| Lokibot | checkvim.com/ga8/PvqDq929BSx_A_D_M1n_a.php | 91.224.22.89 | 15-09-2021 |
| Oski | eurob.xyz/login.php | 45.144.225.161 | 15-09-2021 |
| Collector | ttrafayoungflex.com.xsph.ru/ | 141.8.197.42 | 14-09-2021 |
| Collector | vaflashtern.ru/ | 31.172.65.24 | 14-09-2021 |
| Oski | 51.178.236.140/hypeman/login.php | 51.178.236.140 | 14-09-2021 |
| Amadey | l094b2d2.justinstalledpanel.com/hBugs2D/login.php | 91.241.19.49 | 14-09-2021 |
| Oski | kelbro.xyz/login.php | 45.144.225.239 | 14-09-2021 |
| Amadey | l73d97e4.justinstalledpanel.com/hBugs2D/login.php | 91.241.19.49 | 13-09-2021 |
| Amadey | lb096418.justinstalledpanel.com/hBugs2D/login.php | 91.241.19.49 | 13-09-2021 |
| Amadey | ithelp100.support/hBugs2D/login.php | 91.241.19.49 | 13-09-2021 |
| Lokibot | dhlglobalexpress.shop/BN22/PvqDq929BSx_A_D_M1n_a.php | 172.67.195.209 | 13-09-2021 |
| Hydra | rubimurphy57.online/login | 178.132.78.156 | 13-09-2021 |
| Hydra | mackcarney65.online/login | 178.132.78.156 | 13-09-2021 |
| Hydra | lolamaefarmer5823.online/login | 178.132.78.156 | 13-09-2021 |
| Hydra | louisahandley25.online/login | 178.132.78.156 | 13-09-2021 |
| Hydra | kerrihuffman1237.online/login | 178.132.78.156 | 13-09-2021 |
| Amadey | 185.215.113.101/gb9fskvS/login.php | 185.215.113.101 | 13-09-2021 |
| AgentTesla | 31.220.2.120/~goobuyjp/tem/login.php | 31.220.2.120 | 12-09-2021 |
| AgentTesla | cleveropame.ydns.eu/wikema/login.php | 202.55.134.93 | 12-09-2021 |
| AgentTesla | 69.174.100.168/webpanel-qwerty2/login.php | 69.174.100.168 | 12-09-2021 |
| AgentTesla | lametopvxry.ydns.eu/omkail/login.php | 202.55.134.93 | 12-09-2021 |
| AgentTesla | 69.174.100.168/webpanel-dawn/login.php | 69.174.100.168 | 12-09-2021 |
| AgentTesla | bot.statusupdate.one/webpanel-charles/login.php | 69.174.100.168 | 12-09-2021 |
| AgentTesla | 69.174.100.168/webpanel-qwerty/login.php | 69.174.100.168 | 12-09-2021 |
| AgentTesla | 69.174.100.168/webpanel-muti/login.php | 69.174.100.168 | 12-09-2021 |