GOOGLE phish running on santoguia[.]net

Found: 2018-01-07 17:25:50
URL: http://santoguia.net/med/html.zip
File: html-santoguia.net.zip
Domain: santoguia.net
Target: GOOGLE
Name                                               Size Date                 MD5                                html/.DS_Store                                      6148 2015-05-20 16:07:30  702854f3d0efe02a9a047cba022490bb
    File appears in 48 kits
html/error_log                                       171 2015-12-15 05:39:46  53b070c215c59d9c7d5817fb748e756a
    File appears in 43 kits
html/favicon.ico                                    1197 2014-08-12 05:05:24  46f7a1d52b8a46d23ee9c64b24adb4f0
    File appears in 1049 kits  and under 5 different file names
html/geoplugin.class.php                            4647 2014-04-25 16:14:28  c8ea1e960b48a620c00bc65d525a721c
    File appears in 1068 kits  and under 3 different file names
html/Google_docs_files/.DS_Store                    8196 2015-05-11 12:14:54  22fc1ad385758411deb0464c23d43062
    File appears in 75 kits
html/Google_docs_files/_notes/dwsync.xml            2133 2014-04-23 23:32:08  368e28b664e21e90732382469113dde0
    File appears in 822 kits  and under 2 different file names
html/Google_docs_files/aol.png                      1183 2014-04-23 05:02:00  1db15cc5ad50540b10cde2d733efd2a4
    File appears in 1124 kits  and under 3 different file names
html/Google_docs_files/avatar_2x.png                2195 2014-04-23 05:03:00  17540f255f86c00bde81020fcc165989
    File appears in 865 kits  and under 2 different file names
html/Google_docs_files/checkmark.png                 239 2014-04-25 21:01:50  8b596881d19d5906d926839a9c23e80c
    File appears in 1189 kits  and under 2 different file names
html/Google_docs_files/cJZKeOuBrn4kERxqtaUH3T8E0i7KZn-EPnyo3HZu7kw.woff 21956 2014-04-23 05:03:00  3eb14f3838ada50e10f062a895c3b9cf
    File appears in 1062 kits  and under 2 different file names
html/Google_docs_files/docs-icon.png               52997 2014-04-23 05:02:00  83ad8d0b5df7150110564b46fc0b3911
    File appears in 1032 kits  and under 2 different file names
html/Google_docs_files/DXI1ORHCpsQm3Vp6mXoaTXhCUOGz7vYGh680lGh-uXM.woff 22656 2014-04-23 05:03:00  7c5d9f078bea8c1fc0b21a764b832138
    File appears in 1062 kits  and under 2 different file names
html/Google_docs_files/email.png                    2921 2014-04-23 05:02:00  f093ed003976ef8aa9d299051c06f26b
    File appears in 1129 kits  and under 2 different file names
html/Google_docs_files/favicon.ico                  1197 2014-08-12 04:58:08  46f7a1d52b8a46d23ee9c64b24adb4f0
    File appears in 1049 kits  and under 5 different file names
html/Google_docs_files/Google Docs.png             232013 2014-04-23 05:02:00  4ab62a33783d09ef8b8c17a13ec6b0ef
    File appears in 840 kits  and under 2 different file names
html/Google_docs_files/google.png                   9005 2014-08-17 15:26:12  b136662d529f0d1dd780056d7a6ff186
    File appears in 1140 kits  and under 5 different file names
html/Google_docs_files/googledocs.jpg              14918 2014-04-23 05:03:00  8ff2f663acec81a399f6eaa002d1eb53
    File appears in 832 kits
html/Google_docs_files/jquery.ddslick.min.js        7156 2014-04-23 05:03:00  f0dc534351e239e07d258adcde7a63cd
    File appears in 1067 kits  and under 2 different file names
html/Google_docs_files/jquery.min.js               94843 2014-04-23 05:03:00  a13f7f208ba534681deadb1ec7a2e54a
    File appears in 1011 kits  and under 2 different file names
html/Google_docs_files/live_hotmail.png              517 2014-04-23 05:02:00  8dccdb0f930ec8ff6c62dd13474fa9f4
    File appears in 1123 kits  and under 3 different file names
html/Google_docs_files/logo_2x.png                  9005 2014-04-23 05:02:00  b136662d529f0d1dd780056d7a6ff186
    File appears in 1140 kits  and under 5 different file names
html/Google_docs_files/logo_strip.png              26647 2014-08-12 05:36:50  a6dd956e0a1b11991ac93335bbf4b4cc
    File appears in 1004 kits  and under 2 different file names
html/Google_docs_files/logo_strip_2x.png           11156 2014-04-23 05:03:00  384a868cf5a995d033c4ac6e30c60355
    File appears in 1167 kits  and under 5 different file names
html/Google_docs_files/mail_gmail.png               1528 2014-04-23 05:02:00  5d2f329d5813e9ad215d0117610a58c5
    File appears in 1123 kits  and under 3 different file names
html/Google_docs_files/Thumbs.db                   80896 2014-09-03 21:19:12  33c9311b8a554cff717e041a8e42c6e3
    File appears in 658 kits
html/Google_docs_files/universal_language_settings-21.png   199 2014-04-23 05:03:00  4a2d1168a691747daf4d22e0dc483958
    File appears in 1271 kits  and under 2 different file names
html/Google_docs_files/x_8px.png                     154 2014-04-25 21:12:30  4e3d78afc1958e6e12226cbf27f236bd
    File appears in 1038 kits  and under 2 different file names
html/Google_docs_files/yahoo.png                    2830 2014-04-23 05:02:00  fda2a0cac8b16568eed32edbc85b5db8
    File appears in 1124 kits  and under 3 different file names
html/SpryAssets/SpryValidationPassword.css          2426 2014-07-15 17:06:16  97faad16686bef5246d0953311bffdc8
    File appears in 1011 kits
html/SpryAssets/SpryValidationPassword.js          20828 2014-07-15 17:06:16  d6be38fb42c2e9618c9d5f2664078c19
    File appears in 1011 kits
html/SpryAssets/SpryValidationTextField.css         3122 2014-07-15 17:04:04  997fda9f352033c20b5fbb8fc361537c
    File appears in 1016 kits
html/SpryAssets/SpryValidationTextField.js         77624 2014-07-15 17:04:04  7947cb5a92373e747f786adfe1d49356
    File appears in 1013 kits
html/index.php                                     36385 2017-01-17 13:16:18  1b281478c517ee03d230babaa994e38a
html/verification.php                              51685 2017-01-20 07:23:04  f4c5181198d71af134591547755117eb

4 Email addresses found:
    gp_support@geoplugin.com (appears in 1041 kits)
    olawireblessing@gmail.com
    box@adobe.com (appears in 50 kits)
    oc@adobe.com (appears in 40 kits)



https://texasmalwareblog.blogspot.com   @phish_total