WEBMAIL phish running on 000webhostapp[.]com

Found: 2018-05-14 08:15:53.539000
URL: http://spemta.000webhostapp.com/Re-validate.zip
File: spemta.000webhostapp.com-foo-Re-validate.zip
Domain: 000webhostapp.com
Target: WEBMAIL
Name                                               Size Date                 MD5                                Re-validate/up.php                                   917 2018-05-10 16:30:30  0bcaffbdbbc52d8905fb0f7ed5af37e2
Re-validate/index.htm                                127 2018-03-11 19:55:58  ed9d6e04a557423f14a5cf467c8efb6e
    File appears in 27 kits
Re-validate/mail.htm                                1593 2018-03-11 19:56:06  1517a453cce24800e65de537ad18780d
Re-validate/validation.html                          930 2018-03-11 19:56:22  10c641abb8539cae6d2d6b1821584b24
    File appears in 27 kits  and under 2 different file names

2 Email addresses found:
    'sartthakm1991@gmail.com
    'banti@amaslim.com



https://texasmalwareblog.blogspot.com   @phish_total