PhishTotal

PAYPAL phish running on ixxi[.]com[.]mx

Feb 25th, 2018
116
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 17.28 KB | None | 0 0
  1. Found: 2018-02-23 19:17:39.963000
  2. URL: http://www.ixxi.com.mx/log-in.zip
  3. File: www.ixxi.com.mx-foo-log-in.zip
  4. Domain: ixxi.com.mx
  5. Target: PAYPAL
  6. Name Size Date MD5 log-in/index.php 762 2017-12-17 09:11:20 b6ee0d0bd37bd214086d2c9ffe86cc0c
  7. log-in/Log-in/index.php 1449 2017-12-22 18:01:58 d42c05421f338e5e777d86a8b19c06d9
  8. log-in/Log-in/PreDaT0rs/billing/.htaccess 189204 2016-09-04 13:12:44 65c6944ffcf2e8760f78cad65f04b233
  9. File appears in 98 kits and under 2 different file names
  10. log-in/Log-in/PreDaT0rs/billing/antibots.txt 2 2017-12-22 20:47:34 d3d9446802a44259755d38e6d163e820
  11. log-in/Log-in/PreDaT0rs/billing/billing.php 5434 2017-12-19 15:36:30 143b8270e7fc8b1cef1b7660324473cb
  12. log-in/Log-in/PreDaT0rs/billing/htaccess 189204 2016-09-04 13:12:44 65c6944ffcf2e8760f78cad65f04b233
  13. File appears in 98 kits and under 2 different file names
  14. log-in/Log-in/PreDaT0rs/billing/index.php 19709 2017-12-22 18:06:06 a1590ce5b9ec046fe32861643df2b94c
  15. log-in/Log-in/PreDaT0rs/bin.php 1264 2017-12-17 11:09:08 a9a6c38cb09ae16b377654e8cd5d185a
  16. log-in/Log-in/PreDaT0rs/br.php 2649 2017-12-17 12:59:42 4187980aa7c196387586dee3a3c708e9
  17. log-in/Log-in/PreDaT0rs/css/.htaccess 189204 2016-09-04 13:12:42 65c6944ffcf2e8760f78cad65f04b233
  18. File appears in 98 kits and under 2 different file names
  19. log-in/Log-in/PreDaT0rs/css/font/festivo1.ttf 90644 2016-11-21 18:15:02 1a0f7ebfc2006ffb14491760c8aa6948
  20. File appears in 52 kits
  21. log-in/Log-in/PreDaT0rs/css/font/PayPalSansBig-Light.eot 40456 2016-06-09 03:50:06 718897bd12618125e8f80d319f4fce26
  22. File appears in 54 kits
  23. log-in/Log-in/PreDaT0rs/css/font/PayPalSansBig-Light.svg 130681 2016-06-09 03:50:06 3390651ad869cc14f4a05a29f3e43bbc
  24. File appears in 54 kits
  25. log-in/Log-in/PreDaT0rs/css/font/PayPalSansBig-Light.woff 49115 2016-06-09 03:50:06 9b30a5d13a607998309ce52576d68fce
  26. File appears in 55 kits
  27. log-in/Log-in/PreDaT0rs/css/font/PayPalSansBig-Light.woff2 38225 2016-06-09 03:50:06 1975c6ce3555a3ba4fdcc61a696edd87
  28. File appears in 54 kits
  29. log-in/Log-in/PreDaT0rs/css/font/PayPalSansBig-Regular.eot 41544 2016-06-09 03:50:06 e9995a1815fe08faa1bbf6e7125458b2
  30. File appears in 57 kits
  31. log-in/Log-in/PreDaT0rs/css/font/PayPalSansBig-Regular.svg 130350 2016-06-09 03:50:06 23d474a69f3afe167847b56cf869d9ec
  32. File appears in 57 kits
  33. log-in/Log-in/PreDaT0rs/css/font/PayPalSansBig-Regular.woff 50031 2016-06-09 03:50:06 b6f9a8c635a6647877ebcbbac9ff02f0
  34. File appears in 57 kits
  35. log-in/Log-in/PreDaT0rs/css/font/PayPalSansBig-Regular.woff2 39021 2016-06-09 03:50:06 d0a5bb7474c5ba21d9421664de706740
  36. File appears in 57 kits
  37. log-in/Log-in/PreDaT0rs/css/font/PayPalSansSmall-Regular.eot 39163 2016-11-21 18:14:30 0fd6a3df3c9fd39e2005d50d1a47b1d3
  38. File appears in 54 kits
  39. log-in/Log-in/PreDaT0rs/css/font/PayPalSansSmall-Regular.svg 125058 2016-11-21 18:15:20 345b22864617e24360fcfd49641504a2
  40. File appears in 54 kits
  41. log-in/Log-in/PreDaT0rs/css/font/PayPalSansSmall-Regular.woff 47339 2016-11-21 18:14:54 20f0f192de040edc17e47e61752e142f
  42. File appears in 61 kits and under 2 different file names
  43. log-in/Log-in/PreDaT0rs/css/htaccess 189204 2016-09-04 13:12:42 65c6944ffcf2e8760f78cad65f04b233
  44. File appears in 98 kits and under 2 different file names
  45. log-in/Log-in/PreDaT0rs/css/w0lf-B.css 3128 2017-12-17 10:25:40 b48276a5727d504fdd586e5645b7927c
  46. log-in/Log-in/PreDaT0rs/css/w0lf-G.css 50797 2017-12-22 17:30:44 e7017c00a073bab97069d8194b17b1af
  47. log-in/Log-in/PreDaT0rs/css/w0lf-L.css 13099 2017-12-17 12:56:50 85c1ae55ed4046c6ce604f63738456e6
  48. log-in/Log-in/PreDaT0rs/en.php 3630 2017-12-22 20:46:52 dd88d220140b0e4ce01a89bf32f12906
  49. log-in/Log-in/PreDaT0rs/identity/.htaccess 189204 2016-09-04 13:12:44 65c6944ffcf2e8760f78cad65f04b233
  50. File appears in 98 kits and under 2 different file names
  51. log-in/Log-in/PreDaT0rs/identity/antibots.txt 1 2017-12-22 20:49:44 c9f0f895fb98ab9159f51fd0297e236d
  52. File appears in 3 kits and under 2 different file names
  53. log-in/Log-in/PreDaT0rs/identity/htaccess 189204 2016-09-04 13:12:44 65c6944ffcf2e8760f78cad65f04b233
  54. File appears in 98 kits and under 2 different file names
  55. log-in/Log-in/PreDaT0rs/identity/index.php 14275 2017-12-22 17:57:14 2992904b3eae0eeffa3b62661813be24
  56. log-in/Log-in/PreDaT0rs/identity/robots.txt 60 2016-11-21 12:41:52 4b43bb5b7a188000d19de3e3fbe935dd
  57. File appears in 54 kits
  58. log-in/Log-in/PreDaT0rs/img/alert.png 1691 2017-01-08 18:53:12 effd941d69e64389fc9c2a71123123c3
  59. File appears in 81 kits
  60. log-in/Log-in/PreDaT0rs/img/apple-touch-icon.png 2565 2016-09-04 13:12:42 b904e8b4f75ccacfb0f284fc037153d0
  61. File appears in 131 kits and under 4 different file names
  62. log-in/Log-in/PreDaT0rs/img/done.png 4348 2016-08-02 08:31:34 2cef79bc438b8ee629469267bf7132ee
  63. File appears in 58 kits
  64. log-in/Log-in/PreDaT0rs/img/error.png 1132 2016-09-04 13:12:42 e41a3214d88b0327ecfb030fdedf2f39
  65. File appears in 123 kits and under 2 different file names
  66. log-in/Log-in/PreDaT0rs/img/favicon.ico 5430 2016-09-04 13:12:42 e1528b5176081f0ed963ec8397bc8fd3
  67. File appears in 225 kits and under 13 different file names
  68. log-in/Log-in/PreDaT0rs/img/image_bank_logos_usca_2x.png 120099 2016-09-04 13:12:42 da477cc03a51cf188185500f99b1ce7b
  69. File appears in 81 kits
  70. log-in/Log-in/PreDaT0rs/img/kl_h4aXX6987PO.svg 4945 2016-09-13 19:20:10 0d105318575ea6a4fc653aa8290a3410
  71. File appears in 135 kits and under 12 different file names
  72. log-in/Log-in/PreDaT0rs/img/onboarding_form.png 7399 2016-09-04 13:12:42 bbda9aa3cbb57ba2a98a55436e5112ba
  73. File appears in 91 kits and under 4 different file names
  74. log-in/Log-in/PreDaT0rs/img/pp114.png 3536 2016-09-04 13:12:42 4d7333c205b684add01de59bf36234ec
  75. File appears in 112 kits and under 3 different file names
  76. log-in/Log-in/PreDaT0rs/img/pp144.png 6647 2016-09-04 13:12:42 d7b2a94788b70bd6b015f339c452ff1c
  77. File appears in 111 kits and under 3 different file names
  78. log-in/Log-in/PreDaT0rs/img/pp72.png 2575 2016-09-04 13:12:42 6c36f8bd754ea0d7d71693b315130139
  79. File appears in 112 kits and under 3 different file names
  80. log-in/Log-in/PreDaT0rs/img/ppcom-white.svg 5189 2016-09-04 13:12:42 24f3c805019afa1d7926fe206a7dcab6
  81. File appears in 89 kits and under 4 different file names
  82. log-in/Log-in/PreDaT0rs/img/ppcom_monogram.svg 2700 2016-09-04 13:12:42 d97e652cc3c7750f5171fd371cbdab2c
  83. File appears in 108 kits
  84. log-in/Log-in/PreDaT0rs/img/sprites_cc_logos.png 24180 2016-09-04 13:12:42 0cc5525016888556c3fb82f2cdab246a
  85. File appears in 83 kits
  86. log-in/Log-in/PreDaT0rs/img/superbowlAsset.png 17618 2016-09-04 13:12:42 a8d89fafd1dea3ccb103e05b03ad4014
  87. File appears in 80 kits and under 2 different file names
  88. log-in/Log-in/PreDaT0rs/img/vv.gif 509 2016-09-04 13:12:42 96558bf66ed388fef4dc1385be54111e
  89. File appears in 114 kits and under 6 different file names
  90. log-in/Log-in/PreDaT0rs/img/x.jpg 162554 2017-12-22 17:33:14 467bee4b904edeb9dc8a64129c5cece0
  91. log-in/Log-in/PreDaT0rs/img/x9d8d78d.png 5461 2016-11-20 12:13:58 692f3d368729dc34ebe1b603d76c4c8a
  92. File appears in 59 kits and under 4 different file names
  93. log-in/Log-in/PreDaT0rs/index.php 196 2017-12-17 09:30:56 64d1ae76ba0928834d83dbe3deb78dd8
  94. log-in/Log-in/PreDaT0rs/ip.php 1384 2017-12-17 09:24:24 c4c97ee79c070e5f9bd359ca778cfdc3
  95. log-in/Log-in/PreDaT0rs/js/jquery.additional-methods.js 22253 2016-09-04 13:12:42 90ea2fdca7a2817e04c6f508fc70fc82
  96. File appears in 79 kits
  97. log-in/Log-in/PreDaT0rs/js/jquery.CardValidator.js 6367 2016-09-13 17:43:20 27c724fa448269f77118494361b0fc0c
  98. File appears in 54 kits
  99. log-in/Log-in/PreDaT0rs/js/jquery.js 86343 2016-09-04 13:12:42 1a0d5be2d25ff036a0e088e0ec0b3600
  100. File appears in 99 kits and under 2 different file names
  101. log-in/Log-in/PreDaT0rs/js/jquery.mask.js 18430 2016-09-04 13:12:42 219d169a80568884a3d6baab3e5e7def
  102. File appears in 79 kits
  103. log-in/Log-in/PreDaT0rs/js/jquery.v-form.js 6883 2017-12-19 21:58:16 f8484b20d303a6f7efad1b1b8472435a
  104. log-in/Log-in/PreDaT0rs/js/jquery.validate.js 46267 2016-09-04 13:12:44 17836a76e9a044bc7dad83f6dcef42ef
  105. File appears in 78 kits
  106. log-in/Log-in/PreDaT0rs/Log-in/.htaccess 189204 2016-09-04 13:12:44 65c6944ffcf2e8760f78cad65f04b233
  107. File appears in 98 kits and under 2 different file names
  108. log-in/Log-in/PreDaT0rs/Log-in/antibots.txt 1 2017-12-22 20:30:48 8f14e45fceea167a5a36dedd4bea2543
  109. log-in/Log-in/PreDaT0rs/Log-in/htaccess 189204 2016-09-04 13:12:44 65c6944ffcf2e8760f78cad65f04b233
  110. File appears in 98 kits and under 2 different file names
  111. log-in/Log-in/PreDaT0rs/Log-in/index.php 11421 2017-12-22 18:05:26 7db0de61b9ae0e0a95d14dbc6cd43dbf
  112. log-in/Log-in/PreDaT0rs/Log-in/signin.php 2769 2017-12-17 13:51:12 9aa23a4bad35544b3a2f178892d0013c
  113. log-in/Log-in/PreDaT0rs/Pre/14303695_853354554765349_388275294_o.jpg 136638 2016-09-09 16:48:06 df44ed3b8021e31b7c3b1fb0ac0a29b5
  114. File appears in 54 kits
  115. log-in/Log-in/PreDaT0rs/Pre/badge-512.png 25847 2016-09-08 17:37:28 4221cde76c85ce6395dbe56f60db5de9
  116. File appears in 54 kits
  117. log-in/Log-in/PreDaT0rs/Pre/boa.png 30770 2016-09-04 13:12:42 1d059c3ef2d3998ca1e1e371e0c29fda
  118. File appears in 54 kits
  119. log-in/Log-in/PreDaT0rs/Pre/jquery-filer-preview.html 108776 2016-08-29 06:10:22 2d0cc4c12f9e3121066dec44d3afd3eb
  120. File appears in 87 kits
  121. log-in/Log-in/PreDaT0rs/Pre/jquery.filer.js 57072 2016-09-08 17:45:16 b2d612a3c2781d437010792d613f23d3
  122. File appears in 54 kits
  123. log-in/Log-in/PreDaT0rs/Pre/mastercard-securecode.png 5389 2016-11-19 12:38:40 d93d586671fd95ee5cfe74da2a909484
  124. File appears in 59 kits and under 2 different file names
  125. log-in/Log-in/PreDaT0rs/Pre/PayPalSansBig-Regular.eot 41544 2016-06-09 03:50:06 e9995a1815fe08faa1bbf6e7125458b2
  126. File appears in 57 kits
  127. log-in/Log-in/PreDaT0rs/Pre/PayPalSansBig-Regular.svg 130350 2016-06-09 03:50:06 23d474a69f3afe167847b56cf869d9ec
  128. File appears in 57 kits
  129. log-in/Log-in/PreDaT0rs/Pre/PayPalSansBig-Regular.woff 50031 2016-06-09 03:50:06 b6f9a8c635a6647877ebcbbac9ff02f0
  130. File appears in 57 kits
  131. log-in/Log-in/PreDaT0rs/Pre/PayPalSansBig-Regular.woff2 39021 2016-06-09 03:50:06 d0a5bb7474c5ba21d9421664de706740
  132. File appears in 57 kits
  133. log-in/Log-in/PreDaT0rs/Pre/processing.gif 610 2016-07-25 04:07:52 cace57d0915ae24bdf8184a5edf22994
  134. File appears in 59 kits
  135. log-in/Log-in/PreDaT0rs/Pre/ssl.png 1838 2016-11-19 12:38:40 227dcefeb192376049e56687f521c4f2
  136. File appears in 59 kits
  137. log-in/Log-in/PreDaT0rs/Pre/T_w0lf.css 6376 2016-11-20 14:15:44 72ef3f99e4134c5dcabb5db11ce6ff9d
  138. File appears in 54 kits
  139. log-in/Log-in/PreDaT0rs/Pre/U1-w0lf.css 27925 2017-12-17 21:18:50 ecc0d2aa3ab411b6c32821d2676ca617
  140. log-in/Log-in/PreDaT0rs/Pre/U2-w0lf.eot 9506 2016-08-29 06:10:22 4f0b417eb04822edda87c3f3d778c9e7
  141. File appears in 89 kits and under 2 different file names
  142. log-in/Log-in/PreDaT0rs/Pre/U2-w0lf.svg 47259 2016-08-29 06:10:22 12d306fd8dcce22800bc17d8b0be32d8
  143. File appears in 89 kits and under 2 different file names
  144. log-in/Log-in/PreDaT0rs/Pre/U2-w0lf.ttf 9316 2016-08-29 06:10:22 8c4ccbb23626fc1567cf06f8d14d8d93
  145. File appears in 89 kits and under 2 different file names
  146. log-in/Log-in/PreDaT0rs/Pre/U2-w0lf.woff 5692 2016-08-29 06:10:22 d3ef8d92a120e4e68413fcbf84ee106a
  147. File appears in 89 kits and under 2 different file names
  148. log-in/Log-in/PreDaT0rs/Pre/V-w0lf.js 4478 2017-01-09 15:07:12 acb1c1df7525be06369fa43a8ff092b5
  149. File appears in 36 kits
  150. log-in/Log-in/PreDaT0rs/Pre/verified-by-visa.png 4790 2016-07-25 08:51:48 137213c10bddd59b2a0e6d8807663e30
  151. File appears in 57 kits and under 2 different file names
  152. log-in/Log-in/PreDaT0rs/Pre/V_w0lf.css 5672 2016-12-10 13:26:16 1dcf4e3f310ccc272a844c1bde780e1a
  153. File appears in 36 kits
  154. log-in/Log-in/PreDaT0rs/security/.htaccess 189204 2016-09-04 13:12:44 65c6944ffcf2e8760f78cad65f04b233
  155. File appears in 98 kits and under 2 different file names
  156. log-in/Log-in/PreDaT0rs/security/antibots.txt 1 2017-12-22 20:49:16 1679091c5a880faf6fb5e6087eb1b2dc
  157.  
  158. log-in/Log-in/PreDaT0rs/security/htaccess 189204 2016-09-04 13:12:44 65c6944ffcf2e8760f78cad65f04b233
  159. File appears in 98 kits and under 2 different file names
  160. log-in/Log-in/PreDaT0rs/security/index.php 7800 2017-12-22 18:04:14 44b8af653c96956b823fb2236d3fc52c
  161. log-in/Log-in/PreDaT0rs/security/VBV.php 6585 2017-12-21 18:56:22 d46d86f70d3e21c9e4e9c034541b4940
  162. log-in/Log-in/PreDaT0rs/success/.htaccess 189204 2016-09-04 13:12:44 65c6944ffcf2e8760f78cad65f04b233
  163. File appears in 98 kits and under 2 different file names
  164. log-in/Log-in/PreDaT0rs/success/antibots.txt 1 2017-12-22 18:16:24 c4ca4238a0b923820dcc509a6f75849b
  165. File appears in 6 kits and under 2 different file names
  166. log-in/Log-in/PreDaT0rs/success/htaccess 189204 2016-09-04 13:12:44 65c6944ffcf2e8760f78cad65f04b233
  167. File appears in 98 kits and under 2 different file names
  168. log-in/Log-in/PreDaT0rs/success/icons/.htaccess 1895 2016-09-04 13:12:42 7f1f57a444da66ebcb762ec0075ea86b
  169. File appears in 203 kits and under 2 different file names
  170. log-in/Log-in/PreDaT0rs/success/icons/ae.png 2281 2016-09-04 13:12:42 4d367c5b13c1236fc48d424beebf775e
  171. File appears in 104 kits
  172. log-in/Log-in/PreDaT0rs/success/icons/d.png 1555 2016-09-04 13:12:42 86365812f3a6f868714800f80af89128
  173. File appears in 104 kits
  174. log-in/Log-in/PreDaT0rs/success/icons/dc.png 1300 2016-09-04 13:12:42 b00b4271d2f98e75a3ec5e315f93b9b7
  175. File appears in 83 kits
  176. log-in/Log-in/PreDaT0rs/success/icons/htaccess 35276 2016-09-04 13:12:42 67a3c96c0f57762c29bddb995f398781
  177. File appears in 282 kits
  178. log-in/Log-in/PreDaT0rs/success/icons/jc.png 1205 2016-09-04 13:12:42 7665aa5299a0c26425c9928472f56749
  179. File appears in 83 kits
  180. log-in/Log-in/PreDaT0rs/success/icons/mc.png 1988 2016-09-04 13:12:42 15209deb487c6f3a904db231d238978c
  181. File appears in 107 kits and under 2 different file names
  182. log-in/Log-in/PreDaT0rs/success/icons/ms.png 2060 2016-09-04 13:12:42 6e4725874e18b5029705b4450217a943
  183. File appears in 83 kits
  184. log-in/Log-in/PreDaT0rs/success/icons/pp.png 1448 2016-09-04 13:12:42 efc2d12a0361d0dd194efc0abba786bc
  185. File appears in 108 kits and under 2 different file names
  186. log-in/Log-in/PreDaT0rs/success/icons/v.png 1500 2016-09-04 13:12:42 128201c68ea745a9067491148100da20
  187. File appears in 100 kits
  188. log-in/Log-in/PreDaT0rs/success/index.php 11622 2017-12-22 18:03:40 561b6dee8f9888b1b00d775aed83bdf8
  189. log-in/Log-in/PreDaT0rs/up-PreDaT0rs/3HBYqtV.png 203267 2017-12-22 20:49:42 35d16ed7114090a5d272a7ed27cd0dd4
  190. log-in/Log-in/PreDaT0rs/w0lf/.htaccess 189204 2016-09-02 00:19:22 65c6944ffcf2e8760f78cad65f04b233
  191. File appears in 98 kits and under 2 different file names
  192. log-in/Log-in/PreDaT0rs/w0lf/htaccess 189204 2016-08-21 18:30:00 65c6944ffcf2e8760f78cad65f04b233
  193. File appears in 98 kits and under 2 different file names
  194. log-in/Log-in/PreDaT0rs/w0lf/index.php 146 2017-12-22 18:07:26 7404669ea72c3ff9eb3e64460dfc3bf2
  195. log-in/Log-in/PreDaT0rs/w0lf/w0lf1.php 4694 2017-12-17 21:36:32 0d0ea6d447b4f3171e0e8ce2e45e4393
  196. log-in/Log-in/PreDaT0rs/w0lf/w0lf2.php 4589 2017-12-22 17:51:28 53a7c0b1c69cfb1cad3b986bbbe282c0
  197.  
  198. log-in/Log-in/PreDaT0rs/w0lf/w0lf3.php 4909 2017-12-22 17:51:40 509cae1d9dab37a4fab472b1db7dece9
  199. File appears in 4 kits
  200. log-in/Log-in/PreDaT0rs/w0lf/w0lf4.php 11553 2017-12-22 17:50:42 9c5023743d5eb760e682ff3180a6de38
  201. log-in/Log-in/PreDaT0rs/w0lf/w0lf5.php 2722 2016-10-08 00:40:00 87b6157f7b3983ca31d2a0b8417bcfe7
  202. File appears in 58 kits and under 2 different file names
  203. log-in/Log-in/PreDaT0rs/w0lf/w0lf6.php 14232 2016-03-08 04:00:10 a4a407f9ea79dada61102b91807c8f9c
  204. File appears in 59 kits and under 3 different file names
  205. log-in/Log-in/PreDaT0rs/w0lf.php 51 2017-12-17 11:06:40 ff2e79f2e397dd56d165e4a7f4021b7a
  206.  
  207. 8 Email addresses found:
  208. noreply@cssv.com (appears in 35 kits)
  209. xmustache01@mail.ru
  210. xmustach01@mail.ru
  211. noreply@idyat.com (appears in 34 kits)
  212. twp4782@gmail.com
  213. noreply@logs.com (appears in 35 kits)
  214. noreply@vssv.com (appears in 34 kits)
  215. xmustache01@gmail.com
  216.  
  217.  
  218.  
  219. https://texasmalwareblog.blogspot.com @phish_total
Add Comment
Please, Sign In to add comment