Sending host fbzhdk.springvalleyranches.com of phishing emails impersonating a card company to users ...
show moreSending host fbzhdk.springvalleyranches.com of phishing emails impersonating a card company to users in Japan resolves to this IP. Seen on 2026-10-24 (source: https://x.com/kadwukeusu10th/status/2113844389516833190). I did not open the links.
show less
Sending host meticulous.fertilityvancouver.com of phishing emails impersonating the National Tax Age ...
show moreSending host meticulous.fertilityvancouver.com of phishing emails impersonating the National Tax Agency to users in Japan resolves to this IP. Seen on 2026-10-24 (source: an X post by @ussainoh at 13:22 JST). I did not open the links.
show less
Sending host hypothetical.jsbynlh.com of phishing emails impersonating the National Tax Agency to us ...
show moreSending host hypothetical.jsbynlh.com of phishing emails impersonating the National Tax Agency to users in Japan resolves to this IP. Seen on 2026-10-24 (source: an X post by @motosuminosabu). I did not open the links.
show less
Sending host ptzw.juyouliang666.com of phishing emails impersonating Sumitomo Mitsui Card (Vpass) to ...
show moreSending host ptzw.juyouliang666.com of phishing emails impersonating Sumitomo Mitsui Card (Vpass) to users in Japan resolves to this IP. Seen on 2026-10-24 (source: https://meiwakumail.jp/mail/96504/). I did not open the links.
show less
Sending host hegmyyfdos.aiatoledo.com of phishing emails impersonating SMBC Card (Vpass) to users in ...
show moreSending host hegmyyfdos.aiatoledo.com of phishing emails impersonating SMBC Card (Vpass) to users in Japan resolves to this IP. Seen on 2026-10-24 (source: https://x.com/_kazetonami/status/2113847380709904639). I did not open the links.
show less
Sending host r6kx5q.ankurimpex.com of phishing emails impersonating Lawson Ticket to users in Japan ...
show moreSending host r6kx5q.ankurimpex.com of phishing emails impersonating Lawson Ticket to users in Japan resolves to this IP. Seen on 2026-10-24 (source: https://x.com/kadwukeusu10th/status/2113844389516833190). I did not open the links.
show less
Sending host mail38.aqkda.com of phishing emails impersonating Amazon Prime to users in Japan resolv ...
show moreSending host mail38.aqkda.com of phishing emails impersonating Amazon Prime to users in Japan resolves to this IP. Seen on 2026-10-24 (source: an X post by @motosuminosabu at 11:04 JST). I did not open the links.
show less
Sending host bqqvo2.dreamwavechair.com of phishing emails impersonating Lawson Ticket to users in Ja ...
show moreSending host bqqvo2.dreamwavechair.com of phishing emails impersonating Lawson Ticket to users in Japan resolves to this IP. Seen on 2026-10-24 (source: https://x.com/excaliburu/status/2113779429071802418). I did not open the links.
show less
Sent unsolicited fortune-telling spam to a user in Japan through smtp.gmail.com on 2026-10-24, using ...
show moreSent unsolicited fortune-telling spam to a user in Japan through smtp.gmail.com on 2026-10-24, using the HELO name ec2-3-232-62-116.compute-1.amazonaws.com, which is not a host on this network.
show less
Hosts se.prasmine.com and se.veskomo.com, a fortune-telling scam site advertised by spam from rotati ...
show moreHosts se.prasmine.com and se.veskomo.com, a fortune-telling scam site advertised by spam from rotating Gmail accounts to users in Japan on 2026-10-23 and 10-24. The A records rotate between EC2 IPs; this IP was in use on 2026-10-24 afternoon JST.
show less
Hosts cucinetrain.com (redirect step), a phishing site impersonating Lawson Ticket (targets users in ...
show moreHosts cucinetrain.com (redirect step), a phishing site impersonating Lawson Ticket (targets users in Japan), seen on 2026-10-24 (source: https://x.com/excaliburu/status/2113779429071802418). I did not open the link.
show less
Hosts qqqzp.top, a phishing site impersonating Apple (via SMS) (targets users in Japan), seen on 202 ...
show moreHosts qqqzp.top, a phishing site impersonating Apple (via SMS) (targets users in Japan), seen on 2026-10-24 (source: an X post by @ada_MAX_ at 12:11 JST). I did not open the link.
show less
Hosts www5.saison-cu.com and chat.haztzs.com, a phishing site impersonating Saison Card (targets use ...
show moreHosts www5.saison-cu.com and chat.haztzs.com, a phishing site impersonating Saison Card (targets users in Japan), seen on 2026-10-24 (source: an X post by @masaomi346 at 12:07 JST). I did not open the link.
show less
Hosts nhk-pro.vlz9sh4.pro and 52kyu87.pro, a phishing site impersonating NHK and Nintendo (targets u ...
show moreHosts nhk-pro.vlz9sh4.pro and 52kyu87.pro, a phishing site impersonating NHK and Nintendo (targets users in Japan), seen on 2026-10-24 (source: https://x.com/delicious_unaju/status/2113863663081943511). I did not open the link.
show less
Hosts aiatoledo.com, a phishing site impersonating SMBC Card (Vpass) (targets users in Japan), seen ...
show moreHosts aiatoledo.com, a phishing site impersonating SMBC Card (Vpass) (targets users in Japan), seen on 2026-10-24 (source: https://x.com/_kazetonami/status/2113847380709904639). I did not open the link.
show less
Hosts aeon.reoccee.cn and aeon.ssshopm.cn, a phishing site impersonating AEON Card (targets users in ...
show moreHosts aeon.reoccee.cn and aeon.ssshopm.cn, a phishing site impersonating AEON Card (targets users in Japan), seen on 2026-10-24 (source: https://x.com/delicious_unaju/status/2113864445466427447). I did not open the link.
show less
Hosts americanekyess.bik28q.info and saisoncdfe.laxosky.asia, a phishing site impersonating American ...
show moreHosts americanekyess.bik28q.info and saisoncdfe.laxosky.asia, a phishing site impersonating American Express and Saison Card (targets users in Japan), seen on 2026-10-24 (source: https://x.com/delicious_unaju/status/2113863554466201887). I did not open the link.
show less
Mail server of an advance-fee fraud email sent to users in Japan on 2026-10-24 00:53 JST from remy@m ...
show moreMail server of an advance-fee fraud email sent to users in Japan on 2026-10-24 00:53 JST from [email protected], posted publicly at meiwakumail.jp/mail/96500/ . myhikers.com A, MX and SPF all point to this IP; reverse DNS plonk.myhikers.com.
show less
Mail server of phishing emails impersonating Mitsubishi UFJ eSmart Securities to users in Japan: shw ...
show moreMail server of phishing emails impersonating Mitsubishi UFJ eSmart Securities to users in Japan: shwotai.com has A and MX on this IP and its SPF authorizes this range. Seen 2026-10-22, posted publicly on X (x.com/motosuminosabu/status/2113813759949164661). I did not open the links.
show less
Mail server of phishing emails impersonating Amazon Japan to users in Japan: mail13.jitesen.com has ...
show moreMail server of phishing emails impersonating Amazon Japan to users in Japan: mail13.jitesen.com has A and MX on this IP and its SPF authorizes this range. Seen 2026-10-23, posted publicly on X (x.com/yokomnn/status/2113539412365897958). I did not open the links.
show less
Hosts jiechengshiyouing.top, a phishing site impersonating UCS card (users in Japan), reported publi ...
show moreHosts jiechengshiyouing.top, a phishing site impersonating UCS card (users in Japan), reported publicly on X on 2026-10-23 (x.com/yoshiteru/status/2113583373335834787). I did not open the link.
show less
Hosts 2c2a9c.jackpot-deluxe.net, a phishing site impersonating Amazon Japan (users in Japan), report ...
show moreHosts 2c2a9c.jackpot-deluxe.net, a phishing site impersonating Amazon Japan (users in Japan), reported publicly on X on 2026-10-23 (x.com/masaomi346/status/2113600401912307882). I did not open the link.
show less
Hosts misuwh.com, a phishing site impersonating Sumitomo Mitsui Card (users in Japan), reported publ ...
show moreHosts misuwh.com, a phishing site impersonating Sumitomo Mitsui Card (users in Japan), reported publicly on X on 2026-10-24 (x.com/masaomi346/status/2113780708342903295). I did not open the link.
show less
Web and mail server of carnation.work (A, MX and SPF all point here), the landing domain of a fake l ...
show moreWeb and mail server of carnation.work (A, MX and SPF all point here), the landing domain of a fake lottery-winning email sent to users in Japan on 2026-10-23 23:43 JST (claim by bank transfer), posted publicly at meiwakumail.jp/mail/96489/ . I did not open the link.
show less
Mail server of phishing emails impersonating American Express to users in Japan: MX mail.17.gxlongch ...
show moreMail server of phishing emails impersonating American Express to users in Japan: MX mail.17.gxlongchang.com resolves to this IP and the SPF of 17.gxlongchang.com authorizes it. Email received 2026-10-24 01:05 JST from [email protected], posted publicly at meiwakumail.jp/mail/96495/ . I did not open the links.
show less
Email SpamPhishing
By clicking โAccept allโ, you agree to the storing of cookies on your device to remember preferences and
analyze site usage.
Read more
- Required to log into your AbuseIPDB account, and store these cookie preferences.