GOOGLE phish running on caseychoir[.]com[.]au

Found: 2018-01-09 14:20:49.699000
URL: http://caseychoir.com.au/home/dur.zip
File: caseychoir.com.au-home-dur.zip
Domain: caseychoir.com.au
Target: GOOGLE
Name                                               Size Date                 MD5                                dur/dur/dur/dur/2mqka2s.jpg                         2142 2013-08-07 21:38:04  c930bcf158cdfe6d35a4cbd4c1c0812f
    File appears in 565 kits  and under 7 different file names
dur/dur/dur/dur/2pod55t.jpg                         2611 2013-08-07 21:38:04  c0a8313ebef0932f93a7c294cc0888d0
    File appears in 433 kits  and under 6 different file names
dur/dur/dur/dur/2qbztp5.jpg                         1693 2013-08-07 21:38:04  319ecd1f8b20f4860a69739fb653068e
    File appears in 98 kits  and under 6 different file names
dur/dur/dur/dur/2rbz6m0.jpg                         1959 2013-08-07 21:38:04  ed07ea8604d12eebe21d8d108576096b
    File appears in 421 kits  and under 5 different file names
dur/dur/dur/dur/2u8fo68.jpg                         2347 2013-12-10 02:15:16  a1c7b08ba6b874400762d1bcefb0e3c3
    File appears in 5 kits
dur/dur/dur/dur/custrom.php                         6007 2015-12-08 03:52:04  a6a693e04024ef0283cb62a9c9079429

dur/dur/dur/dur/ds_illustration_sync_440x420.png   50010 2013-12-10 02:15:30  c4ee6516aa3611b6d45fa05b53493d51
    File appears in 25 kits
dur/dur/dur/dur/images.jpg                          2178 2013-08-07 21:38:04  29d7d6fdf13413390374f9a858d5af64
    File appears in 13 kits

4 Email addresses found:
    webmaster@example.com (appears in 15 kits)
    webmaster@altavistadelago.com (appears in 13 kits)
    $to='chandenkumer83@gmail.com
    johndoe@email.com (appears in 3 kits)



https://texasmalwareblog.blogspot.com   @phish_total