YAHOO! phish running on 000webhostapp[.]com

Found: 2018-04-15 18:15:07.798000
URL: http://infomas11.000webhostapp.com/bri/Validation.zip
File: infomas11.000webhostapp.com-bri-Validation.zip
Domain: 000webhostapp.com
Target: YAHOO!
Name                                               Size Date                 MD5                                Validation/action.php                               1220 2018-03-05 19:28:30  6e63e8fb02b27acde822f7fb52a85484

Validation/error_log                                 298 2017-11-28 16:07:10  1ae238fc571c7b9a0cfaaf698e2f83f3
    File appears in 5 kits
Validation/images/100Secure.jpg                     4687 2017-03-09 15:37:34  2e6a7c17a90b17b5ff2019543193b4e9
    File appears in 71 kits
Validation/images/pdf-logo.png                     31580 2017-03-09 15:37:30  2c9a9eb978ff3a4a4f208b2c45739fd3
    File appears in 57 kits  and under 3 different file names
Validation/images/download.png                      2079 2017-03-09 15:37:40  060e9d726f9bb555eb94f15474b6fd65
    File appears in 16 kits
Validation/images/email-logo.png                   16053 2017-03-09 15:37:56  8922f8c4f3b73b259c84ee57c2dec1ee
    File appears in 16 kits
Validation/images/yahoo-logo.png                   12787 2017-03-09 15:37:52  c2bddd4e69aba81bcf138fa9028df5fb
    File appears in 16 kits
Validation/images/bg.jpg                           74994 2017-03-09 15:36:44  7fdfda117955a2a410a2aed86a67561f
    File appears in 72 kits  and under 5 different file names
Validation/images/smallpdf.png                      1289 2017-03-09 15:36:58  36d154a5b0ae2dc816507a317b1494b3
    File appears in 56 kits  and under 2 different file names
Validation/images/AOL_Eraser.svg.png                9929 2017-03-09 15:37:38  5e8a910616b6d430b573d9a9b7f7fb80
    File appears in 16 kits
Validation/images/webmail-logo.gif                  6210 2017-03-09 15:37:50  1cd4efa81de96d9776b7cdb887745acf
    File appears in 16 kits
Validation/images/outlook-logo.jpg                 14024 2017-03-09 15:37:46  8b09deab09d58e1261bbb6cbc5e89559
    File appears in 16 kits
Validation/login.php                               15348 2017-03-09 15:49:24  593afa8856059116f9440edbf86af5a3
    File appears in 7 kits  and under 2 different file names
Validation/robots.txt                               1337 2016-08-06 17:33:48  ba613657ddd17df5e61d5571b9c9d681
    File appears in 117 kits
Validation/geoplugin.class.php                      4647 2015-12-28 11:23:18  c8ea1e960b48a620c00bc65d525a721c
    File appears in 1274 kits  and under 3 different file names
Validation/ver.pdf.html                             2248 2017-02-06 15:33:14  486ccd00d2b6a6887363c25033613d3a
    File appears in 23 kits
Validation/index.php                                 144 2016-03-10 12:42:26  0526c242a1f7b6117202fe21d47e31b1
    File appears in 175 kits  and under 4 different file names
Validation/PO.pdf                                  90057 2017-11-28 16:02:10  b0731101fa058860ef85ac363a64ad1d
    File appears in 5 kits
Validation/phone.php                                1454 2018-03-21 21:28:56  3e9d64de1e25d604ba8f870e33836480

robots.txt                                          1337 2016-08-07 06:33:48  ba613657ddd17df5e61d5571b9c9d681
    File appears in 117 kits
blocker.php                                         2672 2016-06-11 01:45:36  2447910e0f2a74a6bb975b7b61fdb441
    File appears in 88 kits  and under 3 different file names
index.php                                            656 2016-06-11 01:45:36  1b533a46542efd3f4172f2566e11000b
    File appears in 79 kits
result email.txt                                     111 2017-05-28 23:56:38  8d3d6a5c2651af7a35680f36f0b577fd
    File appears in 5 kits

2 Email addresses found:
    joembright4@gmail.com
    gp_support@geoplugin.com (appears in 1214 kits)



https://texasmalwareblog.blogspot.com   @phish_total