| Predator |  f0341944.xsph.ru/login | 141.8.192.151 | 01-11-2019 |
| Predator | f0346274.xsph.ru/login | 141.8.192.151 | 01-11-2019 |
| Predator | f0347879.xsph.ru/login | 141.8.192.151 | 01-11-2019 |
| Predator | f0347997.xsph.ru/login | 141.8.192.151 | 01-11-2019 |
| Predator | f0346049.xsph.ru/login | 141.8.192.151 | 01-11-2019 |
| Lokibot | fueda.info/meka22/five/PvqDq929BSx_A_D_M1n_a.php | 185.20.227.242 | 01-11-2019 |
| Lokibot | wohinqfood.com/deal/five/PvqDq929BSx_A_D_M1n_a.php | 194.58.122.148 | 01-11-2019 |
| Lokibot | wohinqfood.com/dino/five/PvqDq929BSx_A_D_M1n_a.php | 85.143.217.249 | 01-11-2019 |
| Lokibot | wohinqfood.com/dope/five/PvqDq929BSx_A_D_M1n_a.php | 85.143.217.249 | 01-11-2019 |
| Lokibot | cvnty.ga/V1/five/PvqDq929BSx_A_D_M1n_a.php | 104.18.32.144 | 01-11-2019 |
| Lokibot | cvnty.ga/V2/five/PvqDq929BSx_A_D_M1n_a.php | 104.18.33.144 | 01-11-2019 |
| Lokibot | cvnty.ga/V3/five/PvqDq929BSx_A_D_M1n_a.php | 104.18.32.144 | 01-11-2019 |
| Lokibot | sghecc.com/advise/five/PvqDq929BSx_A_D_M1n_a.php | 185.20.227.242 | 01-11-2019 |
| Azorult | tblasta.us/iz/panel/admin.php | 185.20.227.242 | 01-11-2019 |
| GlitchPOS | shopm.info/kod/login.php | 192.99.34.204 | 01-11-2019 |
| DiamondFox | shopm.info/fernweh/ | 192.99.34.204 | 01-11-2019 |
| Predator | www.serawledindustries.com/login | 104.27.143.145 | 01-11-2019 |
| Pony | www.jicago-jp.com/eng/admin.php | 45.122.138.207 | 01-11-2019 |
| Azorult | sylvaclouds.eu/kleinox/panel/admin.php | 47.91.10.145 | 01-11-2019 |
| Formbook | www.hoscury.com/bo/config.php?account=billisolo | 162.213.250.96 | 01-11-2019 |
| Predator | fightwithcapitalism.com/login | 150.109.20.15 | 31-10-2019 |
| Predator | dewabitsoftware.com/login | 150.109.20.15 | 30-10-2019 |
| MajikPOS | 185.10.57.107/ | 185.10.57.107 | 30-10-2019 |
| AgentTesla | prominienttec.com/record/webpanel/login.php | 185.11.145.5 | 29-10-2019 |
| AgentTesla | arbistars.com/webpanel/login.php | 217.146.91.100 | 29-10-2019 |
