PAYPAL phish running on chloe-so[.]tk

Found: 2018-07-21 22:15:08.008000
URL: http://chloe-so.tk/foldsing/NewChseMills.zip
File: chloe-so.tk-foldsing-NewChseMills.zip
Domain: chloe-so.tk
Target: PAYPAL
Name                                               Size Date                 MD5                                NewChseMills/NewChseMills/.htaccess                 6254 2014-07-02 05:28:08  1f3c94701b2470bfdbec47f0a37c16f9
    File appears in 5 kits
NewChseMills/NewChseMills/alley.php                  221 2015-03-27 16:25:26  773d849f14a9507df00b046cef29a56a
    File appears in 4 kits
NewChseMills/NewChseMills/check.php                11910 2018-07-21 23:24:20  d92dfec5a5ceee2cb7e1db8826290cf8
NewChseMills/NewChseMills/ckpke.php                  977 2018-07-22 00:23:52  230a563db25f67a4db0a217c15883e12
NewChseMills/NewChseMills/index.php                23334 2018-01-06 23:23:54  2a8557433c551b58542227cd87075884

NewChseMills/NewChseMills/proof.php                28194 2018-01-06 23:22:18  f65ca0b6bc872d99ea50e01ae6d530bf


5 Email addresses found:
    megacashout2019@gmail.com
    megacashout2019@yandex.com
    attachese.667.1@gmail.com (appears in 3 kits)
    gise@gcrele.com
    test@test.com (appears in 21 kits)



https://texasmalwareblog.blogspot.com   @phish_total