| SupremeMiner |  144.76.84.177/panel/auth.php | 144.76.84.177 | 28-11-2021 |
| Lokibot |  194.85.248.167/imt/PvqDq929BSx_A_D_M1n_a.php | 194.85.248.167 | 28-11-2021 |
| Collector |  prox201stealer.ru.xsph.ru/ | 141.8.197.42 | 28-11-2021 |
| AgentTesla |  www.tecnomedica.com.py/poikmkjoiiou/login.php | 216.172.171.133 | 27-11-2021 |
| Lokibot |  secure01-redirect.net/ga29/PvqDq929BSx_A_D_M1n_a.php | 212.193.50.242 | 27-11-2021 |
| Cypress |  f0603504.xsph.ru/MailUpdateFresh/ | 141.8.193.236 | 27-11-2021 |
| Cypress |  f0602725.xsph.ru/MailUpdateFresh/ | 141.8.193.236 | 26-11-2021 |
| Collector |  blogsmibravlstart.ru.xsph.ru/ | 141.8.197.42 | 26-11-2021 |
| Azorult |  23012002.com/panel/admin.php | 185.130.58.66 | 25-11-2021 |
| Oski |  datafishers.club/login.php | 198.27.79.65 | 25-11-2021 |
| BlackNet |  liosion.0verl0rd.team/BNP/login.php | 188.40.59.88 | 25-11-2021 |
| BlackNet |  blaskshell.ru/login.php | 45.128.206.87 | 25-11-2021 |
| Collector |  a0601911.xsph.ru/ | 141.8.195.65 | 25-11-2021 |
| Oski |  1advance.ddns.net/login.php | 34.93.40.105 | 25-11-2021 |
| Lokibot |  secure01-redirect.net/gb15/PvqDq929BSx_A_D_M1n_a.php | 94.142.141.236 | 25-11-2021 |
| Collector |  salees.ru/ | 31.31.198.62 | 25-11-2021 |
| Collector |  f0589470.xsph.ru/ | 141.8.192.151 | 24-11-2021 |
| Cypress |  f0602368.xsph.ru/MailUpdateFresh/ | 141.8.193.236 | 24-11-2021 |
| Collector |  f0602593.xsph.ru/ | 141.8.193.236 | 24-11-2021 |
| Lokibot |  secure01-redirect.net/gb7/PvqDq929BSx_A_D_M1n_a.php | 95.213.216.149 | 23-11-2021 |
| Lokibot |  secure01-redirect.net/gb6/PvqDq929BSx_A_D_M1n_a.php | 95.213.216.149 | 23-11-2021 |
| Lokibot |  secure01-redirect.net/ga26/PvqDq929BSx_A_D_M1n_a.php | 95.213.216.149 | 23-11-2021 |
| AgentTesla |  www.mgbless.in/dfran/login.php | 104.223.93.105 | 23-11-2021 |
| AgentTesla |  www.mgbless.in/chibu/login.php | 104.223.93.105 | 23-11-2021 |
| Lokibot |  oilproduce.xyz/five/PvqDq929BSx_A_D_M1n_a.php | 172.67.171.239 | 23-11-2021 |
