PAYPAL phish ** running on sparksbixby[.]com

Found: 2018-02-22 14:25:14.088000
URL: http://sparksbixby.com/56/bankFI.zip
File: sparksbixby.com-56-bankFI.zip
Domain: sparksbixby.com
Target: PAYPAL
Name                                               Size Date                 MD5                                bankFI/bankFI/bankFI/12/vis.txt                     2651 2017-11-09 03:58:18  97ae29dfd6f788af9ef1a46c7ad2f62e
bankFI/bankFI/bankFI/12/.htaccess                  15112 2017-11-09 03:24:20  80ebb4109d35c422f6cc785635605a10
bankFI/bankFI/bankFI/12/inde1.html                  4519 2017-11-09 03:38:34  31b78c415c2b33d2219a4e802c3682d7
bankFI/bankFI/bankFI/12/images/sb.png              740657 2017-04-08 16:34:50  e85ac42a8a8d740bf019639cc7fa4da0
bankFI/bankFI/bankFI/12/images/favicon.jpg         16626 2017-04-08 16:18:20  2c12ed60bb5d3e07e042e1b7d29d67a8
bankFI/bankFI/bankFI/12/images/favicon.ico          4430 2017-04-08 16:20:24  3d919f6ced27ce32c7e8b3739d22b4da
bankFI/bankFI/bankFI/12/images/ok.png               4722 2017-04-08 15:32:34  1d2b6c81256f5fd24e3abd21649103e0
bankFI/bankFI/bankFI/12/robots.txt                  1337 2016-08-07 03:33:48  ba613657ddd17df5e61d5571b9c9d681
    File appears in 102 kits
bankFI/bankFI/bankFI/12/step1.php                   1008 2017-11-09 03:16:06  74ac621ee39cfadaca5d9261d24a81bd
bankFI/bankFI/bankFI/12/index.php                    529 2017-11-09 03:08:50  68bd18e0cf444513ff93f662cbed5a30

3 Email addresses found:
    oar3dece@gmail.com
    rosps67@protonmail.com
    juhanilarha@meiliboxi.fi



https://texasmalwareblog.blogspot.com   @phish_total