WEBMAIL phish running on clarkforkbaptistchurch[.]com

Found: 2018-01-16 14:23:08.575000
URL: http://clarkforkbaptistchurch.com/traffic/n.zip
File: clarkforkbaptistchurch.com-traffic-n.zip
Domain: clarkforkbaptistchurch.com
Target: WEBMAIL
Name                                               Size Date                 MD5                                n/blocker.php                                       2644 2014-12-03 06:17:00  5aa3f3f406ced12d0bc7742e77b01781
    File appears in 202 kits  and under 4 different file names
n/home/images/1.png                                 2421 2016-03-06 01:47:28  8d6acda049cf6effa89d19f06b402d8c
    File appears in 11 kits  and under 3 different file names
n/home/images/2.png                                14489 2016-03-12 19:29:08  a257cbd01042fbfab25bf5919ec9da68
    File appears in 11 kits  and under 3 different file names
n/home/images/3.png                                  981 2016-03-06 01:48:34  9aeabbb0f915190fbf57b195edee38d5
    File appears in 11 kits  and under 3 different file names
n/home/images/4.png                                  718 2016-03-06 01:48:42  6e80192d5e33d45583bcce7ba07a6f11
    File appears in 11 kits  and under 3 different file names
n/home/images/5.png                                 1049 2016-03-06 01:48:58  06551baa209c70a81d9d42ae967a2e6d
    File appears in 11 kits  and under 3 different file names
n/home/images/6.png                                10774 2016-03-12 19:59:16  b02db12d16ad4e8cf25336261d465880
    File appears in 11 kits  and under 3 different file names
n/home/images/7.png                                 1083 2016-03-06 01:51:56  233d92afe40125e1adb29d1223670fb6
    File appears in 11 kits  and under 3 different file names
n/home/images/asd1.png                              1203 2016-03-07 18:39:32  f56e0c8812107455ca140099b3c5394f
    File appears in 11 kits
n/home/images/imapin.jpg                           83095 2016-03-07 22:23:10  ebceb871c15c941cc7df32697e307bcd
    File appears in 11 kits
n/home/images/sihmim.png                             935 2016-03-06 01:52:10  77a79ffc0a68f18c703d2721df94571f
    File appears in 11 kits
n/home/images/ss.png                                1046 2016-03-19 17:21:46  5ffc0741e64b3071396eecad67e54066
    File appears in 10 kits
n/home/images/Thumbs.db                            12288 2016-03-13 19:30:28  6ba3d94e85ad7de7d5898c0b4bb8b559
    File appears in 10 kits
n/home/index.php                                    2477 2016-03-19 11:00:34  01081fa43396ddabc260af7728edd9a3
    File appears in 5 kits
n/home/index2.php                                   2361 2016-03-19 11:00:54  8106e25b408c584dffd1a632c577db5e
    File appears in 5 kits
n/home/result.php                                   1747 2017-03-13 10:34:42  a7c611c366e6c112577e084d60febbe1
n/home/thankyou.html                                7612 2016-03-12 10:29:28  a8623cf2b49445ceff6228a8d6d6c495
    File appears in 5 kits
n/index.php                                          619 2015-03-24 20:44:44  dc1b67a93b1aed2fdc965128a0185acf
    File appears in 65 kits

2 Email addresses found:
    mhaisupen2015@gmail.com
    romale403@gmail.com



https://texasmalwareblog.blogspot.com   @phish_total