Counter Phishing Team - AbuseIPDB User Profile

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User Counter Phishing Team joined AbuseIPDB in November 2021 and has reported 789 IP addresses.

Standing (weight) is good.

INACTIVE USER

IP	Date	Comment	Categories
🇯🇵 192.51.188.108	20 Jul 2022	The IP Address(192.51.188.108) has been active since June 22, 2022. It seems that the domain, or ra ... show more The IP Address(192.51.188.108) has been active since June 22, 2022. It seems that the domain, or rather, the IP has been abused in setting up phishing sites. The abused website(s) are looked like still running(active). You can access the phishing site only from your smartphone (Android OS). When you access the URL, Android malware will be downloaded. Phishing URL: http://kt.twngb.com/fgrrefeedh/ http://uixnp.com/fgrrefeedh/ ・Virus Total https://www.virustotal.com/gui/ip-address/192.51.188.108/relations ・Urlscan https://urlscan.io/ip/192.51.188.108 https://urlscan.io/result/65eb3233-bc37-4bb4-abbe-9b16dc4c0e08/ https://urlscan.io/result/121fe0e0-acea-4103-9b74-423a3b005325/ ・Twitter https://twitter.com/NaomiSuzuki_/status/1549451074284965889 For your information, the fraudulent website appears to be a forgery of this legitimate website: https://www.post.japanpost.jp/index.htmlSite owner: Japan Post Co., Ltd. show less	Phishing Email Spam Exploited Host
🇰🇷 103.80.134.41	20 Jul 2022	Since June 23, 2022, the phishing site is currently operating at IP address: 103.80.134.41 You can ... show more Since June 23, 2022, the phishing site is currently operating at IP address: 103.80.134.41 You can also access the phishing URL only from your smartphone (iOS). Phishing URL: http://dfxqjsizdk.duckdns.org/ja/main The following security sites are evidence of phishing sites. ・Virus Total https://www.virustotal.com/gui/ip-address/103.80.134.41/relations ・Urlscan https://urlscan.io/ip/103.80.134.41 https://urlscan.io/result/f9b934ef-a76f-477c-bc46-a9e2aa42b603/ ・Twitter https://twitter.com/NaomiSuzuki_/status/1549596954715635712 https://twitter.com/NaomiSuzuki_/status/1549587290326192128 https://twitter.com/NaomiSuzuki_/status/1549416088123101184 For your information, the fraudulent website appears to be a forgery of this legitimate website: https://appleid.apple.com/ja_JP Site owner: Apple inc. show less	Fraud Orders Phishing Email Spam
🇰🇷 91.204.227.20	20 Jul 2022	The IP Address(91.204.227.20) has been active since June 23, 2022. It seems that the domain, or rat ... show more The IP Address(91.204.227.20) has been active since June 23, 2022. It seems that the domain, or rather, the IP has been abused in setting up phishing sites. The abused website(s) are looked like still running(active). You can access the phishing site only from your smartphone (Android OS). The "japanpost.apk" file for android malware will be downloaded. Phishing URL: http://36.oaprh.com/sdfgewrwerew/ http://oaprh.com/sdfgewrwerew/ ・Virus Total https://www.virustotal.com/gui/ip-address/91.204.227.20/relations ・Urlscan https://urlscan.io/ip/91.204.227.20 https://urlscan.io/result/85837e89-2217-4eac-978e-0554e4ece1d3/ https://urlscan.io/result/31933c35-16e1-49cf-a9fe-0201a5f877cf/ ・Twitter https://twitter.com/NaomiSuzuki_/status/1549596954715635712 For your information, the fraudulent website appears to be a forgery of this legitimate website: https://www.post.japanpost.jp/index.htmlSite owner: Japan Post Co., Ltd. show less	Phishing Email Spam Exploited Host
🇰🇷 103.80.134.41	19 Jul 2022	Since June 23, 2022, the phishing site is currently operating at IP address: 103.80.134.41 You can ... show more Since June 23, 2022, the phishing site is currently operating at IP address: 103.80.134.41 You can also access the phishing URL only from your smartphone (iOS). Phishing URL: http://axfcxbuzva.duckdns.org/ja/main http://barjxvbcpq.duckdns.org/ja/main http://belwlcvrqe.duckdns.org/ja/main The following security sites are evidence of phishing sites. ・Virus Total https://www.virustotal.com/gui/ip-address/103.80.134.41/relations ・Urlscan https://urlscan.io/ip/103.80.134.41 https://urlscan.io/result/8174a40e-d9fb-4598-be0c-be6bc313aaff/ https://urlscan.io/result/a3430f6b-594d-4fd3-9a96-e32efa49e406/ ・Twitter https://twitter.com/NaomiSuzuki_/status/1549233275356729344 https://twitter.com/NaomiSuzuki_/status/1549228795689078785 https://twitter.com/NaomiSuzuki_/status/1549041363899285509 For your information, the fraudulent website appears to be a forgery of this legitimate website: https://appleid.apple.com/ja_JP Site owner: Apple inc. show less	Fraud Orders Phishing Email Spam
🇯🇵 192.51.188.108	19 Jul 2022	The IP Address(192.51.188.108) has been active since June 22, 2022. It seems that the domain, or ra ... show more The IP Address(192.51.188.108) has been active since June 22, 2022. It seems that the domain, or rather, the IP has been abused in setting up phishing sites. The abused website(s) are looked like still running(active). You can access the phishing site only from your smartphone (Android OS). When you access the URL, Android malware will be downloaded. Phishing URL: http://4a6d.eedwm.com/fgrrefeedh/ http://3v.uixnp.com/fgrrefeedh/ ・Virus Total https://www.virustotal.com/gui/ip-address/192.51.188.108/relations ・Urlscan https://urlscan.io/ip/192.51.188.108 https://urlscan.io/result/4ca545df-6341-4e3c-9f6d-6ceaca6c6bbe/ https://urlscan.io/result/de4ee9c6-f4a4-468c-aaf6-e7c97abccb7a/ For your information, the fraudulent website appears to be a forgery of this legitimate website: https://www.post.japanpost.jp/index.htmlSite owner: Japan Post Co., Ltd. show less	Phishing Email Spam Exploited Host
🇰🇷 91.204.227.20	19 Jul 2022	The IP Address(91.204.227.20) has been active since June 23, 2022. It seems that the domain, or rat ... show more The IP Address(91.204.227.20) has been active since June 23, 2022. It seems that the domain, or rather, the IP has been abused in setting up phishing sites. The abused website(s) are looked like still running(active). You can access the phishing site only from your smartphone (Android OS). The "japanpost.apk" file for android malware will be downloaded. Phishing URL: http://4xkt.zgehx.com/sdfgewrwerew/ ・Virus Total https://www.virustotal.com/gui/ip-address/91.204.227.20/relations ・Urlscan https://urlscan.io/ip/91.204.227.20 https://urlscan.io/result/ce1664b5-86be-4093-bdb4-7723e898c3ad/ ・Twitter https://twitter.com/NaomiSuzuki_/status/1549233275356729344 For your information, the fraudulent website appears to be a forgery of this legitimate website: https://www.post.japanpost.jp/index.htmlSite owner: Japan Post Co., Ltd. show less	Phishing Email Spam Exploited Host
🇰🇷 91.204.227.20	19 Jul 2022	The IP Address(91.204.227.20) has been active since June 23, 2022. It seems that the domain, or rat ... show more The IP Address(91.204.227.20) has been active since June 23, 2022. It seems that the domain, or rather, the IP has been abused in setting up phishing sites. The abused website(s) are looked like still running(active). You can access the phishing site only from your smartphone (Android OS). The "japanpost.apk" file for android malware will be downloaded. Phishing URL: http://jeaqz.com/sdfgewrwerew/ http://m04a.jeaqz.com/sdfgewrwerew/ ・Virus Total https://www.virustotal.com/gui/ip-address/91.204.227.20/relations ・Urlscan https://urlscan.io/ip/91.204.227.20 https://urlscan.io/result/550ebc78-9d63-4661-af39-83a174e77650/ https://www.virustotal.com/gui/ip-address/91.204.227.20/relations ・Twitter https://twitter.com/NaomiSuzuki_/status/1549233275356729344 For your information, the fraudulent website appears to be a forgery of this legitimate website: https://www.post.japanpost.jp/index.htmlSite owner: Japan Post Co., Ltd. show less	Phishing Email Spam Exploited Host
🇰🇷 103.80.134.41	15 Jul 2022	Since June 23, 2022, the phishing site is currently operating at IP address: 103.80.134.41 You can ... show more Since June 23, 2022, the phishing site is currently operating at IP address: 103.80.134.41 You can also access the phishing URL only from your smartphone (iOS). Phishing URL: http://eycuzptmof.duckdns.org/ja/main http://eylylllyqp.duckdns.org/ja/main The following security sites are evidence of phishing sites. ・Virus Total https://www.virustotal.com/gui/ip-address/103.80.134.41/relations ・Urlscan https://urlscan.io/ip/103.80.134.41 https://urlscan.io/result/7aa48646-e87b-46dc-aff7-0a98dc525dba/ https://urlscan.io/result/1af78874-dc4b-4c8e-9485-637d75a70c84/ ・Twitter https://twitter.com/NaomiSuzuki_/status/1547789605176750080 https://twitter.com/NaomiSuzuki_/status/1547769134343417856 https://twitter.com/NaomiSuzuki_/status/1547582508883390464 For your information, the fraudulent website appears to be a forgery of this legitimate website: https://appleid.apple.com/ja_JP Site owner: Apple inc. show less	Fraud Orders Phishing Email Spam
🇰🇷 91.204.227.20	15 Jul 2022	The IP Address(91.204.227.20) has been active since June 23, 2022. It seems that the domain, or rat ... show more The IP Address(91.204.227.20) has been active since June 23, 2022. It seems that the domain, or rather, the IP has been abused in setting up phishing sites. The abused website(s) are looked like still running(active). You can access the phishing site only from your smartphone (Android OS). The "japanpost.apk" file for android malware will be downloaded. Phishing URL: http://c6.npzcx.com/sdfgewrwerew/ http://16.npzcx.com/sdfgewrwerew/ ・Virus Total https://www.virustotal.com/gui/ip-address/91.204.227.20/relations ・Urlscan https://urlscan.io/ip/91.204.227.20 https://urlscan.io/result/0199bf16-ed6f-4b6a-9d6f-48f8bcd93bd6/ https://urlscan.io/result/0b61192e-439e-476e-97b2-50a8f8c9c065/ ・Twitter https://twitter.com/NaomiSuzuki_/status/1547789605176750080 For your information, the fraudulent website appears to be a forgery of this legitimate website: https://www.post.japanpost.jp/index.htmlSite owner: Japan Post Co., Ltd. show less	Phishing Email Spam Exploited Host
🇯🇵 192.51.188.108	15 Jul 2022	The IP Address(192.51.188.108) has been active since June 22, 2022. It seems that the domain, or ra ... show more The IP Address(192.51.188.108) has been active since June 22, 2022. It seems that the domain, or rather, the IP has been abused in setting up phishing sites. The abused website(s) are looked like still running(active). You can access the phishing site only from your smartphone (Android OS). When you access the URL, Android malware will be downloaded. Phishing URL: http://hdi.ycgrb.com/fgrrefeedh/ http://guq.ubzuu.com/fgrrefeedh/ ・Virus Total https://www.virustotal.com/gui/ip-address/192.51.188.108/relations ・Urlscan https://urlscan.io/ip/192.51.188.108 https://urlscan.io/result/9913d168-2ba6-4dd2-8ba8-d163d1fb758f/ https://urlscan.io/result/8b8ed00a-bf43-4793-96c2-af952737c344/ For your information, the fraudulent website appears to be a forgery of this legitimate website: https://www.post.japanpost.jp/index.htmlSite owner: Japan Post Co., Ltd. show less	Phishing Email Spam Exploited Host
🇺🇸 155.94.158.58	14 Jul 2022	When you access the URL in the delivered phishing email, you will be directed to the credit card i ... show more When you access the URL in the delivered phishing email, you will be directed to the credit card input screen of fake Japan Post. Twitter information: せり@serippp3 https://twitter.com/serippp3/status/1547480782486155264 <Phishing URL> https://pots.jnapapots.jp.jiaziyu.cn// ↓ https://pots.jnapapots.jp.jiaziyu.cn//pc/index.php ↓ https://pots.jnapapots.jp.jiaziyu.cn//pc/login.php ↓ https://pots.jnapapots.jp.jiaziyu.cn//pc/add.php ↓ https://pots.jnapapots.jp.jiaziyu.cn//pc/card.php ↓ VISA, or Master, or JCB (Fake credit card input screen) https://pots.jnapapots.jp.jiaziyu.cn//pc/3d.php show less	Fraud Orders Phishing Email Spam
🇰🇷 103.80.134.41	14 Jul 2022	Since June 23, 2022, the phishing site is currently operating at IP address: 103.80.134.41 You can ... show more Since June 23, 2022, the phishing site is currently operating at IP address: 103.80.134.41 You can also access the phishing URL only from your smartphone (iOS). Phishing URL: http://egxfdvoins.duckdns.org/ja/main http://eeybkqpoqs.duckdns.org/ja/main The following security sites are evidence of phishing sites. ・Virus Total https://www.virustotal.com/gui/ip-address/103.80.134.41/relations ・Urlscan https://urlscan.io/ip/103.80.134.41 https://urlscan.io/result/84b6f885-f441-4db4-a51f-c1cb1ee7f571/ https://urlscan.io/result/1a96d9f7-5c82-4e5b-b388-9c3dd9d75eca/ ・Twitter https://twitter.com/NaomiSuzuki_/status/1547421101432918017 For your information, the fraudulent website appears to be a forgery of this legitimate website: https://appleid.apple.com/ja_JP Site owner: Apple inc. show less	Fraud Orders Phishing Email Spam
🇯🇵 192.51.188.108	14 Jul 2022	The IP Address(192.51.188.108) has been active since June 22, 2022. It seems that the domain, or ra ... show more The IP Address(192.51.188.108) has been active since June 22, 2022. It seems that the domain, or rather, the IP has been abused in setting up phishing sites. The abused website(s) are looked like still running(active). You can access the phishing site only from your smartphone (Android OS). When you access the URL, Android malware will be downloaded. Phishing URL: http://acsb.utbtn.com/fgrrefeedh/ http://21x.thqee.com/fgrrefeedh/ ・Virus Total https://www.virustotal.com/gui/ip-address/192.51.188.108/relations ・Urlscan https://urlscan.io/ip/192.51.188.108 https://urlscan.io/result/c2182a50-0fee-44b9-9d1e-19a131f9c321/ https://urlscan.io/result/8b3c87b6-4af2-4454-9a45-5965add6f709/ For your information, the fraudulent website appears to be a forgery of this legitimate website: https://www.post.japanpost.jp/index.htmlSite owner: Japan Post Co., Ltd. show less	Phishing Email Spam Exploited Host
🇰🇷 91.204.227.20	14 Jul 2022	The IP Address(91.204.227.20) has been active since June 23, 2022. It seems that the domain, or rat ... show more The IP Address(91.204.227.20) has been active since June 23, 2022. It seems that the domain, or rather, the IP has been abused in setting up phishing sites. The abused website(s) are looked like still running(active). You can access the phishing site only from your smartphone (Android OS). The "japanpost.apk" file for android malware will be downloaded. Phishing URL: http://oo.dxauw.com/sdfgewrwerew/ http://ik2.dxauw.com/sdfgewrwerew/ ・Virus Total https://www.virustotal.com/gui/ip-address/91.204.227.20/relations ・Urlscan https://urlscan.io/ip/91.204.227.20 https://urlscan.io/result/e3d57f38-eb0a-417f-a96b-7440a6c43e7b/ https://urlscan.io/result/38a7ad30-eda3-4d11-8ed5-8909bfe8b5a2/ ・Twitter https://twitter.com/NaomiSuzuki_/status/1547421101432918017 For your information, the fraudulent website appears to be a forgery of this legitimate website: https://www.post.japanpost.jp/index.htmlSite owner: Japan Post Co., Ltd. show less	Phishing Email Spam Exploited Host
🇰🇷 91.204.227.20	14 Jul 2022	The IP Address(91.204.227.20) has been active since June 23, 2022. It seems that the domain, or rat ... show more The IP Address(91.204.227.20) has been active since June 23, 2022. It seems that the domain, or rather, the IP has been abused in setting up phishing sites. The abused website(s) are looked like still running(active). You can access the phishing site only from your smartphone (Android OS). The "japanpost.apk" file for android malware will be downloaded. Phishing URL: http://dxauw.com/sdfgewrwerew/ http://ckk8.dxauw.com/sdfgewrwerew/ ・Virus Total https://www.virustotal.com/gui/ip-address/91.204.227.20/relations ・Urlscan https://urlscan.io/ip/91.204.227.20 https://urlscan.io/result/bc32bc0b-1873-4f47-a8e0-96b0c0a0eeff/ https://urlscan.io/result/26b2e5d0-b403-4d98-9f78-6b8ad7acd35b/ ・Twitter https://twitter.com/NaomiSuzuki_/status/1547421101432918017 For your information, the fraudulent website appears to be a forgery of this legitimate website: https://www.post.japanpost.jp/index.htmlSite owner: Japan Post Co., Ltd. show less	Phishing Email Spam Exploited Host
🇰🇷 103.80.134.41	13 Jul 2022	Since June 23, 2022, the phishing site is currently operating at IP address: 103.80.134.41 You can ... show more Since June 23, 2022, the phishing site is currently operating at IP address: 103.80.134.41 You can also access the phishing URL only from your smartphone (iOS). Phishing URL: http://dgezwrgaum.duckdns.org/ja/main http://ddkqmrvlku.duckdns.org/ja/main http://dcpjannhfw.duckdns.org/ja/main The following security sites are evidence of phishing sites. ・Virus Total https://www.virustotal.com/gui/ip-address/103.80.134.41/relations ・Urlscan https://urlscan.io/ip/103.80.134.41 https://urlscan.io/result/1bb296eb-fdd2-4d3a-8ce3-6a43013a3e7c/ https://urlscan.io/result/dde5e07b-ac73-450b-844a-d4f37e752afe/ https://urlscan.io/result/8f985a52-f5f1-4d36-aeed-164b179a69e7/ ・Twitter https://twitter.com/NaomiSuzuki_/status/1547046608457854978 https://twitter.com/NaomiSuzuki_/status/1546869443753832448 For your information, the fraudulent website appears to be a forgery of this legitimate website: https://appleid.apple.com/ja_JP Site owner: Apple inc. show less	Fraud Orders Phishing Email Spam
🇰🇷 91.204.227.20	13 Jul 2022	The IP Address(91.204.227.20) has been active since June 23, 2022. It seems that the domain, or rat ... show more The IP Address(91.204.227.20) has been active since June 23, 2022. It seems that the domain, or rather, the IP has been abused in setting up phishing sites. The abused website(s) are looked like still running(active). You can access the phishing site only from your smartphone (Android OS). The "japanpost.apk" file for android malware will be downloaded. Phishing URL: http://cag.ycgrb.com/sdfgewrwerew/ http://282t.ycgrb.com/sdfgewrwerew/ ・Virus Total https://www.virustotal.com/gui/ip-address/91.204.227.20/relations ・Urlscan https://urlscan.io/ip/91.204.227.20 https://urlscan.io/result/18c18c5a-9475-4293-b1ae-dbbfae46c365/ https://urlscan.io/result/fa75b9d7-a28c-4044-9761-662933c8c2c2/ ・Twitter https://twitter.com/NaomiSuzuki_/status/1547059321661521921 For your information, the fraudulent website appears to be a forgery of this legitimate website: https://www.post.japanpost.jp/index.htmlSite owner: Japan Post Co., Ltd. show less	Phishing Email Spam Exploited Host
🇯🇵 192.51.188.108	13 Jul 2022	The IP Address(192.51.188.108) has been active since June 22, 2022. It seems that the domain, or ra ... show more The IP Address(192.51.188.108) has been active since June 22, 2022. It seems that the domain, or rather, the IP has been abused in setting up phishing sites. The abused website(s) are looked like still running(active). You can access the phishing site only from your smartphone (Android OS). When you access the URL, Android malware will be downloaded. Phishing URL: http://4.thqee.com/fgrrefeedh/ http://thqee.com/fgrrefeedh/ ・Virus Total https://www.virustotal.com/gui/ip-address/192.51.188.108/relations ・Urlscan https://urlscan.io/ip/192.51.188.108 https://urlscan.io/result/c3aa7df0-104e-47b9-b5be-86c8ffadecbc/ https://urlscan.io/result/b7d3a8e4-85bd-4a3d-9c25-2f132449ed04/ For your information, the fraudulent website appears to be a forgery of this legitimate website: https://www.post.japanpost.jp/index.htmlSite owner: Japan Post Co., Ltd. show less	Phishing Email Spam Exploited Host
🇰🇷 91.204.227.20	12 Jul 2022	The IP Address(91.204.227.20) has been active since June 23, 2022. It seems that the domain, or rat ... show more The IP Address(91.204.227.20) has been active since June 23, 2022. It seems that the domain, or rather, the IP has been abused in setting up phishing sites. The abused website(s) are looked like still running(active). You can access the phishing site only from your smartphone (Android OS). The "japanpost.apk" file for android malware will be downloaded. Phishing URL: http://ruhht.com/sdfgewrwerew/ http://0jk7.ruhht.com/sdfgewrwerew/ http://31hh.ruhht.com/sdfgewrwerew/ ・Virus Total https://www.virustotal.com/gui/ip-address/91.204.227.20/relations ・Urlscan https://urlscan.io/ip/91.204.227.20 https://urlscan.io/result/5eb549e9-7bef-4c77-9b75-573936bc539a/ https://urlscan.io/result/cf4ba470-839f-433f-88c8-1831a6e58d3c/ ・Twitter https://twitter.com/NaomiSuzuki_/status/1546699457106169858 For your information, the fraudulent website appears to be a forgery of this legitimate website: https://www.post.japanpost.jp/index.htmlSite owner: Japan Post Co., Ltd. show less	Phishing Email Spam Exploited Host
🇺🇸 54.88.252.71	12 Jul 2022	If you access the URL link in the phishing email that tricks Japan Post, the LOTO6 winning fraud si ... show more If you access the URL link in the phishing email that tricks Japan Post, the LOTO6 winning fraud site will be displayed. <Phishing URL> http://0s.s0.kgver-v-ytyd.com/97413844699 54.88.252.71 ↓ http://jovial-terror.com/aN5slQ5mXbo 216.245.209.156 ↓ http://jovial-terror.com/log_index.php?page=allmess_miru&s=1657341980&cid=12489&mid=55528339&ddv=7e1bd87e88bc23a96210c172646191d1&%%%%%%%%%%%%%%% 216.245.209.156 ・Virus Total https://www.virustotal.com/gui/ip-address/54.88.252.71/relations https://www.virustotal.com/gui/ip-address/216.245.209.156/relations ・Urlscan.io https://urlscan.io/result/f85b5f50-1d9a-44c2-8c12-0fbbd889a6dc/ https://urlscan.io/result/de66837a-d3a4-4588-b310-e777cdc80d08/ show less	Fraud Orders Phishing Email Spam
🇯🇵 113.212.143.246	11 Jul 2022	Clicking on a URL link in a phishing email that tricks Japan Post or Japan Post will take you to the ... show more Clicking on a URL link in a phishing email that tricks Japan Post or Japan Post will take you to the LOTO6 winning scam site. ・Twitter hn@happynezu https://twitter.com/happynezu/status/1546515916267356160 <Phishing URL> URL link in the phishing email that is the direct source http://wb.bo.xeam--rust.com/LRXI02vLH3LA IP Address: 113.212.143.246 ↓ http://zodiac-mystic.com/I0xt/5PW355 IP Address: 216.245.209.156 ↓ http://zodiac-mystic.com/log_index.php?page=allmess_miru&s=1657498870&cid=12489&mid=55595715&ddv=c4a689c922d27cd886fc93c1dfd6fbfb&%%%%%%%%%%%%%% IP Address: 216.245.209.156 ・Virus Total https://www.virustotal.com/gui/ip-address/113.212.143.246/relations ・Urlscan https://urlscan.io/result/39c45abf-a324-4027-8155-34d9008804f5/ https://urlscan.io/result/55aa4dc3-b154-44ba-96ea-ebdfbd6e2493/ show less	Fraud Orders Phishing Email Spam
🇺🇸 216.245.209.156	11 Jul 2022	Clicking on a URL link in a phishing email that tricks Japan Post or Japan Post will take you to the ... show more Clicking on a URL link in a phishing email that tricks Japan Post or Japan Post will take you to the LOTO6 winning scam site. ・Twitter hn@happynezu https://twitter.com/happynezu/status/1546515916267356160 <Phishing URL> URL link in the phishing email that is the direct source http://wb.bo.xeam--rust.com/LRXI02vLH3LA IP Address: 113.212.143.246 ↓ http://zodiac-mystic.com/I0xt/5PW355 IP Address: 216.245.209.156 ↓ http://zodiac-mystic.com/log_index.php?page=allmess_miru&s=1657498870&cid=12489&mid=55595715&ddv=c4a689c922d27cd886fc93c1dfd6fbfb&%%%%%%%%%%%%%% IP Address: 216.245.209.156 ・Virus Total https://www.virustotal.com/gui/ip-address/113.212.143.246/relations ・Urlscan https://urlscan.io/result/39c45abf-a324-4027-8155-34d9008804f5/ https://urlscan.io/result/55aa4dc3-b154-44ba-96ea-ebdfbd6e2493/ show less	Fraud Orders Phishing Email Spam
🇰🇷 103.80.134.41	11 Jul 2022	Phishing URL: http://alzoorqjmk.duckdns.org/ja/main http://yzmzmsrqqq.duckdns.org/ja/main http:// ... show more Phishing URL: http://alzoorqjmk.duckdns.org/ja/main http://yzmzmsrqqq.duckdns.org/ja/main http://ziwuxdutuv.duckdns.org/ja/main http://zldvtzilru.duckdns.org/ja/main http://zpkcxdaovm.duckdns.org/ja/main http://zqkfbokonm.duckdns.org/ja/main http://zvqoulbwdn.duckdns.org/ja/main http://yhqpzvcwjs.duckdns.org/ja/main http://ykwkuddwwr.duckdns.org/ja/main http://yobfxyfrlg.duckdns.org/ja/main http://yphhuhugbp.duckdns.org/ja/main http://yqtrzrkxgq.duckdns.org/ja/main http://ytbzvfckhj.duckdns.org/ja/main http://yyhwvozzqp.duckdns.org/ja/main http://xlkdejqaki.duckdns.org/ja/main show less	Fraud Orders Phishing Email Spam
🇰🇷 91.204.227.20	11 Jul 2022	The IP Address(91.204.227.20) has been active since June 23, 2022. It seems that the domain, or rat ... show more The IP Address(91.204.227.20) has been active since June 23, 2022. It seems that the domain, or rather, the IP has been abused in setting up phishing sites. The abused website(s) are looked like still running(active). You can access the phishing site only from your smartphone (Android OS). The "japanpost.apk" file for android malware will be downloaded. Phishing URL: http://wzy.paxgc.com/ http://paxgc.com/ ・Virus Total https://www.virustotal.com/gui/ip-address/91.204.227.20/relations ・Urlscan https://urlscan.io/ip/91.204.227.20 https://urlscan.io/result/5420870d-678b-4b2b-b6a9-b0ad1dcd05e1/ https://urlscan.io/result/e6e30ff6-d157-4631-97ef-e29fae46f06b/ ・Twitter https://twitter.com/NaomiSuzuki_/status/1546337840908627971 For your information, the fraudulent website appears to be a forgery of this legitimate website: https://www.post.japanpost.jp/index.html Site owner: Japan Post Co., Ltd show less	Phishing Email Spam Exploited Host
🇰🇷 103.80.134.41	08 Jul 2022	Since June 23, 2022, the phishing site is currently operating at IP address: 103.80.134.41 You can ... show more Since June 23, 2022, the phishing site is currently operating at IP address: 103.80.134.41 You can also access the phishing URL only from your smartphone (iOS). Phishing URL: http://wvmwjqojao.duckdns.org/ja/main http://wsvfxpwntz.duckdns.org/ja/main http://xesudyxlrm.duckdns.org/ja/main http://xhricuzclv.duckdns.org/ja/main The following security sites are evidence of phishing sites. ・Virus Total https://www.virustotal.com/gui/ip-address/103.80.134.41/relations ・Urlscan https://urlscan.io/ip/103.80.134.41 https://urlscan.io/result/7ec097d3-a8bb-4a6a-a915-2e4ecc6cd051/ https://urlscan.io/result/c02804aa-def0-46e7-b09f-3f5e1470f650/ ・Twitter https://twitter.com/NaomiSuzuki_/status/1545256397717520384 https://twitter.com/NaomiSuzuki_/status/1545232622930243584 For your information, the fraudulent website appears to be a forgery of this legitimate website: https://appleid.apple.com/ja_JP Site owner: Apple inc. show less	Fraud Orders Phishing Email Spam