| AgentTesla |  oko1e2.xyz/login.php | 104.21.89.239 | 30-11-2021 |
| AgentTesla |  www.tecnomedica.com.py/poikmkjoiiou/login.php | 216.172.171.133 | 30-11-2021 |
| Oski |  pak-rebel.com/login.php | 107.189.2.217 | 29-11-2021 |
| Collector |  sosipisun.ru.xsph.ru/ | 141.8.197.42 | 29-11-2021 |
| Azorult |  fastinvestmentbroker.com/junior/panel/admin.php | 185.174.174.220 | 29-11-2021 |
| Lokibot |  rfsfju.xyz/blsdxx/PvqDq929BSx_A_D_M1n_a.php | 172.67.171.101 | 29-11-2021 |
| Lokibot |  secure01-redirect.net/gb18/PvqDq929BSx_A_D_M1n_a.php | 212.193.51.49 | 29-11-2021 |
| Lokibot |  194.85.248.167/imtt/PvqDq929BSx_A_D_M1n_a.php | 194.85.248.167 | 29-11-2021 |
| Predator |  ascariproject.atwebpages.com/login | 185.176.43.108 | 29-11-2021 |
| Collector |  pentagon.info.ru.xsph.ru/ | 141.8.197.42 | 29-11-2021 |
| Lokibot |  powerbankbless.xyz/aboyo/Panel/five/PvqDq929BSx_A_D_M1n_a.php | 104.21.64.64 | 29-11-2021 |
| SupremeMiner |  144.76.84.177/panel/auth.php | 144.76.84.177 | 28-11-2021 |
| Lokibot |  194.85.248.167/imt/PvqDq929BSx_A_D_M1n_a.php | 194.85.248.167 | 28-11-2021 |
| Collector |  prox201stealer.ru.xsph.ru/ | 141.8.197.42 | 28-11-2021 |
| AgentTesla |  www.tecnomedica.com.py/poikmkjoiiou/login.php | 216.172.171.133 | 27-11-2021 |
| Lokibot |  secure01-redirect.net/ga29/PvqDq929BSx_A_D_M1n_a.php | 212.193.50.242 | 27-11-2021 |
| Cypress |  f0603504.xsph.ru/MailUpdateFresh/ | 141.8.193.236 | 27-11-2021 |
| Cypress |  f0602725.xsph.ru/MailUpdateFresh/ | 141.8.193.236 | 26-11-2021 |
| Collector |  blogsmibravlstart.ru.xsph.ru/ | 141.8.197.42 | 26-11-2021 |
| Azorult |  23012002.com/panel/admin.php | 185.130.58.66 | 25-11-2021 |
| Oski |  datafishers.club/login.php | 198.27.79.65 | 25-11-2021 |
| BlackNet |  liosion.0verl0rd.team/BNP/login.php | 188.40.59.88 | 25-11-2021 |
| BlackNet |  blaskshell.ru/login.php | 45.128.206.87 | 25-11-2021 |
| Collector |  a0601911.xsph.ru/ | 141.8.195.65 | 25-11-2021 |
| Oski |  1advance.ddns.net/login.php | 34.93.40.105 | 25-11-2021 |
