Since December 14, 2021, the phishing site is currently operating at
IP address: 92.118.147.27.
Yo ...
show moreSince December 14, 2021, the phishing site is currently operating at
IP address: 92.118.147.27.
You can also access the phishing URL only from your smartphone.
Phishing URL:
http://sdnvjrftdg.duckdns.org/japanpost/
http://vbzieeavnq.duckdns.org/japanpost/
http://niwqenizfe.duckdns.org/japanpost/
The following security sites are evidence of phishing sites.
・Virus Total
https://www.virustotal.com/gui/ip-address/92.118.147.27/relations
https://www.virustotal.com/gui/domain/sdnvjrftdg.duckdns.org/relations
https://www.virustotal.com/gui/domain/vbzieeavnq.duckdns.org/relations
https://www.virustotal.com/gui/domain/niwqenizfe.duckdns.org/relations
・Urlscan
https://urlscan.io/result/e8c492cf-7ef4-4f9e-b4d3-38e2859ed0a8/
Image of legitimate site used for phishing site:
https://www.post.japanpost.jp/index.html
Site owner:
Japan Post Co., Ltd.
show less
The IP Address(92.118.147.27) has been active since December 14, 2021.
It seems that the domain, or ...
show moreThe IP Address(92.118.147.27) has been active since December 14, 2021.
It seems that the domain, or rather, the IP has been abused in setting up phishing sites.
The abused website(s) are looked like still running(active).
They are located at the following URL&IP Address:
You can access the phishing site only from your smartphone.
Phishing URL:
http://rmhvfrqtlq.duckdns.org/japanpost/
http://rjvevmlcav.duckdns.org/japanpost/
http://qxmlcqqkhf.duckdns.org/japanpost/
http://neoghkvyy.duckdns.org/japanpost/
http://noeepepptx.duckdns.org/japanpost/
http://pobbssrduj.duckdns.org/japanpost/
・Virus Total
https://www.virustotal.com/gui/ip-address/92.118.147.27/relations
・Urlscan
https://urlscan.io/result/e7704d1e-6e0f-4067-a2c5-79a757b817b1/
For your information, the fraudulent website appears to be a forgery of this legitimate
website:
https://www.post.japanpost.jp/index.html
Site owner:
Japan Post Co., Ltd.
show less
Phishing
Showing 1 to
2
of 2 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩