| Lokibot | myinsidertraveltips.com/gug/five/PvqDq929BSx_A_D_M1n_a.php | 104.218.13.144 | 05-09-2020 |
| Lokibot | hfktichen.com/simba/simba2/PvqDq929BSx_A_D_M1n_a.php | 45.143.138.128 | 05-09-2020 |
| BetaBot | eastexs.com/~zadmin/lk/zp/login.php | 84.38.181.21 | 04-09-2020 |
| Lokibot | thernagictouch.com/kudi/five/PvqDq929BSx_A_D_M1n_a.php | 95.181.172.13 | 04-09-2020 |
| Nexus | 176.119.159.24/index.php | 176.119.159.24 | 04-09-2020 |
| Lokibot | linkk-my.com/kon/kon1/PvqDq929BSx_A_D_M1n_a.php | 45.143.138.128 | 04-09-2020 |
| Zloader | dotxwbdwktpeaoniphea.com/cp.php | 45.84.227.231 | 04-09-2020 |
| Zloader | dotxwbdwktpeaoniphea.com/cp.php?m=login | 45.84.227.231 | 04-09-2020 |
| Ursnif | futurenewapp.uno/auth/login | 213.202.253.29 | 04-09-2020 |
| Qudox | 195.2.92.64/admin/login.php | 195.2.92.64 | 04-09-2020 |
| Lokibot | duclongetc.com/b/need/work/Panel/five/PvqDq929BSx_A_D_M1n_a.php | 103.27.62.62 | 04-09-2020 |
| Lokibot | myinsidertraveltips.com/gug/five/PvqDq929BSx_A_D_M1n_a.php | 104.218.13.144 | 04-09-2020 |
| Azorult | onlinecheck.hussanways.com/panel/admin.php | 23.254.165.131 | 04-09-2020 |
| BetaBot | eastexs.com/~zadmin/lk/nst/login.php | 5.53.124.203 | 04-09-2020 |
| BetaBot | eastexs.com/~zadmin/lk/ca/login.php | 5.53.124.203 | 04-09-2020 |
| Azorult | uvayuov.hussanways.com/panel/admin.php | 23.254.165.131 | 03-09-2020 |
| Lokibot | 104.223.143.132/vrislo/Panel/five/PvqDq929BSx_A_D_M1n_a.php | 104.223.143.132 | 03-09-2020 |
| Lokibot | duclongetc.com/ob/need/work/Panel/five/PvqDq929BSx_A_D_M1n_a.php | 103.27.62.62 | 03-09-2020 |
| Lokibot | duclongetc.com/vv/need/work/Panel/five/PvqDq929BSx_A_D_M1n_a.php | 103.27.62.62 | 03-09-2020 |
| Lokibot | duclongetc.com/a/need/work/Panel/five/PvqDq929BSx_A_D_M1n_a.php | 103.27.62.62 | 03-09-2020 |
| Lokibot | duclongetc.com/a/need/work/Panel/five/PvqDq929BSx_A_D_M1n_a.php | 103.27.62.62 | 03-09-2020 |
| Predator | gfdhhfg.zzz.com.ua/login | 95.211.16.66 | 03-09-2020 |
| Lokibot | pkxz.xyz/V3/five/PvqDq929BSx_A_D_M1n_a.php | 104.27.139.44 | 03-09-2020 |
| BlackRock | 217.8.117.93:8080/#/login | 217.8.117.93 | 02-09-2020 |
| Ursnif | sertificatkey.com/auth/login | 213.202.253.21 | 02-09-2020 |