WEBMAIL phish running on structural-engineering[.]co[.]uk

Found: 2018-01-04 06:15:47.270000
URL: http://structural-engineering.co.uk/info/china.zip
File: structural-engineering.co.uk-info-china.zip
Domain: structural-engineering.co.uk
Target: WEBMAIL
Name                                               Size Date                 MD5                                china/china/china/china/china/china/auth.php        1061 2017-09-13 18:12:54  81304c1b76a3734808ecd0ef324b620b
    File appears in 8 kits
china/china/china/china/china/china/geoplugin.class.php  4493 2017-07-23 17:32:18  1e63694db090c37403b39236526ce9dd
    File appears in 82 kits
china/china/china/china/china/china/hellion/logos.png 41796 2017-07-23 17:32:18  da29b5868f74377ff10b5893685cf643
    File appears in 42 kits
china/china/china/china/china/china/hellion/postmaster.png  5496 2017-07-23 17:32:18  c1ead276fc29903252146f2d6e90beae
    File appears in 42 kits
china/china/china/china/china/china/hellion/Thumbs.db 11264 2017-07-23 17:32:18  832925e864b199eb8f612b1ebac41669
    File appears in 31 kits
china/china/china/china/china/china/index.php       4154 2017-07-23 17:32:18  f613ce90b8aa73369439fcd308b5f305
    File appears in 41 kits

2 Email addresses found:
    boltlogs111@gmail.com (appears in 8 kits)
    gp_support@geoplugin.com (appears in 1041 kits)



https://texasmalwareblog.blogspot.com   @phish_total