Sample personal email address accounts known to have been involved in the campaign include:
julienobruno[.]hotmail.com
jenna.stehr[.]mail.com
s.simonis[.]mail.com
domreg[.]247livesupport.biz
kumarhpt[.]yahoo.com
aksnes.thomas[.]yahoo.com
yingw90[.]yahoo.com
andre_roy[.]mail.com
myprimaryreger[.]gmail.com
okorsukov[.]yahoo.com
tzubtfpx5[.]mail.ru
annaablony[.]mail.com
jamesyip823[.]gmail.com
tmazaker[.]gmail.com
emmer.brown[.]mail.com
qupton[.]mail.com
adel.rice[.]mail.com
trainerkart2[.]gmail.com
cowrob[.]mail.com
direct2playstore[.]gmail.com
cffaccll[.]mail.com
drgtradingllc[.]gmail.com
jack2020[.]outlook.com
pdkt00[.]Safe-mail.net
david_thompson62[.]aol.com
distardrupp[.]gmail.com
perplencorp[.]gmail.com
spammer11[.]superrito.com
jilberaner[.]yahoo.de
snowyowl[.]jpnsec.com
asainchuk[.]gmail.com
OKEKECHIDIC[.]GMAIL.COM
abelinmarcel[.]outlook.fr
idesk.corp.apple.com[.]gmail.com
mutantcode[.]outlook.fr
pier[.]pipimerah.com
vrickson[.]mail.com
prabhakar_malreddy[.]yahoo.com
jack2020[.]outlook.com
Sample domains known to have been involved in the campaign include:
hxxp://linuxkrnl.net
hxxp://accounts-qooqle.com
hxxp://account-gooogle.com
hxxp://accoounts-google.com
hxxp://account-yahoo.com
hxxp://accounts-googlc.com
hxxp://accoutns-google.com
hxxp://addmereger.com
hxxp://akamainet.net
hxxp://akamaivirusscan.com
hxxp://apple-icloud-services.com
hxxp://apple-notification.com
hxxp://arabianbusinessreport.com
hxxp://azamtelecom.com
hxxp://babylonn.com
hxxp://baengmail.com
hxxp://boobleg.com
hxxp://chinainternetservices.com
hxxp://com-hdkurknfkjdnkrnngujdknhgfr.com
hxxp://combin-banska-stiavnica.com
hxxp://cvk-leaks.com
hxxp://fb-security.com
hxxp://g00qle.com
hxxp://global-exchange.net
hxxp://googlesetting.com
hxxp://hlbnk.com
hxxp://homesecuritysystems-sale.com
hxxp://icloud-localisation.com
hxxp://imperialc0nsult.com
hxxp://informationen24.com
hxxp://interglobalswiss.com
hxxp://intra-asiarisk.com
hxxp://invest-sro.com
hxxp://iphone-onlineshopping.net
hxxp://kur4.com
hxxp://lastdmp.com
hxxp://localisation-apple-icloud.com
hxxp://localisation-apple-support.com
hxxp://localisation-mail.com
hxxp://login-163.com
hxxp://login-kundenservice.com
hxxp://magic-exchange.com
hxxp://mail-apple-icloud.com
hxxp://mailpho.com
hxxp://malprosoft.com
hxxp://medicalalertgroup.com
hxxp://megafileuploader.com
hxxp://mfadaily.com
hxxp://mfapress.com
hxxp://militaryexponews.com
hxxp://msoftonline.com
hxxp://myaccountgoogle.com
hxxp://myaccountsgoogle.com
hxxp://mydomainlookup.net
hxxp://mypmpcert.com
hxxp://net-a-porter-coupon.com
hxxp://newiphone-online.net
hxxp://newiphone-supply.net
hxxp://newreviewgames.com
hxxp://nobel-labs.net
hxxp://nvidiaupdate.com
hxxp://obamacarerx.net
hxxp://onlinecsportal.com
hxxp://pass-google.com
hxxp://password-google.com
hxxp://paydaytoday-uk.com
hxxp://pb-forum.com
hxxp://planetaryprogeneration.com
hxxp://regionoline.com
hxxp://security-notifications.com
hxxp://service-facebook.com
hxxp://servicesupdates.com
hxxp://set121.com
hxxp://set132.com
hxxp://set133.com
hxxp://sicherheitsteam-pp.com
hxxp://sicherheitsteam-pp.net
hxxp://skypeupdate.com
hxxp://smp-cz.com
hxxp://soft-storage.com
hxxp://solutionmanualtestbank.com
hxxp://ssl-icloud.com
hxxp://team-google.com
hxxp://techlicenses.com
hxxp://techlicenses.net
hxxp://ua-freedom.com
hxxp://updates-verify.com
hxxp://us-mg7mail-transferservice.com
hxxp://us-westmail-undeliversystem.com
hxxp://us6-yahoo.com
hxxp://vatlcan.com
hxxp://wordpressjointventure.com
hxxp://ya-support.com
hxxp://yandex-site.com
hxxp://yepost.com
hxxp://support-forum.org
hxxp://oceaninformation.org
hxxp://vodafoneupdate.org
hxxp://succourtion.org
hxxp://eascd.org
hxxp://northropgruman.org
hxxp://apple-iphone-services.com
hxxp://localisation-security-icloud.com
hxxp://applesecurity-supporticloud.com
hxxp://icloud-iphone-services.com
hxxp://icloud-id-localisation.com
hxxp://apple-localisation-id.com
hxxp://identification-icloud-id.com
hxxp://cloud-id-localisation.com
hxxp://support-security-icloud.com
hxxp://identification-apple-id.com
hxxp://localisation-apple-security.com
hxxp://security-icloud-localisation.com
hxxp://dabocom.com
hxxp://quick-exchange.com
hxxp://hygani.com
hxxp://hztx88.com
hxxp://sddqgs.net
hxxp://qufu001.com
hxxp://lutushiqi.com
hxxp://gsctgs.com
hxxp://tazehong.com
hxxp://hthgj.com
hxxp://kvistberga.com
hxxp://bjytj.net
hxxp://cqhuicang.com
hxxp://softbank-tech.com
hxxp://osce-press.org
hxxp://maxidea.tw
hxxp://sdti.tw
hxxp://gmailcom.tw
hxxp://zex.tw
hxxp://gain-paris-notaire.fr
hxxp://loto-fdj.fr
hxxp://client-amzon.fr
hxxp://idse-orange.fr
hxxp://rgraduzkfghgd.com
hxxp://jmhgjqtmhanoncp.com
hxxp://stwdchstclovuzk.com
hxxp://puxqtyrwzuzybgzehc.com
hxxp://maatil.com.ng
hxxp://surestbookings.com
hxxp://asatuyouth.org.ng
hxxp://hanna.ng
hxxp://hostlink.com.ng
hxxp://sirbenlimited.com
hxxp://dce.edu.ng
hxxp://eventsms.com.ng
hxxp://krsbczmxwdsjwtizmx.com
hxxp://alizirwzyjazurof.com
hxxp://zslipanehule.com
hxxp://cxotonspmjkxw.com
hxxp://wpifmhyjkxyt.com
hxxp://ngvsngpwdidmn.com
hxxp://imperialvillas.com.ng
hxxp://lipyhgpofsnifste.com
hxxp://flexceeweb.com
hxxp://fgfcpkdcnebgduls.com
hxxp://shinjiru.us
hxxp://supportchannel.net
hxxp://couponofferte.com
hxxp://psepaperindustrial.com
hxxp://lakws.com
hxxp://perplencorp.com
hxxp://lbchemtrade.com
hxxp://viaggibelli.com
hxxp://liontitco.com
hxxp://svendiamo.com
hxxp://orogenicgroup.com
hxxp://giudeviaggio.com
hxxp://greenskill.net
hxxp://siteseditor.net
hxxp://e-mail-supports.com
hxxp://biplen.com
hxxp://infradesajohor.com
hxxp://dealhot.net
hxxp://suanmin.com
hxxp://on9on9.com
hxxp://accoutns-google.com
hxxp://puroniq.com
hxxp://sinqa.com
hxxp://sadihadi.com
hxxp://mrangkang.com
hxxp://terumbu.com
hxxp://phygitail.com
hxxp://veraniq.com
hxxp://potxr.com
hxxp://icraw.com
hxxp://thearoid.com
hxxp://teempo.com
hxxp://parblue.com
hxxp://mydomainlookup.net
hxxp://adrianvonziegler.net
hxxp://zetindustries.com
hxxp://researchs.com.ng
hxxp://joymoontech.com
hxxp://researchmaterials.com.ng
hxxp://james823.com
hxxp://oneibeauty.net
hxxp://accounts-qooqle.com
hxxp://account-gooogle.com
hxxp://accoounts-google.com
hxxp://account-yahoo.com
hxxp://accounts-googlc.com
hxxp://accoutns-google.com
hxxp://addmereger.com
hxxp://akamainet.net
hxxp://akamaivirusscan.com
hxxp://apple-icloud-services.com
hxxp://apple-notification.com
hxxp://arabianbusinessreport.com
hxxp://azamtelecom.com
hxxp://babylonn.com
hxxp://baengmail.com
hxxp://boobleg.com
hxxp://chinainternetservices.com
hxxp://com-hdkurknfkjdnkrnngujdknhgfr.com
hxxp://combin-banska-stiavnica.com
hxxp://cvk-leaks.com
hxxp://fb-security.com
hxxp://g00qle.com
hxxp://global-exchange.net
hxxp://googlesetting.com
hxxp://hlbnk.com
hxxp://homesecuritysystems-sale.com
hxxp://icloud-localisation.com
hxxp://imperialc0nsult.com
hxxp://informationen24.com
hxxp://interglobalswiss.com
hxxp://intra-asiarisk.com
hxxp://invest-sro.com
hxxp://iphone-onlineshopping.net
hxxp://kur4.com
hxxp://lastdmp.com
hxxp://localisation-apple-icloud.com
hxxp://localisation-apple-support.com
hxxp://localisation-mail.com
hxxp://login-163.com
hxxp://login-kundenservice.com
hxxp://magic-exchange.com
hxxp://mail-apple-icloud.com
hxxp://mailpho.com
hxxp://malprosoft.com
hxxp://medicalalertgroup.com
hxxp://megafileuploader.com
hxxp://mfadaily.com
hxxp://mfapress.com
hxxp://militaryexponews.com
hxxp://msoftonline.com
hxxp://myaccountgoogle.com
hxxp://myaccountsgoogle.com
hxxp://mydomainlookup.net
hxxp://mypmpcert.com
hxxp://net-a-porter-coupon.com
hxxp://newiphone-online.net
hxxp://newiphone-supply.net
hxxp://newreviewgames.com
hxxp://nobel-labs.net
hxxp://nvidiaupdate.com
hxxp://obamacarerx.net
hxxp://onlinecsportal.com
hxxp://pass-google.com
hxxp://password-google.com
hxxp://paydaytoday-uk.com
hxxp://pb-forum.com
hxxp://planetaryprogeneration.com
hxxp://regionoline.com
hxxp://security-notifications.com
hxxp://service-facebook.com
hxxp://servicesupdates.com
hxxp://set121.com
hxxp://set132.com
hxxp://set133.com
hxxp://sicherheitsteam-pp.com
hxxp://sicherheitsteam-pp.net
hxxp://skypeupdate.com
hxxp://smp-cz.com
hxxp://soft-storage.com
hxxp://solutionmanualtestbank.com
hxxp://ssl-icloud.com
hxxp://team-google.com
hxxp://techlicenses.com
hxxp://techlicenses.net
hxxp://ua-freedom.com
hxxp://updates-verify.com
hxxp://us-mg7mail-transferservice.com
hxxp://us-westmail-undeliversystem.com
hxxp://us6-yahoo.com
hxxp://vatlcan.com
hxxp://wordpressjointventure.com
hxxp://ya-support.com
hxxp://yandex-site.com
hxxp://yepost.com
