PhishTotal

PAYPAL phish running on boanova[.]pt

Jun 29th, 2018
634
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 4.19 KB | None | 0 0
  1. Found: 2018-06-03 21:19:39.098000
  2. URL: http://www.arm.boanova.pt/administrator/includes/js/ThemeOffice/_notes/Note2/pp.zip
  3. File: www.arm.boanova.pt-Note2-pp.zip
  4. Domain: boanova.pt
  5. Target: PAYPAL
  6. Name Size Date MD5 pp/billing.php 8425 2017-01-27 22:08:46 a965b5eb3b27be14879fead5317c2290
  7.  
  8. pp/bots.php 2308 2015-12-15 09:08:26 1b32d583b7d1b66aaef5152d93be9119
  9. File appears in 24 kits and under 3 different file names
  10. pp/complete.php 4264 2016-05-21 11:48:38 d1b1d43c9393d629a1136d044f744300
  11. File appears in 5 kits
  12. pp/crypt.php 17270 2016-05-22 19:02:48 c6c34d01673803e27b1f0a809383f837
  13. File appears in 35 kits
  14. pp/css/a.css 49899 2016-05-21 12:17:40 436e28111f0927255a81079aed81a246
  15. File appears in 8 kits
  16. pp/css/b.css 47778 2016-05-21 11:48:38 46f575877a26729934ab51efbe0e3db6
  17. File appears in 16 kits
  18. pp/css/c.css 46083 2016-05-21 11:48:38 37c49947eb90f9a0d5553621dd3c6aa5
  19. File appears in 16 kits
  20. pp/css/include27e6.css 216 2016-05-21 11:48:38 a603d9bd8f1bb035bbd8951a14deda41
  21. File appears in 16 kits
  22. pp/css/include2e3a.css 34714 2016-05-21 11:48:38 4474a577f8c262e857ac460444d4f03b
  23. File appears in 16 kits
  24. pp/css/include616d.css 23129 2016-05-21 11:48:38 6d8e2a02c7faf3413c7a33fca2badb65
  25. File appears in 16 kits
  26. pp/css/include659e.css 37287 2016-05-21 11:48:38 ae2fd32a17304a644a2b2f6f7221a37a
  27. File appears in 16 kits
  28. pp/css/include6b80.css 11570 2016-05-21 11:48:38 99811f9c61ab56a96e34f84b09db61a1
  29. File appears in 16 kits
  30. pp/css/includefba4.css 4447 2016-05-21 11:48:38 4450920129220113e704426a6622018a
  31. File appears in 16 kits
  32. pp/css/z.css 36174 2016-05-21 11:48:38 68b2f7385b38bff60033ba3af7f5390c
  33. File appears in 16 kits
  34. pp/email.php 36 2017-10-08 23:04:48 adb6503951ad1b8a824980c530b1532c
  35.  
  36. pp/finish.php 1042 2017-01-27 22:09:48 ae3ac587254ecd25a7fabd62ae43a16e
  37.  
  38. pp/hok.js 20325 2016-05-21 11:48:38 27202d3c6a3b198d63b10f8ef037064a
  39. File appears in 124 kits and under 8 different file names
  40. pp/hostname_check.php 605 2016-08-04 06:12:02 9b5f0e3efa3b19f1256b7ee4fb4cce53
  41. File appears in 2 kits
  42. pp/img/done.png 45628 2016-05-21 11:48:38 86208827d593356611464711f5e8f88f
  43. File appears in 16 kits
  44. pp/img/login-daredevil-1500x1000.2.jpg 98672 2016-05-21 11:51:02 8d2a9a445beba1c13e22b178bff9ef98
  45. File appears in 7 kits
  46. pp/img/nficon2015.ico 24309 2016-05-21 11:48:38 50c33f5415075e02a9f298bd83bf7834
  47. File appears in 16 kits and under 2 different file names
  48. pp/img/Thumbs.db 7680 2016-10-04 19:17:52 0284b4504be1a98be72d62d7b5b0535b
  49.  
  50. pp/index.php 3567 2016-05-22 20:39:32 1454056e53ebe6323fdcff3f6893fded
  51. File appears in 7 kits
  52. pp/payment.php 10891 2018-04-14 01:52:28 2c670042f3b5ef0ba2471b8453a4be6c
  53.  
  54. pp/r1.php 186 2016-05-21 11:48:38 c34607634729e05024a6032c116d8c6f
  55. File appears in 9 kits
  56. pp/r2.php 457 2016-05-21 11:48:38 1ff7d2868c450ed0c795c80ddcb4cec9
  57. File appears in 6 kits
  58. pp/robots.txt 85 2015-12-15 08:33:36 cd38b1a15e3cbdb578a07d44ecf68b30
  59. File appears in 20 kits
  60.  
  61. 1 Email addresses found:
  62. azadax781@gmail.com (appears in 8 kits)
  63.  
  64.  
  65.  
  66. https://texasmalwareblog.blogspot.com @phish_total
Add Comment
Please, Sign In to add comment