| Collector | a0682417.xsph.ru/ | 141.8.192.58 | 07-06-2022 |
| AgentTesla | mobinomomuam.duckdns.org/login.php | 194.31.98.108 | 07-06-2022 |
| AgentTesla | 142.132.185.172/bill/login.php | 142.132.185.172 | 07-06-2022 |
| AgentTesla | mobibanewdan.duckdns.org/login.php | 194.31.98.108 | 06-06-2022 |
| AgentTesla | bakuzamokala.duckdns.org/login.php | 194.31.98.108 | 06-06-2022 |
| AgentTesla | mobibagugu.duckdns.org/login.php | 194.31.98.108 | 06-06-2022 |
| AgentTesla | mubbibun.duckdns.org/login.php | 194.31.98.108 | 06-06-2022 |
| AgentTesla | vncgoga.duckdns.org/login.php | 194.31.98.108 | 03-06-2022 |
| Collector | lolacazr.beget.tech/ | 91.106.207.52 | 03-06-2022 |
| Azorult | 85.202.169.21/sweet/panel/admin.php | 85.202.169.21 | 02-06-2022 |
| Oski | internetstores.co.vu/login.php | 142.4.0.135 | 02-06-2022 |
| Avatar | 31.41.244.231/AVAVA/ | 31.41.244.231 | 02-06-2022 |
| Ginzo | holdthismoney.site/ | 172.67.187.40 | 01-06-2022 |
| AgentTesla | 74.201.28.111/2nd-italy/login.php | 74.201.28.111 | 31-05-2022 |
| Oski | ndy.cloudserv700.xyz/login.php | 31.193.136.168 | 31-05-2022 |
| Azorult | bwealth1.xyz/panel/admin.php | 172.67.150.22 | 30-05-2022 |
| Colibri | wirzamm.at/forum/panel/login.php | 211.171.233.129 | 30-05-2022 |
| Amadey | 185.215.113.35/d2VxjasuwS_old/login.php | 185.215.113.35 | 29-05-2022 |
| Amadey | 185.215.113.38/f8dfksdj3/Login.php | 185.215.113.38 | 29-05-2022 |
| Amadey | garts.at/forum/Login.php | 210.182.29.70 | 29-05-2022 |
| Oski | techcontact.net/o/login.php | 213.190.6.94 | 29-05-2022 |
| Collector | a0678913.xsph.ru/ | 141.8.195.65 | 29-05-2022 |
| Collector | f0648251.xsph.ru/ | 141.8.192.151 | 28-05-2022 |
| AgentTesla | 37.0.8.144/rich/login.php | 37.0.8.144 | 28-05-2022 |
| AgentTesla | 37.0.8.144/022/login.php | 37.0.8.144 | 28-05-2022 |