2018-11-03 phishing kit threat actors 128.199.100.182

@techhelplistcom found phishing sites
https://twitter.com/Techhelplistcom/status/1058579988562264066
128.199.100[.]182
#phishing kits from those sites

absolutely[.]cf/ofenunu[.]zip
alphabetic[.]ml/UJ[.]zip
alphabetics[.]cf/matchnew[.]zip
alphabetics[.]cf/ourtimet[.]zip
constantlies[.]ga/DHL[.]zip
constantlies[.]ga/YAHOON[.]zip
constantlies[.]ga/dhlexpress[.]zip
constantlies[.]ml/osp[.]zip
feature[.]mypen[.]is/office-3[.]zip
ideas[.]ipq[.]co/ramdan[.]zip
structureds[.]cf/ourtime123[.]zip
structureds[.]cf/php[.]ourtiime%202[.]zip
structureds[.]cf/zoosk123[.]zip

threat actor emails

$send = "oscne2018@gmail.com";
$send = "prismbinarytradingllp@gmail.com";
$recipient ="nouoman.sa33d@gmail.com";
$my_email = "ofejabione@gmail.com"; //////// YOUR EMAIL GOES HERE
$receiverAddress = "softwire083@gmail.com, boxbrain230@yahoo.com";
$send = "newswift.confirmation@gmail.com";
$recipient = "chevyu930@gmail.com";
$recipient = "karlbaer2020@gmail.com";
$recipient = "boxr878@gmail.com ";
$receiverAddress = "smithjasmine437@gmail.com";
$my_email = "sp1009218@gmail.com"; //////// YOUR EMAIL GOES HERE
$sent ="NONSPAB@gmail.com";