MICROSOFT phish running on luzevarela[.]com

Found: 2018-03-19 09:19:15.840000
URL: https://www.luzevarela.com/office365.zip
File: www.luzevarela.com-foo-office365.zip
Domain: luzevarela.com
Target: MICROSOFT
Name                                               Size Date                 MD5                                office365/geoplugin.class.php                       5240 2018-03-05 06:12:14  855843d9cb173722e425fa36a67fa6d9
    File appears in 4 kits
office365/index.htm                                13230 2018-03-05 06:58:24  5410be2213d8b77548eefe8302637561
office365/index_files/bannerlogo.png                4585 2018-03-05 06:12:14  9f09a27d4f69b3557c7433574a29d726
    File appears in 114 kits  and under 5 different file names
office365/index_files/heroillustration.png         203294 2018-03-05 06:12:14  65283b123eb235e6176ae98c02ac5b1c
    File appears in 217 kits  and under 6 different file names
office365/index_files/login.min.css                21678 2018-03-05 06:12:14  1a358605d8297b8c02f856f89bc7bae7
    File appears in 4 kits
office365/index_files/microsoft_logo.png            1040 2018-03-05 06:12:14  e4b675007dc6492ee590131d1f7dfbb3
    File appears in 74 kits  and under 2 different file names
office365/office.php                                 779 2018-03-05 06:12:14  1ef6ec1327d7ec4e8b2a1b558a85e338

3 Email addresses found:
    gp_support@geoplugin.com (appears in 1175 kits)
    krandelwill513@gmail.com
    toolz@daddamgo.lite (appears in 3 kits)



https://texasmalwareblog.blogspot.com   @phish_total