Microsoft phish running on districtlimited[.]com

Found: 2018-02-16 16:07:58
URL: http://districtlimited.com/cgi-bin1/office.zip
File: office-districtlimited.com.zip
Domain: districtlimited.com
Target: Microsoft
Name                                               Size Date                 MD5                                office/files/login.min.css                         21650 2016-10-05 04:09:46  75aadf89df607c39f774e46b45b442dd
    File appears in 19 kits
office/files/login_hover.min.css                      89 2016-10-05 04:09:46  2c957834356b9ca6570167adec33573f
    File appears in 35 kits  and under 2 different file names
office/files/microsoft_logo.png                     1040 2016-10-05 04:09:44  e4b675007dc6492ee590131d1f7dfbb3
    File appears in 54 kits  and under 2 different file names
office/index.html                                  39265 2017-10-24 02:17:50  937ffb50473eab247018db9e844b17f3
office/office.php                                    743 2016-11-30 18:45:06  560b653dba93a17cba026272ca7fcf33
    File appears in 3 kits

2 Email addresses found:
    payagent008@gmail.com (appears in 3 kits)
    xconsole@alboraaq.com



https://texasmalwareblog.blogspot.com   @phish_total