Advertisement
PhishTotal

WELLS FARGO phish running on pousadaventosul.com

Oct 19th, 2017
555
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 4.85 KB | None | 0 0
  1. Found: 2017-10-19 11:15:59.001000
  2. URL: http://pousadaventosul.com/Wellsfsago.zip
  3. File: pousadaventosul.com-foo-Wellsfsago.zip
  4. Domain: pousadaventosul.com
  5. Target: WELLS FARGO
  6. Name Size Date MD5 Wellsfsago/images/canc.png 1417 2017-08-02 20:46:22 8152d7e42a57c764f750e86b2b827f9e
  7. Wellsfsago/images/confirm.png 1238 2017-08-02 20:46:22 a57209d7b292eb6b9a52f3dce25ccc71
  8. Wellsfsago/images/favicon.ico 1078 2017-08-02 20:46:22 24e461019c9c8e9701d55f8408cde993
  9. File appears in 14 kits and under 2 different file names
  10. Wellsfsago/images/logo.png 2440 2017-08-02 20:46:22 2b77a8dc547c82d3aac77ada2e39bbe2
  11. Wellsfsago/images/s1.png 13672 2017-08-02 20:46:22 b6dc7c07f0c33c8b6605791df0b9db64
  12. Wellsfsago/images/s10.png 11974 2017-08-02 20:46:22 2cd5539524addfd3207cbfb99b1b55f7
  13. Wellsfsago/images/s11.png 1429 2017-08-02 20:46:22 fcc294af3b4969bc70e5a11a16a282e5
  14. Wellsfsago/images/s12.png 2617 2017-08-02 20:46:22 6b6e8d5e2855a8380b1d26543e608636
  15. Wellsfsago/images/s4.png 180386 2017-08-02 20:46:22 b3eb9085923e5a3df50615e68db5e00f
  16. Wellsfsago/images/s42.png 134708 2017-08-02 20:46:22 8670592c5c98d11f032451d58487a9e1
  17. Wellsfsago/images/s43.png 14990 2017-08-02 20:46:24 8e0d8d02b68cbc508b7b11a3a337de5a
  18. Wellsfsago/images/s5.png 369096 2017-08-02 20:46:24 e24579b0c239dfd3f38aaf74f68f90e5
  19. Wellsfsago/images/s6.png 434632 2017-08-02 20:46:24 a4fc2b11149664573d109eb3863be9e2
  20. Wellsfsago/images/s7.png 465206 2017-08-02 20:46:24 c5ffdda8f13c3ece496230ea1d16a055
  21. Wellsfsago/images/s8.png 31379 2017-08-02 20:46:24 aa3e1c89d61f0fe23171f8b1c6468ec5
  22. Wellsfsago/images/s9.png 27072 2017-08-02 20:46:24 3e88a7b7bc0d77b36a036c58d3a3b509
  23. Wellsfsago/images/secu.png 907 2017-08-02 20:46:24 f37e12eb200d3301d5ee6e16275f6550
  24. Wellsfsago/images/ssign.png 1136 2017-08-02 20:46:24 4f71142d3339de68a99bda1b2a06e103
  25. Wellsfsago/images/wf.gif 45034 2017-08-02 20:46:24 56f2a72f82d98a724835cd275ac2d0bf
  26. Wellsfsago/images/wf17.png 265 2017-08-02 20:46:24 fd54ad94c29d6047cbcaed26326061c6
  27. Wellsfsago/images/wf18.png 5346 2017-08-02 20:46:24 8b5c62f7e3992f1cddd2aa082ff18d85
  28. Wellsfsago/images/wf19.png 1158 2017-08-02 20:46:24 be0f53c2a79ea7f3f74812b399b342e9
  29. Wellsfsago/images/wf20.png 3350 2017-08-02 20:46:24 4fcfc121efb08faf46de689b45221c6a
  30. Wellsfsago/images/wf21.png 1287 2017-08-02 20:46:24 909ac8aac8490e9719bd2cad173fcb1c
  31. Wellsfsago/images/wf22.png 274 2017-08-02 20:46:24 2c92fc9c7305b8b239325f385d967652
  32. Wellsfsago/images/wf25.png 4400 2017-08-02 20:46:24 03b34be17fd91501ee745af451027248
  33. Wellsfsago/images/ws2.png 3348 2017-08-02 20:46:24 e5a8748710297c859ee0735a62d2f26b
  34. Wellsfsago/images/ws3.png 2735 2017-08-02 20:46:24 add4bbdc21c853b66a8a02f3121317fe
  35. Wellsfsago/images/ws4.png 6413 2017-08-02 20:46:24 22098d5f0e5ac80bbf942ee11cf251ce
  36. Wellsfsago/images/ws5.png 5583 2017-08-02 20:46:24 c4c4212c473ef96d70e2ad8c32915f31
  37. Wellsfsago/images/ws7.png 1093 2017-08-02 20:46:24 8ff169aa388021cb4e50a2123899d169
  38. Wellsfsago/images/z5.png 5632 2017-08-02 20:46:24 de03eec2916d4f776108e12084247701
  39. Wellsfsago/index.php 144 2017-08-02 20:46:24 0526c242a1f7b6117202fe21d47e31b1
  40. File appears in 99 kits and under 4 different file names
  41. Wellsfsago/login.php 8292 2017-08-02 20:46:24 06b5ee8c676b13d865290c4c7b8e313c
  42. Wellsfsago/next1.php 1445 2017-10-08 07:57:34 20b4c3e7bed720d5b2bea2b641c276c4
  43. Wellsfsago/next2.php 1902 2017-10-08 07:58:04 14ab03b4d76ed1c27890cb5029d63d59
  44. Wellsfsago/step2.php 7236 2017-08-02 20:46:22 cd266f45dbd8d601a225300fda27d8bc
  45. Wellsfsago/step3.php 2425 2017-08-02 20:46:22 5bdf2d5110de091a45ad2022b3caad53
  46.  
  47. 3 Email addresses found:
  48. gwenabiolaoffice@gmail.com
  49. aquilty.lake@aol.com
  50. supertool@mxtoolbox.com (appears in 33 kits)
  51.  
  52.  
  53.  
  54. texasmalwareblog.blogspot.com @phish_total
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement