**unknown** phish running on dentistswanson[.]com

Found: 2018-03-14 18:15:09.480000
URL: http://dentistswanson.com/DoCuSigN.zip
File: dentistswanson.com-foo-DoCuSigN.zip
Domain: dentistswanson.com
Target: **unknown**
Name                                               Size Date                 MD5                                DoCuSigN/DoCuSigN/css/ie7.css                       7519 2015-12-17 11:30:58  a95db78af04e4d99b2c65cc620e30acb
    File appears in 13 kits
DoCuSigN/DoCuSigN/css/ie8.css                       2334 2015-12-17 11:30:58  7064baa71f8b06bb7eeceaf2ad21ce6e
    File appears in 13 kits
DoCuSigN/DoCuSigN/css/ie9.css                        712 2015-12-17 11:30:58  73e9ab5d2c75f4a50ae648ca2696b1f9
    File appears in 13 kits
DoCuSigN/DoCuSigN/css/site.css                     148605 2015-12-17 11:30:58  8a7e0a075b36cae63aa1be7c56597ef3
    File appears in 13 kits
DoCuSigN/DoCuSigN/images/ctv-icon-sprite.png       67473 2015-12-17 11:30:58  286c126dc22b21c586278f680f5cb154
    File appears in 13 kits
DoCuSigN/DoCuSigN/images/dstr-app-icon-120x120.png 15028 2015-12-17 11:30:58  cd10815f887da843b6ab8d259b8c8d51
    File appears in 17 kits  and under 2 different file names
DoCuSigN/DoCuSigN/images/dtx-icon-sprite.png       62291 2015-12-17 11:30:58  5cac7fac92826231fd16e51b41eeec6c
    File appears in 13 kits
DoCuSigN/DoCuSigN/images/ggfffsss.png               1673 2015-12-17 11:30:58  8e8453df161cd4e0f8da05db0c967cae
    File appears in 15 kits  and under 2 different file names
DoCuSigN/DoCuSigN/images/ico_finder.svg             1149 2015-12-17 11:31:00  ff15053d1b2f8efa04cadedfee1e85f9
    File appears in 13 kits
DoCuSigN/DoCuSigN/images/ios_gmail_icon.png         4728 2015-12-17 11:31:00  d3fb471e869b70598bf05a77774fd91f
    File appears in 13 kits
DoCuSigN/DoCuSigN/images/live_id.png                 440 2015-12-17 11:31:00  f4feed4458e2b3295c3024a8538feb7f
    File appears in 15 kits  and under 2 different file names
DoCuSigN/DoCuSigN/images/load.gif                  55605 2015-12-17 11:31:00  79deed6306286b9e0fbd016ca251d3cb
    File appears in 14 kits
DoCuSigN/DoCuSigN/images/logo-dstr-login-2x.png     7635 2015-12-17 11:31:00  1059986618539574ca4fa0bcfd699006
    File appears in 64 kits  and under 4 different file names
DoCuSigN/DoCuSigN/images/office365logo.png         18755 2015-12-17 11:31:00  f22f0b74f27173c3bad9d57cb7cab8fc
    File appears in 21 kits  and under 2 different file names
DoCuSigN/DoCuSigN/images/ProximaNova-Reg-webfont.eot 20563 2015-12-17 11:31:00  e91ebfd9e012dc79af28c0a9c971fbd3
    File appears in 13 kits
DoCuSigN/DoCuSigN/images/R2CkTs2S_400x400.png       1285 2015-12-17 11:31:02  34dd3add3bd22552c94035eef8ab174a
    File appears in 15 kits  and under 2 different file names
DoCuSigN/DoCuSigN/images/signin-tr-bg.png          29640 2015-12-17 11:31:02  f39717b675a1f6040e3d062985aa36b2
    File appears in 13 kits
DoCuSigN/DoCuSigN/images/smiihggfds.png             2645 2015-12-17 11:31:02  35c6ef54abd8e02561c9c4a7a9caba8c
    File appears in 13 kits
DoCuSigN/DoCuSigN/images/spinner-blue.gif           3150 2015-12-17 11:31:02  eb8d60aca1cd34cde51c10b1929dcf9e
    File appears in 13 kits
DoCuSigN/DoCuSigN/images/Thumbs.db                  3584 2015-12-17 11:31:02  fbc64a0c264d5cd2c946d4d9e90db3e5
    File appears in 2 kits
DoCuSigN/DoCuSigN/index.php                         6650 2015-12-17 11:30:54  6e080ee7ad90f6c5f8a9e741d0ea0163
    File appears in 4 kits
DoCuSigN/DoCuSigN/js/excanvas.compiled.js          34276 2015-12-17 11:31:02  2f6313ad44e2f318dbe8889552dc7146
    File appears in 13 kits
DoCuSigN/DoCuSigN/js/jquery.js                     103446 2015-12-17 11:31:04  55bd3c275e3a29613b05e125271b7058
    File appears in 13 kits
DoCuSigN/DoCuSigN/js/json2.js                      19079 2015-12-17 11:31:04  ec80e675e794216b8a31cb732483c58b
    File appears in 13 kits
DoCuSigN/DoCuSigN/js/modernizr.js                  11905 2015-12-17 11:31:04  3b8828ed98f9889abcc48f5e14915614
    File appears in 13 kits
DoCuSigN/DoCuSigN/js/scripts.js                    531874 2015-12-17 11:31:08  63f9e718f1f828ef1522cd4394721111
    File appears in 13 kits
DoCuSigN/DoCuSigN/lexx.php                          1926 2016-06-16 12:36:32  6a0f54907677589119d2f4191fd1b310
DoCuSigN/DoCuSigN/loader.php                        3709 2015-12-17 11:30:56  c94af5f09386e2d2090f5239b6194913
    File appears in 18 kits  and under 2 different file names
DoCuSigN/DoCuSigN/phn.php                           1898 2016-06-16 12:32:22  8bacf2e8971e47a6e9f4ef9a7917db53
DoCuSigN/DoCuSigN/phone.php                         3787 2015-12-17 11:30:56  5b68616cf9d56c77fafc7e4859255951
    File appears in 12 kits
DoCuSigN/DoCuSigN/serverbusy.php                     196 2015-12-17 11:30:56  21434c409ebfd05630054f5717f4602b
    File appears in 17 kits  and under 2 different file names

2 Email addresses found:
    supera1900@yandex.com
    admin@website.com (appears in 24 kits)



https://texasmalwareblog.blogspot.com   @phish_total