LinkedIn phish running on icalc[.]com

Found: 2018-05-12 10:15:45.987000
URL: http://icalc.com/as/linkedIn%20(1).zip
File: icalc.com-as-linkedIn%20(1).zip
Domain: icalc.com
Target: LinkedIn
Name                                               Size Date                 MD5                                linkedIn (1)/latest revalidate.zip                  2678 2018-01-22 00:03:32  a6f989763f3b9bc732fb28e1d9c53f6b
linkedIn (1)/linkedIn (1)/linkedIn (1)/LinkedIn.html 13954 2017-08-23 16:49:12  483970540898a19ee90ae73a4df14130
    File appears in 4 kits
linkedIn (1)/linkedIn (1)/linkedIn (1)/post.php     1996 2017-12-07 02:40:14  8f709546dabb08033631b5e41ac1a5fe
    File appears in 2 kits

2 Email addresses found:
    fortunewffboss@yandex.com
    investmentslogs@gmail.com (appears in 14 kits)



https://texasmalwareblog.blogspot.com   @phish_total