stuff i found while i was on my shift at work

stuff-i-found-2020-04-24.md

URL	Domain	IP Address	Threat Actor Email(s)
http://alkalabs.cf/1/Desktop.zip	alkalabs.cf	104.254.213.2	n/a
http://alkalabs.cf/adobe.zip	alkalabs.cf	104.254.213.2	[email protected]
http://alkalabs.cf/jj/top.zip	alkalabs.cf	104.254.213.2	n/a
http://alkalabs.cf/mail/163.zip	alkalabs.cf	104.254.213.2	n/a
http://alkalabs.cf/mail/loader.zip	alkalabs.cf	104.254.213.2	[email protected]
http://alkalabs.cf/mail/old.zip	alkalabs.cf	104.254.213.2	n/a
http://alkalabs.cf/owa/auth/op.zip	alkalabs.cf	104.254.213.2	n/a
http://alkalabs.cf/tqw/net.zip	alkalabs.cf	104.254.213.2	n/a
http://changpong.cf/late-code.zip	changpong.cf	192.210.199.68	[email protected]
http://changpong.cf/mailquota2.zip	changpong.cf	192.210.199.68	[email protected]
http://changpong.cf/mailserver6i.zip	changpong.cf	192.210.199.68	[email protected]
http://changpong.cf/office.zip	changpong.cf	192.210.199.68	[email protected],[email protected]
http://changpong.cf/update2020.zip	changpong.cf	192.210.199.68	[email protected],[email protected]
http://changpong.tk/up/New%20upgrade.zip	changpong.tk	192.210.199.68	[email protected]
http://changpong.tk/xx/New%20upgrade.zip	changpong.tk	192.210.199.68	[email protected]
http://elcaminoservices.icu/Firstbank2.zip	elcaminoservices.icu	91.234.99.220	[email protected],[email protected]
http://ellieconcretestructures.ga/sharpont.zip	ellieconcretestructures.ga	178.159.36.82	[email protected]
http://facebooik.ga/FB-Phishing-master.zip	facebooik.ga	185.162.171.114	n/a
http://findmystyle.icu/Firstbank2.zip	findmystyle.icu	91.234.99.220	[email protected],[email protected]
http://groupmarketingonline.icu/admin/office365.zip	groupmarketingonline.icu	91.234.99.190	[email protected],[email protected]
http://groupmarketingonline.icu/data/Update365.zip	groupmarketingonline.icu	91.234.99.190	[email protected]
http://groupmarketingonline.icu/reload/office365.zip	groupmarketingonline.icu	91.234.99.190	[email protected],[email protected]
http://majesticsingapore.icu/admin/office365.zip	majesticsingapore.icu	91.234.99.190	[email protected]
http://majesticsingapore.icu/portal/office365.zip	majesticsingapore.icu	91.234.99.190	[email protected]
http://mediationweekly.icu/office-malian.zip	mediationweekly.icu	91.234.99.130	[email protected]
http://mountainviewgardens.tk/vp/sharpont.zip	mountainviewgardens.tk	178.159.36.82	[email protected]
http://mountainviewgardens.tk/vp/vp/sharpont.zip	mountainviewgardens.tk	178.159.36.82	[email protected],[email protected]
http://netmegs.gq/HT/ourtime%20(page).zip	netmegs.gq	192.210.199.68	[email protected]
http://netmegs.gq/ourtim/Ourtime101.zip	netmegs.gq	192.210.199.68	[email protected]
http://netmegs.gq/RichieNew/Ourtime-1.zip	netmegs.gq	192.210.199.68	[email protected]
http://newhopewichita.icu/voice/Archive.zip	newhopewichita.icu	91.234.99.188	[email protected],[email protected]
http://roomhbos.gq/Dropbox.zip	roomhbos.gq	192.210.199.68	[email protected]
http://setok.cf/logins/dropboxu%20(1).zip	setok.cf	178.159.36.97	[email protected],[email protected],[email protected],[email protected],[email protected]
http://submitpages.icu/dic/db.zip	submitpages.icu	91.234.99.188	[email protected]
http://submitpages.icu/docc/Googledock.zip	submitpages.icu	91.234.99.188	[email protected]
http://submitpages.icu/dropbox/dlxxx.zip	submitpages.icu	91.234.99.188	[email protected]
http://thebuckstopsnows.icu/alertourtime.zip	thebuckstopsnows.icu	91.234.99.130	n/a
http://thebuckstopsnows.icu/alertzoosk.zip	thebuckstopsnows.icu	91.234.99.130	n/a
http://thebuckstopsnows.icu/ourtimee.zip	thebuckstopsnows.icu	91.234.99.130	[email protected]
http://tullimilbermakris.tk/office/images/invoice/365%20(2).zip	tullimilbermakris.tk	178.159.36.82	[email protected]