YAHOO! phish running on zaneqinego[.]com

Found: 2018-01-02 16:15:18.931000
URL: http://zaneqinego.com/images/Yahoo2017wizz.zip
File: zaneqinego.com-images-Yahoo2017wizz.zip
Domain: zaneqinego.com
Target: YAHOO!
Name                                               Size Date                 MD5                                Yahoo2017wizz/index.php                              619 2015-03-25 00:44:44  dc1b67a93b1aed2fdc965128a0185acf
    File appears in 62 kits
Yahoo2017wizz/blocker.php                           2644 2014-12-03 10:17:00  5aa3f3f406ced12d0bc7742e77b01781
    File appears in 193 kits  and under 4 different file names
Yahoo2017wizz/home/images/2.png                    14489 2016-03-12 23:29:08  a257cbd01042fbfab25bf5919ec9da68
    File appears in 9 kits  and under 3 different file names
Yahoo2017wizz/home/images/Thumbs.db                12288 2016-03-13 23:30:28  6ba3d94e85ad7de7d5898c0b4bb8b559
    File appears in 8 kits
Yahoo2017wizz/home/images/5.png                     1049 2016-03-06 05:48:58  06551baa209c70a81d9d42ae967a2e6d
    File appears in 9 kits  and under 3 different file names
Yahoo2017wizz/home/images/ss.png                    1046 2016-03-19 21:21:46  5ffc0741e64b3071396eecad67e54066
    File appears in 8 kits
Yahoo2017wizz/home/images/asd1.png                  1203 2016-03-07 22:39:32  f56e0c8812107455ca140099b3c5394f
    File appears in 9 kits
Yahoo2017wizz/home/images/7.png                     1083 2016-03-06 05:51:56  233d92afe40125e1adb29d1223670fb6
    File appears in 9 kits  and under 3 different file names
Yahoo2017wizz/home/images/imapin.jpg               83095 2016-03-08 02:23:10  ebceb871c15c941cc7df32697e307bcd
    File appears in 9 kits
Yahoo2017wizz/home/images/6.png                    10774 2016-03-12 23:59:16  b02db12d16ad4e8cf25336261d465880
    File appears in 9 kits  and under 3 different file names
Yahoo2017wizz/home/images/1.png                     2421 2016-03-06 05:47:28  8d6acda049cf6effa89d19f06b402d8c
    File appears in 9 kits  and under 3 different file names
Yahoo2017wizz/home/images/4.png                      718 2016-03-06 05:48:42  6e80192d5e33d45583bcce7ba07a6f11
    File appears in 9 kits  and under 3 different file names
Yahoo2017wizz/home/images/sihmim.png                 935 2016-03-06 05:52:10  77a79ffc0a68f18c703d2721df94571f
    File appears in 9 kits
Yahoo2017wizz/home/images/3.png                      981 2016-03-06 05:48:34  9aeabbb0f915190fbf57b195edee38d5
    File appears in 9 kits  and under 3 different file names
Yahoo2017wizz/home/index.php                        2477 2016-03-19 15:00:34  01081fa43396ddabc260af7728edd9a3
    File appears in 3 kits
Yahoo2017wizz/home/indexconfirm2.php                2463 2017-09-15 12:56:34  4da69ee8d8619fc0330a1ec1a79a98d8
Yahoo2017wizz/home/index2.php                       2361 2016-03-19 15:00:54  8106e25b408c584dffd1a632c577db5e
    File appears in 3 kits
Yahoo2017wizz/home/resultconfirm.php                1753 2017-12-29 10:51:52  c0e02fb88ad1324d42fbb1b4c93045e9
Yahoo2017wizz/home/result.php                       1756 2017-12-29 10:51:36  4590871e32481861075f3b4d943f598b
Yahoo2017wizz/home/thankyou.html                    7612 2016-03-12 14:29:28  a8623cf2b49445ceff6228a8d6d6c495
    File appears in 3 kits
Yahoo2017wizz/home/indexconfirm.php                 2586 2017-09-15 12:26:44  0ac3ef73c4f67567687324b359c9ffe0

2 Email addresses found:
    ramez.fertilizers@gmail.com
    wirez@googledocs.org (appears in 112 kits)



https://texasmalwareblog.blogspot.com   @phish_total