ZIMBRA phish ** running on 000webhostapp[.]com

Found: 2018-05-15 22:15:39.878000
URL: http://ameritasinsurance.000webhostapp.com/work.zip
File: ameritasinsurance.000webhostapp.com-foo-work.zip
Domain: 000webhostapp.com
Target: ZIMBRA
Name                                               Size Date                 MD5                                work/madmails/back.php                               584 2018-04-09 16:02:36  a02c8d4306c9e83b3d2b980730efb8f6
work/madmails/error_log                            13736 2018-04-08 13:08:18  e2c65b0334b3a78b64be357cbc042435
work/madmails/head.png                               852 2018-04-08 13:08:18  8475e73daa5621575edf78285afc779f
work/madmails/html.php                              1430 2018-04-09 16:52:24  90000f7f21a8c91b38d7776e0c655049
work/madmails/html2.php                             1103 2018-04-09 16:49:16  f16b3ec6b7411ee028fb7b29bcc16ea8
work/madmails/index.php                              645 2018-04-09 15:49:06  65d8e819b157157812c724cf244e4b2a
work/madmails/mailer.png                           22360 2018-04-09 15:22:38  7a45c9db002920609379a7280fb03944
work/madmails/plain.php                              820 2018-04-09 15:39:32  f26d4bbb7e8b2a50936fac131fd71192
work/madmails/untitleds.png                        120190 2018-04-09 14:48:12  f393725ef65bbe77fa5cc61a6a25ed99
work/wordonline/ba.png                              1704 2018-03-28 17:28:34  77ac030861649ff2d52fcff94a4b7701
work/wordonline/error_log                           1337 2018-03-28 17:28:36  00307eaa1d995c4ff6c15c7b23462ba0
work/wordonline/foot.png                            6313 2018-03-29 08:08:22  700ac4d4e1106949f51be4296a2814cd
work/wordonline/head.png                            3078 2018-03-28 17:28:34  228fe12794f364e3faf0ac0f999ae0e2
work/wordonline/incase.php                          1423 2018-03-28 17:28:34  60966c66cf9de2b64db27f629cc3355f
work/wordonline/index.php                           8284 2018-04-07 11:09:50  ecfb69648123bbff927db0463161c046
work/wordonline/profile.png                         1173 2018-03-28 17:28:36  1d00d597ad24e07569404abae4e404ad
work/wordonline/untitled.png                       33230 2018-03-28 17:28:34  f6598dc0cd14e6844e898c5864abf154
work/wordonline/untitleds.png                      130085 2018-04-07 11:05:18  b4717219d5e88cab687479964c62848b
work/wordonline/Y3.php                               839 2018-03-28 17:30:44  7885ee14f5cd3b2ab9452f9d6a5b791e
work/wordonline/Y4.php                               838 2018-03-28 17:30:44  13e163ef79c1438b0a4e0014ea4b5046

14 Email addresses found:
    man@gmail.com
    webmaster@example.com (appears in 16 kits)
    weeebmaster@example.com
    manfrom@gmail.com
    'webmaster@example.com
    'johny@example.com
    sally@example.com
    mary@example.com
    kelly@example.com
    birthday@example.com
    birthdayarchive@example.com
    birthdaycheck@example.com
    echeta@gmail.com
    davidechettt@gmail.com



https://texasmalwareblog.blogspot.com   @phish_total