DROPBOX phish running on inf-0-sec-ur1ty-online[.]net

Found: 2018-02-16 16:54:33
URL: http://inf-0-sec-ur1ty-online.net/wp-admin/css.bin.zip
File: css.bin-inf-0-sec-ur1ty-online.net.zip
Domain: inf-0-sec-ur1ty-online.net
Target: DROPBOX
Name                                               Size Date                 MD5                                css.bin/sounds/action.php                           1366 2017-03-07 10:00:02  f2a29fdf41e9eb808005c6b65237adac
    File appears in 5 kits
css.bin/sounds/action2.php                          1259 2017-03-07 10:00:02  f37f63a382da639d26f222bfe77e83dc
    File appears in 5 kits
css.bin/sounds/antiboots.php                        2620 2017-03-07 10:00:02  6b3386c86f6f32a4ece607a5cb8e3d16
    File appears in 51 kits  and under 2 different file names
css.bin/sounds/autoblock.php                         821 2017-03-07 10:00:02  5e0a3e7c6e81d4310442ce8b64d82881
    File appears in 20 kits
css.bin/sounds/css/style1.css                       2471 2017-03-07 10:00:02  abb631fc9c76a3c0b1daea176e391ae8
    File appears in 20 kits
css.bin/sounds/error_log                             478 2017-08-28 20:57:42  2a59d3d4aa355e122b4eaec0d4443aa4
css.bin/sounds/img/confirm_text.PNG                 4985 2017-03-07 10:00:02  69f9de2f2c69a07cdcd37694a0051f7a
    File appears in 18 kits
css.bin/sounds/img/footer.jpg                      15983 2017-03-07 10:00:02  af51da560c778aff89540f4f36e94465
    File appears in 18 kits
css.bin/sounds/img/help.png                         1218 2017-03-07 10:00:02  224a26dd8447d7f2e4c761559b4749e7
    File appears in 18 kits
css.bin/sounds/img/left.png                        96390 2017-03-07 10:00:02  30c3a04ccbad81cc99c4af725d578f1d
    File appears in 18 kits
css.bin/sounds/img/logo.png                         1427 2017-03-07 10:00:04  38928e53077a706aa26ba249717dd63d
    File appears in 29 kits  and under 2 different file names
css.bin/sounds/img/multi.png                       16614 2017-03-07 10:00:04  5adf472f4a44f8868fd0b5a7c7f2639e
    File appears in 9 kits
css.bin/sounds/img/next.png                         2081 2017-03-07 10:00:04  55ac166497e536b95afef791d422d4b9
    File appears in 18 kits
css.bin/sounds/img/texto_23.PNG                     3613 2017-03-07 10:00:04  363b0b31b2673d36aa53afd2c2e3cbc8
    File appears in 18 kits
css.bin/sounds/index.php                            2466 2017-03-07 10:00:02  4d410010213784471985fefa2701980c
    File appears in 7 kits
css.bin/sounds/phone_number.php                     2074 2017-03-07 10:00:02  ae9f62ef1c710ea99b2ed168daeb78fe
    File appears in 7 kits
css.bin/sounds/processing.php                       1600 2017-03-07 10:00:02  ba932def08ab6288c1090a4e0338b37c
    File appears in 18 kits
css.bin/sounds/success.php                           123 2017-03-07 10:00:02  6d48a285022c3c9b25eabee681354f9a
    File appears in 10 kits  and under 2 different file names
css.bin/sounds/to.php                                 40 2018-02-12 14:57:42  0f3fa2554d0d6c526b97d55226c756d1

2 Email addresses found:
    vip@163.goooo
    alertbello@gmail.com



https://texasmalwareblog.blogspot.com   @phish_total