ALIBABA.COM phish running on freeslave[.]net

Found: 2018-02-16 16:29:58
URL: http://freeslave.net/Alibaba.co.uk%20_ONE%20PASS.zip
File: Alibaba.co.uk%20_ONE%20PASS-freeslave.net.zip
Domain: freeslave.net
Target: ALIBABA.COM
Name                                               Size Date                 MD5                                Alibaba.co.uk/blocker.php                           2644 2014-12-03 06:17:02  5aa3f3f406ced12d0bc7742e77b01781
    File appears in 219 kits  and under 4 different file names
Alibaba.co.uk/home/images/clear.png                   81 2017-03-15 08:10:12  1b6d2de2867a3e11063ba25aa1cd4209
    File appears in 25 kits  and under 9 different file names
Alibaba.co.uk/home/images/data/89.js               166101 2017-03-14 20:53:40  33a3b039ef1c11349209a3f003f908a2
    File appears in 5 kits  and under 2 different file names
Alibaba.co.uk/home/images/data/clear.png              81 2017-03-14 20:53:54  1b6d2de2867a3e11063ba25aa1cd4209
    File appears in 25 kits  and under 9 different file names
Alibaba.co.uk/home/images/data/havana.css           4760 2017-03-14 20:54:00  f720eb7e550b99282a990906758d8b22
    File appears in 5 kits
Alibaba.co.uk/home/images/data/JSocket.swf          1513 2017-03-14 20:53:48  e9724572d37e5ca98abd364302146b6a
    File appears in 5 kits
Alibaba.co.uk/home/images/data/mini-login-form-min.css 20083 2017-03-14 20:54:06  83fed11ae6615bab01049bc0f08f8c52
    File appears in 5 kits
Alibaba.co.uk/home/images/data/mini-login-min.js   146702 2017-03-14 20:54:12  4076ec66d46bdf4be807047527cfff74
    File appears in 4 kits
Alibaba.co.uk/home/images/data/nc.js               105988 2017-03-14 20:54:24  bf72a11f68986b6b02fc90d5e9bd7e4b
    File appears in 5 kits
Alibaba.co.uk/home/images/data/uab.js                542 2017-03-14 20:54:30  49246308b1fdac8b564e28b96446b44e
    File appears in 5 kits
Alibaba.co.uk/home/images/data/um.js               32896 2017-03-14 20:54:38  b70676a69b87663f8b9b9f4dce08bdef
    File appears in 5 kits
Alibaba.co.uk/home/images/footer.css                7310 2017-03-15 08:10:18  374e2b45e8ee13c1dabc598767ef6168
    File appears in 7 kits
Alibaba.co.uk/home/images/TB1awf5PXXXXXXLXFXXXXXXXXXX-585-350.jpg 28956 2017-03-15 08:10:22  b4ea5d8bed9945018ea3a324425871a1
    File appears in 5 kits
Alibaba.co.uk/home/images/TB1ROn8OpXXXXbZaXXXXXXXXXXX-32-31.png  1699 2017-03-15 08:10:24  c738d961dd8d36206c8956302a703041
    File appears in 5 kits
Alibaba.co.uk/home/index.php                       15267 2017-06-11 12:25:34  f59bdd364581b3b3f5337594daf57bb4
Alibaba.co.uk/home/redirect.php                      870 2017-11-29 05:21:12  f080c9b641670aad0216a61e937b1a05
Alibaba.co.uk/index.php                              619 2015-03-24 20:44:46  dc1b67a93b1aed2fdc965128a0185acf
    File appears in 72 kits
Alibaba.co.uk/home/images/login.htm                37299 2017-09-08 08:19:20  56e180b7bdce3b1124f819deea176d43

2 Email addresses found:
    ayomidelogs@gmail.com
    logzz@cok.edu (appears in 5 kits)



https://texasmalwareblog.blogspot.com   @phish_total