| LiteHTTP | 109.51.12.106:9995/login/ | 109.51.12.106 | 17-03-2022 |
| BlackGuard | skazkahoho.space/panel/login.php | 80.79.123.94 | 17-03-2022 |
| Azorult | 62.197.136.186/ugonna/panel/admin.php | 62.197.136.186 | 17-03-2022 |
| AgentTesla | luc4e.xyz/login.php | 104.21.49.211 | 17-03-2022 |
| Amadey | softanalyzer.online/ge2cDsc3/Login.php | 193.56.146.164 | 16-03-2022 |
| Amadey | 193.56.146.164/ge2cDsc3/Login.php | 193.56.146.164 | 16-03-2022 |
| Collector | a0646498.xsph.ru/ | 141.8.192.193 | 16-03-2022 |
| AgentTesla | agusanplantation.com/kris/kris/login.php | 198.251.89.144 | 16-03-2022 |
| Mars | 62.204.41.179/magic/login.php | 62.204.41.179 | 16-03-2022 |
| Formbook | mutoros.com/nr5c/index.php?account=miller | 162.213.253.243 | 15-03-2022 |
| Lokibot | 89.43.107.198/five/PvqDq929BSx_A_D_M1n_a.php | 89.43.107.198 | 15-03-2022 |
| Oski | 64.188.21.227/5/login.php | 64.188.21.227 | 15-03-2022 |
| Vulturi | 154.53.33.203:5050/login | 154.53.33.203 | 15-03-2022 |
| Vulturi | 192.3.15.113:5050/login | 192.3.15.113 | 15-03-2022 |
| Vulturi | 34.69.68.209:5050/login | 34.69.68.209 | 15-03-2022 |
| Collector | bivebeoe.beget.tech/ | 91.106.207.25 | 15-03-2022 |
| Oski | 64.188.21.227/x/login.php | 64.188.21.227 | 14-03-2022 |
| Azorult | 92.38.160.184/endy/panel/admin.php | 92.38.160.184 | 12-03-2022 |
| Oski | truehempbiz.com/login.php | 185.210.145.95 | 12-03-2022 |
| Collector | foxrust.ru.xsph.ru/ | 141.8.197.42 | 12-03-2022 |
| Vulturi | 52.188.26.40:5050/login | 52.188.26.40 | 12-03-2022 |
| Collector | a0644771.xsph.ru/ | 141.8.192.58 | 11-03-2022 |
| Collector | whiteraven.ru.xsph.ru/ | 141.8.197.42 | 10-03-2022 |
| AgentTesla | fhelandsb.xyz/1/login.php | 199.188.200.165 | 10-03-2022 |
| Collector | f0644088.xsph.ru/ | 141.8.193.236 | 09-03-2022 |