some *ahem* "dating" kits on 78[.]47[.]215[.]27

IP: 78[.]47[.]215[.]27
### Live Sites:

HTTP Banner: "The Safest Way to Meet Singles"
fastdates24[.]com
kathleen29[.]fastdates24[.]com
kathleen69[.]fastdates24[.]com
safedates24[.]locallove[.]xyz
skipthedate[.]locallove[.]xyz
skipthedate[.]me
sofia69[.]fastdates24[.]com
www[.]fastdates24[.]com
www[.]kathleen29[.]fastdates24[.]com
www[.]kathleen69[.]fastdates24[.]com
www[.]safedates24[.]locallove[.]xyz
www[.]skipthedate[.]locallove[.]xyz
www[.]skipthedate[.]me
www[.]sofia69[.]fastdates24[.]com

HTTP Banner: "Safe Dating - Personal Meetings"
bedplay[.]xyz
localnsa[.]me
meetstinder[.]xyz
pofbestmeetup[.]pw
pofnsanow[.]pw
tindersloveer[.]xyz
tindersmeet[.]xyz
www[.]bedplay[.]xyz
www[.]localnsa[.]me
www[.]meetstinder[.]xyz
www[.]pofbestmeetup[.]pw
www[.]pofnsanow[.]pw
www[.]tindersloveer[.]xyz
www[.]tindersmeet[.]xyz

HTTP Banner: "Meet With  Local Girls - A Hot Sexy"
localfun[.]privatedates[.]xyz
localfun[.]xyz
www[.]localfun[.]privatedates[.]xyz
www[.]localfun[.]xyz

HTTP Banner: "Meet With  Elsina Edmond - A Hot Sexy"
elsina[.]privatedates[.]xyz
www[.]elsina[.]privatedates[.]xyz

HTTP Banner: "Personal Verification"
privatedates[.]xyz
www[.]privatedates[.]xyz

HTTP Banner: "Hily ~ Discover New Friends"
nsadate[.]me
www[.]nsadate[.]me

HTTP Banner: "Meet With  Local Girl Shirley Caesar - A Hot Sexy"
localnsa24[.]locallove[.]xyz
www[.]localnsa24[.]locallove[.]xyz

HTTP Banner: "Locallove.xyz - World Best Safe & Secured Screening Service"
locallove[.]xyz
www[.]locallove[.]xyz

HTTP Banner: "Realdatings.us - World Best Safe & Secured Screening Service"
realdatings[.]locallove[.]xyz
realdatings[.]us
www[.]realdatings[.]locallove[.]xyz
www[.]realdatings[.]us

HTTP Banner: "Meet With  Kathleen Jackson - A Hot Sexy"
kathleen29x[.]fastdates24[.]com
kathleen69x[.]fastdates24[.]com
www[.]kathleen29x[.]fastdates24[.]com
www[.]kathleen69x[.]fastdates24[.]com

HTTP Banner: "Meet With Local Girls - A Hot Sexy"
tindernsa[.]xyz
www[.]tindernsa[.]xyz

HTTP Banner: "Meet With  Anna Lytics - A Hot Sexy"
lovestoday[.]xyz
www[.]lovestoday[.]xyz


### Kits found from opendirectories (with MD5)
3031e869b23f56306cefd21c089936ca [1]  | craiglistmeetup[.]tinderslove[.]xyz/JeniferRose%20(1)[.]zip
3031e869b23f56306cefd21c089936ca [1]  | localnsa24[.]com/JeniferRose[.]zip
3031e869b23f56306cefd21c089936ca [1]  | localnsa24[.]tinderslove[.]xyz/JeniferRose[.]zip
3031e869b23f56306cefd21c089936ca [1]  | tinderslove[.]xyz/craiglistmeetup[.]live/JeniferRose%20(1)[.]zip
3031e869b23f56306cefd21c089936ca [1]  | tinderslove[.]xyz/craiglistonlinemeetup[.]club/JeniferRose%20(1)[.]zip
3031e869b23f56306cefd21c089936ca [1]  | tinderslove[.]xyz/localnsa24[.]com/JeniferRose[.]zip
3031e869b23f56306cefd21c089936ca [1]  | www[.]craiglistmeetup[.]tinderslove[.]xyz/JeniferRose%20(1)[.]zip
3031e869b23f56306cefd21c089936ca [1]  | www[.]localnsa24[.]tinderslove[.]xyz/JeniferRose[.]zip
3031e869b23f56306cefd21c089936ca [1]  | www[.]tinderslove[.]xyz/craiglistmeetup[.]live/JeniferRose%20(1)[.]zip
3031e869b23f56306cefd21c089936ca [1]  | www[.]tinderslove[.]xyz/craiglistonlinemeetup[.]club/JeniferRose%20(1)[.]zip
3031e869b23f56306cefd21c089936ca [1]  | www[.]tinderslove[.]xyz/localnsa24[.]com/JeniferRose[.]zip
30ca25193fc32b86f236be0a7e7f34b0 [2]  | localnsa24[.]com/Animia%20Rose[.]zip
30ca25193fc32b86f236be0a7e7f34b0 [2]  | localnsa24[.]tinderslove[.]xyz/Animia%20Rose[.]zip
30ca25193fc32b86f236be0a7e7f34b0 [2]  | tinderslove[.]xyz/localnsa24[.]com/Animia%20Rose[.]zip
30ca25193fc32b86f236be0a7e7f34b0 [2]  | www[.]localnsa24[.]tinderslove[.]xyz/Animia%20Rose[.]zip
30ca25193fc32b86f236be0a7e7f34b0 [2]  | www[.]tinderslove[.]xyz/localnsa24[.]com/Animia%20Rose[.]zip
5cf95a7d6db0f078543966a61d48c3d9 [3]  | clmeetup18[.]tinderslove[.]xyz/Animia%20Rose[.]zip
5cf95a7d6db0f078543966a61d48c3d9 [3]  | tinderslove[.]xyz/clmeetup18[.]com/Animia%20Rose[.]zip
5cf95a7d6db0f078543966a61d48c3d9 [3]  | www[.]clmeetup18[.]tinderslove[.]xyz/Animia%20Rose[.]zip
5cf95a7d6db0f078543966a61d48c3d9 [3]  | www[.]tinderslove[.]xyz/clmeetup18[.]com/Animia%20Rose[.]zip
6968e505472379de9afaa4455d96542b [4]  | poferdate[.]xyz/POf[.]zip
857b6ae291075439e8d8f5cd02f0c674 [5]  | bestfuns[.]privatedates[.]xyz/PPL%20LAnder%20CL[.]zip
857b6ae291075439e8d8f5cd02f0c674 [5]  | bestfuns[.]xyz/PPL%20LAnder%20CL[.]zip
88effff23d52b557166d9dcfde1c514d [6]  | poferdate[.]xyz/27[.]zip
99636294deb770b69969c2c24ac53e2b [7]  | bestfuns[.]privatedates[.]xyz/RealDating[.]zip
99636294deb770b69969c2c24ac53e2b [7]  | bestfuns[.]xyz/RealDating[.]zip
d1668575f6e6141acb56daf590a599c0 [*]  | hazel[.]fastdates24[.]com/Kathleen29%20(1)[.]zip
e299e791ac973e8770d8d29334943822 [8]  | bedtobed[.]me/821[.]zip
f4eec8645400ea5f327ad4ccb905ad46 [9]  | bestfuns[.]privatedates[.]xyz/267296[.]zip
f4eec8645400ea5f327ad4ccb905ad46 [9]  | bestfuns[.]xyz/267296[.]zip
f6ed6e7f6729e44e38d1f2623519d22a [10] | bestfuns[.]privatedates[.]xyz/nsagirl-24online[.]com[.]zip
f6ed6e7f6729e44e38d1f2623519d22a [10] | bestfuns[.]xyz/nsagirl-24online[.]com[.]zip

[1]  malshare[.]com/sample[.]php?action=detail&hash=3031e869b23f56306cefd21c089936ca
[2]  malshare[.]com/sample[.]php?action=detail&hash=30ca25193fc32b86f236be0a7e7f34b0
[3]  malshare[.]com/sample[.]php?action=detail&hash=5cf95a7d6db0f078543966a61d48c3d9
[4]  malshare[.]com/sample[.]php?action=detail&hash=6968e505472379de9afaa4455d96542b
[5]  malshare[.]com/sample[.]php?action=detail&hash=857b6ae291075439e8d8f5cd02f0c674
[6]  malshare[.]com/sample[.]php?action=detail&hash=88effff23d52b557166d9dcfde1c514d
[7]  malshare[.]com/sample[.]php?action=detail&hash=99636294deb770b69969c2c24ac53e2b
[*]  file too large
[8]  malshare[.]com/sample[.]php?action=detail&hash=e299e791ac973e8770d8d29334943822
[9]  malshare[.]com/sample[.]php?action=detail&hash=f4eec8645400ea5f327ad4ccb905ad46
[10] malshare[.]com/sample[.]php?action=detail&hash=f6ed6e7f6729e44e38d1f2623519d22a