| AgentTesla | 103.133.105.179/1919/login.php | 103.133.105.179 | 27-04-2021 |
| Eredel | s92018lm.beget.tech/login/ | 185.50.25.17 | 27-04-2021 |
| Azorult | 156.96.117.231/panel/admin.php | 156.96.117.231 | 27-04-2021 |
| BlackNet | mxgroup.agency/login.php | 103.162.28.133 | 27-04-2021 |
| Collector | f0522091.xsph.ru/ | 141.8.192.151 | 27-04-2021 |
| Oski | ourfirm.com/login.php | 92.204.132.28 | 27-04-2021 |
| Redirected | lie3.xyz/auth/login | 176.111.174.59 | 27-04-2021 |
| Collector | cu94599.tmweb.ru/ | 185.114.247.102 | 27-04-2021 |
| Lokibot | takoons.com/yslim/PvqDq929BSx_A_D_M1n_a.php | 185.100.87.134 | 27-04-2021 |
| Collector | f0536231.xsph.ru/ | 141.8.193.236 | 27-04-2021 |
| Collector | f0536352.xsph.ru/ | 141.8.193.236 | 27-04-2021 |
| Lokibot | edificiosafico.com.ar/intranet/noticias/ima/server/Panel/five/PvqDq929BSx_A_D_M1n_a.php | 190.61.250.140 | 27-04-2021 |
| Oski | 31.210.20.147/login.php | 31.210.20.147 | 27-04-2021 |
| Oski | 5azc.xyz/login.php | 45.144.225.201 | 27-04-2021 |
| Azorult | frnr.duckdns.org/panel/admin.php | 156.96.117.231 | 26-04-2021 |
| Lokibot | techarnise.ru/fc4/PvqDq929BSx_A_D_M1n_a.php | 47.91.76.92 | 26-04-2021 |
| Collector | a98052kl.beget.tech/ | 185.50.25.48 | 26-04-2021 |
| Lokibot | chem.buet.ac.bd/staff-list/incf/tt/Panel/PvqDq929BSx_A_D_M1n_a.php | 103.94.135.216 | 26-04-2021 |
| Lokibot | chem.buet.ac.bd/staff-list/incf/tt/Panel/PvqDq929BSx_A_D_M1n_a.php | 103.94.135.216 | 26-04-2021 |
| Azorult | kadudampit.sukabumikab.go.id:443/cgi/PL341/panel/admin.php | 103.15.226.14 | 26-04-2021 |
| Collector | f0533622.xsph.ru/ | 141.8.192.151 | 26-04-2021 |
| DiamondFox | 31.210.20.72/panel/index.php | 31.210.20.72 | 26-04-2021 |
| Lokibot | amrp.tw/clue/PvqDq929BSx_A_D_M1n_a.php | 35.247.234.230 | 26-04-2021 |
| Oski | 45.15.143.157/login.php | 45.15.143.157 | 26-04-2021 |
| Azorult | kadudampit.sukabumikab.go.id/cgi/PL341/panel/admin.php | 103.15.226.14 | 26-04-2021 |