There was an error in some directories of the phishing URL reported earlier, so I will correct it.
...
show moreThere was an error in some directories of the phishing URL reported earlier, so I will correct it.
[CORRECT]
Phishing URL:
http://goxdlslrlw.duckdns.org/post/
-----------------------------------------------
[WRONG]
Phishing URL:
http://goxdlslrlw.duckdns.org/japanpost/
show less
I made a mistake in the phishing URL directory in the email I reported earlier, so I'll correct it.
...
show moreI made a mistake in the phishing URL directory in the email I reported earlier, so I'll correct it.
[CORRECT]
Phishing URL:
http://goxdlslrlw.duckdns.org/post/
http://evzptcsjbg.duckdns.org/post/
---------------------------------------------
[WRONG]
Phishing URL:
http://goxdlslrlw.duckdns.org/japanpost/
http://evzptcsjbg.duckdns.org/japanpost/
show less
The directory of the phishing URL I reported earlier was partially wrong, so I will correct it below ...
show moreThe directory of the phishing URL I reported earlier was partially wrong, so I will correct it below.
[CORRECT]
Phishing URL:
http://evzptcsjbg.duckdns.org/post/
------------------------------------------------------
[WRONG]
Phishing URL:
http://evzptcsjbg.duckdns.org/japanpost/
show less
The IP Address(104.219.232.243) has been active since January 26, 2022.
It seems that the domain, o ...
show moreThe IP Address(104.219.232.243) has been active since January 26, 2022.
It seems that the domain, or rather, the IP has been abused in setting up phishing sites.
The abused website(s) are looked like still running(active).
You can access the phishing site only from your smartphone.
Phishing URL:
http://goxdlslrlw.duckdns.org/japanpost/
http://evzptcsjbg.duckdns.org/japanpost/
・Virus Total
https://www.virustotal.com/gui/ip-address/104.219.232.243/relations
https://www.virustotal.com/gui/domain/goxdlslrlw.duckdns.org/relations
https://www.virustotal.com/gui/domain/evzptcsjbg.duckdns.org/relations
・Urlscan
https://urlscan.io/result/2fff9f0b-a12e-4b88-bb85-4ba5381df13d/
https://urlscan.io/result/eb2d3ecd-917c-416a-b1af-5d34de76146c/
For your information, the fraudulent website appears to be a forgery of this legitimate
website:
https://www.post.japanpost.jp/index.htmlSite owner:
Japan Post Co., Ltd.
show less
Phishing mail is distributed from SMS. From January 26, 2022,
phishing URLs linked to IP address: 1 ...
show morePhishing mail is distributed from SMS. From January 26, 2022,
phishing URLs linked to IP address: 104.219.232.243
can be accessed only by smartphones.
Phishing URL:
http://evzptcsjbg.duckdns.org/japanpost/
・Virus Total
https://www.virustotal.com/gui/ip-address/104.219.232.243/relations
https://www.virustotal.com/gui/domain/evzptcsjbg.duckdns.org/relations
・Urlscan
https://urlscan.io/result/1a02e244-dff7-4e01-8d26-c040fb64f531/
Below are images of legitimate sites used
by phishing crime groups when accessing with Android OS.
https://www.post.japanpost.jp/index.html
Website owner:
Japan Post Co., Ltd.
show less
Since January 26, 2022, the phishing site is currently operating at
IP address: 104.219.232.243.
Y ...
show moreSince January 26, 2022, the phishing site is currently operating at
IP address: 104.219.232.243.
You can also access the phishing URL only from your smartphone.
Phishing URL:
http://goxdlslrlw.duckdns.org/japanpost/
The following security sites are evidence of phishing sites.
・Virus Total
https://www.virustotal.com/gui/ip-address/104.219.232.243/relations
https://www.virustotal.com/gui/domain/goxdlslrlw.duckdns.org/relations
・Urlscan
https://urlscan.io/result/b3526c5e-6999-4f93-a830-27e3478f886a/
Image of legitimate site used for phishing site:
https://www.post.japanpost.jp/index.html
Site owner:
Japan Post Co., Ltd.
show less
Phishing
Email Spam
Showing 1 to
7
of 7 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩