Advertisement
PhishTotal

WELLS FARGO phish running on parentingcrux[.]com

Apr 14th, 2018
719
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 5.20 KB | None | 0 0
  1. Found: 2018-04-06 02:26:12.232000
  2. URL: http://parentingcrux.com/wp-includes/customize/We.zip
  3. File: parentingcrux.com-customize-We.zip
  4. Domain: parentingcrux.com
  5. Target: WELLS FARGO
  6. Name Size Date MD5 We/We/Wellsfergo/wellsfargo/wellsfargo/clr.gif 54 2017-10-28 21:33:34 fb321fcb47877f7129578cb072cc2544
  7.  
  8. We/We/Wellsfergo/wellsfargo/wellsfargo/files/1pixel_clear.gif 43 2017-10-28 21:33:50 325472601571f31e1bf00674c368d335
  9. File appears in 230 kits and under 42 different file names
  10. We/We/Wellsfergo/wellsfargo/wellsfargo/files/a.gif 34 2017-10-28 21:33:50 0633ea1920d54dd1b9eeab2ca4a10ce8
  11. File appears in 2 kits and under 2 different file names
  12. We/We/Wellsfergo/wellsfargo/wellsfargo/files/a_002.gif 34 2017-10-28 21:33:50 0633ea1920d54dd1b9eeab2ca4a10ce8
  13. File appears in 2 kits and under 2 different file names
  14. We/We/Wellsfergo/wellsfargo/wellsfargo/files/a_003.gif 92 2017-10-28 21:33:50 e1c26d55aa34c944cdfdec1a92fe6d4c
  15. File appears in 2 kits and under 2 different file names
  16. We/We/Wellsfergo/wellsfargo/wellsfargo/files/a_004.gif 92 2017-10-28 21:33:50 e1c26d55aa34c944cdfdec1a92fe6d4c
  17. File appears in 2 kits and under 2 different file names
  18. We/We/Wellsfergo/wellsfargo/wellsfargo/files/button_parameters.js 2478 2017-10-28 21:33:50 dbbc00ed5ad6b047d35a9698682bdef3
  19. File appears in 2 kits
  20. We/We/Wellsfergo/wellsfargo/wellsfargo/files/check_fields.js 2945 2017-10-28 21:33:50 e6dab340eeefae4b83afb1668e2f1b82
  21. We/We/Wellsfergo/wellsfargo/wellsfargo/files/chk_confidenceblue_731x194.jpg 50738 2017-10-28 21:33:50 20e9ac5cb0e55a5042f83a67af70831a
  22. We/We/Wellsfergo/wellsfargo/wellsfargo/files/cmdatatagutils.js 35954 2017-10-28 21:33:50 6c810ec489889c49952c8a11d73c3c05
  23. File appears in 2 kits
  24. We/We/Wellsfergo/wellsfargo/wellsfargo/files/configuration_baseline.js 2896 2017-10-28 21:33:50 8dfc02139149dc940acb0fbd9a52efbb
  25. File appears in 2 kits
  26. We/We/Wellsfergo/wellsfargo/wellsfargo/files/configuration_deposits.js 700 2017-10-28 21:33:50 e4af5ec71a5123d9093a04b4078f2a34
  27. File appears in 2 kits
  28. We/We/Wellsfergo/wellsfargo/wellsfargo/files/conversion_script.js 1352 2017-10-28 21:33:50 9eebe97a3b2d712f8b8949e63bbfb15e
  29. File appears in 2 kits
  30. We/We/Wellsfergo/wellsfargo/wellsfargo/files/conversion_script-deposits.js 3523 2017-10-28 21:33:50 02499ba5c2698fa818710264c0d9781b
  31. File appears in 2 kits
  32. We/We/Wellsfergo/wellsfargo/wellsfargo/files/dynamic_button_image_code.js 832 2017-10-28 21:33:50 e9dc48b8ff20a708ef7d98413aeb4512
  33. File appears in 2 kits
  34. We/We/Wellsfergo/wellsfargo/wellsfargo/files/DynamicButtonScript2.js 14486 2017-10-28 21:33:50 0339a130a79bfb41cda8f9d2ba992892
  35. File appears in 2 kits
  36. We/We/Wellsfergo/wellsfargo/wellsfargo/files/eluminate.js 16374 2017-10-28 21:33:50 2b6c4f8cf88da76c6d7d8e7570a975aa
  37. File appears in 2 kits
  38. We/We/Wellsfergo/wellsfargo/wellsfargo/files/header.gif 256 2017-10-28 21:33:50 7919cf68ffcd490bcac925332bb1b191
  39. We/We/Wellsfergo/wellsfargo/wellsfargo/files/htm.js 2119 2017-10-28 21:33:50 bd46eed466533c59b405f75c03f0db5a
  40. File appears in 2 kits
  41. We/We/Wellsfergo/wellsfargo/wellsfargo/files/html.js 220 2017-10-28 21:33:50 181a4b37844450e5622a021a3c18dcf5
  42. We/We/Wellsfergo/wellsfargo/wellsfargo/files/icon_question.gif 1051 2017-10-28 21:33:50 8edb2b44cf1c2f0714db0cff2b1a77b5
  43. File appears in 5 kits
  44. We/We/Wellsfergo/wellsfargo/wellsfargo/files/LogToDb.gif 43 2017-10-28 21:33:50 325472601571f31e1bf00674c368d335
  45. File appears in 230 kits and under 42 different file names
  46. We/We/Wellsfergo/wellsfargo/wellsfargo/files/px_002.gif 43 2017-10-28 21:33:50 325472601571f31e1bf00674c368d335
  47. File appears in 230 kits and under 42 different file names
  48. We/We/Wellsfergo/wellsfargo/wellsfargo/files/px_003.gif 43 2017-10-28 21:33:50 325472601571f31e1bf00674c368d335
  49. File appears in 230 kits and under 42 different file names
  50. We/We/Wellsfergo/wellsfargo/wellsfargo/files/Thumbs.db 13824 2017-10-28 21:33:50 9543377a38c850e34bf6f71064e684fb
  51. We/We/Wellsfergo/wellsfargo/wellsfargo/files/validate_form.js 2369 2017-10-28 21:33:50 f8117b1dbb889c23782500d6fe2067c4
  52. We/We/Wellsfergo/wellsfargo/wellsfargo/files/x.gif 49 2017-10-28 21:33:50 ed280a0ea3cc38f3cbbc747acfbef47d
  53. File appears in 5 kits and under 3 different file names
  54. We/We/Wellsfergo/wellsfargo/wellsfargo/finish.htm 7726 2017-10-28 21:33:34 39ec3c5da9756ebfac92fd95ee0846a8
  55. We/We/Wellsfergo/wellsfargo/wellsfargo/icon_question.gif 1051 2017-10-28 21:33:34 8edb2b44cf1c2f0714db0cff2b1a77b5
  56. File appears in 5 kits
  57. We/We/Wellsfergo/wellsfargo/wellsfargo/update.html 60543 2017-10-28 21:33:34 eba9a17a4bbf1a96448d10280d01e486
  58. We/We/Wellsfergo/wellsfargo/wellsfargo/update.php 2017 2017-10-28 21:34:28 7d40a4a977719941de360af854208ac4
  59. We/We/Wellsfergo/wellsfargo/wellsfargo/verify.php 950 2017-10-28 21:34:48 77badff8043d4bc5b5904912f4d0af41
  60.  
  61. 3 Email addresses found:
  62. alexyoungs3@outlook.com
  63. mooremoney1900@gmail.com (appears in 5 kits)
  64. news@wellsfargo.com
  65.  
  66.  
  67.  
  68. https://texasmalwareblog.blogspot.com @phish_total
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement