AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User Phishing Crime investigation Team joined AbuseIPDB in December 2021 and has reported 328 IP addresses.

Standing (weight) is good.

INACTIVE USER

IP	Date	Comment	Categories
🇯🇵 192.51.188.108	05 Jul 2022	Since June 22, 2022, the phishing site is currently operating at IP address: 192.51.188.108. You c ... show more Since June 22, 2022, the phishing site is currently operating at IP address: 192.51.188.108. You can also access the phishing URL only from your smartphone. When you access the URL of an SMS that tricks Japan Post with an Android smartphone The malware "japanpost[.]apk" will be downloaded. Phishing URL: http://ubzuu.com/fgrrefeedh/ http://hs1n.rdybz.com/fgrrefeedh/ http://b.hyeyu.com/fgrrefeedh/ The following security sites are evidence of phishing sites. ・Virus Total https://www.virustotal.com/gui/ip-address/192.51.188.108/relations ・Urlscan https://urlscan.io/ip/192.51.188.108 https://urlscan.io/result/ec31e7cd-d2fc-4fbb-a0b3-8f1e5f68b82b/ https://urlscan.io/result/0cb9bf80-4bd7-4d13-bc0f-c91b21239685/ https://urlscan.io/result/bf1f0b4e-88fa-41ca-94f7-96b2d8a37502/ Image of legitimate site used for phishing site: https://www.post.japanpost.jp/index.html Site owner: Japan Post Co., Ltd. show less	Phishing Email Spam Exploited Host
🇰🇷 103.80.134.41	05 Jul 2022	Since June 23, 2022, the phishing site is currently operating at IP address: 103.80.134.41. You ca ... show more Since June 23, 2022, the phishing site is currently operating at IP address: 103.80.134.41. You can also access the phishing URL only from your smartphone(iOS). Phishing URL: http://sezosfdxll.duckdns.org/ja/main The following security sites are evidence of phishing sites. ・Virus Total https://www.virustotal.com/gui/ip-address/103.80.134.41/relations ・Urlscan https://urlscan.io/ip/103.80.134.41 https://urlscan.io/result/6e48731b-f9cd-4c93-8eb9-7007935aaba6/ ・Twitter https://twitter.com/NaomiSuzuki_/status/1544140894278131712 https://twitter.com/NaomiSuzuki_/status/1543970492667039744 For your information, the fraudulent website appears to be a forgery of this legitimate website: https://appleid.apple.com/ja_JP Site owner: Apple inc. show less	Fraud Orders Phishing Email Spam
🇰🇷 91.204.227.20	05 Jul 2022	Since June 23, 2022, the phishing site is currently operating at IP address: 91.204.227.20. You ca ... show more Since June 23, 2022, the phishing site is currently operating at IP address: 91.204.227.20. You can also access the phishing URL only from your smartphone. If you access the URL delivered by SMS with an Android OS smartphone, the malware "japanpost[.]apk" file will be downloaded. Phishing URL: http://hfi3.uzshq.com/sdfgewrwerew/ http://uzshq.com/sdfgewrwerew/ The following security sites are evidence of phishing sites. ・Twitter https://twitter.com/NaomiSuzuki_/status/1544160030504910848 ・Virus Total https://www.virustotal.com/gui/ip-address/91.204.227.20/relations ・Urlscan https://urlscan.io/ip/91.204.227.20 https://urlscan.io/result/ccf3b154-bc3e-4892-8a9e-3657dff5915d/ https://urlscan.io/result/438da168-74ae-4331-8a57-60cc2928d6d1/ Image of legitimate site used for phishing site: https://www.post.japanpost.jp/index.html Site owner: Japan Post Co., Ltd. show less	Phishing Email Spam Exploited Host
🇺🇸 104.21.76.105	04 Jul 2022	Phishing IP Address: 104.21.76.105 172.67.193.15 Phishing URL: https://websitelppostsecure.top ... show more Phishing IP Address: 104.21.76.105 172.67.193.15 Phishing URL: https://websitelppostsecure.top/index.php ↓ https://websitelppostsecure.top/yz.php ↓ https://websitelppostsecure.top/TokenYz.php ↓ https://websitelppostsecure.top/Information.php ↓ https://websitelppostsecure.top/postUserinfo.php ・Virus Total https://www.virustotal.com/gui/domain/websitelppostsecure.top/relations https://www.virustotal.com/gui/ip-address/104.21.76.105/relations https://www.virustotal.com/gui/ip-address/172.67.193.15/relations ・Urlscan https://urlscan.io/result/d572403c-55f9-45a1-8f7e-dabee044b39e/ https://urlscan.io/result/363690ec-1b5d-4920-89e5-aaf651a8e513/ ・Information source https://ameblo.jp/ani-037814/entry-12751842737.html show less	Fraud Orders Phishing Email Spam
🇺🇸 172.67.193.15	04 Jul 2022	Phishing IP Address: 104.21.76.105 172.67.193.15 Phishing URL: https://websitelppostsecure.top ... show more Phishing IP Address: 104.21.76.105 172.67.193.15 Phishing URL: https://websitelppostsecure.top/index.php ↓ https://websitelppostsecure.top/yz.php ↓ https://websitelppostsecure.top/TokenYz.php ↓ https://websitelppostsecure.top/Information.php ↓ https://websitelppostsecure.top/postUserinfo.php ・Virus Total https://www.virustotal.com/gui/domain/websitelppostsecure.top/relations https://www.virustotal.com/gui/ip-address/104.21.76.105/relations https://www.virustotal.com/gui/ip-address/172.67.193.15/relations ・Urlscan https://urlscan.io/result/d572403c-55f9-45a1-8f7e-dabee044b39e/ https://urlscan.io/result/363690ec-1b5d-4920-89e5-aaf651a8e513/ ・Information source https://ameblo.jp/ani-037814/entry-12751842737.html show less	Fraud Orders Phishing Email Spam
🇯🇵 192.51.188.108	04 Jul 2022	Since June 22, 2022, the phishing site is currently operating at IP address: 192.51.188.108. You c ... show more Since June 22, 2022, the phishing site is currently operating at IP address: 192.51.188.108. You can also access the phishing URL only from your smartphone. When you access the URL of an SMS that tricks Japan Post with an Android smartphone The malware "japanpost[.]apk" will be downloaded. Phishing URL: http://3.zyhvu.com/fgrrefeedh/ http://mzsac.com/fgrrefeedh/ http://nabnp.vvdpf.com/fgrrefeedh/ http://oeimw.vdbxc.com/fgrrefeedh/ http://en.uyyqx.com/fgrrefeedh/ The following security sites are evidence of phishing sites. ・Virus Total https://www.virustotal.com/gui/ip-address/192.51.188.108/relations ・Urlscan https://urlscan.io/ip/192.51.188.108 https://urlscan.io/result/d0b1393b-024e-4936-b106-f3a435679655/ https://urlscan.io/result/f1134ae7-8b8b-432e-b893-572461cec8e3/ Image of legitimate site used for phishing site: https://www.post.japanpost.jp/index.html Site owner: Japan Post Co., Ltd. show less	Phishing Email Spam Exploited Host
🇰🇷 91.204.227.20	04 Jul 2022	Since June 23, 2022, the phishing site is currently operating at IP address: 91.204.227.20. You ca ... show more Since June 23, 2022, the phishing site is currently operating at IP address: 91.204.227.20. You can also access the phishing URL only from your smartphone. If you access the URL delivered by SMS with an Android OS smartphone, the malware "japanpost[.]apk" file will be downloaded. Phishing URL: http://h8.ubzuu.com/sdfgewrwerew/ http://ubzuu.com/sdfgewrwerew/ http://m.ubzuu.com/sdfgewrwerew/ The following security sites are evidence of phishing sites. ・Twitter https://twitter.com/NaomiSuzuki_/status/1543833702891147265 https://twitter.com/NaomiSuzuki_/status/1543821535966035969 ・Virus Total https://www.virustotal.com/gui/ip-address/91.204.227.20/relations ・Urlscan https://urlscan.io/ip/91.204.227.20 https://urlscan.io/result/77bddffd-6f68-41e8-9b36-0e63a4e6fd21/ https://urlscan.io/result/998bc2a8-7283-4548-9f5e-abaf1f1de3bb/ Image of legitimate site used for phishing site: https://www.post.japanpost.jp/index.html Site owner: Japan Post Co., Ltd. show less	Phishing Email Spam Exploited Host
🇰🇷 103.80.134.41	04 Jul 2022	Since June 23, 2022, the phishing site is currently operating at IP address: 103.80.134.41. You ca ... show more Since June 23, 2022, the phishing site is currently operating at IP address: 103.80.134.41. You can also access the phishing URL only from your smartphone(iOS). Phishing URL: http://qkjklidayu.duckdns.org/ja/main The following security sites are evidence of phishing sites. ・Virus Total https://www.virustotal.com/gui/ip-address/103.80.134.41/relations ・Urlscan https://urlscan.io/ip/103.80.134.41 https://urlscan.io/result/d330ab8e-bb3a-4151-8af6-ed280d8d0514/ ・Twitter https://twitter.com/NaomiSuzuki_/status/1543782602364141569 https://twitter.com/NaomiSuzuki_/status/1543596676291899395 For your information, the fraudulent website appears to be a forgery of this legitimate website: https://appleid.apple.com/ja_JP Site owner: Apple inc. show less	Fraud Orders Phishing Email Spam
🇰🇷 91.204.227.20	04 Jul 2022	Since June 23, 2022, the phishing site is currently operating at IP address: 91.204.227.20. You ca ... show more Since June 23, 2022, the phishing site is currently operating at IP address: 91.204.227.20. You can also access the phishing URL only from your smartphone. If you access the URL delivered by SMS with an Android OS smartphone, the malware "japanpost[.]apk" file will be downloaded. Phishing URL: http://rdybz.com/sdfgewrwerew/ http://hs1n.rdybz.com/sdfgewrwerew/ The following security sites are evidence of phishing sites. ・Twitter https://twitter.com/NaomiSuzuki_/status/1543833702891147265 https://twitter.com/NaomiSuzuki_/status/1543821535966035969 ・Virus Total https://www.virustotal.com/gui/ip-address/91.204.227.20/relations ・Urlscan https://urlscan.io/ip/91.204.227.20 https://urlscan.io/result/c75c6638-d966-476a-b1e8-0a1d189ca8df/ https://urlscan.io/result/883425da-1255-46b4-a924-abb197c5c1a1/ Image of legitimate site used for phishing site: https://www.post.japanpost.jp/index.html Site owner: Japan Post Co., Ltd. show less	Phishing Email Spam Exploited Host
🇰🇷 103.80.134.41	03 Jul 2022	Since June 23, 2022, the phishing site is currently operating at IP address: 103.80.134.41. You ca ... show more Since June 23, 2022, the phishing site is currently operating at IP address: 103.80.134.41. You can also access the phishing URL only from your smartphone(iOS). Phishing URL: http://ozghagejwr.duckdns.org/ja/main The following security sites are evidence of phishing sites. ・Virus Total https://www.virustotal.com/gui/ip-address/103.80.134.41/relations ・Urlscan https://urlscan.io/ip/103.80.134.41 https://urlscan.io/result/86c5b280-877d-4e66-b437-49e2c05a3842/ ・Twitter https://twitter.com/NaomiSuzuki_/status/1542160278254649345 For your information, the fraudulent website appears to be a forgery of this legitimate website: https://appleid.apple.com/ja_JP Site owner: Apple inc. show less	Fraud Orders Phishing Email Spam
🇰🇷 91.204.227.20	03 Jul 2022	Since June 23, 2022, the phishing site is currently operating at IP address: 91.204.227.20. You ca ... show more Since June 23, 2022, the phishing site is currently operating at IP address: 91.204.227.20. You can also access the phishing URL only from your smartphone. If you access the URL delivered by SMS with an Android OS smartphone, the malware "japanpost[.]apk" file will be downloaded. Phishing URL: http://b.hyeyu.com/sdfgewrwerew/ The following security sites are evidence of phishing sites. ・Twitter https://twitter.com/NaomiSuzuki_/status/1543437186837917696 ・Virus Total https://www.virustotal.com/gui/ip-address/91.204.227.20/relations ・Urlscan https://urlscan.io/ip/91.204.227.20 https://urlscan.io/result/10d9411b-8d72-4159-af2e-8894f14f89dd/ https://urlscan.io/result/23aafa9f-a312-49aa-a6f7-89611ab8630f/ Image of legitimate site used for phishing site: https://www.post.japanpost.jp/index.html Site owner: Japan Post Co., Ltd. show less	Phishing Email Spam Exploited Host
🇰🇷 103.80.134.41	03 Jul 2022	Twitter (Phishing information): https://twitter.com/NaomiSuzuki_/status/1543428193553891328 https: ... show more Twitter (Phishing information): https://twitter.com/NaomiSuzuki_/status/1543428193553891328 https://twitter.com/NaomiSuzuki_/status/1543252927896514560 https://twitter.com/NaomiSuzuki_/status/1543054975911477248 https://twitter.com/NaomiSuzuki_/status/1542859494266662918 Phishing URLs: http://xxoeyvbjgr.duckdns.org/ja/main http://yogkbgxbfi.duckdns.org/ja/main http://yxkkymzmrf.duckdns.org/ja/main http://zvzhybkbdj.duckdns.org/ja/main http://rjpjpxswfz.duckdns.org/ja/main http://wjvkkkonnn.duckdns.org/ja/main http://wrffftgsan.duckdns.org/ja/main http://wyfmxrmfgz.duckdns.org/ja/main http://xbijqiqkdk.duckdns.org/ja/main http://xegikpogwi.duckdns.org/ja/main http://xjutshghqm.duckdns.org/ja/main http://vttauognpp.duckdns.org/ja/main http://vyduzhkouz.duckdns.org/ja/main http://wancpqdpnf.duckdns.org/ja/main http://wdhpplkyss.duckdns.org/ja/main http://widkkbqmza.duckdns.org/ja/main http://wjlllkxddq.duckdns.org/ja/main show less	Fraud Orders Phishing Email Spam
🇰🇷 91.204.227.20	03 Jul 2022	AbuseIPDB https://www.abuseipdb.com/check/91.204.227.20 ------------------------------------------ ... show more AbuseIPDB https://www.abuseipdb.com/check/91.204.227.20 ------------------------------------------------- Since June 23, 2022, the phishing site is currently operating at IP address: 91.204.227.20. You can also access the phishing URL only from your smartphone. If you access the URL delivered by SMS with an Android OS smartphone, the malware "japanpost[.]apk" file will be downloaded. Phishing URL: http://hyeyu.com/sdfgewrwerew/ http://ar30.hyeyu.com/sdfgewrwerew/ The following security sites are evidence of phishing sites. ・Twitter https://twitter.com/NaomiSuzuki_/status/1543437186837917696 ・Virus Total https://www.virustotal.com/gui/ip-address/91.204.227.20/relations ・Urlscan https://urlscan.io/ip/91.204.227.20 https://urlscan.io/result/da509953-e5ca-4591-a701-7ba24290ca70/ https://urlscan.io/result/9ad4f2ef-0a79-4f7a-8764-6dc8d3ad820b/ Image of legitimate site used for phishing site: https://www.post.japanpost.jp/index.html Site owner: Japan Post Co., Ltd. show less	Phishing Email Spam Exploited Host
🇰🇷 103.80.134.41	03 Jul 2022	Twitter (Phishing information): https://twitter.com/NaomiSuzuki_/status/1543428193553891328 https: ... show more Twitter (Phishing information): https://twitter.com/NaomiSuzuki_/status/1543428193553891328 https://twitter.com/NaomiSuzuki_/status/1543252927896514560 https://twitter.com/NaomiSuzuki_/status/1543054975911477248 https://twitter.com/NaomiSuzuki_/status/1542859494266662918 Phishing URLs: http://xqbwglhgjw.duckdns.org/ja/main http://xmoruywmdv.duckdns.org/ja/main http://xxoeyvbjgr.duckdns.org/ja/main http://yogkbgxbfi.duckdns.org/ja/main http://yxkkymzmrf.duckdns.org/ja/main http://zvzhybkbdj.duckdns.org/ja/main http://rjpjpxswfz.duckdns.org/ja/main http://oavywerbwf.duckdns.org/ja/main http://oiqtbywscl.duckdns.org/ja/main http://ojkeillliy.duckdns.org/ja/main http://omlzzqepbp.duckdns.org/ja/main http://opvjwkgrhf.duckdns.org/ja/main http://ovefczvclt.duckdns.org/ja/main http://xqbwglhgjw.duckdns.org/ja/main http://xmoruywmdv.duckdns.org/ja/main show less	Fraud Orders Phishing Email Spam
🇰🇷 91.204.227.20	02 Jul 2022	Since June 23, 2022, the phishing site is currently operating at IP address: 91.204.227.20. You ca ... show more Since June 23, 2022, the phishing site is currently operating at IP address: 91.204.227.20. You can also access the phishing URL only from your smartphone. If you access the URL delivered by SMS with an Android OS smartphone, the malware "japanpost[.]apk" file will be downloaded. Phishing URL: http://v2.eauzg.com/sdfgewrwerew/ http://eauzg.com/sdfgewrwerew/ The following security sites are evidence of phishing sites. ・Twitter https://twitter.com/NaomiSuzuki_/status/1543072988232568832 ・Virus Total https://www.virustotal.com/gui/ip-address/91.204.227.20/relations ・Urlscan https://urlscan.io/ip/91.204.227.20 https://urlscan.io/result/383e4f43-0bb2-489b-93d6-ff30c26a8c13/ https://urlscan.io/result/b157bc41-85c1-4b65-af1e-7cec2c95c166/ Image of legitimate site used for phishing site: https://www.post.japanpost.jp/index.html Site owner: Japan Post Co., Ltd. show less	Phishing Email Spam Exploited Host
🇰🇷 91.204.227.20	02 Jul 2022	Since June 23, 2022, the phishing site is currently operating at IP address: 91.204.227.20. You ca ... show more Since June 23, 2022, the phishing site is currently operating at IP address: 91.204.227.20. You can also access the phishing URL only from your smartphone. If you access the URL delivered by SMS with an Android OS smartphone, the malware "japanpost[.]apk" file will be downloaded. Phishing URL: http://v2.eauzg.com/sdfgewrwerew/ http://eauzg.com/sdfgewrwerew/ The following security sites are evidence of phishing sites. ・Twitter https://twitter.com/NaomiSuzuki_/status/1543072988232568832 ・Virus Total https://www.virustotal.com/gui/ip-address/91.204.227.20/relations ・Urlscan https://urlscan.io/ip/91.204.227.20 https://urlscan.io/result/f5e02240-3c0c-4be7-8969-708173cd913d/ https://urlscan.io/result/2cb45831-eda7-4b86-bd20-5488eb5c8bb1/ Image of legitimate site used for phishing site: https://www.post.japanpost.jp/index.html Site owner: Japan Post Co., Ltd. show less	Phishing Email Spam Exploited Host
🇯🇵 192.51.188.108	01 Jul 2022	Since June 22, 2022, the phishing site is currently operating at IP address: 192.51.188.108. You c ... show more Since June 22, 2022, the phishing site is currently operating at IP address: 192.51.188.108. You can also access the phishing URL only from your smartphone. When you access the URL of an SMS that tricks Japan Post with an Android smartphone The malware "japanpost[.]apk" will be downloaded. Phishing URL: http://gix.zyhvu.com/fgrrefeedh/ http://zyhvu.com/fgrrefeedh/ http://zqcne.com/fgrrefeedh/ http://d3l3.zqcne.com/fgrrefeedh/ http://9ct6.zqcne.com/fgrrefeedh/ The following security sites are evidence of phishing sites. ・Virus Total https://www.virustotal.com/gui/ip-address/192.51.188.108/relations ・Urlscan https://urlscan.io/ip/192.51.188.108 https://urlscan.io/result/382cac3f-284b-483a-b206-acadd17d8421/ https://urlscan.io/result/1ac063f0-748d-4fd4-a5ae-40696d82650e/ https://urlscan.io/result/77851eed-eeac-46c5-8336-f85ad7679b34/ Image of legitimate site used for phishing site: https://www.post.japanpost.jp/index.html Site owner: Japan Post Co., Ltd. show less	Phishing Email Spam Exploited Host
🇰🇷 91.204.227.20	01 Jul 2022	If you access the URL delivered by SMS with an Android OS smartphone, the malware "japanpost[.]apk ... show more If you access the URL delivered by SMS with an Android OS smartphone, the malware "japanpost[.]apk" file will be downloaded. Phishing URL: http://wsscy.ttqdr.com/sdfgewrwerew/ http://ppsfp.ttqdr.com/sdfgewrwerew/ http://xfsjz.ttqdr.com/sdfgewrwerew/ http://rsslj.ttqdr.com/sdfgewrwerew/ http://zsslj.ttqdr.com/sdfgewrwerew/ http://lusli.ttqdr.com/sdfgewrwerew/ http://zbslp.ttqdr.com/sdfgewrwerew/ http://lcsbt.ttqdr.com/sdfgewrwerew/ http://ayskb.ttqdr.com/sdfgewrwerew/ http://vfsvz.ttqdr.com/sdfgewrwerew/ http://ebsmd.ttqdr.com/sdfgewrwerew/ http://dtsrj.ttqdr.com/sdfgewrwerew/ http://jksac.ttqdr.com/sdfgewrwerew/ http://stsdn.ttqdr.com/sdfgewrwerew/ http://ymsis.ttqdr.com/sdfgewrwerew/ http://etswz.ttqdr.com/sdfgewrwerew/ http://brsbz.ttqdr.com/sdfgewrwerew/ http://pksnl.ttqdr.com/sdfgewrwerew/ http://tcsnd.ttqdr.com/sdfgewrwerew/ http://fnsda.ttqdr.com/sdfgewrwerew/ http://tosev.ttqdr.com/sdfgewrwerew/ show less	Phishing Email Spam Exploited Host
🇯🇵 192.51.188.108	01 Jul 2022	Since June 22, 2022, the phishing site is currently operating at IP address: 192.51.188.108. You c ... show more Since June 22, 2022, the phishing site is currently operating at IP address: 192.51.188.108. You can also access the phishing URL only from your smartphone. When you access the URL of an SMS that tricks Japan Post with an Android smartphone The malware "japanpost[.]apk" will be downloaded. Phishing URL: http://debyd.hrvxe.com/fgrrefeedh/ The following security sites are evidence of phishing sites. ・Virus Total https://www.virustotal.com/gui/ip-address/192.51.188.108/relations ・Urlscan https://urlscan.io/ip/192.51.188.108 https://urlscan.io/result/d80ea59f-ca71-43dd-9265-c43713a23353/ https://urlscan.io/result/7e9a33a4-06f9-4da5-a9ff-1418af7bc2ed/ Image of legitimate site used for phishing site: https://www.post.japanpost.jp/index.html Site owner: Japan Post Co., Ltd. show less	Phishing Email Spam Exploited Host
🇯🇵 192.51.188.108	30 Jun 2022	Since June 22, 2022, the phishing site is currently operating at IP address: 192.51.188.108. You c ... show more Since June 22, 2022, the phishing site is currently operating at IP address: 192.51.188.108. You can also access the phishing URL only from your smartphone. When you access the URL of an SMS that tricks Japan Post with an Android smartphone The malware "japanpost[.]apk" will be downloaded. Phishing URL: http://ocevy.rwptm.com/fgrrefeedh/ http://vm.yengn.com/fgrrefeedh/ http://hhwqj.yengn.com/fgrrefeedh/ The following security sites are evidence of phishing sites. ・Virus Total https://www.virustotal.com/gui/ip-address/192.51.188.108/relations ・Urlscan https://urlscan.io/ip/192.51.188.108 https://urlscan.io/result/aacb5b85-44c0-4145-821d-2525c8b1ed2f/ https://urlscan.io/result/6205996b-8b1e-4f99-8f8b-362302b57ed9/ https://urlscan.io/result/14d40059-d9a6-4f6e-a2c5-836ab28b03b5/ Image of legitimate site used for phishing site: https://www.post.japanpost.jp/index.html Site owner: Japan Post Co., Ltd. show less	Phishing Email Spam Exploited Host
🇰🇷 91.204.227.20	30 Jun 2022	Since June 23, 2022, the phishing site is currently operating at IP address: 91.204.227.20. You ca ... show more Since June 23, 2022, the phishing site is currently operating at IP address: 91.204.227.20. You can also access the phishing URL only from your smartphone. If you access the URL delivered by SMS with an Android OS smartphone, the malware "japanpost[.]apk" file will be downloaded. Phishing URL: http://clj.yfpzp.com/sdfgewrwerew/ The following security sites are evidence of phishing sites. ・Twitter https://twitter.com/NaomiSuzuki_ ・Virus Total https://www.virustotal.com/gui/ip-address/91.204.227.20/relations ・Urlscan https://urlscan.io/ip/91.204.227.20 https://urlscan.io/result/6dad55f0-3a06-4ebd-8d12-6068f927bf31/ https://urlscan.io/result/1a9ad821-c41b-4062-9b8f-d4284ed1e80d/ Image of legitimate site used for phishing site: https://www.post.japanpost.jp/index.html Site owner: Japan Post Co., Ltd. show less	Fraud Orders Phishing Email Spam
🇰🇷 103.80.134.41	30 Jun 2022	Since June 23, 2022, the phishing site is currently operating at IP address: 103.80.134.41. You ca ... show more Since June 23, 2022, the phishing site is currently operating at IP address: 103.80.134.41. You can also access the phishing URL only from your smartphone(iOS). Phishing URL: http://vhldxqqtkq.duckdns.org/ja/main http://vmintmorwh.duckdns.org/ja/main The following security sites are evidence of phishing sites. ・Virus Total https://www.virustotal.com/gui/ip-address/103.80.134.41/relations ・Urlscan https://urlscan.io/ip/103.80.134.41 https://urlscan.io/result/2e82cd0f-5920-438d-ba22-d7f50cfd22c7/ https://urlscan.io/result/987050af-c2f9-428d-a687-adffe20aa84e/ ・Twitter https://twitter.com/NaomiSuzuki_/status/1542160278254649345 For your information, the fraudulent website appears to be a forgery of this legitimate website: https://appleid.apple.com/ja_JP Site owner: Apple inc. show less	Fraud Orders Phishing Email Spam
🇰🇷 91.204.227.20	29 Jun 2022	Since June 23, 2022, the phishing site is currently operating at IP address: 91.204.227.20. You ca ... show more Since June 23, 2022, the phishing site is currently operating at IP address: 91.204.227.20. You can also access the phishing URL only from your smartphone. If you access the URL delivered by SMS with an Android OS smartphone, the malware "japanpost [.] Apk" file will be downloaded. Phishing URL: http://yhsrp.ttqdr.com/sdfgewrwerew/ The following security sites are evidence of phishing sites. ・Twitter ・Virus Total https://www.virustotal.com/gui/ip-address/91.204.227.20/relations ・Urlscan https://urlscan.io/ip/91.204.227.20 https://urlscan.io/result/53bc311f-b13e-4cbb-b5db-0a2556e577ae/ https://urlscan.io/result/aa6e0a1a-ec02-4299-8024-a4156cdfb613/ Image of legitimate site used for phishing site: https://www.post.japanpost.jp/index.html Site owner: Japan Post Co., Ltd. show less	Phishing Email Spam
🇰🇷 103.80.134.41	29 Jun 2022	You can also access the phishing URL only from your smartphone(iOS). Phishing URL: http://tmlyyy ... show more You can also access the phishing URL only from your smartphone(iOS). Phishing URL: http://tmlyyykwbr.duckdns.org/ja/main http://trrqpbamdr.duckdns.org/ja/main The following security sites are evidence of phishing sites. ・Virus Total https://www.virustotal.com/gui/ip-address/103.80.134.41/relations ・Urlscan https://urlscan.io/ip/103.80.134.41 https://urlscan.io/result/d9d7eff0-6bdd-45d8-ad10-b5a5b2c0e7ae/ https://urlscan.io/result/6cde14fb-7475-46a4-8a44-8d35395361d7/ ・Twitter https://twitter.com/NaomiSuzuki_/status/1542160278254649345 For your information, the fraudulent website appears to be a forgery of this legitimate website: https://appleid.apple.com/ja_JP Site owner: Apple inc. show less	Phishing Email Spam
🇯🇵 192.51.188.108	29 Jun 2022	Since June 22, 2022, the phishing site is currently operating at IP address: 192.51.188.108. You c ... show more Since June 22, 2022, the phishing site is currently operating at IP address: 192.51.188.108. You can also access the phishing URL only from your smartphone. When you access the URL of an SMS that tricks Japan Post with an Android smartphone The malware "japanpost[.]apk" will be downloaded. Phishing URL: http://jjthi.vvdpf.com/fgrrefeedh/ http://wwvwo.vvdpf.com/fgrrefeedh/ http://rzagp.rwptm.com/fgrrefeedh/ The following security sites are evidence of phishing sites. ・Virus Total https://www.virustotal.com/gui/ip-address/192.51.188.108/relations ・Urlscan https://urlscan.io/ip/192.51.188.108 https://urlscan.io/result/af79f763-db05-4871-a811-6887a8254835/ https://urlscan.io/result/5d46d5dd-fc03-4f48-bf8d-ab8e99c27cf1/ https://urlscan.io/result/ec08bbba-4ad9-4ab0-8260-c089ae11cb28/ Image of legitimate site used for phishing site: https://www.post.japanpost.jp/index.html Site owner: Japan Post Co., Ltd. show less	Phishing Email Spam