Fri, 26 Aug 2022 12:24:23 +0900 (JST) You have received a phishing email with forged email header in ...
show moreFri, 26 Aug 2022 12:24:23 +0900 (JST) You have received a phishing email with forged email header information. The IP address of the fraudulent site to which you are being directed is 216.245.209.156.
show less
Clicking on a URL link in a phishing email that tricks Japan Post or Japan Post will take you to the ...
show moreClicking on a URL link in a phishing email that tricks Japan Post or Japan Post will take you to the LOTO6 winning scam site.
・Twitter
hn@happynezu
https://twitter.com/happynezu/status/1546515916267356160
<Phishing URL>
URL link in the phishing email that is the direct source
http://wb.bo.xeam--rust.com/LRXI02vLH3LA
IP Address: 113.212.143.246
↓
http://zodiac-mystic.com/I0xt/5PW355
IP Address: 216.245.209.156
↓
http://zodiac-mystic.com/log_index.php?page=allmess_miru&s=1657498870&cid=12489&mid=55595715&ddv=c4a689c922d27cd886fc93c1dfd6fbfb&%%%%%%%%%%%%%%
IP Address: 216.245.209.156
・Virus Total
https://www.virustotal.com/gui/ip-address/113.212.143.246/relations
・Urlscan
https://urlscan.io/result/39c45abf-a324-4027-8155-34d9008804f5/
https://urlscan.io/result/55aa4dc3-b154-44ba-96ea-ebdfbd6e2493/
show less
If you access the URL link in the phishing email that tricks Japan Post,
the LOTO6 winning fraud s ...
show moreIf you access the URL link in the phishing email that tricks Japan Post,
the LOTO6 winning fraud site will be displayed.
<Phishing URL>
http://0s.s0.kgver-v-ytyd.com/97413844699
113.212.143.246
↓
http://jovial-terror.com/aN5slQ5mXbo
216.245.209.156
↓
http://jovial-terror.com/log_index.php?page=allmess_miru&s=1657341980&cid=12489&mid=55528339&ddv=7e1bd87e88bc23a96210c172646191d1&%%%%%%%%%%%%%%%
216.245.209.156
・Virus Total
https://www.virustotal.com/gui/ip-address/216.245.209.156/relations
https://www.virustotal.com/gui/ip-address/113.212.143.246/relations
・Urlscan.io
https://urlscan.io/result/f85b5f50-1d9a-44c2-8c12-0fbbd889a6dc/
https://urlscan.io/result/de66837a-d3a4-4588-b310-e777cdc80d08/
show less
I am reporting the URL of the fake LOTO6 winning fraud
that deceived Japan Post and Japan Post by ...
show moreI am reporting the URL of the fake LOTO6 winning fraud
that deceived Japan Post and Japan Post by phishing email.
・Twitter Information
https://twitter.com/HI_KUNNANASE7/status/1544324797718339584
<Phishing URL>
http://iq.hu.bdas--anse.com/zCj21rP72rQ7
113.212.143.246
↓
http://zodiac-mystic.com/ZRhJi2Dhylr
216.245.209.156
↓
http://zodiac-mystic.com/log_index.php?page=allmess_miru&s=1656986769&cid=12489&mid=55403093&ddv=d89030c15cb840090b27441170601970&%%%%%%%%%%
216.245.209.156
・Virus Total
https://www.virustotal.com/gui/ip-address/216.245.209.156/relations
https://www.virustotal.com/gui/ip-address/113.212.143.246/relations
・Urlscan.io
https://urlscan.io/result/b1af0ccd-f708-4a7f-bd69-0d5e0e859c49/
https://urlscan.io/result/74d6c71f-b5f2-4a83-8b62-09aa6066a8e1/
show less
Fraud Orders
Phishing
Email Spam
Showing 1 to
7
of 7 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩