12-2021 |
| Oski | golfhomexpresx.ir/login.php | 104.21.96.64 | 15-12-2021 |
| Lokibot | www.egobiakita.xyz/zoom/loki/PvqDq929BSx_A_D_M1n_a.php | 172.67.210.133 | 14-12-2021 |
| Lokibot | rhinestone.cc/obino/Panel/five/PvqDq929BSx_A_D_M1n_a.php | 104.21.17.236 | 14-12-2021 |
| Lokibot | nedskytrex.xyz/neds/Panel/five/PvqDq929BSx_A_D_M1n_a.php | 172.67.210.26 | 14-12-2021 |
| Gomorrah | acesscanada.com/webpanel/Panel/login.php | 209.126.106.158 | 14-12-2021 |
| BlackNet | dima1111363.asyx.ru//login.php | 164.132.77.139 | 14-12-2021 |
| BlackNet | dima1111363.asyx.ru/login.php | 164.132.77.139 | 14-12-2021 |
| Lokibot | 2.56.57.48/main/PvqDq929BSx_A_D_M1n_a.php | 2.56.57.48 | 13-12-2021 |
| Gomorrah | marketcryptolab.com/webpanel/Panel/login.php | 88.214.194.166 | 13-12-2021 |
| Lokibot | secure01-redirect.net/gb24/PvqDq929BSx_A_D_M1n_a.php | 31.40.251.195 | 13-12-2021 |
| Gomorrah | extramemarine-me.com/gom_v4/Panel/login.php | 212.1.210.68 | 13-12-2021 |
| Gomorrah | kashdreamz.run/gom_v4/Panel/login.php | 88.214.194.85 | 13-12-2021 |
| Collector | kikils13579.ru.xsph.ru/ | 141.8.197.42 | 13-12-2021 |
| Collector | 777.com.xsph.ru/ | 141.8.197.42 | 13-12-2021 |
| Collector | f0595813.xsph.ru/ | 141.8.193.236 | 13-12-2021 |
| Lokibot | moneyfinders.xyz/kofi/loki/PvqDq929BSx_A_D_M1n_a.php | 104.21.78.49 | 13-12-2021 |
| Lokibot | moneyfinders.xyz/zoom/loki/PvqDq929BSx_A_D_M1n_a.php | 104.21.78.49 | 13-12-2021 |
| Amadey | 193.56.146.50/Hnq8vS/login.php | 193.56.146.50 | 12-12-2021 |
| Lokibot | mail.jithiadaproperties.com/swtnvmbr/logs/omc.php | 188.166.172.139 | 12-12-2021 |
| AgentTesla | hdfbank.in/dashboard/login.php | 209.205.221.250 | 12-12-2021 |
| Amadey | 185.215.113.37/fwcMQx2/login.php | 185.215.113.37 | 12-12-2021 |
| Oski | augmentinprod.ir/login.php | 104.21.3.248 | 12-12-2021 |
| Gomorrah | marketcryptolab.com/webpanel/Panel/login.php | 88.214.194.166 | 12-12-2021 |