ALIBABA phish running on manageuserlimited[.]ca

Found: 2018-04-13 07:39:14.615000
URL: http://manageuserlimited.ca/js/alibaba/Alibaba.com.cn.zip
File: manageuserlimited.ca-alibaba-Alibaba.com.cn.zip
Domain: manageuserlimited.ca
Target: ALIBABA
Name                                               Size Date                 MD5                                Alibaba.com.cn/Alibaba.com.cn/Alibaba.com.cn/Alibaba.com/images/clear.png    81 2018-01-15 01:10:30  1b6d2de2867a3e11063ba25aa1cd4209
    File appears in 29 kits  and under 9 different file names
Alibaba.com.cn/Alibaba.com.cn/Alibaba.com.cn/Alibaba.com/images/data/89.js 166101 2018-01-15 01:10:32  33a3b039ef1c11349209a3f003f908a2
    File appears in 9 kits  and under 2 different file names
Alibaba.com.cn/Alibaba.com.cn/Alibaba.com.cn/Alibaba.com/images/data/clear.png    81 2018-01-15 01:10:32  1b6d2de2867a3e11063ba25aa1cd4209
    File appears in 29 kits  and under 9 different file names
Alibaba.com.cn/Alibaba.com.cn/Alibaba.com.cn/Alibaba.com/images/data/havana.css  4760 2018-01-15 01:10:32  f720eb7e550b99282a990906758d8b22
    File appears in 9 kits
Alibaba.com.cn/Alibaba.com.cn/Alibaba.com.cn/Alibaba.com/images/data/JSocket.swf  1513 2018-01-15 01:10:32  e9724572d37e5ca98abd364302146b6a
    File appears in 9 kits
Alibaba.com.cn/Alibaba.com.cn/Alibaba.com.cn/Alibaba.com/images/data/mini-login-form-min.css 20083 2018-01-15 01:10:32  83fed11ae6615bab01049bc0f08f8c52
    File appears in 9 kits
Alibaba.com.cn/Alibaba.com.cn/Alibaba.com.cn/Alibaba.com/images/data/mini-login-min.js 146702 2018-01-15 01:10:32  4076ec66d46bdf4be807047527cfff74
    File appears in 8 kits
Alibaba.com.cn/Alibaba.com.cn/Alibaba.com.cn/Alibaba.com/images/data/nc.js 105988 2018-01-15 01:10:32  bf72a11f68986b6b02fc90d5e9bd7e4b
    File appears in 9 kits
Alibaba.com.cn/Alibaba.com.cn/Alibaba.com.cn/Alibaba.com/images/data/uab.js   542 2018-01-15 01:10:32  49246308b1fdac8b564e28b96446b44e
    File appears in 9 kits
Alibaba.com.cn/Alibaba.com.cn/Alibaba.com.cn/Alibaba.com/images/data/um.js 32896 2018-01-15 01:10:32  b70676a69b87663f8b9b9f4dce08bdef
    File appears in 9 kits
Alibaba.com.cn/Alibaba.com.cn/Alibaba.com.cn/Alibaba.com/images/footer.css  7310 2018-01-15 01:10:30  374e2b45e8ee13c1dabc598767ef6168
    File appears in 11 kits
Alibaba.com.cn/Alibaba.com.cn/Alibaba.com.cn/Alibaba.com/images/login.htm 37712 2018-01-15 01:10:32  834c68fd8a779b02f8d002089e94935c
    File appears in 6 kits
Alibaba.com.cn/Alibaba.com.cn/Alibaba.com.cn/Alibaba.com/images/TB1awf5PXXXXXXLXFXXXXXXXXXX-585-350.jpg 28956 2018-01-15 01:10:32  b4ea5d8bed9945018ea3a324425871a1
    File appears in 9 kits
Alibaba.com.cn/Alibaba.com.cn/Alibaba.com.cn/Alibaba.com/images/TB1ROn8OpXXXXbZaXXXXXXXXXXX-32-31.png  1699 2018-01-15 01:10:32  c738d961dd8d36206c8956302a703041
    File appears in 9 kits
Alibaba.com.cn/Alibaba.com.cn/Alibaba.com.cn/Alibaba.com/Login.htm 15444 2018-01-15 01:10:30  f42f076262597c67f54dad384e8637cb

Alibaba.com.cn/Alibaba.com.cn/Alibaba.com.cn/Alibaba.com/redirect.php   756 2018-01-15 01:39:00  08a05aa5aa3110b3f568aafbccda7b5c

2 Email addresses found:
    ays20182018@gmail.com
    logzz@cok.edu (appears in 8 kits)



https://texasmalwareblog.blogspot.com   @phish_total