| Azorult |  vc.kunwersachdev.com/restore/admin.php/ | 216.10.249.157 | 28-04-2021 |
| Azorult |  vc.kunwersachdev.com/restore/admin.php | 216.10.249.157 | 28-04-2021 |
| Amadey |  176.111.174.114/Hnq8vS/login.php | 176.111.174.114 | 28-04-2021 |
| Collector |  globaltechtutor.com/ | 23.254.253.92 | 27-04-2021 |
| SupremeMiner |  staxalibabapoisonrez.cc/panel/auth.php | 31.210.20.139 | 27-04-2021 |
| SupremeMiner |  imen1.webd.pro/panel/auth.php | 194.181.228.65 | 27-04-2021 |
| Saint |  d3pdq6efxr.com/avengers/login.php | 156.67.220.94 | 27-04-2021 |
| TVRat |  ts.bingoroll3.net/ | 172.67.174.87 | 27-04-2021 |
| Cypress |  www.growig.xyz/ | 185.142.236.189 | 27-04-2021 |
| BlackNet |  livecryptorates.xyz/myblackn/login.php | 68.65.120.198 | 27-04-2021 |
| Collector |  f0536427.xsph.ru/ | 141.8.192.151 | 27-04-2021 |
| Azorult |  31.210.21.39/3.4.1/panel/admin.php | 31.210.21.39 | 27-04-2021 |
| Collector |  f0525381.xsph.ru/ | 141.8.193.236 | 27-04-2021 |
| AgentTesla |  103.133.105.179/1919/login.php | 103.133.105.179 | 27-04-2021 |
| Eredel |  s92018lm.beget.tech/login/ | 185.50.25.17 | 27-04-2021 |
| Azorult |  156.96.117.231/panel/admin.php | 156.96.117.231 | 27-04-2021 |
| BlackNet |  mxgroup.agency/login.php | 103.162.28.133 | 27-04-2021 |
| Collector |  f0522091.xsph.ru/ | 141.8.192.151 | 27-04-2021 |
| Oski |  ourfirm.com/login.php | 92.204.132.28 | 27-04-2021 |
| Redirected |  lie3.xyz/auth/login | 176.111.174.59 | 27-04-2021 |
| Collector |  cu94599.tmweb.ru/ | 185.114.247.102 | 27-04-2021 |
| Lokibot |  takoons.com/yslim/PvqDq929BSx_A_D_M1n_a.php | 185.100.87.134 | 27-04-2021 |
| Collector |  f0536231.xsph.ru/ | 141.8.193.236 | 27-04-2021 |
| Collector |  f0536352.xsph.ru/ | 141.8.193.236 | 27-04-2021 |
| Lokibot |  edificiosafico.com.ar/intranet/noticias/ima/server/Panel/five/PvqDq929BSx_A_D_M1n_a.php | 190.61.250.140 | 27-04-2021 |
