stuff i found while going through certstream data overnight

stuff-i-found-2020-04-18.md

URL	IP Address	Threat Actor Email(s)
http://784119.cf/att.zip.zip	31.220.17.248	lindarichman101@gmail.com
http://apkagain.xyz/OFFICE.zip	91.234.99.200	blackhatservers@gmail.com
http://cm-vfxira.ddns.net/sharepoint.zip	111.90.149.203	affpat231@gmail.com
http://elpatroni.ddns.net/yahoo/ATtt.zip	15.223.68.220	chibamobilestore@hotmail.com,lynchbim@gmail.com,re5ultpage@yandex.com
http://enhanced-upgrade.ddns.net/Europe.zip	62.4.21.167	yanko.pro@protonmail.com
http://ghfcyv.ddns.net/office/OneDrive%20(2).zip	13.82.126.172	nsfphese2@gmail.com
http://gracemail.ddns.net/update/update.zip	13.82.126.172	larrygeezy@yandex.com
http://informacionclien.servepics.com/es-ID6655/bankiaPV.zip	172.104.78.40	unconfigured
http://lebonton.ddns.net/BOA%20scampage.zip	172.105.3.249	johnfernadez@yopmail.com.com
http://lebonton.ddns.net/Scam%20LCL.zip	172.105.3.249	jaredbelowich@protonmail.com
http://lebonton.ddns.net/new-sg.zip	172.105.3.249	santana.sim@hotmail.com
http://lebonton.ddns.net/scama%20bnp%20paribas.zip	172.105.3.249	r47ma@yandex.com
http://omanuito.hopto.org/20200117%20-%20Office%20365%20True%20Login.zip	52.175.219.98	rayreddingtonr8@gmail.com
http://paypalconfirm.hopto.org/OldCode%202020%20Office%20Scampage.zip	207.148.4.235	sahil.ahmef@yandex.com
http://paypalconfirm.hopto.org/x/eDocu.zip	207.148.4.235	jeffrey.hastings@yandex.com
http://rackspacesupport.servehttp.com/Verify/rackspace%20(1)%20(1).zip	18.191.245.150	linuxforce3@gmail.com
http://rackspacesupport1.servepics.com/loads/lol.zip	18.191.245.150	wa.rre.sh.mo@gmail.com
http://rackspacesupport1.servepics.com/rackspacedoyi/rackspace%20(1)%20(1).zip	18.191.245.150	linuxforce3@gmail.com
http://rackspacesupport1.servepics.com/rackspacesupportpap/rackspace%20(1)%20(1).zip	18.191.245.150	linuxforce3@gmail.com
http://shipment.ddns.net/On-Demand-Delivery%20non%20auto.zip	192.119.67.177	securednotification0@gmail.com
http://suppportcentreapple.servehttp.com/16Shop-Apple-V2.zip	162.241.107.47	ressultkontol@gmail.com
http://uptades-paypal.ddns.net/Castro%20impots.zip	45.79.79.27	rez2krez@protonmail.com
http://verification3dsecu.ddns.net/login.zip	213.52.128.153	zaek69120@gmail.com
http://voice028112.servehttp.com/officeW365.zip	43.240.64.76	Robertkhamann@gmail.com

thanks update