WEBMAIL phish running on bajekobazar[.]com

Found: 2018-09-30 15:15:13.712000
URL: https://bajekobazar.com/0101/Mailbox.zip
File: bajekobazar.com-0101-Mailbox.zip
Domain: bajekobazar.com
Target: WEBMAIL
Name                                               Size Date                 MD5                                Mailbox/Mailbox/index.php                            272 2018-04-24 14:26:58  991f96989f73ef3baf468f6c1c0fea17
    File appears in 7 kits
Mailbox/Mailbox/login.php                            602 2018-09-24 10:05:34  ec8d47dff9c8a7dea902cc7a93e96adb
Mailbox/Mailbox/thankyou.html                       7581 2018-04-24 14:26:58  8c500c2ae0dfd1a4006d767aba160522

Mailbox/Mailbox/WebMail Sign In_files/app.css       2210 2018-04-24 14:26:58  381c0a51f0563e4a87e89c51abec0c42
    File appears in 7 kits
Mailbox/Mailbox/WebMail Sign In_files/app.js       94063 2018-04-24 14:27:00  e9bdf69c5599695b5fac5922548ae4b8
    File appears in 7 kits
Mailbox/Mailbox/WebMail Sign In_files/mail.png      4099 2018-04-24 14:27:00  6aeed6c92c8216cdb77a4e0113b9ddd0
    File appears in 7 kits
Mailbox/Mailbox/webmail.php                         2947 2018-04-24 14:27:24  7f7e4ac135c0429c1f56e7f8f8b9c6df

4 Email addresses found:
    dollerandeuro@gmail.com
    'name@example.com (appears in 5 kits)
    elem.value=='name@example.com (appears in 5 kits)
    elem.value='name@example.com (appears in 5 kits)



https://texasmalwareblog.blogspot.com   @phish_total