Counter Phishing Team - AbuseIPDB User Profile

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User Counter Phishing Team joined AbuseIPDB in November 2021 and has reported 789 IP addresses.

Standing (weight) is good.

INACTIVE USER

IP	Date	Comment	Categories
🇰🇷 91.204.227.86	25 Oct 2022	<Phishing URL> http://dtzvokpjov.duckdns.org/ja/main http://dwfgqzvdyt.duckdns.org/ja/main http:/ ... show more <Phishing URL> http://dtzvokpjov.duckdns.org/ja/main http://dwfgqzvdyt.duckdns.org/ja/main http://dwtzxtngha.duckdns.org/ja/main http://dzsdnweazg.duckdns.org/ja/main http://edpdredrri.duckdns.org/ja/main http://edqferqeqq.duckdns.org/ja/main http://cpmxsbxfbq.duckdns.org/ja/main http://cpuviwiott.duckdns.org/ja/main http://crhzwfvbwm.duckdns.org/ja/main http://cyhpbkszmj.duckdns.org/ja/main http://dbammlsugt.duckdns.org/ja/main http://diemfrvdib.duckdns.org/ja/main <Evidence> ・Twitter https://twitter.com/NaomiSuzuki_/status/1584764176169566208 https://twitter.com/NaomiSuzuki_/status/1584740767087882240 https://twitter.com/NaomiSuzuki_/status/1584550476414349312 show less	Fraud Orders Phishing Email Spam
🇺🇸 23.247.42.161	25 Oct 2022	・Twitter きょろ@morapura777 https://twitter.com/morapura777/status/1583701970489315334 <Phishing U ... show more ・Twitter きょろ@morapura777 https://twitter.com/morapura777/status/1583701970489315334 <Phishing URL> https://amnpms.com/index.php/index/Login/index.html https://amnpmd.com/index.php/index/Login/index.html https://amnpmc.com/index.php/index/Login/index.html https://amnpmf.com/index.php/index/Login/index.html https://amnpme.com/index.php/index/Login/index.html https://azopmgd.com/index.php/index/Login/index.html https://azopmge.com/index.php/index/Login/index.html https://amnpmb.com/index.php/index/Login/index.html https://amnpma.com/index.php/index/Login/index.html https://azopmra.com/index.php/index/Login/index.html https://amnpgs.com/index.php/index/Login/index.html https://azopmsf.com/index.php/index/Login/index.html https://amnpml.com/index.php/index/Login/index.html https://amnpmr.com/index.php/index/Login/index.html show less	Fraud Orders Phishing Email Spam
🇰🇷 91.204.227.21	24 Oct 2022	<<Phishing URL>> http://y1.gdupe.com/ http://2132.gdupe.com/ http://69.bcrvh.com/ http://4pvu.bc ... show more <<Phishing URL>> http://y1.gdupe.com/ http://2132.gdupe.com/ http://69.bcrvh.com/ http://4pvu.bcrvh.com/ http://hb.bcrvh.com/ http://r.bcrvh.com/ http://4r1p.bcrvh.com/ http://j8x.gdupe.com/ http://gdupe.com/ http://rdt3.gdupe.com/ http://7jxo.bcrvh.com/ <Evidence> Virus Total https://www.virustotal.com/gui/ip-address/91.204.227.21/relations show less	Phishing Email Spam Exploited Host
🇰🇷 91.204.227.86	24 Oct 2022	<<Phishing URL>> http://qintqxsmta.duckdns.org/ja/main http://pbwsjbfwbx.duckdns.org/ja/main http ... show more <<Phishing URL>> http://qintqxsmta.duckdns.org/ja/main http://pbwsjbfwbx.duckdns.org/ja/main http://pfdulqwzfy.duckdns.org/ja/main http://pjkcjqytrr.duckdns.org/ja/main http://pkcuqxjahl.duckdns.org/ja/main http://pltxfpzcmo.duckdns.org/ja/main http://pnlxxwiiva.duckdns.org/ja/main http://ojtmhdijox.duckdns.org/ja/main http://omjywjdkzz.duckdns.org/ja/main http://orxjejqjbi.duckdns.org/ja/main http://osyxunwbai.duckdns.org/ja/main http://ouzednruag.duckdns.org/ja/main http://ozytcwnrqn.duckdns.org/ja/main show less	Fraud Orders Phishing Email Spam
🇰🇷 91.204.227.20	20 Oct 2022	Phishing URL: http://nhusb.com/ http://oe.nhusb.com/ ---------------------------- Twitter: ht ... show more Phishing URL: http://nhusb.com/ http://oe.nhusb.com/ ---------------------------- Twitter: https://twitter.com/NaomiSuzuki_/status/1582579200019824644 show less	Phishing Email Spam Exploited Host
🇰🇷 91.204.227.85	18 Oct 2022	Phishing URL: http://jwvprdoxow.duckdns.org/ja/main http://jzqjbulxgm.duckdns.org/ja/main http:// ... show more Phishing URL: http://jwvprdoxow.duckdns.org/ja/main http://jzqjbulxgm.duckdns.org/ja/main http://kccxuxznrn.duckdns.org/ja/main http://kcwuisdbmi.duckdns.org/ja/main http://kjjwvvhhuh.duckdns.org/ja/main http://kjwvvhugtg.duckdns.org/ja/main http://ixiaevnsia.duckdns.org/ja/main http://iyqimslrww.duckdns.org/ja/main http://iyrysnhmyf.duckdns.org/ja/main http://izfindtbqx.duckdns.org/ja/main http://jnannnmzyy.duckdns.org/ja/main http://jullxwwkjw.duckdns.org/ja/main <Evidence> ・Urlscan https://urlscan.io/result/ac21e692-5d8a-46cf-bea8-2709482f2621/ https://urlscan.io/result/2f58e2fc-0b56-4ba5-8e82-7837ee7cbc84/ https://urlscan.io/result/9c73e500-5ed7-414c-a642-ef195dd9245e/ https://urlscan.io/result/26c0774b-26cf-4836-91a9-4e962ac14e6d/ ・Check-Host https://check-host.net/ip-info?host=kcwuisdbmi.duckdns.org https://check-host.net/check-dns?host=kcwuisdbmi.duckdns.org show less	Fraud Orders Phishing Email Spam
🇰🇷 91.204.227.85	17 Oct 2022	Phishing URL: http://idauhcngys.duckdns.org/ja/main http://ikatrzfpvo.duckdns.org/ja/main http:// ... show more Phishing URL: http://idauhcngys.duckdns.org/ja/main http://ikatrzfpvo.duckdns.org/ja/main http://imrwtkphok.duckdns.org/ja/main http://iucdlocxmm.duckdns.org/ja/main http://iuhhmonmly.duckdns.org/ja/main http://ivjwllznme.duckdns.org/ja/main http://hsejjwwvhu.duckdns.org/ja/main http://hsmvqbmnrl.duckdns.org/ja/main http://htghiimmzy.duckdns.org/ja/main http://hwbvnsbyjb.duckdns.org/ja/main http://hzyihemjrs.duckdns.org/ja/main http://ibjgdawshr.duckdns.org/ja/main http://fzaxhrscpn.duckdns.org/ja/main http://gavwtdnviu.duckdns.org/ja/main http://gjmnocpdmn.duckdns.org/ja/main http://gkfyrwzdpm.duckdns.org/ja/main http://glbdscoges.duckdns.org/ja/main http://grejwiuiuh.duckdns.org/ja/main http://fkvqaoajbl.duckdns.org/ja/main http://frfhaobnon.duckdns.org/ja/main http://fssshvwwtu.duckdns.org/ja/main http://funskxemqg.duckdns.org/ja/main http://fvfazinuyh.duckdns.org/ja/main http://fvmqljxvnt.duckdns.org/ja/main show less	Fraud Orders Phishing Email Spam
🇰🇷 91.204.227.85	05 Oct 2022	Phishing URL: http://dhwkkkkbtt.duckdns.org/ja/main http://dinmnpfxnw.duckdns.org/ja/main http:// ... show more Phishing URL: http://dhwkkkkbtt.duckdns.org/ja/main http://dinmnpfxnw.duckdns.org/ja/main http://dkmjtcmufu.duckdns.org/ja/main http://dlvyjgblvt.duckdns.org/ja/main http://dnfpcprbwn.duckdns.org/ja/main http://dozmnmzzll.duckdns.org/ja/main http://dpnaammlly.duckdns.org/ja/main http://dibyupukdw.duckdns.org/ja/main http://dippizqvaf.duckdns.org/ja/main http://dliwahcwqj.duckdns.org/ja/main http://dmxfqvdarg.duckdns.org/ja/main http://doaooaanzr.duckdns.org/ja/main http://dpertsrwvv.duckdns.org/ja/main http://cxjrcmpakv.duckdns.org/ja/main http://dbaazmlqqq.duckdns.org/ja/main http://dcivvrxdlz.duckdns.org/ja/main http://derjwxjjjx.duckdns.org/ja/main http://dgmtaxbhyq.duckdns.org/ja/main http://dhqibvvpkn.duckdns.org/ja/main http://crvpxtbtkl.duckdns.org/ja/main http://cyhspenlgd.duckdns.org/ja/main http://dbnaamdddr.duckdns.org/ja/main http://delykxjkxy.duckdns.org/ja/main http://dfrxjqnzjh.duckdns.org/ja/main http://dhpuajungq.duckdns.org/ja/main show less	Fraud Orders Phishing Email Spam
🇰🇷 91.204.227.85	03 Oct 2022	Phishing URL: http://zpfilpefpr.duckdns.org/ja/main http://zwigqgrzqo.duckdns.org/ja/main http:// ... show more Phishing URL: http://zpfilpefpr.duckdns.org/ja/main http://zwigqgrzqo.duckdns.org/ja/main http://zxvvihttsn.duckdns.org/ja/main http://aabiwylxxx.duckdns.org/ja/main http://znabhovuau.duckdns.org/ja/main http://zqoszgzsyq.duckdns.org/ja/main http://ztuetrygda.duckdns.org/ja/main http://zxrppkxovn.duckdns.org/ja/main http://zzcooqpdpp.duckdns.org/ja/main http://abphvixwzz.duckdns.org/ja/main http://ypyeouazee.duckdns.org/ja/main http://yxonannzzn.duckdns.org/ja/main http://yzchogphms.duckdns.org/ja/main http://zastvwwjvv.duckdns.org/ja/main http://zeygnjbhvf.duckdns.org/ja/main http://zldxrzunju.duckdns.org/ja/main show less	Fraud Orders Phishing Email Spam
🇰🇷 91.204.227.85	03 Oct 2022	Phishing URL: http://ybdfworcxp.duckdns.org/ja/main http://yblqpgbhot.duckdns.org/ja/main http:// ... show more Phishing URL: http://ybdfworcxp.duckdns.org/ja/main http://yblqpgbhot.duckdns.org/ja/main http://ydqwnqhmqu.duckdns.org/ja/main http://yeptpvnetc.duckdns.org/ja/main http://yjcwofyvpl.duckdns.org/ja/main http://ylmzyypcob.duckdns.org/ja/main http://ypbnamaann.duckdns.org/ja/main http://wyllzoocbo.duckdns.org/ja/main http://xhyzaomnkr.duckdns.org/ja/main http://xkwkxkkkkq.duckdns.org/ja/main http://xnzzmllkwy.duckdns.org/ja/main http://xtyeauxeyz.duckdns.org/ja/main http://ybbelowzcw.duckdns.org/ja/main http://yblcfouegf.duckdns.org/ja/main http://ybwkwjwcpd.duckdns.org/ja/main http://yeffffllaa.duckdns.org/ja/main http://yfixxxzrjd.duckdns.org/ja/main http://ykaprtvklc.duckdns.org/ja/main http://ynqhkqcglc.duckdns.org/ja/main http://ypbnamaann.duckdns.org/ja/main http://yrbadbqdgd.duckdns.org/ja/main http://yyiwjqxltv.duckdns.org/ja/main http://zaccsstgoj.duckdns.org/ja/main http://zbdhetghtl.duckdns.org/ja/main http://zkcqqefere.duckdns.org/ja/main show less	Fraud Orders Phishing Email Spam
🇰🇷 91.204.227.85	30 Sep 2022	Phishing URL: http://jactofobny.duckdns.org/ja/main http://jcyqjqxvph.duckdns.org/ja/main http:// ... show more Phishing URL: http://jactofobny.duckdns.org/ja/main http://jcyqjqxvph.duckdns.org/ja/main http://jfcspnkhrh.duckdns.org/ja/main http://jiabmvdmsq.duckdns.org/ja/main http://jnvqzsmuvd.duckdns.org/ja/main http://jpdwjjwiwr.duckdns.org/ja/main http://ixpyrwmuxa.duckdns.org/ja/main http://jbwjjsczwk.duckdns.org/ja/main http://jdzjtvfpal.duckdns.org/ja/main http://jhggfssreg.duckdns.org/ja/main http://jkpdzvraty.duckdns.org/ja/main http://joiwgtloxr.duckdns.org/ja/main http://jrikmocalo.duckdns.org/ja/main http://jwlmdesyhk.duckdns.org/ja/main http://wfofozjfqr.duckdns.org/ja/main http://wiaesfykjo.duckdns.org/ja/main http://wofpzbegav.duckdns.org/ja/main http://wpkckdiezi.duckdns.org/ja/main http://juyxlllxjw.duckdns.org/ja/main http://wciktoyfye.duckdns.org/ja/main http://whtfyllyxk.duckdns.org/ja/main http://wnubhtlpcv.duckdns.org/ja/main http://woybzuphbi.duckdns.org/ja/main http://wwxppcqrdr.duckdns.org/ja/main show less	Fraud Orders Phishing Email Spam
🇰🇷 91.204.227.85	28 Sep 2022	Phishing URL: http://hxcjvczwqj.duckdns.org/ja/main http://hyubrlvtfe.duckdns.org/ja/main http:// ... show more Phishing URL: http://hxcjvczwqj.duckdns.org/ja/main http://hyubrlvtfe.duckdns.org/ja/main http://icvpmfqwey.duckdns.org/ja/main http://igzgowsnjx.duckdns.org/ja/main http://iiqhpieajg.duckdns.org/ja/main http://ilgmzchria.duckdns.org/ja/main http://hwbfxfofim.duckdns.org/ja/main http://hymymsfeao.duckdns.org/ja/main http://hztuovpiqk.duckdns.org/ja/main http://idxljeypbd.duckdns.org/ja/main http://ihdwfoecsm.duckdns.org/ja/main http://iiuzylzylx.duckdns.org/ja/main http://inaicwpldh.duckdns.org/ja/main http://isuaofkqtr.duckdns.org/ja/main http://ittsglxxjj.duckdns.org/ja/main http://ivhgtgsglt.duckdns.org/ja/main http://ivrrpsifyf.duckdns.org/ja/main http://iwpccpoook.duckdns.org/ja/main http://imqtzwmsjb.duckdns.org/ja/main http://isjjrcdtjq.duckdns.org/ja/main http://itsewivhtt.duckdns.org/ja/main http://iutguzlykj.duckdns.org/ja/main http://ivomrmdvjx.duckdns.org/ja/main http://iwnevohazu.duckdns.org/ja/main show less	Fraud Orders Phishing Email Spam
🇰🇷 91.204.227.85	22 Sep 2022	Phishing URL: http://qpooocbggg.duckdns.org/ja/main http://rpqreqppce.duckdns.org/ja/main http:// ... show more Phishing URL: http://qpooocbggg.duckdns.org/ja/main http://rpqreqppce.duckdns.org/ja/main http://rwpuagzmto.duckdns.org/ja/main http://sfsssffxwy.duckdns.org/ja/main http://trdcqpcoss.duckdns.org/ja/main http://uckdweoied.duckdns.org/ja/main http://rdqqdvvuuu.duckdns.org/ja/main http://rtkufpnbkc.duckdns.org/ja/main http://rxssmglhal.duckdns.org/ja/main http://skslgyxguq.duckdns.org/ja/main http://uaqfyfzskb.duckdns.org/ja/main http://uoluwfoxhe.duckdns.org/ja/main http://lepygpltdm.duckdns.org/ja/main http://lklyxxpcop.duckdns.org/ja/main http://lmyjiqewqo.duckdns.org/ja/main http://nyxkkkjjnn.duckdns.org/ja/main http://qcrrdqcpoa.duckdns.org/ja/main http://qivsbzvqlo.duckdns.org/ja/main http://ldmvxtbjra.duckdns.org/ja/main http://ljvjwwwoaa.duckdns.org/ja/main http://lkzmzmmldc.duckdns.org/ja/main http://losydwrryt.duckdns.org/ja/main http://prmztlgoha.duckdns.org/ja/main http://qfryiucwga.duckdns.org/ja/main show less	Fraud Orders Phishing Email Spam
🇰🇷 91.204.227.85	21 Sep 2022	Phishing URL: http://hsdqpugtss.duckdns.org/ja/main http://jiijwivugy.duckdns.org/ja/main http:// ... show more Phishing URL: http://hsdqpugtss.duckdns.org/ja/main http://jiijwivugy.duckdns.org/ja/main http://jutughgkkk.duckdns.org/ja/main http://kjxxpddppc.duckdns.org/ja/main http://krleiaedxg.duckdns.org/ja/main http://lckygnfxew.duckdns.org/ja/main http://hkotbvnmfk.duckdns.org/ja/main http://icxsxzboop.duckdns.org/ja/main http://jpplsnjfnl.duckdns.org/ja/main http://kinibglqvu.duckdns.org/ja/main http://kngjexhdlq.duckdns.org/ja/main http://kzibzsimcv.duckdns.org/ja/main http://ldmvxtbjra.duckdns.org/ja/main http://dvwfbwexdl.duckdns.org/ja/main http://eeiuhuhuwv.duckdns.org/ja/main http://fhyfbjqhdl.duckdns.org/ja/main http://fvslwqvnuy.duckdns.org/ja/main http://gezwurokmi.duckdns.org/ja/main http://gwklynazer.duckdns.org/ja/main http://dubibfexqk.duckdns.org/ja/main http://edfwjwkwik.duckdns.org/ja/main http://evygtyhotm.duckdns.org/ja/main http://fvemzpoeuo.duckdns.org/ja/main http://gewwwvjjvv.duckdns.org/ja/main http://gvhoeurpfu.duckdns.org/ja/main show less	Fraud Orders Phishing Email Spam
🇺🇸 3.87.53.215	07 Aug 2022	・Twitter Bassist Steve⭐️@bassist_Steve https://twitter.com/bassist_Steve/status/155612014625910374 ... show more ・Twitter Bassist Steve⭐️@bassist_Steve https://twitter.com/bassist_Steve/status/1556120146259103744 <<Phishing URL>> IP: 3.87.53.215 14618 (AMAZON-AES) http://ws.bu.lhcb5-vjtfl.com/392297228678 ↓ IP: 216.245.209.156 46475 (LIMESTONENETWORKS) http://bandit-mirage.com/FQvxRypbaH/ ↓ IP: 216.245.209.156 46475 (LIMESTONENETWORKS) http://bandit-mirage.com/log_index.php?page=allmess_miru&s=1659836471&cid=12489&mid=56474353&ddv=cd16881038e30183b6ce4409f357fa47 ・Urlscan https://urlscan.io/result/8453f95b-7020-431d-a6f9-696021aa66b7/ show less	Fraud Orders Phishing Email Spam
🇺🇸 54.165.157.137	07 Aug 2022	・Twitter やんず@tomiyanz https://twitter.com/tomiyanz/status/1556111966120574976 <Phishing URL> I ... show more ・Twitter やんず@tomiyanz https://twitter.com/tomiyanz/status/1556111966120574976 <Phishing URL> IP: 54.165.157.137 14618 (AMAZON-AES) http://po.xr.yjc-dcdujm.ink/85032888933 ↓ IP: 216.245.209.156 46475 (LIMESTONENETWORKS) http://bandit-mirage.com/Gy1jpgE/Cj/ ↓ IP: 216.245.209.156 46475 (LIMESTONENETWORKS) http://bandit-mirage.com/log_index.php?page=allmess_miru&s=1659836779&cid=12489&mid=56474353&ddv=43f7b728f95ed8dddf43f584478b1236 ・Urlscan https://urlscan.io/result/8af04016-c64a-4b5f-9abc-f3bf10277c58/ show less	Fraud Orders Phishing Email Spam
🇺🇸 216.245.209.156	07 Aug 2022	・Twitter やんず@tomiyanz https://twitter.com/tomiyanz/status/1556111966120574976 IP: 54.165.157.13 ... show more ・Twitter やんず@tomiyanz https://twitter.com/tomiyanz/status/1556111966120574976 IP: 54.165.157.137 14618 (AMAZON-AES) http://po.xr.yjc-dcdujm.ink/85032888933 ↓ IP: 216.245.209.156 46475 (LIMESTONENETWORKS) http://bandit-mirage.com/Gy1jpgE/Cj/ ↓ IP: 216.245.209.156 46475 (LIMESTONENETWORKS) http://bandit-mirage.com/log_index.php?page=allmess_miru&s=1659836779&cid=12489&mid=56474353&ddv=43f7b728f95ed8dddf43f584478b1236 ・Urlscan https://urlscan.io/result/8af04016-c64a-4b5f-9abc-f3bf10277c58/ show less	Fraud Orders Phishing Email Spam
🇯🇵 113.212.143.246	07 Aug 2022	・Twitter シン・マクラ(低浮上)@SiN28103234 https://twitter.com/SiN28103234/status/1555841138266820608 Phi ... show more ・Twitter シン・マクラ(低浮上)@SiN28103234 https://twitter.com/SiN28103234/status/1555841138266820608 Phishing IP and URL: 113.212.143.246 56291 (ACE-AS-AP Ace) http://5280693621.duwnea-td.net ↓ IP: 153.125.147.227 7684 (SAKURA-A SAKURA Internet Inc.) http://jjie-xatu.com/piT/M/84/Z ↓ IP: 153.125.147.227 7684 (SAKURA-A SAKURA Internet Inc.) http://jjie-xatu.com/log_index.php?page=allmess_miru&s=1659746177&cid=12489&mid=4140624&ddv=0a2ea0b9ec0da47c8f43347665c068f8 ・Urlscan https://urlscan.io/result/8672214b-505a-4af7-9c66-51d8a7a3e498/ show less	Fraud Orders Phishing Email Spam
🇯🇵 153.125.147.227	07 Aug 2022	・Twitter よりりん🐾ノフジャンキー@yorimiti327 https://twitter.com/yorimiti327/status/1556091747049951233 IP ... show more ・Twitter よりりん🐾ノフジャンキー@yorimiti327 https://twitter.com/yorimiti327/status/1556091747049951233 IP address: 113.212.143.246 56291 (ACE-AS-AP Ace) http://8664473145.dear-brawnd.net ↓ IP address: 153.125.147.227 7684 (SAKURA-A SAKURA Internet Inc.) http://jjie-xatu.com/slZ2C/im/g ↓ IP address: 153.125.147.227 7684 (SAKURA-A SAKURA Internet Inc.) http://jjie-xatu.com/log_index.php?page=allmess_miru&s=1659829568&cid=12489&mid=4155713&ddv=109bf30a21f1c63acfc82fe62b58425f ・Urlscan https://urlscan.io/result/7f8babbb-e232-4f58-969a-719b4bcf0248/ show less	Fraud Orders Phishing Email Spam
🇰🇷 91.204.227.20	05 Aug 2022	The IP Address(91.204.227.20) has been active since June 23, 2022. It seems that the domain, or rat ... show more The IP Address(91.204.227.20) has been active since June 23, 2022. It seems that the domain, or rather, the IP has been abused in setting up phishing sites. The abused website(s) are looked like still running(active). You can access the phishing site only from your smartphone (Android OS). The "japanpost.apk" file for android malware will be downloaded. Phishing URL: http://mnhdo.com/sdfgewrwerew/ http://35m.mnhdo.com/sdfgewrwerew/ ・Virus Total https://www.virustotal.com/gui/ip-address/91.204.227.20/relations ・Urlscan https://urlscan.io/ip/91.204.227.20 https://urlscan.io/result/73b8bbfc-4ca8-47c6-b41d-14692b0013c4/ https://urlscan.io/result/37dc9681-e334-420e-a20b-977aa974484e/ ・Twitter https://twitter.com/NaomiSuzuki_/status/1555402839903858689 For your information, the fraudulent website appears to be a forgery of this legitimate website: https://www.post.japanpost.jp/index.htmlSite owner: Japan Post Co., Ltd. show less	Phishing Email Spam Exploited Host
🇯🇵 192.51.188.108	05 Aug 2022	The IP Address(192.51.188.108) has been active since June 22, 2022. It seems that the domain, or ra ... show more The IP Address(192.51.188.108) has been active since June 22, 2022. It seems that the domain, or rather, the IP has been abused in setting up phishing sites. The abused website(s) are looked like still running(active). You can access the phishing site only from your smartphone (Android OS). When you access the URL, Android malware will be downloaded. Phishing URL: http://ndyta.com/fgrrefeedh/ http://cgrgd.com/fgrrefeedh/ ・Virus Total https://www.virustotal.com/gui/ip-address/192.51.188.108/relations ・Urlscan https://urlscan.io/ip/192.51.188.108 https://urlscan.io/result/d6791cef-1986-4097-8b70-ee093794f20f/ https://urlscan.io/result/2b21b343-db26-448a-a435-4a1eb478f5d1/ ・Twitter https://twitter.com/NaomiSuzuki_/status/1554856638229913601 For your information, the fraudulent website appears to be a forgery of this legitimate website: https://www.post.japanpost.jp/index.htmlSite owner: Japan Post Co., Ltd. show less	Phishing Email Spam Exploited Host
🇰🇷 103.80.134.41	04 Aug 2022	Since June 23, 2022, the phishing site is currently operating at IP address: 103.80.134.41 You can ... show more Since June 23, 2022, the phishing site is currently operating at IP address: 103.80.134.41 You can also access the phishing URL only from your smartphone (iOS). Phishing URL: http://ystwbimqnv.duckdns.org/ja/main http://ytlqiosxbf.duckdns.org/ja/main The following security sites are evidence of phishing sites. ・Virus Total https://www.virustotal.com/gui/ip-address/103.80.134.41/relations ・Urlscan https://urlscan.io/ip/103.80.134.41 https://urlscan.io/result/8966bb29-c2e2-4511-a8a9-cd7d946e3c10/ https://urlscan.io/result/dbc510eb-9d60-4a61-9fa5-4af3a7da0a17/ ・Twitter https://twitter.com/NaomiSuzuki_/status/1555378278697148416 https://twitter.com/NaomiSuzuki_/status/1555196999427047426 For your information, the fraudulent website appears to be a forgery of this legitimate website: https://appleid.apple.com/ja_JP Site owner: Apple inc. show less	Fraud Orders Phishing Email Spam
🇰🇷 103.80.134.41	04 Aug 2022	Since June 23, 2022, the phishing site is currently operating at IP address: 103.80.134.41 You can ... show more Since June 23, 2022, the phishing site is currently operating at IP address: 103.80.134.41 You can also access the phishing URL only from your smartphone (iOS). Phishing URL: http://xnvceucjbg.duckdns.org/ja/main http://xiujqppanx.duckdns.org/ja/main The following security sites are evidence of phishing sites. ・Virus Total https://www.virustotal.com/gui/ip-address/103.80.134.41/relations ・Urlscan https://urlscan.io/ip/103.80.134.41 https://urlscan.io/result/65946da5-e48c-450d-8498-e6a231e50b1f/ https://urlscan.io/result/c4ae43d5-ce5f-4219-8ec9-45761b7d6de9/ ・Twitter https://twitter.com/NaomiSuzuki_/status/1555038288381366273 For your information, the fraudulent website appears to be a forgery of this legitimate website: https://appleid.apple.com/ja_JP Site owner: Apple inc. show less	Fraud Orders Phishing Email Spam
🇰🇷 91.204.227.20	02 Aug 2022	The IP Address(192.51.188.108) has been active since June 22, 2022. It seems that the domain, or ra ... show more The IP Address(192.51.188.108) has been active since June 22, 2022. It seems that the domain, or rather, the IP has been abused in setting up phishing sites. The abused website(s) are looked like still running(active). You can access the phishing site only from your smartphone (Android OS). When you access the URL, Android malware will be downloaded. Phishing URL: http://eqsnv.com/sdfgewrwerew/ http://k4p.bmegy.com/sdfgewrwerew/ ・Virus Total https://www.virustotal.com/gui/ip-address/192.51.188.108/relations ・Urlscan https://urlscan.io/ip/192.51.188.108 https://urlscan.io/result/5c1d0de6-62f6-4b12-8fe3-d351b6551803/ https://urlscan.io/result/5b4e79d8-a9a6-4031-8bf2-21c63ef497b6/ ・Twitter https://twitter.com/NaomiSuzuki_/status/1554485455055646720 For your information, the fraudulent website appears to be a forgery of this legitimate website: https://www.post.japanpost.jp/index.htmlSite owner: Japan Post Co., Ltd. show less	Phishing Email Spam Exploited Host
🇰🇷 91.204.227.20	02 Aug 2022	The IP Address(91.204.227.20) has been active since June 23, 2022. It seems that the domain, or rat ... show more The IP Address(91.204.227.20) has been active since June 23, 2022. It seems that the domain, or rather, the IP has been abused in setting up phishing sites. The abused website(s) are looked like still running(active). You can access the phishing site only from your smartphone (Android OS). The "japanpost.apk" file for android malware will be downloaded. Phishing URL: http://diwsy.com/sdfgewrwerew/ http://bmegy.com/sdfgewrwerew/ ・Virus Total https://www.virustotal.com/gui/ip-address/91.204.227.20/relations ・Urlscan https://urlscan.io/ip/91.204.227.20 https://urlscan.io/result/efc8848e-30eb-4e0a-8aa4-de3fd870a90b/ https://urlscan.io/result/26e34051-63b6-4f77-b974-b32322250cbc/ ・Twitter https://twitter.com/NaomiSuzuki_/status/1554315210533765120 For your information, the fraudulent website appears to be a forgery of this legitimate website: https://www.post.japanpost.jp/index.htmlSite owner: Japan Post Co., Ltd. show less	Phishing Email Spam Exploited Host