GOOGLE phish running on cvexamples[.]net

Found: 2018-05-05 04:15:47.737000
URL: http://www.cvexamples.net/images/gmass.zip
File: www.cvexamples.net-images-gmass.zip
Domain: cvexamples.net
Target: GOOGLE
Name                                               Size Date                 MD5                                gmass/gmass/images/creat.png                        1037 2015-07-17 01:45:14  43a5717fbe62207e31c426a9e1825381
    File appears in 27 kits
gmass/gmass/images/favicon.ico                      5430 2014-03-19 08:23:48  a300693728f5caa531a6886d9b8f38c2
    File appears in 201 kits  and under 2 different file names
gmass/gmass/images/footer.png                       3628 2015-07-17 02:30:44  187708cbb9277c7bb3f88049c0311295
    File appears in 26 kits
gmass/gmass/images/forgo.png                        1214 2015-07-17 01:46:10  5476c3348a2b8883e78d30fdfd055344
    File appears in 26 kits
gmass/gmass/images/help.png                          852 2015-07-17 01:45:04  bd0e201ac95e800a905aa291108364ac
    File appears in 27 kits
gmass/gmass/images/new.png                          1698 2015-07-17 01:46:16  bfcb4509b218b56bd87d768fd51a1d7b
    File appears in 26 kits
gmass/gmass/images/next.png                         1323 2015-07-17 01:44:54  ed946599b9b87787bc147125da717d39
    File appears in 27 kits
gmass/gmass/images/pp.png                          31081 2015-07-17 02:41:06  0879c79fdec75dbdaeabc6d1c73c0fc2
    File appears in 21 kits
gmass/gmass/images/pp2.png                         34860 2015-07-17 02:48:06  08be63830d0bec10381c0bfe5e86fa3a
    File appears in 21 kits
gmass/gmass/images/signin.png                       1383 2015-07-17 01:50:58  092a5361709d25e0fe1902070cc0e8c5
    File appears in 26 kits
gmass/gmass/images/Thumbs.db                       41472 2015-10-09 22:07:08  15f12656673cd25efc0fc34458ebc272
    File appears in 6 kits
gmass/gmass/index.php                               2386 2015-07-16 18:22:18  2649097264180ed8bef001e0e067fe05
    File appears in 13 kits
gmass/gmass/login2.php                              2773 2016-05-02 17:39:00  71c8c4662033b964892ec31f101eff0d
    File appears in 5 kits
gmass/gmass/verification.php                       50083 2016-05-01 02:56:54  5a6cf88eae8655f6a8f786537b89af23
    File appears in 14 kits
gmass/gmass/mailer.php                              1290 2017-03-01 08:12:38  69bbd9de1a2f15153987b0a2f22f0a30
gmass/gmass/phone.php                               1778 2017-03-01 08:13:08  d8c81c7dd6eea3d70e347d7c9f3f5ec2

2 Email addresses found:
    fabcollins2000@gmail.com
    wirez@googledocs.org (appears in 180 kits)



https://texasmalwareblog.blogspot.com   @phish_total