This IP address has been reported a total of
94
times from
30 distinct
sources.
8.219.35.52 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Phishing email impersonating the US IRS ("Notice of Certification - CP509C"), sent from this Alibaba ...
show morePhishing email impersonating the US IRS ("Notice of Certification - CP509C"), sent from this Alibaba Cloud SG IP. Sender domain tiendasucre.com.mx (unrelated Mexican retail business, likely compromised/registered for abuse) passes DKIM/DMARC, confirming only that the message was signed by that domain, not that it's legitimate. Generic "From" name ("Important Message"). Uses urgency language to push victims to a "Download Statement" button linking to a third-party domain (ftgchile.com/eer), unrelated to IRS.gov, likely a credential-harvesting redirector. Same relay chain (relay.spacemail.com) and Aliyun SG IP range (8.219.35.x) seen in another phishing email impersonating QuickBooks/Intuit days earlier - same mass-mailing phishing campaign abusing Alibaba Cloud SMTP infrastructure.
show less
Phishing email - phishing link - https[:]//userswixcomsignin[.]vrpengineering[.]com/2LWFfyWQNpC8L3bU ...
show morePhishing email - phishing link - https[:]//userswixcomsignin[.]vrpengineering[.]com/2LWFfyWQNpC8L3bUq7QZeKWU2ptFh1OwZgAg9gDMffaLdXs3aEpaHs6ylf5Yg5c05FNAbJLHOoOHkdsl
show less
Multiple IP addresses have been involved; the most recent is 8.219.35.52. I have been receiving ongo ...
show moreMultiple IP addresses have been involved; the most recent is 8.219.35.52. I have been receiving ongoing fraudulent "package tracking" emails for about one year from various sources, not limited to a single IP address. Despite repeated reports to government agencies and abuse teams, these activities continue unabated. The emails contain malicious links designed to deceive recipients, and the activity appears to be part of an organized campaign, possibly involving criminal intent or harassment. The most recent source IP is 8.219.35.52, originating from the domain acib.in and associated with suspicious activity. This ongoing threat warrants investigation and takedown.
show less
Fraud Orders
Web Spam
Email Spam
Spoofing
Phishing