2018-01-30 Phishing Kits from @phishtank_bot

hunting #phishing kits
37 more from the depths of the @PhishTank_Bot over the past week or so
around 30+ threat actor emails
all phishing kits were still available just a bit ago

@neonprimetime security

http://35.196.59.45/scriptpmta.zip
http://alexanderperfumery.com/active/mani.zip
http://alexanderperfumery.com/admin/mani.zip
http://d-step.org/adobe/pdf/adobeenew.zip
http://edonenergia.pl/wp/wp-contentt/Yfileg.zip
http://marioveefashionhouse.com/file/SCRIPT%20_2.zip
http://mcstorage.co.uk/cgbin/DHLAUTO.zip
http://mcstorage.co.uk/cgbin/DHLAUTO.zip
http://meditec.com.au/cvb/dropbox.zip
http://promodelbuilders.com/wp-system/Y!hoo.zip
http://ptspecialiststn.com/w2/doc.zip
http://rererara733.000webhostapp.com/publick/revery.zip
http://revivalhill.org/ffffff/WebmailVerification.zip
http://riskmitigationaustralia.com/china/randommailbox.zip
http://saneplan.com.br/wp-content/themes/Untitled/blu2/blu.zip
http://seraildi.com/wp-content/Portfolio/folder/adobeCom.zip
http://sriw34635.000webhostapp.com/public/revery.zip
http://theatrelawrence.com/Drops/dropboxx..zip
http://universalreiki.com.au/bmo/soft.zip
http://vanpeskiconsult.org/cquel/office364.zip
http://wigandpeneast.com/login/pageo.zip
http://www.alexanderperfumery.com/admin/mani.zip
http://www.av2smaroc.com/fourpointsmanhattanks/imports.zip
http://www.hakanmanav.com/wp-content/plugins/JumanNafis/quotation/sample/info/oluwa.zip
http://www.lycee-kastler.com/wp-content/uploads/Trulia..zip
http://www.lycee-kastler.com/wp-content/uploads/remax.com.zip
http://www.onthespotmedia.info/wp-includes/widgets/ord/DHL.zip
http://www.qponn.net/config/wealth.zip
http://www.stoneza.co.za/wp-includes/js/validate.zip
http://zonadehospitales.mx/proforma/New.zip
http://zonadehospitales.mx/proforma/New.zip
https://bellagems.co.za/mail/mss/css/autodomain.zip
https://gesscu.cf/Easedocs/Sign_in.zip
https://lucknowcampus.com/yahoo.att/Yahoo.zip
https://rererara733.000webhostapp.com/publick/revery.zip
https://sriw34635.000webhostapp.com/public/revery.zip
https://tokokuncipintu.com/matchable.zip

  mail("lydiajacksoon@gmail.com", $subject, $message, $from);
$own = 'irepfwbj@gmail.com,itsfwbj@gmail.com,fowoshola@postino.net';
$own = 'kelvin.thomas0003@gmail.com,kelvinthomas@yandex.com,liamscoker42@zoho.com';
$own = 'startradingltd7@gmail.com';
$own = 'steadymne@gmail.com';
$own = 'williamsparkerr@gmail.com';
$recipient = "badloggs@gmail.com";
$recipient = "ceomngr@gmail.com";
$recipient = "elarios_electromecanicaespecializada@outlook.com,
$recipient = "habeebada1@gmail.com";
$recipient = "janefunkey@gmail.com";
$recipient = "lordchevy@gazeta.pl,davididickson@mail.ru,activamarine@126.com,begoranti19@gmail.com";
$recipient = "michaelinc111@gmail.com";
$recipient = "untouchable1970@zoho.com";
$send = "arebaryourme@gmail.com";
$send = "d.jones455@yandex.com";
$send = "howardclement2005@gmail.com";
$send = "ovan2010@aol.com, ovan2010@yopmail.com, filali.amine2020@gmail.com";
$send = "terryhatcher125@gmail.com";
$send="davederek30@gmail.com"; // Here your Email or any email u need got info on it
$send="excessuccess01@gmail.com";
$send="strayer.krasnow@gmail.com
$sent ="checksandbalances77@gmail.com";
$sent ="dnichls177@gmail.com";
$to = "amandatwocute@gmail.com";
$to = "edward001walker@gmail.com";
$to = "medocompany800@gmail.com";
$to = "samphrank28@gmail.com";



ac11ebde9427417620a562035f88496e  C:\Users\Research\Desktop\kits\adobeCom.zip
b1400c8ae3028aafe96cc65f0d2bca92  C:\Users\Research\Desktop\kits\adobeenew.zip
488181e7d25fa740f962af43054b391d  C:\Users\Research\Desktop\kits\autodomain.zip
3d1bc385d3b16eebd0b2a867b1a7fadd  C:\Users\Research\Desktop\kits\blu.zip
ee85e2e88abf7775e9b9de4dee556a45  C:\Users\Research\Desktop\kits\DHL.zip
11d4dcaff41b7c6df08001fe35abdb26  C:\Users\Research\Desktop\kits\DHLAUTO.zip
58948a878fd18c39015b58ec96711ec3  C:\Users\Research\Desktop\kits\doc.zip
7a6631694338c221ffc0483134568b61  C:\Users\Research\Desktop\kits\dropbox.zip
d87f5820afbc9d1c0554b2db0e52e98e  C:\Users\Research\Desktop\kits\dropboxx..zip
d1e9afbb975ab96d4953d75f88716302  C:\Users\Research\Desktop\kits\imports.zip
78155a04200f5b939f3dd912c8973518  C:\Users\Research\Desktop\kits\mani.zip
e6a45ee8d172d24bd8a814b6e424dbea  C:\Users\Research\Desktop\kits\matchable.zip
c408e98b8f6e3d7c5efb49ec1eaeea59  C:\Users\Research\Desktop\kits\New.zip
770b2a810a45901628596499ed655d2f  C:\Users\Research\Desktop\kits\office364.zip
6b9c372efefd5b434fabbf88c212077c  C:\Users\Research\Desktop\kits\oluwa.zip
1d9fc3aacae46683202da259995847ed  C:\Users\Research\Desktop\kits\pageo.zip
4d8dec96b3a63cb8143a943b55daba72  C:\Users\Research\Desktop\kits\randommailbox.zip
ba50a9f8dfc0e510ee2cb2682f209324  C:\Users\Research\Desktop\kits\remax.com.zip
2a23e5698ec6872e58f6c84917c5a080  C:\Users\Research\Desktop\kits\revery.zip
f9274b47cb396373048eb6f4cc4e7fb8  C:\Users\Research\Desktop\kits\SCRIPT%20_2.zip
dec129a7a070acc4f109aaece7090e90  C:\Users\Research\Desktop\kits\scriptpmta.zip
858e3af12e9ecc9de2421ca578b6bb81  C:\Users\Research\Desktop\kits\Sign_in.zip
8f5c308336e88dccd97ab3cd052e0a6a  C:\Users\Research\Desktop\kits\soft.zip
7a68de1f053e1c15fd2262db8af2c43b  C:\Users\Research\Desktop\kits\Trulia..zip
139de31f19b949e08985f215f07c7aa1  C:\Users\Research\Desktop\kits\validate.zip
83a5d087cf148aa459c1c94c411172f8  C:\Users\Research\Desktop\kits\wealth.zip
bd85fa64cd1f6df731a25bc578984a00  C:\Users\Research\Desktop\kits\WebmailVerification.zip
030ca1a68f4bc8b72c47e6fa53259fca  C:\Users\Research\Desktop\kits\Y!hoo.zip
f63cca8b6ca2cfbae88fb966dbc4b5f3  C:\Users\Research\Desktop\kits\Yahoo.zip
8982aacae6daab28409474f54e52c560  C:\Users\Research\Desktop\kits\Yfileg.zip