WEBMAIL phish running on supplementdepot.com.au

Found: 2017-11-26 20:15:15.955000
URL: http://supplementdepot.com.au/china.zip
File: supplementdepot.com.au-foo-china.zip
Domain: supplementdepot.com.au
Target: WEBMAIL
Name                                               Size Date                 MD5                                china/china/auth.php                                1062 2017-07-25 01:16:28  d31cd7c3df59a95a2aa101d8cf10d387
    File appears in 2 kits
china/china/geoplugin.class.php                     4493 2012-12-31 06:25:56  1e63694db090c37403b39236526ce9dd
    File appears in 73 kits
china/china/hellion/logos.png                      41796 2015-11-19 18:18:46  da29b5868f74377ff10b5893685cf643
    File appears in 35 kits
china/china/hellion/postmaster.png                  5496 2015-11-19 18:18:46  c1ead276fc29903252146f2d6e90beae
    File appears in 35 kits
china/china/hellion/Thumbs.db                      11264 2016-11-13 23:37:54  832925e864b199eb8f612b1ebac41669
    File appears in 29 kits
china/china/index.php                               4154 2015-11-19 18:37:56  f613ce90b8aa73369439fcd308b5f305
    File appears in 34 kits

2 Email addresses found:
    bloodmoni666@gmail.com (appears in 2 kits)
    gp_support@geoplugin.com (appears in 976 kits)



https://texasmalwareblog.blogspot.com   @phish_total