| Azorult | auxinity.000webhostapp.com/panel/admin.php | 145.14.144.161 | 22-12-2019 |
| Zloader | l9ce1490.justinstalledpanel.com/axick.php | 185.174.100.9 | 19-12-2019 |
| Zloader | 185.174.100.9/axick.php | 185.174.100.9 | 19-12-2019 |
| Zloader | 4netdown.com/axick.php | 104.28.8.183 | 19-12-2019 |
| Zloader | bestshareland.com/axick.php | 104.28.27.183 | 19-12-2019 |
| Zloader | asepyqicob.ga/axick.php | 104.27.163.165 | 19-12-2019 |
| Zloader | 7travel.online/axick.php | 104.18.62.78 | 19-12-2019 |
| Zloader | www.englishpro.online/axick.php | 104.24.125.75 | 19-12-2019 |
| Zloader | www.rapidsha.com/axick.php | 104.28.22.141 | 19-12-2019 |
| Zloader | www.netgetdream.com/axick.php | 104.27.155.128 | 19-12-2019 |
| Zloader | cooldatazone.com/axick.php | 104.24.97.232 | 19-12-2019 |
| Zloader | prozipdownload.com/axick.php | 104.31.84.227 | 19-12-2019 |
| DiamondFox | 104.168.250.111/osdicowpv/ | 104.168.250.111 | 18-12-2019 |
| Tables | securitysystemswap.com/sid/index.php | 161.117.86.223 | 18-12-2019 |
| Ursnif | ohfebveub.xyz/auth/login | 173.232.146.171 | 18-12-2019 |
| Lokibot | tranpip.com/sp/desk.php | 45.183.232.253 | 17-12-2019 |
| BlackNet | mailstealer.zzz.com.ua/login.php | 5.79.66.145 | 17-12-2019 |
| Predator | guilty.zzz.com.ua/login | 5.79.66.145 | 17-12-2019 |
| Evrial | softfare.zzz.com.ua/stealer/login.php | 5.79.66.145 | 17-12-2019 |
| Predator | corp2.site/login | 92.63.197.238 | 16-12-2019 |
| Predator | checksme.info/login | 92.63.197.238 | 16-12-2019 |
| Predator | wergi.xyz/login | 5.63.158.248 | 15-12-2019 |
| Predator | steallog.tk/login | 185.178.208.162 | 15-12-2019 |
| Predator | darkloader.xyz/login | 185.178.208.162 | 15-12-2019 |
| Predator | 185.222.202.35/login | 185.222.202.35 | 15-12-2019 |