2018-11-12 #phishingkit threat actor emails 35.183.119.114

#phishingkit threat actor emails
https://twitter.com/Techhelplistcom/status/1061840412883722240
35.183.119.114 @digitalocean hosting



1\1\1\1\passportx.php:$send = "[email protected]";
domain_updated\review\connectID.php:$own = '[email protected]';
form\bringitback.php:$send = "[email protected]";
office\office365\bringitback.php:$send = "[email protected]";
office365\form\bringitback.php:$send = "[email protected]";
Review\file\site\process.php:$to = "[email protected]";



http://fbg6.cf/qw/General.zip
http://b6y76.ga/feyi/newestyahoo.zip
http://b6y76.ga/uu/Docusign%20_1.zip
http://b6y76.ga/faith/secure01c.chase.web.auth.dashboard..zip
http://b6y76.cf/ll/domain_updated.zip
http://sfdgvr65.ga/hot-auto.zip
http://sfdgvr65.cf/ourtimet%20_1.zip
http://fbg6.ga/office365/form.zip
http://fbg6.ga/office365.zip
http://fbg6.ga/office.zip
http://fbg6.ga/office/office365.zip
http://gb667u76.tk/1.zip
http://gb667u76.tk/review/Review.zip