ADOBE phish running on gercektaraftarinyeriayri[.]com

Found: 2018-01-07 11:15:09.953000
URL: http://gercektaraftarinyeriayri.com/forms.zip
File: gercektaraftarinyeriayri.com-foo-forms.zip
Domain: gercektaraftarinyeriayri.com
Target: ADOBE
Name                                               Size Date                 MD5                                forms/adobe.css                                     2001 2016-01-30 21:12:28  353feeee05ba1539da2023b2c4bf5bb6
    File appears in 16 kits
forms/bg.jpg                                       72403 2015-12-28 18:50:10  da344346f4e6ea3019cf6abd68f77543
    File appears in 20 kits  and under 3 different file names
forms/confirm.htm                                   2515 2016-01-30 22:05:00  ed3be142cab109697cb37927b72b66eb
    File appears in 4 kits
forms/error.htm                                     2735 2016-01-30 21:12:02  b65fa7ec7bb21dbc62375a570d956a83
    File appears in 4 kits
forms/footer_img.png                               59934 2016-01-30 21:11:44  7f6a6031ed8eef9eaaeebc50c9983980
    File appears in 54 kits
forms/form.php                                      1299 2018-01-04 00:20:04  a8c61f948b9c0e65f9016fe9acee7224
forms/geoplugin.class.php                           4338 2015-03-06 07:49:26  89fd0b818f3c0793f136fe6141bc266f
    File appears in 34 kits
forms/icon_pdf.png                                 75851 2016-01-30 21:11:44  2a334f74a0aea0324974d883ed8a1241
    File appears in 22 kits
forms/index.html                                   15032 2015-12-30 09:28:16  0f868a525d665e4e47b452d498fabc8a
    File appears in 3 kits
forms/index_files/100Secure.jpg                     4687 2015-12-28 18:44:16  2e6a7c17a90b17b5ff2019543193b4e9
    File appears in 54 kits
forms/index_files/bg.jpg                           72403 2015-12-28 18:50:10  da344346f4e6ea3019cf6abd68f77543
    File appears in 20 kits  and under 3 different file names
forms/index_files/pdf-logo.png                     31580 2015-12-28 18:44:16  2c9a9eb978ff3a4a4f208b2c45739fd3
    File appears in 42 kits  and under 3 different file names
forms/index2.htm                                    2516 2015-12-28 18:44:34  c633b4ae62f083e8d812ac3cc907062e
    File appears in 18 kits
forms/index2_files/bg.jpg                          72403 2015-12-28 18:50:16  da344346f4e6ea3019cf6abd68f77543
    File appears in 20 kits  and under 3 different file names
forms/index2_files/pdf-logo.png                    31580 2015-12-28 18:44:34  2c9a9eb978ff3a4a4f208b2c45739fd3
    File appears in 42 kits  and under 3 different file names
forms/index2_files/smallpdf.png                     1289 2015-12-28 18:51:10  36d154a5b0ae2dc816507a317b1494b3
    File appears in 41 kits  and under 2 different file names
forms/login.php                                      830 2018-01-04 00:20:50  de635b1f0421952eca3661068f2aec91
forms/login2.php                                     771 2018-01-03 23:24:46  845be95c85fa90fdc0186f76eb1ef7d8
forms/Sign In - Adobe ID_files/adobe.css            2001 2016-01-30 21:15:28  353feeee05ba1539da2023b2c4bf5bb6
    File appears in 16 kits
forms/Sign In - Adobe ID_files/comfirm.htm          2211 2016-01-30 21:11:54  bf00e967dc055edff9142a817430edd2
    File appears in 16 kits
forms/Sign In - Adobe ID_files/footer_img_2.png    49152 2016-01-30 21:14:50  b4904939c9f9dbb94b6038ec26f08010
    File appears in 16 kits

2 Email addresses found:
    williamjoseph306@gmail.com
    team_pbg@yahoo.com (appears in 33 kits)



https://texasmalwareblog.blogspot.com   @phish_total