| DiamondFox | www.datanalysis.club/ms/index.php | 213.159.203.232 | 20-04-2021 |
| Seth | infobao3jdo.com/cc/ | 34.107.72.79 | 19-04-2021 |
| AgentTesla | salkic.co.ba/login.php | 95.217.195.80 | 19-04-2021 |
| Oski | orisinlog.com/login.php | 45.144.225.201 | 19-04-2021 |
| AgentTesla | 31.220.2.200/~gguhtygr/34/login.php | 31.220.2.200 | 19-04-2021 |
| Azorult | pa-magelang.go.id/FTP/panel/admin.php | 110.5.109.60 | 19-04-2021 |
| BlackNet | 52.240.152.251/login.php | 52.240.152.251 | 19-04-2021 |
| Lokibot | mcrnsw.com.au/panel/PvqDq929BSx_A_D_M1n_a.php | 192.185.113.23 | 19-04-2021 |
| Seth | infobao3jdo.com:443/cc/ | 35.199.126.54 | 19-04-2021 |
| BlackNet | 34.70.128.92/login.php | 34.70.128.92 | 19-04-2021 |
| Oski | weirdtrendz.com/login.php | 95.217.40.222 | 18-04-2021 |
| DiamondFox | 176.111.174.123/Retard/index.php | 176.111.174.123 | 18-04-2021 |
| Seth | infobao3jdo.com:443/cc/index.php | 35.199.126.54 | 18-04-2021 |
| Azorult | 173.230.150.192/panel/admin.php | 173.230.150.192 | 18-04-2021 |
| Seth | infobao3jdo.com/cc/index.php | 35.199.126.54 | 18-04-2021 |
| Lokibot | 31.210.20.71/teleuser/PvqDq929BSx_A_D_M1n_a.php | 31.210.20.71 | 18-04-2021 |
| Saint | qzp.me/hvwstxaaov/login.php | 31.210.20.4 | 17-04-2021 |
| BlackNet | msupdate.saforta.com/cls/login.php | 172.67.213.209 | 17-04-2021 |
| Lokibot | eightelegance.com.br/eightel/five/PvqDq929BSx_A_D_M1n_a.php | 108.167.188.182 | 17-04-2021 |
| DiamondFox | www.datanalysis.site/ms/index.php | 213.159.203.232 | 17-04-2021 |
| DiamondFox | www.datanalysis.space/ms/index.php | 213.159.203.232 | 17-04-2021 |
| DiamondFox | 176.111.174.118/pp/index.php | 176.111.174.118 | 17-04-2021 |
| AgentTesla | 103.133.105.179/1515/login.php | 103.133.105.179 | 17-04-2021 |
| AgentTesla | buffercc.duckdns.org/3737/login.php | 103.133.105.179 | 17-04-2021 |
| AgentTesla | buffercc.duckdns.org/1616/login.php | 103.133.105.179 | 17-04-2021 |