phishing at : 194.182.68.124

phishing at :
194.182.68.124

kit urls :
http://babbmap.com/wp-dir/execute/121auto1secureRE.zip
http://babbmap.com/wp-lncludes/121auto1secureRE.zip
http://babbplot.com/monument/Microsoftautob.zip
http://babbplot.com/management-llc/SMicrosoftauto.zip
http://babbplot.com/mmc/Microsoftautob.zip
http://babbture.com/docs/2018%20office.zip
http://bloglyph.com/g-doc.zip
http://bloprint.com/smith/Re_validate.zip
http://masueywtewe.net/2637/newestyahoo.zip
http://midusueyew.com/AOL.zip
http://midusueyew.com/AT&T.zip
http://mreutrewee.com/Graceofall/excel_zip%20file.zip
http://mreutrewee.com/oikp/newoffice18.zip
http://mreutrewee.com/ssl-qll/2018%20office%20(1).zip
http://mreutrewee.com/ssl-secured/2018%20office2.zip
http://mreutrewee.com/sts-qqp/newoffice18.zip
http://mreutrewee.com/victor/Hotmail%20latesst%202017%201img%20Final%20.zip
http://onfigurati.com/adobe%20email%20nd%20p%20b.zip
http://onfigurati.com/docx/adobe%20email%20nd%20p%20b.zip
http://refieurer.net/ms/box-0.zip

kit hashes :
06db24ef3ee113314501270acf1d367f
077b63b553715e8d16e09c86bcd8086c
2c59ee80d74941efd1ea19955a4255a2
327eb414576107d9ff9ccca83cb66e2e
3d7088ae5ebfe99a538677543a903905
5173125172b0b31ee571774a7f0a816e
56830a5d7f1c477ffe0b84e4dc04f081
6a97b06b976fa9693fe6fdd1c97bf824
6b0641098e3b6c4a6ec909de06554eba
84a85d671ceafeb4de546c5926c0d486
868607749d2decc9333d3bb7f947c296
8efe317743bd8e583766103638c394a3
b3183e589bff745bc02241524326f4e3
b51d00eb97976fc8578d25e6feb16310
f4047ec1ebe0a8ed598707925aa90b3b

kit collector addresses :
codatanda@gmail.com
Fudpages@gmail.com
gavin.foust1970@gmail.com
ilogs@zxvtoolsultimate.com
investmentemirate@gmail.com
jendre34@gmail.com
johnbrook2494@gmail.com
mrsgloriphill@yahoo.com
officialjohnmattews@gmail.com
oluwanishola160@gmail.com
sncoxxy@gmail.com