MICROSOFT phish running on howtobeamanmagnet[.]com

Found: 2018-03-21 03:26:08.177000
URL: http://www.howtobeamanmagnet.com/wp-includes/js/newhotmail.zip
File: www.howtobeamanmagnet.com-js-newhotmail.zip
Domain: howtobeamanmagnet.com
Target: MICROSOFT
Name                                               Size Date                 MD5                                newhotmail/Validation/geoplugin.class.php           4647 2017-08-10 02:56:52  c8ea1e960b48a620c00bc65d525a721c
    File appears in 1252 kits  and under 3 different file names
newhotmail/Validation/images/01.png                14801 2017-08-10 02:56:56  03f4a3e68423c7c5c594e40223941141
    File appears in 10 kits
newhotmail/Validation/images/02.png                  787 2017-08-10 02:56:58  fac26b74bd13ca8ecd98875a37d155fa
    File appears in 13 kits
newhotmail/Validation/images/03.png                13837 2017-08-10 02:56:58  0f19fff07ee77a15e87b684b34e5262b
    File appears in 10 kits
newhotmail/Validation/images/04.png                  877 2017-08-10 02:56:58  f538109d65c084d5d56b5f33eee1aac4
    File appears in 13 kits
newhotmail/Validation/images/05.png                  750 2017-08-10 02:56:58  7e537437294b406eba29931f523d47ae
    File appears in 13 kits
newhotmail/Validation/index.php                      422 2017-08-10 02:56:52  9ef6af054f32761ce929ba0f4e771d92
    File appears in 12 kits
newhotmail/Validation/index.txt                       70 2017-08-10 02:56:52  f20494a6ef686cb2b7420e967aab63d9
    File appears in 8 kits
newhotmail/Validation/login.php                     2250 2017-08-10 02:56:54  a79c23cd690f2634de5bf5c1f5dddd62
    File appears in 7 kits
newhotmail/Validation/login2.php                    3141 2017-08-10 02:56:56  40646ff90b588ed0ebd82e7cb4ba7355
    File appears in 8 kits
newhotmail/Validation/post.php                      1126 2017-12-02 05:39:38  83e83c15b7c079ff0f5bb84a24580aae
newhotmail/Validation/robots.txt                    1337 2017-08-10 02:56:56  ba613657ddd17df5e61d5571b9c9d681
    File appears in 110 kits
newhotmail/Validation/style.css                      937 2017-08-10 02:56:56  f5f2ae6487acbff6b334dc293cc9e16f
    File appears in 11 kits

2 Email addresses found:
    gp_support@geoplugin.com (appears in 1182 kits)
    momoh0001@gmail.com



https://texasmalwareblog.blogspot.com   @phish_total