Turbo Tax phish ** running on royalestateteam[.]com

Found: 2018-02-22 03:20:22.806000
URL: http://royalestateteam.com/turbo_tax.zip
File: royalestateteam.com-foo-turbo_tax.zip
Domain: royalestateteam.com
Target: Turbo Tax
Name                                               Size Date                 MD5                                turbo_tax/turbo_tax/page/email.html                 2914 2018-02-20 14:03:00  dd33453b54aca78cdb5ea59f98df68ba
turbo_tax/turbo_tax/page/hut.php                     737 2018-02-21 23:10:18  215fd0135957c410c47ba0240be9e047
turbo_tax/turbo_tax/page/images/favicon.ico        99678 2015-03-04 14:33:34  bcc9835211629e8a754b9a97ec00c9ff
turbo_tax/turbo_tax/page/images/foot.png           21018 2014-10-23 07:10:40  efc0b40e40cc1d4d4d4cfb74cc337b49
turbo_tax/turbo_tax/page/images/head.png           30355 2015-03-04 14:22:10  2c2358e7352533413a1a5a5ac6e16c3e
turbo_tax/turbo_tax/page/images/head2.png          29473 2015-03-04 14:22:26  b26d6ee87935832456dc44d6363d808c
turbo_tax/turbo_tax/page/images/sign.png            1220 2014-10-23 07:10:20  f94847cfa44c922b8bb1608ff82431a6
turbo_tax/turbo_tax/page/index.html                 1882 2018-02-20 14:02:28  a2aab2c46ee17258242f849c9e84ef07
turbo_tax/turbo_tax/page/tur.php                     752 2018-02-21 23:09:56  828d1762f2a5dda5fa3c67dd4ba8918d

1 Email addresses found:
    dwevaluation18@gmail.com



https://texasmalwareblog.blogspot.com   @phish_total