MICROSOFT phish running on tododinos[.]pe

Found: 2018-06-16 19:15:39.138000
URL: http://tododinos.pe/webdocs/real.zip
File: tododinos.pe-webdocs-real.zip
Domain: tododinos.pe
Target: MICROSOFT
Name                                               Size Date                 MD5                                real/geoplugin.class.php                            4647 2017-09-21 12:54:16  c8ea1e960b48a620c00bc65d525a721c
    File appears in 1323 kits  and under 3 different file names
real/index.php                                     13325 2017-09-21 12:50:54  f9fba4a1dea229224db5f0fb4269ad50
    File appears in 3 kits
real/login.php                                      1302 2018-03-12 20:24:14  95ab462424dcc3224a38f988d0a9ff97
real/pass.php                                      18315 2017-09-21 12:53:48  0087b29c24ff36b93912334b57f41ee8
    File appears in 3 kits
real/Sign in to your Microsoft account_files/AppCentipede_Microsoft.svg  7174 2017-09-21 12:57:30  aed5eb9ccea43f119a25b3b74c59c7e7
    File appears in 108 kits
real/Sign in to your Microsoft account_files/Default1033.css 73727 2017-09-21 12:59:24  902952e2e05ab3451fb7438bb77059fb
    File appears in 82 kits  and under 2 different file names
real/Sign in to your Microsoft account_files/DefaultLoginStrings1033.js  9898 2017-09-21 12:59:50  b507b90640721b4e47154d97609105bc
    File appears in 78 kits  and under 2 different file names
real/Sign in to your Microsoft account_files/DefaultLogin_Core.js 126766 2017-09-21 12:59:46  a85dcfb7c3eda9c13ad3690c2dd27822
    File appears in 77 kits  and under 2 different file names
real/Sign in to your Microsoft account_files/logo.jpg  3602 2017-09-21 12:56:50  885531c6229490a82386b12b01cc5553
    File appears in 63 kits
real/Sign in to your Microsoft account_files/Microsoft_Logotype_Gray.svg  5435 2017-09-21 13:00:00  5feaa482d83c2a69d012f9bff660d373
    File appears in 108 kits
real/Sign in to your Microsoft account_files/prefetch.htm  3326 2017-09-21 13:00:10  68b1e3007431d49789c66d75b9f606c6
    File appears in 63 kits
real/Sign in to your Microsoft account_files/prefetch_data/boot.css 159658 2017-09-21 13:02:52  30da6f6f4e2d60d8aacbe2ed1583ae7f
    File appears in 63 kits
real/Sign in to your Microsoft account_files/prefetch_data/boot.js 650764 2017-09-21 13:03:20  3fcf01abd2872c7fe233a3abaa50e122
    File appears in 63 kits  and under 2 different file names
real/Sign in to your Microsoft account_files/prefetch_data/boot_002.js 646615 2017-09-21 13:03:18  9c766769f81c9884d74819f3dfe915be
    File appears in 63 kits  and under 2 different file names
real/Sign in to your Microsoft account_files/prefetch_data/boot_003.js 650184 2017-09-21 13:03:34  4cfbdab231025e8b0ee7d08368516d5c
    File appears in 63 kits  and under 2 different file names
real/Sign in to your Microsoft account_files/prefetch_data/boot_004.js 648527 2017-09-21 13:03:46  1b403af938697ddd9ed483405ff47cd4
    File appears in 63 kits  and under 2 different file names
real/Sign in to your Microsoft account_files/prefetch_data/sprite1.css  7304 2017-09-21 13:03:54  7c23768ca9a97f74fc7b0486747deeaf
    File appears in 63 kits
real/Sign in to your Microsoft account_files/prefetch_data/sprite1.png 14983 2017-09-21 13:06:58  d502a13c4f154e9fe86802b1f0338466
    File appears in 63 kits

2 Email addresses found:
    gp_support@geoplugin.com (appears in 1270 kits)
    bialota9731@gmail.com



https://texasmalwareblog.blogspot.com   @phish_total