2018-02-04 Phishing Kits from @phishtank_bot

hunting #phishing kits
13 more from the depths of the @PhishTank_Bot over the past week or so
around 12+ threat actor emails
all phishing kits were still available just a bit ago

@neonprimetime security

http://alexanderperfumery.com/admin/mani.zip
http://asaadat.com/l/Microsoft%20docs%20new%202017.zip
http://asaadat.com/l/redited%20microsoft.zip
http://dafunc.com/data/New.zip
http://dahlia.ru/cli/1.zip
http://elegantseowriting.com/zin/MyATT.zip
http://jcooperviolinmaker.com/express/DhlExpress.zip
http://microgale.com//ds2.zip
http://mikemark.me/wp-includes/js/jcrop/AutoDHL.zip
http://rakotographie.com/ae/oluwa.zip
http://saneplan.com.br/wp-content/themes/Untitled/blu2/blu.zip
http://thehandpaintedfurniturecompany.com.au/web/online/webmail.zip
https://upwardstatesboro.org/qoqdoc.zip


5225cae3dba9fd0ca25a274ff2f65c49  1.zip
cd1c78ddf42ebdeb23470b6d9491130a  AutoDHL.zip
3d1bc385d3b16eebd0b2a867b1a7fadd  blu.zip
0d403155685f4c137bf387011f201824  DhlExpress.zip
78155a04200f5b939f3dd912c8973518  mani.zip
3c07cfc16243043fe140f0a8c3f889c3  Microsoft%20docs%20new%202017.zip
4fe1668da7f6b19269ec4a121c2662bf  MyATT.zip
c408e98b8f6e3d7c5efb49ec1eaeea59  New.zip
30e42e7572418fee8b06755591f9e67b  oluwa.zip
fb3641a9ce90fc24dd1e5f20b0c211b4  qoqdoc.zip
15d2ced53c1286ac6d453df39a08e8d9  redited%20microsoft.zip
659f10278535abc373ba8a8b0c5c342f  webmail.zip


AA1.php:$sent ="[email protected]";
cm1.php:$recipient ="[email protected]";
ii.php:$own = '[email protected],[email protected],[email protected]';
Logon2.php:$send = "[email protected],[email protected]";
mm.php:$recipient = "[email protected]";
nxt.php:$send = "[email protected], [email protected], [email protected]";
oph.php:$to = "[email protected]";
post.php:$send = "[email protected]";
processor.php:$send = "[email protected]";
Secinfo.php:$send = "[email protected],[email protected]";
verify.php:$send = "[email protected]";