The IP Address(91.204.227.20) has been active since June 23, 2022.
It seems that the domain, or rat ...
show moreThe IP Address(91.204.227.20) has been active since June 23, 2022.
It seems that the domain, or rather, the IP has been abused in setting up phishing sites.
The abused website(s) are looked like still running(active).
You can access the phishing site only from your smartphone (Android OS).
The "japanpost.apk" file for android malware will be downloaded.
Phishing URL:
http://mnhdo.com/sdfgewrwerew/
http://35m.mnhdo.com/sdfgewrwerew/
・Virus Total
https://www.virustotal.com/gui/ip-address/91.204.227.20/relations
・Urlscan
https://urlscan.io/ip/91.204.227.20
https://urlscan.io/result/73b8bbfc-4ca8-47c6-b41d-14692b0013c4/
https://urlscan.io/result/37dc9681-e334-420e-a20b-977aa974484e/
・Twitter
https://twitter.com/NaomiSuzuki_/status/1555402839903858689
For your information, the fraudulent website appears to be a forgery of this legitimate
website:
https://www.post.japanpost.jp/index.htmlSite owner:
Japan Post Co., Ltd.
show less
Twitter information:
https://twitter.com/NaomiSuzuki_/status/1555036125437521920
Phishing mail i ...
show moreTwitter information:
https://twitter.com/NaomiSuzuki_/status/1555036125437521920
Phishing mail is distributed from SMS. From June 23, 2022,
phishing URLs linked to IP address: 91.204.227.20
can be accessed only by smartphones.
Phishing URLs download Android malware "japanpost.apk" files.
Phishing URL:
http://akdyb.com/sdfgewrwerew/
http://ndq.akdyb.com/sdfgewrwerew/
Malware Download URL:
http://akdyb.com/japanpost.apk
http://ndq.akdyb.com/japanpost.apk
・Virus Total
https://www.virustotal.com/gui/ip-address/91.204.227.20/relations
・Urlscan
https://urlscan.io/ip/91.204.227.20
https://urlscan.io/result/8d26f0e1-8a4f-4ad6-959f-a721d76d3189/
https://urlscan.io/result/0c693c31-60fc-4e8c-bcca-3f7b629073a6/
Below are images of legitimate sites used
by phishing crime groups when accessing with Android OS.
https://www.post.japanpost.jp/index.html
Website owner:
Japan Post Co., Ltd.
show less
The IP Address(192.51.188.108) has been active since June 22, 2022.
It seems that the domain, or ra ...
show moreThe IP Address(192.51.188.108) has been active since June 22, 2022.
It seems that the domain, or rather, the IP has been abused in setting up phishing sites.
The abused website(s) are looked like still running(active).
You can access the phishing site only from your smartphone (Android OS).
When you access the URL, Android malware will be downloaded.
Phishing URL:
http://eqsnv.com/sdfgewrwerew/
http://k4p.bmegy.com/sdfgewrwerew/
・Virus Total
https://www.virustotal.com/gui/ip-address/192.51.188.108/relations
・Urlscan
https://urlscan.io/ip/192.51.188.108
https://urlscan.io/result/5c1d0de6-62f6-4b12-8fe3-d351b6551803/
https://urlscan.io/result/5b4e79d8-a9a6-4031-8bf2-21c63ef497b6/
・Twitter
https://twitter.com/NaomiSuzuki_/status/1554485455055646720
For your information, the fraudulent website appears to be a forgery of this legitimate
website:
https://www.post.japanpost.jp/index.htmlSite owner:
Japan Post Co., Ltd.
show less
The IP Address(91.204.227.20) has been active since June 23, 2022.
It seems that the domain, or rat ...
show moreThe IP Address(91.204.227.20) has been active since June 23, 2022.
It seems that the domain, or rather, the IP has been abused in setting up phishing sites.
The abused website(s) are looked like still running(active).
You can access the phishing site only from your smartphone (Android OS).
The "japanpost.apk" file for android malware will be downloaded.
Phishing URL:
http://diwsy.com/sdfgewrwerew/
http://bmegy.com/sdfgewrwerew/
・Virus Total
https://www.virustotal.com/gui/ip-address/91.204.227.20/relations
・Urlscan
https://urlscan.io/ip/91.204.227.20
https://urlscan.io/result/efc8848e-30eb-4e0a-8aa4-de3fd870a90b/
https://urlscan.io/result/26e34051-63b6-4f77-b974-b32322250cbc/
・Twitter
https://twitter.com/NaomiSuzuki_/status/1554315210533765120
For your information, the fraudulent website appears to be a forgery of this legitimate
website:
https://www.post.japanpost.jp/index.htmlSite owner:
Japan Post Co., Ltd.
show less
Since June 23, 2022, the phishing site is currently operating at
IP address: 91.204.227.20.
You ca ...
show moreSince June 23, 2022, the phishing site is currently operating at
IP address: 91.204.227.20.
You can also access the phishing URL only from your smartphone.
If you access the URL delivered by SMS with an Android OS smartphone,
the malware "japanpost[.]apk" file will be downloaded.
Phishing URL:
http://ndyta.com/sdfgewrwerew/
http://r5x.ndyta.com/sdfgewrwerew/
The following security sites are evidence of phishing sites.
・Twitter
https://twitter.com/NaomiSuzuki_/status/1553946498513391617
・Virus Total
https://www.virustotal.com/gui/ip-address/91.204.227.20/relations
・Urlscan
https://urlscan.io/ip/91.204.227.20
https://urlscan.io/result/192b7063-0e2d-47b0-933b-7d4be23803e3/
https://urlscan.io/result/ddaab81e-ba0e-4696-91c5-4a99d8c57637/
Image of legitimate site used for phishing site:
https://www.post.japanpost.jp/index.html
Site owner:
Japan Post Co., Ltd.
show less
Twitter information:
https://twitter.com/NaomiSuzuki_/status/1552862868919689216
Phishing mail i ...
show moreTwitter information:
https://twitter.com/NaomiSuzuki_/status/1552862868919689216
Phishing mail is distributed from SMS. From June 23, 2022,
phishing URLs linked to IP address: 91.204.227.20
can be accessed only by smartphones.
Phishing URLs download Android malware "japanpost.apk" files.
Phishing URL:
http://5oxq.uvoeu.com/sdfgewrwerew/
http://10y.uvoeu.com/sdfgewrwerew/
Malware Download URL:
http://5oxq.uvoeu.com/japanpost.apk
http://10y.uvoeu.com/japanpost.apk
・Virus Total
https://www.virustotal.com/gui/ip-address/91.204.227.20/relations
・Urlscan
https://urlscan.io/ip/91.204.227.20
https://urlscan.io/result/f6da1aaf-509f-42b4-b7d1-3d81a3aab169/
https://urlscan.io/result/e9aaf9ad-7ec8-491e-b8d9-0e1296456bd5/
Below are images of legitimate sites used
by phishing crime groups when accessing with Android OS.
https://www.post.japanpost.jp/index.html
Website owner:
Japan Post Co., Ltd.
show less
The IP Address(91.204.227.20) has been active since June 23, 2022.
It seems that the domain, or rat ...
show moreThe IP Address(91.204.227.20) has been active since June 23, 2022.
It seems that the domain, or rather, the IP has been abused in setting up phishing sites.
The abused website(s) are looked like still running(active).
You can access the phishing site only from your smartphone (Android OS).
The "japanpost.apk" file for android malware will be downloaded.
Phishing URL:
http://p2d.uvoeu.com/sdfgewrwerew/
http://vrhie.com/sdfgewrwerew/
・Virus Total
https://www.virustotal.com/gui/ip-address/91.204.227.20/relations
・Urlscan
https://urlscan.io/ip/91.204.227.20
https://urlscan.io/result/e1d1652c-5f4a-488d-b128-ae313acd6b8a/
https://urlscan.io/result/6f7eb0b4-ab2c-4426-943a-747ca8bf178e/
・Twitter
https://twitter.com/NaomiSuzuki_/status/1552862868919689216
For your information, the fraudulent website appears to be a forgery of this legitimate
website:
https://www.post.japanpost.jp/index.htmlSite owner:
Japan Post Co., Ltd.
show less
Since June 23, 2022, the phishing site is currently operating at
IP address: 91.204.227.20.
You ca ...
show moreSince June 23, 2022, the phishing site is currently operating at
IP address: 91.204.227.20.
You can also access the phishing URL only from your smartphone.
If you access the URL delivered by SMS with an Android OS smartphone,
the malware "japanpost[.]apk" file will be downloaded.
Phishing URL:
http://uvoeu.com/sdfgewrwerew/
http://vrhie.com/sdfgewrwerew/
The following security sites are evidence of phishing sites.
・Twitter
https://twitter.com/NaomiSuzuki_/status/1552862868919689216
・Virus Total
https://www.virustotal.com/gui/ip-address/91.204.227.20/relations
・Urlscan
https://urlscan.io/ip/91.204.227.20
https://urlscan.io/result/ae3a7c73-5d32-41e5-874a-fe441c3d7957/
https://urlscan.io/result/74ff4cf6-3425-4a6c-8e57-83fe93b3d196/
Image of legitimate site used for phishing site:
https://www.post.japanpost.jp/index.html
Site owner:
Japan Post Co., Ltd.
show less
Since June 23, 2022, the phishing site is currently operating at
IP address: 91.204.227.20.
You ca ...
show moreSince June 23, 2022, the phishing site is currently operating at
IP address: 91.204.227.20.
You can also access the phishing URL only from your smartphone.
If you access the URL delivered by SMS with an Android OS smartphone,
the malware "japanpost[.]apk" file will be downloaded.
Phishing URL:
http://296.esmvh.com/sdfgewrwerew/
http://esmvh.com/sdfgewrwerew/
http://oxwmz.com/sdfgewrwerew/
The following security sites are evidence of phishing sites.
・Twitter
https://twitter.com/NaomiSuzuki_/status/1552502965013196800
・Virus Total
https://www.virustotal.com/gui/ip-address/91.204.227.20/relations
・Urlscan
https://urlscan.io/ip/91.204.227.20
https://urlscan.io/result/f102ea53-8c95-4780-8d45-c3a651bc09d4/
https://urlscan.io/result/faf75dce-70d4-4939-8587-11217f7ba9a6/
https://urlscan.io/result/53862824-10fe-4f4b-a487-0534bc7f8812/
Image of legitimate site used for phishing site:
https://www.post.japanpost.jp/index.html
Site owner:
Japan Post Co., Ltd.
show less
Twitter information:
https://twitter.com/NaomiSuzuki_/status/1552218872836947968
Phishing mail i ...
show moreTwitter information:
https://twitter.com/NaomiSuzuki_/status/1552218872836947968
Phishing mail is distributed from SMS. From June 23, 2022,
phishing URLs linked to IP address: 91.204.227.20
can be accessed only by smartphones.
Phishing URLs download Android malware "japanpost.apk" files.
Phishing URL:
http://qthar.com/sdfgewrwerew/
http://n.qthar.com/sdfgewrwerew/
Malware Download URL:
http://qthar.com/japanpost.apk
http://n.qthar.com/japanpost.apk
・Virus Total
https://www.virustotal.com/gui/ip-address/91.204.227.20/relations
・Urlscan
https://urlscan.io/ip/91.204.227.20
https://urlscan.io/result/5dbd084b-98cc-47d4-96e0-ed1ce0def57f/
https://urlscan.io/result/77bb6739-d4cb-416f-b88e-21ec2fcf8e7c/
Below are images of legitimate sites used
by phishing crime groups when accessing with Android OS.
https://www.post.japanpost.jp/index.html
Website owner:
Japan Post Co., Ltd.
show less
The IP Address(91.204.227.20) has been active since June 23, 2022.
It seems that the domain, or rat ...
show moreThe IP Address(91.204.227.20) has been active since June 23, 2022.
It seems that the domain, or rather, the IP has been abused in setting up phishing sites.
The abused website(s) are looked like still running(active).
You can access the phishing site only from your smartphone (Android OS).
The "japanpost.apk" file for android malware will be downloaded.
Phishing URL:
http://1o3.yyoqt.com/sdfgewrwerew/
http://m.yyoqt.com/sdfgewrwerew/
・Virus Total
https://www.virustotal.com/gui/ip-address/91.204.227.20/relations
・Urlscan
https://urlscan.io/ip/91.204.227.20
https://urlscan.io/result/bb953522-0a1f-4f90-ac76-bab8e54b20d4/
https://urlscan.io/result/11a4c498-5040-4108-8390-6719ddbe8dec/
・Twitter
https://twitter.com/NaomiSuzuki_/status/1552218872836947968
For your information, the fraudulent website appears to be a forgery of this legitimate
website:
https://www.post.japanpost.jp/index.htmlSite owner:
Japan Post Co., Ltd.
show less
Since June 23, 2022, the phishing site is currently operating at
IP address: 91.204.227.20.
You ca ...
show moreSince June 23, 2022, the phishing site is currently operating at
IP address: 91.204.227.20.
You can also access the phishing URL only from your smartphone.
If you access the URL delivered by SMS with an Android OS smartphone,
the malware "japanpost[.]apk" file will be downloaded.
Phishing URL:
http://qbhab.com/sdfgewrwerew/
The following security sites are evidence of phishing sites.
・Twitter
https://twitter.com/NaomiSuzuki_/status/1551932991328456708
・Virus Total
https://www.virustotal.com/gui/ip-address/91.204.227.20/relations
・Urlscan
https://urlscan.io/ip/91.204.227.20
https://urlscan.io/result/3c52e5f6-2d81-4297-8397-294e9dc79ba3/
https://urlscan.io/result/f8cf0636-18c0-4eb7-a7b0-10b246f2ac9b/
Image of legitimate site used for phishing site:
https://www.post.japanpost.jp/index.html
Site owner:
Japan Post Co., Ltd.
show less
Phishing
Email Spam
Exploited Host
Showing 1 to
15
of 99 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩