GOOGLE phish running on andromeda[.]in[.]ua

Found: 2018-05-10 09:15:12.594000
URL: http://andromeda.in.ua/wp-snapshots/Responses.zip
File: andromeda.in.ua-wp-snapshots-Responses.zip
Domain: andromeda.in.ua
Target: GOOGLE
Name                                               Size Date                 MD5                                Responses/mgs/es/favicon.ico                        1197 2015-04-02 17:33:46  46f7a1d52b8a46d23ee9c64b24adb4f0
    File appears in 1153 kits  and under 5 different file names
Responses/mgs/es/geoplugin.class.php                4647 2015-04-02 17:33:46  c8ea1e960b48a620c00bc65d525a721c
    File appears in 1299 kits  and under 3 different file names
Responses/mgs/es/Google_docs_files/aol.png          1183 2015-04-02 17:33:46  1db15cc5ad50540b10cde2d733efd2a4
    File appears in 1264 kits  and under 3 different file names
Responses/mgs/es/Google_docs_files/avatar_2x.png    2195 2015-04-02 17:33:46  17540f255f86c00bde81020fcc165989
    File appears in 956 kits  and under 2 different file names
Responses/mgs/es/Google_docs_files/checkmark.png     239 2015-04-02 17:33:46  8b596881d19d5906d926839a9c23e80c
    File appears in 1338 kits  and under 2 different file names
Responses/mgs/es/Google_docs_files/cJZKeOuBrn4kERxqtaUH3T8E0i7KZn-EPnyo3HZu7kw.woff 21956 2015-04-02 17:33:46  3eb14f3838ada50e10f062a895c3b9cf
    File appears in 1198 kits  and under 2 different file names
Responses/mgs/es/Google_docs_files/docs-icon.png   52997 2015-04-02 17:33:46  83ad8d0b5df7150110564b46fc0b3911
    File appears in 1163 kits  and under 2 different file names
Responses/mgs/es/Google_docs_files/DXI1ORHCpsQm3Vp6mXoaTXhCUOGz7vYGh680lGh-uXM.woff 22656 2015-04-02 17:33:46  7c5d9f078bea8c1fc0b21a764b832138
    File appears in 1198 kits  and under 2 different file names
Responses/mgs/es/Google_docs_files/email.png        2921 2015-04-02 17:33:46  f093ed003976ef8aa9d299051c06f26b
    File appears in 1269 kits  and under 2 different file names
Responses/mgs/es/Google_docs_files/favicon.ico      1197 2015-04-02 17:33:46  46f7a1d52b8a46d23ee9c64b24adb4f0
    File appears in 1153 kits  and under 5 different file names
Responses/mgs/es/Google_docs_files/Google Docs.png 232013 2015-04-02 17:33:46  4ab62a33783d09ef8b8c17a13ec6b0ef
    File appears in 929 kits  and under 2 different file names
Responses/mgs/es/Google_docs_files/google.png       9005 2015-04-02 17:33:46  b136662d529f0d1dd780056d7a6ff186
    File appears in 1292 kits  and under 5 different file names
Responses/mgs/es/Google_docs_files/googledocs.jpg  14918 2015-04-02 17:33:46  8ff2f663acec81a399f6eaa002d1eb53
    File appears in 921 kits
Responses/mgs/es/Google_docs_files/jquery.ddslick.min.js  7156 2015-04-02 17:33:46  f0dc534351e239e07d258adcde7a63cd
    File appears in 1192 kits  and under 2 different file names
Responses/mgs/es/Google_docs_files/jquery.min.js   94843 2015-04-02 17:33:48  a13f7f208ba534681deadb1ec7a2e54a
    File appears in 1133 kits  and under 2 different file names
Responses/mgs/es/Google_docs_files/live_hotmail.png   517 2015-04-02 17:33:48  8dccdb0f930ec8ff6c62dd13474fa9f4
    File appears in 1263 kits  and under 3 different file names
Responses/mgs/es/Google_docs_files/logo_2x.png      9005 2015-04-02 17:33:48  b136662d529f0d1dd780056d7a6ff186
    File appears in 1292 kits  and under 5 different file names
Responses/mgs/es/Google_docs_files/logo_strip.png  26647 2015-04-02 17:33:48  a6dd956e0a1b11991ac93335bbf4b4cc
    File appears in 1117 kits  and under 2 different file names
Responses/mgs/es/Google_docs_files/logo_strip_2x.png 11156 2015-04-02 17:33:48  384a868cf5a995d033c4ac6e30c60355
    File appears in 1288 kits  and under 5 different file names
Responses/mgs/es/Google_docs_files/mail_gmail.png   1528 2015-04-02 17:33:48  5d2f329d5813e9ad215d0117610a58c5
    File appears in 1263 kits  and under 3 different file names
Responses/mgs/es/Google_docs_files/Thumbs.db       80896 2015-04-02 17:33:48  33c9311b8a554cff717e041a8e42c6e3
    File appears in 709 kits
Responses/mgs/es/Google_docs_files/universal_language_settings-21.png   199 2015-04-02 17:33:48  4a2d1168a691747daf4d22e0dc483958
    File appears in 1437 kits  and under 2 different file names
Responses/mgs/es/Google_docs_files/x_8px.png         154 2015-04-02 17:33:48  4e3d78afc1958e6e12226cbf27f236bd
    File appears in 1168 kits  and under 2 different file names
Responses/mgs/es/Google_docs_files/yahoo.png        2830 2015-04-02 17:33:48  fda2a0cac8b16568eed32edbc85b5db8
    File appears in 1264 kits  and under 3 different file names
Responses/mgs/es/Google_docs_files/_notes/dwsync.xml  2133 2015-04-02 17:33:48  368e28b664e21e90732382469113dde0
    File appears in 908 kits  and under 2 different file names
Responses/mgs/es/index.php                         37694 2017-10-23 08:50:24  639812b5898e47bd5f24d4f00a1342db
Responses/mgs/es/SpryAssets/SpryValidationPassword.css  2426 2015-04-02 17:33:48  97faad16686bef5246d0953311bffdc8
    File appears in 1143 kits
Responses/mgs/es/SpryAssets/SpryValidationPassword.js 20828 2015-04-02 17:33:48  d6be38fb42c2e9618c9d5f2664078c19
    File appears in 1136 kits
Responses/mgs/es/SpryAssets/SpryValidationTextField.css  3122 2015-04-02 17:33:48  997fda9f352033c20b5fbb8fc361537c
    File appears in 1148 kits
Responses/mgs/es/SpryAssets/SpryValidationTextField.js 77624 2015-04-02 17:33:48  7947cb5a92373e747f786adfe1d49356
    File appears in 1133 kits
Responses/mgs/es/verification.php                  52839 2017-10-23 08:50:56  598103b14d4b13d344b03bcc68fac671

2 Email addresses found:
    gp_support@geoplugin.com (appears in 1240 kits)
    beveryestate@gmail.com



https://texasmalwareblog.blogspot.com   @phish_total