Since June 22, 2022, the phishing site is currently operating at
IP address: 192.51.188.108.
You c ...
show moreSince June 22, 2022, the phishing site is currently operating at
IP address: 192.51.188.108.
You can also access the phishing URL only from your smartphone.
When you access the URL of an SMS that tricks Japan Post
with an Android smartphone
The malware "japanpost[.]apk" will be downloaded.
Phishing URL:
http://zzoxp.com/fgrrefeedh/
http://rqhzv.com/fgrrefeedh/
The following security sites are evidence of phishing sites.
・Virus Total
https://www.virustotal.com/gui/ip-address/192.51.188.108/relations
・Urlscan
https://urlscan.io/ip/192.51.188.108
https://urlscan.io/result/f122681e-2892-40c8-8aad-858368055987/
https://urlscan.io/result/d153d98c-dd76-4d27-9d3b-9d74c88e4043/
・Twitter
https://twitter.com/NaomiSuzuki_/status/1550199796203687936
Image of legitimate site used for phishing site:
https://www.post.japanpost.jp/index.html
Site owner:
Japan Post Co., Ltd.
show less
Since June 23, 2022, the phishing site is currently operating at
IP address: 103.80.134.41.
You ca ...
show moreSince June 23, 2022, the phishing site is currently operating at
IP address: 103.80.134.41.
You can also access the phishing URL only from your smartphone(iOS).
Phishing URL:
http://fxtqovvqjf.duckdns.org/ja/main
The following security sites are evidence of phishing sites.
・Virus Total
https://www.virustotal.com/gui/ip-address/103.80.134.41/relations
・Urlscan
https://urlscan.io/ip/103.80.134.41
https://urlscan.io/result/68829c92-362a-457c-b3a0-965c188e6638/
・Twitter
https://twitter.com/NaomiSuzuki_/status/1550072930272673792
https://twitter.com/NaomiSuzuki_/status/1549903934260912128
For your information, the fraudulent website appears to be a forgery of this legitimate
website:
https://appleid.apple.com/ja_JP
Site owner:
Apple inc.
show less
Since June 23, 2022, the phishing site is currently operating at
IP address: 103.80.134.41.
You ca ...
show moreSince June 23, 2022, the phishing site is currently operating at
IP address: 103.80.134.41.
You can also access the phishing URL only from your smartphone(iOS).
Phishing URL:
http://eovdmsziie.duckdns.org/ja/main
The following security sites are evidence of phishing sites.
・Virus Total
https://www.virustotal.com/gui/ip-address/103.80.134.41/relations
・Urlscan
https://urlscan.io/ip/103.80.134.41
https://urlscan.io/result/8693f153-a405-4146-9dff-aa3790c0a981/
・Twitter
https://twitter.com/NaomiSuzuki_/status/1549958423424671744
https://twitter.com/NaomiSuzuki_/status/1549903934260912128
https://twitter.com/NaomiSuzuki_/status/1549416088123101184
For your information, the fraudulent website appears to be a forgery of this legitimate
website:
https://appleid.apple.com/ja_JP
Site owner:
Apple inc.
show less
Since June 22, 2022, the phishing site is currently operating at
IP address: 192.51.188.108.
You c ...
show moreSince June 22, 2022, the phishing site is currently operating at
IP address: 192.51.188.108.
You can also access the phishing URL only from your smartphone.
When you access the URL of an SMS that tricks Japan Post
with an Android smartphone
The malware "japanpost[.]apk" will be downloaded.
Phishing URL:
http://hrgsv.com/fgrrefeedh/
http://oaprh.com/fgrrefeedh/
The following security sites are evidence of phishing sites.
・Virus Total
https://www.virustotal.com/gui/ip-address/192.51.188.108/relations
・Urlscan
https://urlscan.io/ip/192.51.188.108
https://urlscan.io/result/6c01204c-8768-4b3c-a285-cae056c2dcae/
https://urlscan.io/result/c6d5c91e-37d3-44c1-9e90-35eda6564630/
・Twitter
https://twitter.com/NaomiSuzuki_/status/1549905836809793537
Image of legitimate site used for phishing site:
https://www.post.japanpost.jp/index.html
Site owner:
Japan Post Co., Ltd.
show less
Since June 23, 2022, the phishing site is currently operating at
IP address: 91.204.227.20.
You ca ...
show moreSince June 23, 2022, the phishing site is currently operating at
IP address: 91.204.227.20.
You can also access the phishing URL only from your smartphone.
If you access the URL delivered by SMS with an Android OS smartphone,
the malware "japanpost[.]apk" file will be downloaded.
Phishing URL:
http://d6.zzoxp.com/sdfgewrwerew/
http://zzoxp.com/sdfgewrwerew/
The following security sites are evidence of phishing sites.
・Twitter
https://twitter.com/NaomiSuzuki_/status/1549958423424671744
・Virus Total
https://www.virustotal.com/gui/ip-address/91.204.227.20/relations
・Urlscan
https://urlscan.io/ip/91.204.227.20
https://urlscan.io/result/2261e366-0d5a-4439-843c-eabaf014af9e/
https://urlscan.io/result/d51306bf-5cbe-4855-813a-67e7544c597e/
Image of legitimate site used for phishing site:
https://www.post.japanpost.jp/index.html
Site owner:
Japan Post Co., Ltd.
show less
Since June 23, 2022, the phishing site is currently operating at
IP address: 91.204.227.20.
You ca ...
show moreSince June 23, 2022, the phishing site is currently operating at
IP address: 91.204.227.20.
You can also access the phishing URL only from your smartphone.
If you access the URL delivered by SMS with an Android OS smartphone,
the malware "japanpost[.]apk" file will be downloaded.
Phishing URL:
http://hrgsv.com/sdfgewrwerew/
http://4yem.hrgsv.com/sdfgewrwerew/
The following security sites are evidence of phishing sites.
・Twitter
https://twitter.com/NaomiSuzuki_/status/1549596954715635712
・Virus Total
https://www.virustotal.com/gui/ip-address/91.204.227.20/relations
・Urlscan
https://urlscan.io/ip/91.204.227.20
https://urlscan.io/result/25c6ae11-46d4-4c7b-aef6-c63a1587629a/
https://urlscan.io/result/4d2cb2f4-d1b1-40ce-8882-e7c49cb06d21/
Image of legitimate site used for phishing site:
https://www.post.japanpost.jp/index.html
Site owner:
Japan Post Co., Ltd.
show less
Since June 22, 2022, the phishing site is currently operating at
IP address: 192.51.188.108.
You c ...
show moreSince June 22, 2022, the phishing site is currently operating at
IP address: 192.51.188.108.
You can also access the phishing URL only from your smartphone.
When you access the URL of an SMS that tricks Japan Post
with an Android smartphone
The malware "japanpost[.]apk" will be downloaded.
Phishing URL:
http://zgehx.com/fgrrefeedh/
http://w7ry.zgehx.com/fgrrefeedh/
The following security sites are evidence of phishing sites.
・Virus Total
https://www.virustotal.com/gui/ip-address/192.51.188.108/relations
・Urlscan
https://urlscan.io/ip/192.51.188.108
https://urlscan.io/result/01451ff4-24c8-4d05-bfdd-e3cadf619380/
https://urlscan.io/result/f08791fa-3e96-4ddb-89fd-2b473fad85ca/
Image of legitimate site used for phishing site:
https://www.post.japanpost.jp/index.html
Site owner:
Japan Post Co., Ltd.
show less
Since June 22, 2022, the phishing site is currently operating at
IP address: 192.51.188.108.
You c ...
show moreSince June 22, 2022, the phishing site is currently operating at
IP address: 192.51.188.108.
You can also access the phishing URL only from your smartphone.
When you access the URL of an SMS that tricks Japan Post
with an Android smartphone
The malware "japanpost[.]apk" will be downloaded.
Phishing URL:
http://ckk8.dxauw.com/fgrrefeedh/
http://jy.dxauw.com/fgrrefeedh/
The following security sites are evidence of phishing sites.
・Virus Total
https://www.virustotal.com/gui/ip-address/192.51.188.108/relations
・Urlscan
https://urlscan.io/ip/192.51.188.108
https://urlscan.io/result/bab4219c-3e85-41f5-b837-1c6bc752915d/loading
https://urlscan.io/result/77f9fb0f-9406-4852-9fe1-ebac94bec01d/
Image of legitimate site used for phishing site:
https://www.post.japanpost.jp/index.html
Site owner:
Japan Post Co., Ltd.
show less
Since June 23, 2022, the phishing site is currently operating at
IP address: 103.80.134.41.
You ca ...
show moreSince June 23, 2022, the phishing site is currently operating at
IP address: 103.80.134.41.
You can also access the phishing URL only from your smartphone(iOS).
Phishing URL:
http://dchzeoskxx.duckdns.org/ja/main
The following security sites are evidence of phishing sites.
・Virus Total
https://www.virustotal.com/gui/ip-address/103.80.134.41/relations
・Urlscan
https://urlscan.io/ip/103.80.134.41
https://urlscan.io/result/3b50807f-1926-41a9-b514-d409e69d97d6/
・Twitter
https://twitter.com/NaomiSuzuki_/status/1549416088123101184
For your information, the fraudulent website appears to be a forgery of this legitimate
website:
https://appleid.apple.com/ja_JP
Site owner:
Apple inc.
show less
Since June 23, 2022, the phishing site is currently operating at
IP address: 103.80.134.41.
You ca ...
show moreSince June 23, 2022, the phishing site is currently operating at
IP address: 103.80.134.41.
You can also access the phishing URL only from your smartphone(iOS).
Phishing URL:
http://dchzeoskxx.duckdns.org/ja/main
The following security sites are evidence of phishing sites.
・Virus Total
https://www.virustotal.com/gui/ip-address/103.80.134.41/relations
・Urlscan
https://urlscan.io/ip/103.80.134.41
https://urlscan.io/result/3b50807f-1926-41a9-b514-d409e69d97d6/
・Twitter
https://twitter.com/NaomiSuzuki_/status/1549416088123101184
For your information, the fraudulent website appears to be a forgery of this legitimate
website:
https://appleid.apple.com/ja_JP
Site owner:
Apple inc.
show less
Since June 23, 2022, the phishing site is currently operating at
IP address: 91.204.227.20.
You ca ...
show moreSince June 23, 2022, the phishing site is currently operating at
IP address: 91.204.227.20.
You can also access the phishing URL only from your smartphone.
If you access the URL delivered by SMS with an Android OS smartphone,
the malware "japanpost[.]apk" file will be downloaded.
Phishing URL:
http://npzcx.com/sdfgewrwerew/
http://fli.npzcx.com/sdfgewrwerew/
The following security sites are evidence of phishing sites.
・Twitter
https://twitter.com/NaomiSuzuki_/status/1547789605176750080
・Virus Total
https://www.virustotal.com/gui/ip-address/91.204.227.20/relations
・Urlscan
https://urlscan.io/ip/91.204.227.20
https://urlscan.io/result/dff20a1c-7749-48dc-aa7e-065d6ba5544c/
Image of legitimate site used for phishing site:
https://www.post.japanpost.jp/index.html
https://urlscan.io/result/0e592dd9-ecb4-4112-b30a-3cbb3db9dd60/
Site owner:
Japan Post Co., Ltd.
show less
When you access the URL in the delivered phishing email,
you will be directed to the credit card in ...
show moreWhen you access the URL in the delivered phishing email,
you will be directed to the credit card input screen of fake Japan Post.
Twitter information:
せり@serippp3
https://twitter.com/serippp3/status/1547480782486155264
<Phishing URL>
https://pots.jnapapots.jp.jiaziyu.cn//
↓
https://pots.jnapapots.jp.jiaziyu.cn//pc/index.php
↓
https://pots.jnapapots.jp.jiaziyu.cn//pc/login.php
↓
https://pots.jnapapots.jp.jiaziyu.cn//pc/add.php
↓
https://pots.jnapapots.jp.jiaziyu.cn//pc/card.php
↓
VISA, or Master, or JCB (Fake credit card input screen)
https://pots.jnapapots.jp.jiaziyu.cn//pc/3d.php
・Virus Total
https://www.virustotal.com/gui/domain/pots.jnapapots.jp.jiaziyu.cn/relations
https://www.virustotal.com/gui/ip-address/155.94.158.58/relations
・Urlscan.io
*Even if the phishing URL was accessed with Urlscan, screenshots etc. could not be taken because the attacker was filtering.
https://urlscan.io/result/51e9a543-339d-4ed1-9d6d-1cc68b52aff3/
show less
Since June 22, 2022, the phishing site is currently operating at
IP address: 192.51.188.108.
You c ...
show moreSince June 22, 2022, the phishing site is currently operating at
IP address: 192.51.188.108.
You can also access the phishing URL only from your smartphone.
When you access the URL of an SMS that tricks Japan Post
with an Android smartphone
The malware "japanpost[.]apk" will be downloaded.
Phishing URL:
http://eedwm.com/fgrrefeedh/
The following security sites are evidence of phishing sites.
・Virus Total
https://www.virustotal.com/gui/ip-address/192.51.188.108/relations
・Urlscan
https://urlscan.io/ip/192.51.188.108
https://urlscan.io/result/8642d7fc-e956-4987-bae8-569efb1660b3/
https://urlscan.io/result/677caf65-9c43-411d-af93-2fcc547d339b/
Image of legitimate site used for phishing site:
https://www.post.japanpost.jp/index.html
Site owner:
Japan Post Co., Ltd.
show less
Since June 23, 2022, the phishing site is currently operating at
IP address: 103.80.134.41.
You ca ...
show moreSince June 23, 2022, the phishing site is currently operating at
IP address: 103.80.134.41.
You can also access the phishing URL only from your smartphone(iOS).
Phishing URL:
http://eqcbcvhtgk.duckdns.org/ja/main
The following security sites are evidence of phishing sites.
・Virus Total
https://www.virustotal.com/gui/ip-address/103.80.134.41/relations
・Urlscan
https://urlscan.io/ip/103.80.134.41
https://urlscan.io/result/7ea675b3-4e26-428b-9c39-fefbd9a90104/
・Twitter
https://twitter.com/NaomiSuzuki_/status/1547582508883390464
For your information, the fraudulent website appears to be a forgery of this legitimate
website:
https://appleid.apple.com/ja_JP
Site owner:
Apple inc.
show less
Since June 23, 2022, the phishing site is currently operating at
IP address: 91.204.227.20.
You ca ...
show moreSince June 23, 2022, the phishing site is currently operating at
IP address: 91.204.227.20.
You can also access the phishing URL only from your smartphone.
If you access the URL delivered by SMS with an Android OS smartphone,
the malware "japanpost[.]apk" file will be downloaded.
Phishing URL:
http://dxauw.com/sdfgewrwerew/
http://ckk8.dxauw.com/sdfgewrwerew/
The following security sites are evidence of phishing sites.
・Twitter
https://twitter.com/NaomiSuzuki_/status/1547421101432918017
・Virus Total
https://www.virustotal.com/gui/ip-address/91.204.227.20/relations
・Urlscan
https://urlscan.io/ip/91.204.227.20
https://urlscan.io/result/96b864a0-d24e-4b95-b250-5b794e8cad1f/
https://urlscan.io/result/57f426a0-bf83-4f77-96e2-e937512db1e4/
Image of legitimate site used for phishing site:
https://www.post.japanpost.jp/index.html
Site owner:
Japan Post Co., Ltd.
show less
Since June 23, 2022, the phishing site is currently operating at
IP address: 103.80.134.41.
You ca ...
show moreSince June 23, 2022, the phishing site is currently operating at
IP address: 103.80.134.41.
You can also access the phishing URL only from your smartphone(iOS).
Phishing URL:
http://eaqalwsnik.duckdns.org/ja/main
The following security sites are evidence of phishing sites.
・Virus Total
https://www.virustotal.com/gui/ip-address/103.80.134.41/relations
・Urlscan
https://urlscan.io/ip/103.80.134.41
https://urlscan.io/result/b379ef09-068a-437d-bf6e-fdbf3862e16f/
・Twitter
https://twitter.com/NaomiSuzuki_/status/1547234933789302793
For your information, the fraudulent website appears to be a forgery of this legitimate
website:
https://appleid.apple.com/ja_JP
Site owner:
Apple inc.
show less
Since June 22, 2022, the phishing site is currently operating at
IP address: 192.51.188.108.
You c ...
show moreSince June 22, 2022, the phishing site is currently operating at
IP address: 192.51.188.108.
You can also access the phishing URL only from your smartphone.
When you access the URL of an SMS that tricks Japan Post
with an Android smartphone
The malware "japanpost[.]apk" will be downloaded.
Phishing URL:
http://282t.ycgrb.com/fgrrefeedh/
http://cag.ycgrb.com/fgrrefeedh/
The following security sites are evidence of phishing sites.
・Virus Total
https://www.virustotal.com/gui/ip-address/192.51.188.108/relations
・Urlscan
https://urlscan.io/ip/192.51.188.108
https://urlscan.io/result/8a060b1d-1333-4be7-b38a-5c0335c22363/
https://urlscan.io/result/0ab0c46a-fd0b-4f13-ab2c-99eb6debe4a1/
Image of legitimate site used for phishing site:
https://www.post.japanpost.jp/index.html
Site owner:
Japan Post Co., Ltd.
show less
Since June 23, 2022, the phishing site is currently operating at
IP address: 103.80.134.41.
You ca ...
show moreSince June 23, 2022, the phishing site is currently operating at
IP address: 103.80.134.41.
You can also access the phishing URL only from your smartphone(iOS).
Phishing URL:
http://deghkinelb.duckdns.org/ja/main
http://ddkqmrvlku.duckdns.org/ja/main
The following security sites are evidence of phishing sites.
・Virus Total
https://www.virustotal.com/gui/ip-address/103.80.134.41/relations
・Urlscan
https://urlscan.io/ip/103.80.134.41
https://urlscan.io/result/6db6b23c-0c5b-4fb2-aa1a-576c5d9b503a/
https://urlscan.io/result/5c6de9cf-bb9b-487d-a307-62b9230ecf3d/
・Twitter
https://twitter.com/NaomiSuzuki_/status/1547059321661521921
For your information, the fraudulent website appears to be a forgery of this legitimate
website:
https://appleid.apple.com/ja_JP
Site owner:
Apple inc.
show less
Since June 22, 2022, the phishing site is currently operating at
IP address: 192.51.188.108.
You c ...
show moreSince June 22, 2022, the phishing site is currently operating at
IP address: 192.51.188.108.
You can also access the phishing URL only from your smartphone.
When you access the URL of an SMS that tricks Japan Post
with an Android smartphone
The malware "japanpost[.]apk" will be downloaded.
Phishing URL:
http://2ek.yermu.com/fgrrefeedh/
http://o.pcbyr.com/fgrrefeedh/
http://yr1.aaytt.com/fgrrefeedh/
The following security sites are evidence of phishing sites.
・Virus Total
https://www.virustotal.com/gui/ip-address/192.51.188.108/relations
・Urlscan
https://urlscan.io/ip/192.51.188.108
https://urlscan.io/result/416d2f36-e72f-4b36-9c2f-ebc356fe44eb/
https://urlscan.io/result/990eebb5-da7f-43e6-9170-71d751fc1fb6/
https://urlscan.io/result/4b20cb2c-a828-4310-8d33-599d669f7464/
Image of legitimate site used for phishing site:
https://www.post.japanpost.jp/index.html
Site owner:
Japan Post Co., Ltd.
show less
Since June 23, 2022, the phishing site is currently operating at
IP address: 91.204.227.20.
You ca ...
show moreSince June 23, 2022, the phishing site is currently operating at
IP address: 91.204.227.20.
You can also access the phishing URL only from your smartphone.
If you access the URL delivered by SMS with an Android OS smartphone,
the malware "japanpost[.]apk" file will be downloaded.
Phishing URL:
http://g6dy.ycgrb.com/sdfgewrwerew/
http://ycgrb.com/sdfgewrwerew/
The following security sites are evidence of phishing sites.
・Twitter
https://twitter.com/NaomiSuzuki_/status/1547059321661521921
・Virus Total
https://www.virustotal.com/gui/ip-address/91.204.227.20/relations
・Urlscan
https://urlscan.io/ip/91.204.227.20
https://urlscan.io/result/9fc0728a-3fbe-4d7d-9452-e796c99c5a2f/
https://urlscan.io/result/cdd5d45f-80ec-49c9-8158-3c46564c5fc4/
Image of legitimate site used for phishing site:
https://www.post.japanpost.jp/index.html
Site owner:
Japan Post Co., Ltd.
show less
If you access the URL link in the phishing email that tricks Japan Post,
the LOTO6 winning fraud s ...
show moreIf you access the URL link in the phishing email that tricks Japan Post,
the LOTO6 winning fraud site will be displayed.
<Phishing URL>
http://0s.s0.kgver-v-ytyd.com/97413844699
113.212.143.246
↓
http://jovial-terror.com/aN5slQ5mXbo
216.245.209.156
↓
http://jovial-terror.com/log_index.php?page=allmess_miru&s=1657341980&cid=12489&mid=55528339&ddv=7e1bd87e88bc23a96210c172646191d1&%%%%%%%%%%%%%%%
216.245.209.156
・Virus Total
https://www.virustotal.com/gui/ip-address/216.245.209.156/relations
https://www.virustotal.com/gui/ip-address/113.212.143.246/relations
・Urlscan.io
https://urlscan.io/result/f85b5f50-1d9a-44c2-8c12-0fbbd889a6dc/
https://urlscan.io/result/de66837a-d3a4-4588-b310-e777cdc80d08/
show less
If you access the URL link in the phishing email that tricks Japan Post,
the LOTO6 winning fraud s ...
show moreIf you access the URL link in the phishing email that tricks Japan Post,
the LOTO6 winning fraud site will be displayed.
<Phishing URL>
http://0s.s0.kgver-v-ytyd.com/97413844699
113.212.143.246
↓
http://jovial-terror.com/aN5slQ5mXbo
216.245.209.156
↓
http://jovial-terror.com/log_index.php?page=allmess_miru&s=1657341980&cid=12489&mid=55528339&ddv=7e1bd87e88bc23a96210c172646191d1&%%%%%%%%%%%%%%%
216.245.209.156
・Virus Total
https://www.virustotal.com/gui/ip-address/216.245.209.156/relations
https://www.virustotal.com/gui/ip-address/113.212.143.246/relations
・Urlscan.io
https://urlscan.io/result/f85b5f50-1d9a-44c2-8c12-0fbbd889a6dc/
https://urlscan.io/result/de66837a-d3a4-4588-b310-e777cdc80d08/
show less
Since June 22, 2022, the phishing site is currently operating at
IP address: 192.51.188.108.
You c ...
show moreSince June 22, 2022, the phishing site is currently operating at
IP address: 192.51.188.108.
You can also access the phishing URL only from your smartphone.
When you access the URL of an SMS that tricks Japan Post
with an Android smartphone
The malware "japanpost[.]apk" will be downloaded.
Phishing URL:
http://uxgmg.rwptm.com/fgrrefeedh/
http://ymtki.rwptm.com/fgrrefeedh/
http://st.zyhvu.com/fgrrefeedh/
The following security sites are evidence of phishing sites.
・Virus Total
https://www.virustotal.com/gui/ip-address/192.51.188.108/relations
・Urlscan
https://urlscan.io/ip/192.51.188.108
https://urlscan.io/result/d478a53d-3158-4199-a91b-aba278022142/
https://urlscan.io/result/fd04dfac-bd25-40cc-aedf-f9e51eaa5d00/
https://urlscan.io/result/be5549a2-f9bc-4dad-bc34-d9b7dfe4570c/
Image of legitimate site used for phishing site:
https://www.post.japanpost.jp/index.html
Site owner:
Japan Post Co., Ltd.
show less
Since June 23, 2022, the phishing site is currently operating at
IP address: 103.80.134.41.
You ca ...
show moreSince June 23, 2022, the phishing site is currently operating at
IP address: 103.80.134.41.
You can also access the phishing URL only from your smartphone(iOS).
Phishing URL:
http://vhhgtseedd.duckdns.org/ja/main
http://uycultfkei.duckdns.org/ja/main
The following security sites are evidence of phishing sites.
・Virus Total
https://www.virustotal.com/gui/ip-address/103.80.134.41/relations
・Urlscan
https://urlscan.io/ip/103.80.134.41
https://urlscan.io/result/1cfbea22-bead-4f7f-9ac0-718b79f532c3/
https://urlscan.io/result/850197a0-aa65-4e77-9a55-73039c549582/
・Twitter
https://twitter.com/NaomiSuzuki_/status/1544867729551020032
https://twitter.com/NaomiSuzuki_/status/1544697123069108224
For your information, the fraudulent website appears to be a forgery of this legitimate
website:
https://appleid.apple.com/ja_JP
Site owner:
Apple inc.
show less
Since June 23, 2022, the phishing site is currently operating at
IP address: 91.204.227.20.
You ca ...
show moreSince June 23, 2022, the phishing site is currently operating at
IP address: 91.204.227.20.
You can also access the phishing URL only from your smartphone.
If you access the URL delivered by SMS with an Android OS smartphone,
the malware "japanpost[.]apk" file will be downloaded.
Phishing URL:
http://qgzxv.com/sdfgewrwerew/
http://uuk.qgzxv.com/sdfgewrwerew/
The following security sites are evidence of phishing sites.
・Twitter
https://twitter.com/NaomiSuzuki_/status/1544892809433743360/
・Virus Total
https://www.virustotal.com/gui/ip-address/91.204.227.20/relations
・Urlscan
https://urlscan.io/ip/91.204.227.20
https://urlscan.io/result/8528a791-8ee6-434f-b5dc-47639965861e/
https://urlscan.io/result/22dca80c-04c9-4e46-bd43-b9c0035317fe/
Image of legitimate site used for phishing site:
https://www.post.japanpost.jp/index.html
Site owner:
Japan Post Co., Ltd.
show less
PhishingEmail SpamExploited Host
By clicking “Accept all”, you agree to the storing of cookies on your device to remember preferences and
analyze site usage.
Read more
- Required to log into your AbuseIPDB account, and store these cookie preferences.