This IP address (87.251.64.218) appears to be hosting a coordinated phishing campaign targeting mult ...
show moreThis IP address (87.251.64.218) appears to be hosting a coordinated phishing campaign targeting multiple financial institutions. Public evidence from URLScan and VirusTotal associates the IP with numerous typosquatted domains impersonating banks and financial service providers, including multiple UMB Bank look-alike domains (e.g., ww1-umb.com, ww2-umb.com, ww7-umb.com, umb-connect.com, umb-conect.com), as well as domains targeting MTB Bank, NAB, OFX, Corpay, Ramp, Hancock Whitney, Nicolet Bank, Amegy Bank, Renasant Bank, and others.
URLScan search:
https://urlscan.io/search/#*page.ip%3A(87.251.64.218)
VirusTotal IP report:
https://www.virustotal.com/gui/ip-address/87.251.64.218
The repeated use of the same IP address to host numerous banking-themed phishing domains indicates ongoing abuse rather than an isolated incident. Please investigate this infrastructure and suspend any phishing content and associated services in accordance with your Abuse Policy.
show less