WEBMAIL phish running on mail-163[.]review

Found: 2018-07-20 17:24:54.716000
URL: https://mail-163.review/view/chines.zip
File: mail-163.review-view-chines.zip
Domain: mail-163.review
Target: WEBMAIL
Name                                               Size Date                 MD5                                chines/chines/auth.php                              1076 2017-01-27 03:40:12  54b3b2ce51b951960925dcf74e79df70

chines/chines/geoplugin.class.php                   4493 2012-12-30 22:25:56  1e63694db090c37403b39236526ce9dd
    File appears in 112 kits
chines/chines/hellion/logos.png                    41796 2015-11-19 10:18:46  da29b5868f74377ff10b5893685cf643
    File appears in 70 kits
chines/chines/hellion/postmaster.png                5496 2015-11-19 10:18:46  c1ead276fc29903252146f2d6e90beae
    File appears in 70 kits
chines/chines/index.php                             4154 2017-03-23 08:38:18  6f24c681778e71ed31d737b61d79bf64
    File appears in 2 kits
chines/index.php                                     812 2017-03-23 08:42:40  7a5ba70d6db706dad903818d663bd3f9
    File appears in 2 kits

2 Email addresses found:
    ionasaslanidsi@gmail.com
    gp_support@geoplugin.com (appears in 1279 kits)



https://texasmalwareblog.blogspot.com   @phish_total