Postmaster.io phish running on souvenirkaretbdg[.]com

Found: 2018-01-09 16:11:19
URL: http://souvenirkaretbdg.com/wp-includes/fonts/homes/hardproxy/newfile/update/chines001.zip
File: chines001-souvenirkaretbdg.com.zip
Domain: souvenirkaretbdg.com
Target: Postmaster.io
Name                                               Size Date                 MD5                                chines/chines/auth.php                              1075 2017-03-03 22:01:48  232ad163b0848ae5135fee4838dc3e1c
    File appears in 2 kits
chines/chines/geoplugin.class.php                   4493 2012-12-30 22:25:56  1e63694db090c37403b39236526ce9dd
    File appears in 84 kits
chines/chines/hellion/logos.png                    41796 2015-11-19 10:18:46  da29b5868f74377ff10b5893685cf643
    File appears in 44 kits
chines/chines/hellion/postmaster.png                5496 2015-11-19 10:18:46  c1ead276fc29903252146f2d6e90beae
    File appears in 44 kits
chines/chines/index.php                             4154 2015-11-19 10:37:56  f613ce90b8aa73369439fcd308b5f305
    File appears in 42 kits
chines/index.php                                     812 2016-10-23 19:00:46  951e9d0dd7d4f7d771e36ef743b3043d
    File appears in 8 kits

2 Email addresses found:
    susanging1141@gmail.com (appears in 2 kits)
    gp_support@geoplugin.com (appears in 1063 kits)



https://texasmalwareblog.blogspot.com   @phish_total