Ameli.fr phish running on beget[.]tech

Found: 2018-09-19 14:15:34.394000
URL: http://loupizati.beget.tech/PortailAS.zip
File: loupizati.beget.tech-foo-PortailAS.zip
Domain: beget.tech
Target: Ameli.fr
Name                                               Size Date                 MD5                                PortailAS/PortailAS/PortailAS/appmanager/ameliassurane/assure_somtc=true/index.php   534 2015-06-16 00:21:00  dfd0be4b5ce7d9ffebe0aa78477ccbc3
    File appears in 50 kits
PortailAS/PortailAS/PortailAS/appmanager/ameliassurane/assure_somtc=true/po/.htaccess 114361 2015-07-16 21:53:00  a5d2a7df065881a8aa53685ea3fac5e9
    File appears in 68 kits  and under 2 different file names
PortailAS/PortailAS/PortailAS/appmanager/ameliassurane/assure_somtc=true/po/antibots.php  2733 2015-07-16 21:53:00  5f3b15fbb02e002ee17aa5e71cf0b937
    File appears in 42 kits  and under 5 different file names
PortailAS/PortailAS/PortailAS/appmanager/ameliassurane/assure_somtc=true/po/final.php 19207 2018-04-27 01:45:40  8d97d0a93682d54940f1655d0f9d3165
    File appears in 13 kits
PortailAS/PortailAS/PortailAS/appmanager/ameliassurane/assure_somtc=true/po/index.php 33822 2018-04-27 01:45:58  ddbb68272b104d9d14c66b694869f642
    File appears in 12 kits
PortailAS/PortailAS/PortailAS/appmanager/ameliassurane/assure_somtc=true/po/loading.php 19095 2018-04-27 01:46:12  b6824c37633891f464cb3e4060af07f5
    File appears in 13 kits
PortailAS/PortailAS/PortailAS/appmanager/ameliassurane/assure_somtc=true/po/loading2.php 19072 2018-04-27 01:46:28  33b477e686480499ba25ccc5a8e5b32f
    File appears in 13 kits
PortailAS/PortailAS/PortailAS/appmanager/ameliassurane/assure_somtc=true/po/sms.php 20715 2018-04-27 01:46:42  9eb3a8f4bd46e2e8f0ddca1ef568c9d0
    File appears in 13 kits
PortailAS/PortailAS/PortailAS/appmanager/ameliassurane/assure_somtc=true/po/sms2.php 20889 2018-04-27 01:47:00  37bdfabd1d71dcfff5a0c89e3765b613
    File appears in 13 kits
PortailAS/PortailAS/PortailAS/appmanager/ameliassurane/assure_somtc=true/po/snd.php  1075 2018-06-21 11:23:54  27d40ac7849bd95a6e31c2a6e6dbb642
    File appears in 9 kits
PortailAS/PortailAS/PortailAS/appmanager/ameliassurane/assure_somtc=true/po/snd2.php   592 2018-06-21 11:23:36  40d20cc0a0d786e34fa1d69205b972bc
    File appears in 9 kits
PortailAS/PortailAS/PortailAS/appmanager/ameliassurane/assure_somtc=true/po/snd3.php   589 2018-06-21 11:22:56  ee10675796a436909501b5eedfa4bd6a
    File appears in 9 kits

1 Email addresses found:
    homel198810@gmail.com (appears in 9 kits)



https://texasmalwareblog.blogspot.com   @phish_total