The IP Address(91.204.227.6) has been active since February 18, 2022.
It seems that the domain, or ...
show moreThe IP Address(91.204.227.6) has been active since February 18, 2022.
It seems that the domain, or rather, the IP has been abused in setting up phishing sites.
The abused website(s) are looked like still running(active).
You can access the phishing site only from your smartphone.
Phishing URL:
http://snkvb.tdvqa.com/grdertggde/
・Virus Total
https://www.virustotal.com/gui/ip-address/91.204.227.6/relations
https://www.virustotal.com/gui/domain/snkvb.tdvqa.com/relations
・Urlscan
https://urlscan.io/result/7a8e8fa2-88b2-458b-b557-7f834a536325/
For your information, the fraudulent website appears to be a forgery of this legitimate
website:
https://www.post.japanpost.jp/index.htmlSite owner:
Japan Post Co., Ltd.
show less
Phishing mail is distributed from SMS. From February 18, 2022,
phishing URLs linked to IP address: ...
show morePhishing mail is distributed from SMS. From February 18, 2022,
phishing URLs linked to IP address: 91.204.227.6
can be accessed only by smartphones.
Phishing URL:
http://nkbme.tdvqa.com/grdertggde/
・Virus Total
https://www.virustotal.com/gui/ip-address/91.204.227.6/relations
https://www.virustotal.com/gui/domain/nkbme.tdvqa.com/relations
・Urlscan
https://urlscan.io/result/96628e22-cb2b-4c1f-ac33-69c9c79cd75c/
Below are images of legitimate sites used
by phishing crime groups when accessing with Android OS.
https://www.post.japanpost.jp/index.html
Website owner:
Japan Post Co., Ltd.
show less
Since February 18, 2022, the phishing site is currently operating at
IP address: 91.204.227.6.
You ...
show moreSince February 18, 2022, the phishing site is currently operating at
IP address: 91.204.227.6.
You can also access the phishing URL only from your smartphone.
Phishing URL:
http://snkvb.tdvqa.com/grdertggde/
http://nkbme.tdvqa.com/grdertggde/
The following security sites are evidence of phishing sites.
・Virus Total
https://www.virustotal.com/gui/ip-address/91.204.227.6/relations
https://www.virustotal.com/gui/domain/snkvb.tdvqa.com/relations
https://www.virustotal.com/gui/domain/nkbme.tdvqa.com/relations
・Urlscan
https://urlscan.io/result/23bc0a0a-ed71-4feb-a4d7-5375568647de/
https://urlscan.io/result/f86e57d7-ea6f-4163-bde2-5f5128b8d2de/
Image of legitimate site used for phishing site:
https://www.post.japanpost.jp/index.html
Site owner:
Japan Post Co., Ltd.
show less
Phishing
Email Spam
Showing 1 to
4
of 4 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩