GOOGLE phish running on esndenmark[.]org

Found: 2018-05-14 22:15:41.694000
URL: http://kolding.esndenmark.org/misc/ui/z3.zip
File: kolding.esndenmark.org-ui-z3.zip
Domain: esndenmark.org
Target: GOOGLE
Name                                               Size Date                 MD5                                z3/__MACOSX/._favicon.ico                            222 2017-06-29 19:12:18  4d386f6638efd689c0557871b657d7f8
    File appears in 4 kits  and under 32 different file names
z3/__MACOSX/._geoplugin.class.php                    222 2017-06-29 19:12:18  4d386f6638efd689c0557871b657d7f8
    File appears in 4 kits  and under 32 different file names
z3/__MACOSX/._Google_docs_files                      222 2017-06-29 19:12:18  4d386f6638efd689c0557871b657d7f8
    File appears in 4 kits  and under 32 different file names
z3/__MACOSX/._index.php                              171 2017-06-29 19:12:18  48b58d24292798958bef9b864a10580b
    File appears in 122 kits  and under 35 different file names
z3/__MACOSX/._SpryAssets                             222 2017-06-29 19:12:18  4d386f6638efd689c0557871b657d7f8
    File appears in 4 kits  and under 32 different file names
z3/__MACOSX/._verification.php                       171 2017-06-29 19:12:18  48b58d24292798958bef9b864a10580b
    File appears in 122 kits  and under 35 different file names
z3/__MACOSX/Google_docs_files/._.DS_Store            222 2017-06-29 19:12:18  4d386f6638efd689c0557871b657d7f8
    File appears in 4 kits  and under 32 different file names
z3/__MACOSX/Google_docs_files/.__notes               222 2017-06-29 19:12:18  4d386f6638efd689c0557871b657d7f8
    File appears in 4 kits  and under 32 different file names
z3/__MACOSX/Google_docs_files/._aol.png              222 2017-06-29 19:12:18  4d386f6638efd689c0557871b657d7f8
    File appears in 4 kits  and under 32 different file names
z3/__MACOSX/Google_docs_files/._avatar_2x.png        222 2017-06-29 19:12:18  4d386f6638efd689c0557871b657d7f8
    File appears in 4 kits  and under 32 different file names
z3/__MACOSX/Google_docs_files/._checkmark.png        222 2017-06-29 19:12:18  4d386f6638efd689c0557871b657d7f8
    File appears in 4 kits  and under 32 different file names
z3/__MACOSX/Google_docs_files/._cJZKeOuBrn4kERxqtaUH3T8E0i7KZn-EPnyo3HZu7kw.woff   222 2017-06-29 19:12:18  4d386f6638efd689c0557871b657d7f8
    File appears in 4 kits  and under 32 different file names
z3/__MACOSX/Google_docs_files/._docs-icon.png        222 2017-06-29 19:12:18  4d386f6638efd689c0557871b657d7f8
    File appears in 4 kits  and under 32 different file names
z3/__MACOSX/Google_docs_files/._DXI1ORHCpsQm3Vp6mXoaTXhCUOGz7vYGh680lGh-uXM.woff   222 2017-06-29 19:12:18  4d386f6638efd689c0557871b657d7f8
    File appears in 4 kits  and under 32 different file names
z3/__MACOSX/Google_docs_files/._email.png            222 2017-06-29 19:12:18  4d386f6638efd689c0557871b657d7f8
    File appears in 4 kits  and under 32 different file names
z3/__MACOSX/Google_docs_files/._favicon.ico          222 2017-06-29 19:12:18  4d386f6638efd689c0557871b657d7f8
    File appears in 4 kits  and under 32 different file names
z3/__MACOSX/Google_docs_files/._Google Docs.png      222 2017-06-29 19:12:18  4d386f6638efd689c0557871b657d7f8
    File appears in 4 kits  and under 32 different file names
z3/__MACOSX/Google_docs_files/._google.png           222 2017-06-29 19:12:18  4d386f6638efd689c0557871b657d7f8
    File appears in 4 kits  and under 32 different file names
z3/__MACOSX/Google_docs_files/._googledocs.jpg       222 2017-06-29 19:12:18  4d386f6638efd689c0557871b657d7f8
    File appears in 4 kits  and under 32 different file names
z3/__MACOSX/Google_docs_files/._jquery.ddslick.min.js   222 2017-06-29 19:12:18  4d386f6638efd689c0557871b657d7f8
    File appears in 4 kits  and under 32 different file names
z3/__MACOSX/Google_docs_files/._jquery.min.js        222 2017-06-29 19:12:18  4d386f6638efd689c0557871b657d7f8
    File appears in 4 kits  and under 32 different file names
z3/__MACOSX/Google_docs_files/._live_hotmail.png     222 2017-06-29 19:12:18  4d386f6638efd689c0557871b657d7f8
    File appears in 4 kits  and under 32 different file names
z3/__MACOSX/Google_docs_files/._logo_2x.png          222 2017-06-29 19:12:18  4d386f6638efd689c0557871b657d7f8
    File appears in 4 kits  and under 32 different file names
z3/__MACOSX/Google_docs_files/._logo_strip.png       222 2017-06-29 19:12:18  4d386f6638efd689c0557871b657d7f8
    File appears in 4 kits  and under 32 different file names
z3/__MACOSX/Google_docs_files/._logo_strip_2x.png    222 2017-06-29 19:12:18  4d386f6638efd689c0557871b657d7f8
    File appears in 4 kits  and under 32 different file names
z3/__MACOSX/Google_docs_files/._mail_gmail.png       222 2017-06-29 19:12:18  4d386f6638efd689c0557871b657d7f8
    File appears in 4 kits  and under 32 different file names
z3/__MACOSX/Google_docs_files/._Thumbs.db            222 2017-06-29 19:12:18  4d386f6638efd689c0557871b657d7f8
    File appears in 4 kits  and under 32 different file names
z3/__MACOSX/Google_docs_files/._universal_language_settings-21.png   222 2017-06-29 19:12:18  4d386f6638efd689c0557871b657d7f8
    File appears in 4 kits  and under 32 different file names
z3/__MACOSX/Google_docs_files/._x_8px.png            222 2017-06-29 19:12:18  4d386f6638efd689c0557871b657d7f8
    File appears in 4 kits  and under 32 different file names
z3/__MACOSX/Google_docs_files/._yahoo.png            222 2017-06-29 19:12:18  4d386f6638efd689c0557871b657d7f8
    File appears in 4 kits  and under 32 different file names
z3/__MACOSX/Google_docs_files/_notes/._dwsync.xml    222 2017-06-29 19:12:18  4d386f6638efd689c0557871b657d7f8
    File appears in 4 kits  and under 32 different file names
z3/__MACOSX/SpryAssets/._.DS_Store                   222 2017-06-29 19:12:18  7f1c3925dd941299dacfbc60a13c2e18
    File appears in 3 kits
z3/__MACOSX/SpryAssets/._SpryValidationPassword.css   222 2017-06-29 19:12:18  4d386f6638efd689c0557871b657d7f8
    File appears in 4 kits  and under 32 different file names
z3/__MACOSX/SpryAssets/._SpryValidationPassword.js   222 2017-06-29 19:12:18  4d386f6638efd689c0557871b657d7f8
    File appears in 4 kits  and under 32 different file names
z3/__MACOSX/SpryAssets/._SpryValidationTextField.css   222 2017-06-29 19:12:18  4d386f6638efd689c0557871b657d7f8
    File appears in 4 kits  and under 32 different file names
z3/__MACOSX/SpryAssets/._SpryValidationTextField.js   222 2017-06-29 19:12:18  4d386f6638efd689c0557871b657d7f8
    File appears in 4 kits  and under 32 different file names
z3/error_log                                       16713 2017-06-29 19:12:18  5a2c42fea778723a6c92b03424fb6e83
z3/favicon.ico                                      1197 2017-06-29 19:12:18  46f7a1d52b8a46d23ee9c64b24adb4f0
    File appears in 1156 kits  and under 5 different file names
z3/geoplugin.class.php                              4647 2017-06-29 19:12:18  c8ea1e960b48a620c00bc65d525a721c
    File appears in 1307 kits  and under 3 different file names
z3/Google_docs_files/.DS_Store                      8196 2017-06-29 19:12:18  55d73227250dd925f4919f590b45c916
    File appears in 10 kits
z3/Google_docs_files/_notes/dwsync.xml              2133 2017-06-29 19:12:18  368e28b664e21e90732382469113dde0
    File appears in 910 kits  and under 2 different file names
z3/Google_docs_files/aol.png                        1183 2017-06-29 19:12:18  1db15cc5ad50540b10cde2d733efd2a4
    File appears in 1269 kits  and under 3 different file names
z3/Google_docs_files/avatar_2x.png                  2195 2017-06-29 19:12:18  17540f255f86c00bde81020fcc165989
    File appears in 958 kits  and under 2 different file names
z3/Google_docs_files/checkmark.png                   239 2017-06-29 19:12:18  8b596881d19d5906d926839a9c23e80c
    File appears in 1342 kits  and under 2 different file names
z3/Google_docs_files/cJZKeOuBrn4kERxqtaUH3T8E0i7KZn-EPnyo3HZu7kw.woff 21956 2017-06-29 19:12:18  3eb14f3838ada50e10f062a895c3b9cf
    File appears in 1203 kits  and under 2 different file names
z3/Google_docs_files/docs-icon.png                 52997 2017-06-29 19:12:18  83ad8d0b5df7150110564b46fc0b3911
    File appears in 1167 kits  and under 2 different file names
z3/Google_docs_files/DXI1ORHCpsQm3Vp6mXoaTXhCUOGz7vYGh680lGh-uXM.woff 22656 2017-06-29 19:12:18  7c5d9f078bea8c1fc0b21a764b832138
    File appears in 1203 kits  and under 2 different file names
z3/Google_docs_files/email.png                      2921 2017-06-29 19:12:18  f093ed003976ef8aa9d299051c06f26b
    File appears in 1274 kits  and under 2 different file names
z3/Google_docs_files/favicon.ico                    1197 2017-06-29 19:12:18  46f7a1d52b8a46d23ee9c64b24adb4f0
    File appears in 1156 kits  and under 5 different file names
z3/Google_docs_files/Google Docs.png               232013 2017-06-29 19:12:18  4ab62a33783d09ef8b8c17a13ec6b0ef
    File appears in 931 kits  and under 2 different file names
z3/Google_docs_files/google.png                     9005 2017-06-29 19:12:18  b136662d529f0d1dd780056d7a6ff186
    File appears in 1297 kits  and under 5 different file names
z3/Google_docs_files/googledocs.jpg                14918 2017-06-29 19:12:18  8ff2f663acec81a399f6eaa002d1eb53
    File appears in 923 kits
z3/Google_docs_files/jquery.ddslick.min.js          7156 2017-06-29 19:12:18  f0dc534351e239e07d258adcde7a63cd
    File appears in 1196 kits  and under 2 different file names
z3/Google_docs_files/jquery.min.js                 94843 2017-06-29 19:12:18  a13f7f208ba534681deadb1ec7a2e54a
    File appears in 1136 kits  and under 2 different file names
z3/Google_docs_files/live_hotmail.png                517 2017-06-29 19:12:18  8dccdb0f930ec8ff6c62dd13474fa9f4
    File appears in 1268 kits  and under 3 different file names
z3/Google_docs_files/logo_2x.png                    9005 2017-06-29 19:12:18  b136662d529f0d1dd780056d7a6ff186
    File appears in 1297 kits  and under 5 different file names
z3/Google_docs_files/logo_strip.png                26647 2017-06-29 19:12:18  a6dd956e0a1b11991ac93335bbf4b4cc
    File appears in 1121 kits  and under 2 different file names
z3/Google_docs_files/logo_strip_2x.png             11156 2017-06-29 19:12:18  384a868cf5a995d033c4ac6e30c60355
    File appears in 1292 kits  and under 5 different file names
z3/Google_docs_files/mail_gmail.png                 1528 2017-06-29 19:12:18  5d2f329d5813e9ad215d0117610a58c5
    File appears in 1268 kits  and under 3 different file names
z3/Google_docs_files/Thumbs.db                     80896 2017-06-29 19:12:18  33c9311b8a554cff717e041a8e42c6e3
    File appears in 711 kits
z3/Google_docs_files/universal_language_settings-21.png   199 2017-06-29 19:12:18  4a2d1168a691747daf4d22e0dc483958
    File appears in 1441 kits  and under 2 different file names
z3/Google_docs_files/x_8px.png                       154 2017-06-29 19:12:18  4e3d78afc1958e6e12226cbf27f236bd
    File appears in 1172 kits  and under 2 different file names
z3/Google_docs_files/yahoo.png                      2830 2017-06-29 19:12:18  fda2a0cac8b16568eed32edbc85b5db8
    File appears in 1269 kits  and under 3 different file names
z3/index.php                                       36290 2018-05-13 17:56:38  6b61e77cd9c95d1ed65db92b3c83031f
z3/SpryAssets/.DS_Store                             6148 2017-06-29 19:12:18  20c5bb4e586f40c563899708ac844b77
    File appears in 16 kits
z3/SpryAssets/SpryValidationPassword.css            2426 2017-06-29 19:12:18  97faad16686bef5246d0953311bffdc8
    File appears in 1146 kits
z3/SpryAssets/SpryValidationPassword.js            20828 2017-06-29 19:12:18  d6be38fb42c2e9618c9d5f2664078c19
    File appears in 1139 kits
z3/SpryAssets/SpryValidationTextField.css           3122 2017-06-29 19:12:18  997fda9f352033c20b5fbb8fc361537c
    File appears in 1151 kits
z3/SpryAssets/SpryValidationTextField.js           77624 2017-06-29 19:12:18  7947cb5a92373e747f786adfe1d49356
    File appears in 1136 kits
z3/verification.php                                51500 2018-05-13 17:57:06  27c2aec8e474123d71814c2e72eeda71

2 Email addresses found:
    gp_support@geoplugin.com (appears in 1251 kits)
    eyiacce@gmail.com



https://texasmalwareblog.blogspot.com   @phish_total