MICROSOFT phish running on gesscu[.]cf

Found: 2018-01-24 14:25:31.244000
URL: https://gesscu.cf/Easedocs/Sign_in.zip
File: gesscu.cf-Easedocs-Sign_in.zip
Domain: gesscu.cf
Target: MICROSOFT
Name                                               Size Date                 MD5                                Sign_in/Sign_in/.DS_Store                           6148 2017-04-05 00:09:26  0c7b8669c23e8aefb9ff532267784c6b
    File appears in 6 kits
Sign_in/Sign_in/bang.php                             784 2017-04-05 00:10:38  905d3b29011dede5aa9dce444622d8e7
    File appears in 5 kits
Sign_in/Sign_in/block.php                           1554 2017-04-05 00:09:26  5116adad80c341b85d93671a323a55af
    File appears in 217 kits  and under 2 different file names
Sign_in/Sign_in/filess/.DS_Store                    6148 2017-04-05 00:09:26  e2766b054913b92a1e3d5b14eb183e40
    File appears in 6 kits
Sign_in/Sign_in/filess/bannerlogo.png               4585 2017-04-05 00:09:26  9f09a27d4f69b3557c7433574a29d726
    File appears in 77 kits  and under 4 different file names
Sign_in/Sign_in/filess/heroillustration.jpg        203294 2017-04-05 00:09:26  65283b123eb235e6176ae98c02ac5b1c
    File appears in 149 kits  and under 4 different file names
Sign_in/Sign_in/filess/login.css                   21995 2017-04-05 00:09:26  84beb1ad46b6938cfbfb5a8ce6ce218b
    File appears in 6 kits
Sign_in/Sign_in/filess/microsoft_logo.png           1040 2017-04-05 00:09:26  e4b675007dc6492ee590131d1f7dfbb3
    File appears in 48 kits  and under 2 different file names
Sign_in/Sign_in/index.php                          15057 2017-05-01 16:08:22  f64d7159a6a0c3469b24a3fed3aebe5c
    File appears in 5 kits

1 Email addresses found:
    d.jones455@yandex.com (appears in 6 kits)



https://texasmalwareblog.blogspot.com   @phish_total