MICROSOFT phish running on watergatetravel[.]com

Found: 2018-02-22 11:15:09.867000
URL: http://watergatetravel.com/wp-includes/js/office.zip
File: watergatetravel.com-js-office.zip
Domain: watergatetravel.com
Target: MICROSOFT
Name                                               Size Date                 MD5                                office/office/index.htm                            17593 2017-11-25 17:07:28  c02d1d743d742a0e6321b83237e2fd36
    File appears in 3 kits
office/office/index2.htm                           19997 2017-11-25 17:07:28  e232cd1c27fe00af1458dc24ed9b7031
    File appears in 3 kits  and under 2 different file names
office/office/index2.php                           19997 2017-11-25 17:07:28  e232cd1c27fe00af1458dc24ed9b7031
    File appears in 3 kits  and under 2 different file names
office/office/info.php                               733 2017-11-28 11:57:14  9040b541e3992f543ed44afd3dbd9226

office/office/thankyou.htm                         14317 2017-11-27 14:21:32  2ef65ddc39ff6959b99bc0d84624015a
    File appears in 3 kits

3 Email addresses found:
    ceojobhw990@gmail.com
    info@lol.com
    info@lol.combla-emailadd-bla



https://texasmalwareblog.blogspot.com   @phish_total