| Gomorrah |  kashdreamz.run/gom_v4/Panel/login.php | 88.214.194.85 | 13-12-2021 |
| Collector |  kikils13579.ru.xsph.ru/ | 141.8.197.42 | 13-12-2021 |
| Collector |  777.com.xsph.ru/ | 141.8.197.42 | 13-12-2021 |
| Collector |  f0595813.xsph.ru/ | 141.8.193.236 | 13-12-2021 |
| Lokibot |  moneyfinders.xyz/kofi/loki/PvqDq929BSx_A_D_M1n_a.php | 104.21.78.49 | 13-12-2021 |
| Lokibot |  moneyfinders.xyz/zoom/loki/PvqDq929BSx_A_D_M1n_a.php | 104.21.78.49 | 13-12-2021 |
| Amadey |  193.56.146.50/Hnq8vS/login.php | 193.56.146.50 | 12-12-2021 |
| Lokibot |  mail.jithiadaproperties.com/swtnvmbr/logs/omc.php | 188.166.172.139 | 12-12-2021 |
| AgentTesla |  hdfbank.in/dashboard/login.php | 209.205.221.250 | 12-12-2021 |
| Amadey |  185.215.113.37/fwcMQx2/login.php | 185.215.113.37 | 12-12-2021 |
| Oski |  augmentinprod.ir/login.php | 104.21.3.248 | 12-12-2021 |
| Gomorrah |  marketcryptolab.com/webpanel/Panel/login.php | 88.214.194.166 | 12-12-2021 |
| Gomorrah |  riseandshinehighschoolntinda.com/555/Panel/login.php | 199.188.200.126 | 12-12-2021 |
| Vulturi |  94.140.112.43:5050/login | 94.140.112.43 | 11-12-2021 |
| Gomorrah |  secure.biiclick.com/webpanel/Panel/login.php | 89.252.186.246 | 11-12-2021 |
| Gomorrah |  acesscanada.com/webpanel/Panel/login.php | 209.126.106.158 | 11-12-2021 |
| Predator |  a0608694.xsph.ru/login | 141.8.195.65 | 11-12-2021 |
| AgentTesla |  drossmnfg.com/private/login.php | 37.0.9.166 | 11-12-2021 |
| Oski |  hp-tv.tk/login.php | 172.67.131.21 | 11-12-2021 |
| AgentTesla |  afunshy.duckdns.org/login.php | 79.141.165.134 | 11-12-2021 |
| Gomorrah |  extramemarine-me.com/gom_v4/Panel/login.php | 212.1.210.68 | 11-12-2021 |
| Gomorrah |  kashdreamz.run/gom_v4/Panel/login.php | 88.214.194.85 | 11-12-2021 |
| Oski |  tesorak.ru/login.php | 37.0.9.166 | 11-12-2021 |
| Lokibot |  secure01-redirect.net/gb13/PvqDq929BSx_A_D_M1n_a.php | 45.9.72.32 | 10-12-2021 |
| Lokibot |  secure01-redirect.net/gb27/PvqDq929BSx_A_D_M1n_a.php | 45.9.72.32 | 10-12-2021 |
