Additional Information โ
IP Location: United States Tarzana Quadranet Enterprises Llc
ASN: AS8 ...
show moreAdditional Information โ
IP Location: United States Tarzana Quadranet Enterprises Llc
ASN: AS8100 ASN-QUADRANET-GLOBAL, US (registered Oct 22, 2009)
Whois Server: whois[.]arin[.]net
IP Address: 155[.]94[.]158[.]58
Twitter Information:
KesagataMe@KesaGataMe0
https://twitter.com/KesaGataMe0/status/1547138971234635776
https://twitter.com/KesaGataMe0/status/1547139194367377408
show less
When you access the URL in the delivered phishing email,
you will be directed to the credit card in ...
show moreWhen you access the URL in the delivered phishing email,
you will be directed to the credit card input screen of fake Japan Post.
Twitter information:
ใใ@serippp3
https://twitter.com/serippp3/status/1547480782486155264
<Phishing URL>
https://pots.jnapapots.jp.jiaziyu.cn//
โ
https://pots.jnapapots.jp.jiaziyu.cn//pc/index.php
โ
https://pots.jnapapots.jp.jiaziyu.cn//pc/login.php
โ
https://pots.jnapapots.jp.jiaziyu.cn//pc/add.php
โ
https://pots.jnapapots.jp.jiaziyu.cn//pc/card.php
โ
VISA, or Master, or JCB (Fake credit card input screen)
https://pots.jnapapots.jp.jiaziyu.cn//pc/3d.php
ใปVirus Total
https://www.virustotal.com/gui/domain/pots.jnapapots.jp.jiaziyu.cn/relations
https://www.virustotal.com/gui/ip-address/155.94.158.58/relations
ใปUrlscan.io
*Even if the phishing URL was accessed with Urlscan, screenshots etc. could not be taken because the attacker was filtering.
https://urlscan.io/result/51e9a543-339d-4ed1-9d6d-1cc68b52aff3/
show less
When you access the URL in the delivered phishing email,
you will be directed to the credit card i ...
show moreWhen you access the URL in the delivered phishing email,
you will be directed to the credit card input screen of fake Japan Post.
Twitter information:
ใใ@serippp3
https://twitter.com/serippp3/status/1547480782486155264
<Phishing URL>
https://pots.jnapapots.jp.jiaziyu.cn//
โ
https://pots.jnapapots.jp.jiaziyu.cn//pc/index.php
โ
https://pots.jnapapots.jp.jiaziyu.cn//pc/login.php
โ
https://pots.jnapapots.jp.jiaziyu.cn//pc/add.php
โ
https://pots.jnapapots.jp.jiaziyu.cn//pc/card.php
โ
VISA, or Master, or JCB (Fake credit card input screen)
https://pots.jnapapots.jp.jiaziyu.cn//pc/3d.php
show less