2018-11-03 phishing kit threat actors 128.199.100.182

@techhelplistcom found phishing sites
https://twitter.com/Techhelplistcom/status/1058579988562264066
128.199.100[.]182
#phishing kits from those sites

absolutely[.]cf/ofenunu[.]zip
alphabetic[.]ml/UJ[.]zip
alphabetics[.]cf/matchnew[.]zip
alphabetics[.]cf/ourtimet[.]zip
constantlies[.]ga/DHL[.]zip
constantlies[.]ga/YAHOON[.]zip
constantlies[.]ga/dhlexpress[.]zip
constantlies[.]ml/osp[.]zip
feature[.]mypen[.]is/office-3[.]zip
ideas[.]ipq[.]co/ramdan[.]zip
structureds[.]cf/ourtime123[.]zip
structureds[.]cf/php[.]ourtiime%202[.]zip
structureds[.]cf/zoosk123[.]zip

threat actor emails

$send = "[email protected]";
$send = "[email protected]";
$recipient ="[email protected]";
$my_email = "[email protected]"; //////// YOUR EMAIL GOES HERE
$receiverAddress = "[email protected], [email protected]";
$send = "[email protected]";
$recipient = "[email protected]";
$recipient = "[email protected]";
$recipient = "[email protected] ";
$receiverAddress = "[email protected]";
$my_email = "[email protected]"; //////// YOUR EMAIL GOES HERE
$sent ="[email protected]";