Microsoft phish running on lmlghtycps[.]me

Found: 2018-01-05 05:21:56
URL: http://lmlghtycps.me/citm/office.zip
File: office-citm-lmlghtycps.me.zip
Domain: lmlghtycps.me
Target: Microsoft
Name                                               Size Date                 MD5                                office/files/login.min.css                         21650 2016-10-05 04:09:46  75aadf89df607c39f774e46b45b442dd
    File appears in 15 kits
office/files/login_hover.min.css                      89 2016-10-05 04:09:46  2c957834356b9ca6570167adec33573f
    File appears in 27 kits  and under 2 different file names
office/files/microsoft_logo.png                     1040 2016-10-05 04:09:44  e4b675007dc6492ee590131d1f7dfbb3
    File appears in 42 kits  and under 2 different file names
office/index.html                                  39207 2016-10-22 12:54:20  e46e6ad118d049eba5dd1b3ec8b4380d
    File appears in 4 kits
office/office.php                                    739 2017-03-03 12:33:08  b844e313bbfcb05f262c30d18273816e


2 Email addresses found:
    dbox069@gmail.com (appears in 3 kits)
    e@alboraaq.com (appears in 6 kits)



https://texasmalwareblog.blogspot.com   @phish_total