2018-01-11 Phishing Kit Threat Actors from PhishTank

hunting for #phishing kits (list here https://pastebin.com/RZuT4Swt  )
below are the threat actors and their calling cards

@neonprimetime security

The threat actors

$to = "malexdulz@yandex.com";
mail("bsetv11@gmail.com",$subj,$message,$from,$sniper);
$to = "purusexena@gmail.com";
$recipient = "toriwilliams807@gmail.com,";
$send = "nicolasoscar1@zoho.com";
$recipient = "uucheprecious@gmail.com";
$to = "malexdulz@yandex.com";
$to = "purusexena@gmail.com";
$to = "harijbe88@gmail.com";
$to = "drthomaskohler5@gmail.com";
$send    = "iiiwon2017@gmail.com";
$recipient = "lingisbrothers@gmail.com";
$sent ="checksandbalances77@gmail.com";
<?php $send = 'v.o.wire01@gmail.com'; ?>
$post = "shoolaysp@gmail.com";
$to = "harijbe88@gmail.com";
$recipient = "uucheprecious@gmail.com";
mail("susanging1141@gmail.com",$subj,$message,$from,$domain);

And some of their calling cards

$message .= "----Coded by Vikky_banti----------------\n";
$msg .= "Dropbox Login Info by DANTY\n";
$message .= "---------------+ match by protest_song(at)yahoo.com +-----------------\n";
$message .= "---------------Blessed Jboi-----------\n";
$msg .= "------------Built By MMM----------------\n";
$message .= "----------KingBamo'S PAGE------------\n";
$message .= "------------SEA NEVER DRIES--------------\n";
$message .= "---------------|BY NoBODY|---------------\n";
$sniper = 'By WHoKaR';
$message .= "---------------|lexx|---------------\n";