| Lokibot |  www.smilesbyme.com/includes/uju/five/PvqDq929BSx_A_D_M1n_a.php | 192.185.93.26 | 01-06-2019 |
| Lokibot | www.smilesbyme.com/includes/grace/PvqDq929BSx_A_D_M1n_a.php | 192.185.93.26 | 01-06-2019 |
| Lokibot | www.smilesbyme.com/includes/frank/PvqDq929BSx_A_D_M1n_a.php | 192.185.93.26 | 01-06-2019 |
| Lokibot | maritlme-net.com/boil/Panel/PvqDq929BSx_A_D_M1n_a.php | 104.18.41.57 | 01-06-2019 |
| Lokibot | maritlme-net.com/deal/Panel/PvqDq929BSx_A_D_M1n_a.php | 104.18.41.57 | 01-06-2019 |
| Lokibot | jonjoshelvey.gq/raphael/PvqDq929BSx_A_D_M1n_a.php | 104.31.80.149 | 01-06-2019 |
| Pony | www.skylite.com.sa/map/admin.php | 212.76.85.42 | 01-06-2019 |
| Pony | www.belllflight.com/demo/panel/admin.php | 192.185.41.250 | 01-06-2019 |
| Pony | shokeydservers.tk/Pony/panel/admin.php | 103.219.154.209 | 01-06-2019 |
| Pony | ketof.000webhostapp.com/panel/admin.php | 145.14.145.227 | 01-06-2019 |
| MajikPOS | 54.37.141.202/panel/ | 54.37.141.202 | 01-06-2019 |
| Predator | log.dogepay.info/login | 104.31.69.253 | 01-06-2019 |
| AgentTesla | etvidanueva.com/photos/images/fulls/WebPanel/login.php | 198.187.31.148 | 01-06-2019 |
| AgentTesla | sm.rooderoofing.com.au/WebPanel/login.php | 27.121.64.160 | 01-06-2019 |
| Cythosia | evih.scamfreeweb.com/Webpanel/ | 192.185.26.216 | 01-06-2019 |
| ParasiteHTTP | 80.233.134.242/login/ | 80.233.134.242 | 01-06-2019 |
| AgentTesla | pounds.ngrok.io/webpanel/login.php | 18.188.14.65 | 01-06-2019 |
| Godzilla | pounds.ngrok.io/loader/ | 18.188.14.65 | 01-06-2019 |
| Predator | maugli8990.jhfree.net/login | 91.121.244.95 | 01-06-2019 |
| Predator | 91.121.244.95/login | 91.121.244.95 | 01-06-2019 |
| Predator | 185.238.0.33/login | 185.238.0.33 | 01-06-2019 |
| Predator | 46.105.35.22/login | 46.105.35.22 | 01-06-2019 |
| Predator | 81.177.181.154/login | 81.177.181.154 | 01-06-2019 |
| Predator | 94.103.86.174/login | 94.103.86.174 | 01-06-2019 |
| Predator | 95.81.0.90/login | 95.81.0.90 | 01-06-2019 |
