| Collector |  f0599249.xsph.ru/ | 141.8.193.236 | 14-11-2021 |
| BlackNet |  173.212.243.4/NetBot/login.php | 173.212.243.4 | 14-11-2021 |
| Collector |  f0598407.xsph.ru/ | 141.8.193.236 | 14-11-2021 |
| Matanbuchus |  checkingupdatesoftware.at/GtHODfM/qilZw/ | 193.56.146.60 | 13-11-2021 |
| AgentTesla |  www.mgbless.in/udok/login.php | 104.223.93.105 | 13-11-2021 |
| AgentTesla |  www.mgbless.in/mac/login.php | 104.223.93.105 | 13-11-2021 |
| AgentTesla |  www.mgbless.in/kolo/login.php | 104.223.93.105 | 13-11-2021 |
| AgentTesla |  www.mgbless.in/darl/login.php | 104.223.93.105 | 13-11-2021 |
| AgentTesla |  mgbless.in/zion/login.php | 104.223.93.105 | 13-11-2021 |
| Collector |  sosi.ru.xsph.ru/ | 141.8.197.42 | 13-11-2021 |
| AgentTesla |  www.mgbless.in/udok/login.php | 104.223.93.105 | 13-11-2021 |
| Collector |  f0598813.xsph.ru/ | 141.8.193.236 | 13-11-2021 |
| Collector |  f0597176.xsph.ru/ | 141.8.193.236 | 13-11-2021 |
| Amadey |  web.jsonpost.xyz/sj2vMs/login.php | 169.197.142.162 | 13-11-2021 |
| Collector |  f0595957.xsph.ru/ | 141.8.193.236 | 13-11-2021 |
| Lokibot |  secure01-redirect.net/gb3/PvqDq929BSx_A_D_M1n_a.php | 85.143.175.133 | 12-11-2021 |
| Lokibot |  secure01-redirect.net/ga27/PvqDq929BSx_A_D_M1n_a.php | 85.143.175.133 | 12-11-2021 |
| Lokibot |  secure01-redirect.net/gb5/PvqDq929BSx_A_D_M1n_a.php | 85.143.175.133 | 12-11-2021 |
| Collector |  scamms.ru.xsph.ru/ | 141.8.197.42 | 12-11-2021 |
| Collector |  f0597070.xsph.ru/ | 141.8.193.236 | 12-11-2021 |
| Matanbuchus |  193.56.146.60/GtHODfM/qilZw/ | 193.56.146.60 | 11-11-2021 |
| Collector |  f0598195.xsph.ru/ | 141.8.193.236 | 10-11-2021 |
| Oski |  pplonline.org/Cgi/login.php | 108.167.165.140 | 10-11-2021 |
| Collector |  f0595886.xsph.ru/ | 141.8.193.236 | 10-11-2021 |
| Collector |  f0596863.xsph.ru/ | 141.8.193.236 | 10-11-2021 |
