WEBMAIL phish running on transtarind[.]com

Found: 2018-05-23 08:15:20.834000
URL: http://transtarind.com/validate.zip
File: transtarind.com-foo-validate.zip
Domain: transtarind.com
Target: WEBMAIL
Name                                               Size Date                 MD5                                validate/index.htm                                   127 2018-02-21 06:23:06  ed9d6e04a557423f14a5cf467c8efb6e
    File appears in 28 kits
validate/mail.htm                                   1593 2018-02-21 06:23:06  9b9c9a0d3d4410e57cc9241aa842acf5
    File appears in 27 kits
validate/up.php                                      939 2018-04-16 11:37:40  55479a16d99b0e4e72c87ede93a5f5a8
validate/validation.html                             930 2018-02-21 06:23:06  10c641abb8539cae6d2d6b1821584b24
    File appears in 28 kits  and under 2 different file names

3 Email addresses found:
    'vivekodya@gmail.com
    tb7000@zoho.com
    'ultimateresult@amaslim.com (appears in 2 kits)



https://texasmalwareblog.blogspot.com   @phish_total