US Bank phish running on 000webhostapp[.]com

Found: 2018-06-09 22:15:28.418000
URL: https://gamro4.000webhostapp.com/US.zip
File: gamro4.000webhostapp.com-foo-US.zip
Domain: 000webhostapp.com
Target: US Bank
Name                                               Size Date                 MD5                                US/page/verification/online/.htaccess               1533 2014-08-27 02:04:54  758e36fa8a0601bf7e3412e6f412a8bd
    File appears in 163 kits  and under 2 different file names
US/page/verification/online/1/ccvalid.php           1804 2015-04-21 05:52:16  87a7424995af832649fc7f223051d553
    File appears in 40 kits  and under 6 different file names
US/page/verification/online/1/details.html         10602 2017-04-03 04:29:00  afa8e801b53d6fe2899b0a8d22ac90a2

US/page/verification/online/1/Email.php               47 2017-04-04 22:36:52  9d1728042bfd6d2d589847b22d93881b
US/page/verification/online/1/finish.html           4148 2017-04-03 03:11:12  1263893db9a30b6e8953efa22bf24cde

US/page/verification/online/1/index.html            4496 2017-04-03 03:56:28  6bf35a308b5df3d1f3b68cd3dcdcd0f4

US/page/verification/online/1/log.php                260 2017-04-03 04:27:46  d19048e64c28a9a54656f98f6318c327

US/page/verification/online/1/php.ini                 37 2013-12-12 03:46:36  a5f1f1f621297c14012ae4d7ccabd4de
    File appears in 11 kits
US/page/verification/online/1/robots.txt              76 2014-06-16 04:56:42  ad706e6d3f61138fbb1939d623c2b0a6
    File appears in 3 kits
US/page/verification/online/1/send.php              2012 2017-04-03 05:09:02  a97a81f78c6b40210f70eaa2df1d86c2

US/page/verification/online/index.php                172 2017-03-19 23:28:42  ef2e35ed18bf6c7bb0ad619823c0d679
    File appears in 2 kits

2 Email addresses found:
    amirreda587@gmail.com
    mail@info.com (appears in 5 kits)



https://texasmalwareblog.blogspot.com   @phish_total