WELLS FARGO phish running on nbgsara.ca

Found: 2017-11-29 14:16:31.283000
URL: http://www.nbgsara.ca/wp-content/themes/twentyfourteen/x.zip
File: www.nbgsara.ca-twentyfourteen-x.zip
Domain: nbgsara.ca
Target: WELLS FARGO
Name                                               Size Date                 MD5                                x/x/x/index.htm                                      850 2017-07-21 04:02:06  5d7666ea80aacabe587edb1d11a4dbd5
    File appears in 8 kits
x/x/x/site.php                                       624 2017-08-04 20:49:52  192b7ee28e71ce80813d7547a17444e7
    File appears in 4 kits
x/x/x/w.php                                         1319 2017-08-04 20:50:24  c2c619808bc6604de707f033a1ebb96a
    File appears in 4 kits
x/x/x/w.png                                        72810 2017-07-21 04:02:06  267c0000a4ba3619dd9a33fef4526857
    File appears in 8 kits
x/x/x/wells.png                                    761900 2017-07-21 04:02:06  f18ff5c494046d93b51aa23be2e8b0c4
    File appears in 8 kits
x/x/x/ww.html                                       5287 2017-07-26 07:22:46  c692a7104453847cc49ae6c202c8af9d
    File appears in 8 kits

1 Email addresses found:
    whitegold961@gmail.com (appears in 5 kits)



https://texasmalwareblog.blogspot.com   @phish_total