AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User Anti-Phishing Unit joined AbuseIPDB in December 2021 and has reported 459 IP addresses.

Standing (weight) is good.

INACTIVE USER

IP	Date	Comment	Categories
🇰🇷 91.204.227.86	24 Nov 2022	<Phishing URL> http://lobgojosuc.duckdns.org/ja/main http://lopzjpvbwr.duckdns.org/ja/main http:/ ... show more <Phishing URL> http://lobgojosuc.duckdns.org/ja/main http://lopzjpvbwr.duckdns.org/ja/main http://lpcderfrwj.duckdns.org/ja/main http://lpgytfmrkr.duckdns.org/ja/main http://lrxqldvajp.duckdns.org/ja/main http://lubogdprkk.duckdns.org/ja/main <Evidence> ・Twitter https://twitter.com/NaomiSuzuki_/status/1595780364118523904 ・VirusTotal https://www.virustotal.com/gui/ip-address/91.204.227.86/relations ・Urlscan https://urlscan.io/result/f1619514-edc5-4c80-9763-2c091ac23430/ https://urlscan.io/result/b2b8278e-bba0-49fa-94b2-af224d0bd799/ show less	Fraud Orders Phishing Email Spam
🇰🇷 91.204.227.86	24 Nov 2022	<Phishing URL> http://lcxvfxoiyh.duckdns.org/ja/main http://lfunundxab.duckdns.org/ja/main http:/ ... show more <Phishing URL> http://lcxvfxoiyh.duckdns.org/ja/main http://lfunundxab.duckdns.org/ja/main http://lkjwjjivvw.duckdns.org/ja/main http://lkvjwlykld.duckdns.org/ja/main http://llgeubdxkj.duckdns.org/ja/main http://lllubzjihy.duckdns.org/ja/main <Evidence> ・Twitter https://twitter.com/NaomiSuzuki_/status/1595612141998202880 ・VirusTotal https://www.virustotal.com/gui/ip-address/91.204.227.86/relations ・Urlscan https://urlscan.io/result/b8af11b2-b6c0-475a-a464-a66472bea330/ https://urlscan.io/result/65e16b28-6d73-41ff-a10f-941b0232161a/ show less	Fraud Orders Phishing Email Spam
🇰🇷 91.204.227.86	21 Nov 2022	<Phishing URL> http://ithymovuia.duckdns.org/ja/main http://iwryikehqh.duckdns.org/ja/main http:/ ... show more <Phishing URL> http://ithymovuia.duckdns.org/ja/main http://iwryikehqh.duckdns.org/ja/main http://iwwwwvhutl.duckdns.org/ja/main http://ixptyfpuyi.duckdns.org/ja/main http://izsasrbxfo.duckdns.org/ja/main http://izulcgzqip.duckdns.org/ja/main http://igfavfkqxg.duckdns.org/ja/main http://ihrugfgwmg.duckdns.org/ja/main http://iitgylykwk.duckdns.org/ja/main http://ikclvbhgtd.duckdns.org/ja/main http://ipdrryyloq.duckdns.org/ja/main http://ipdzuplayv.duckdns.org/ja/main http://hvrlmoiwkz.duckdns.org/ja/main http://hycrtvlahw.duckdns.org/ja/main http://hykezemdks.duckdns.org/ja/main http://hziaiaebxx.duckdns.org/ja/main http://hzrwguanqc.duckdns.org/ja/main http://ibxdbjotoj.duckdns.org/ja/main http://hjilfqgaqx.duckdns.org/ja/main http://hjpywkmsnh.duckdns.org/ja/main http://hksrzqctnz.duckdns.org/ja/main show less	Fraud Orders Phishing Email Spam
🇰🇷 103.80.134.41	18 Nov 2022	<Phishing URL> http://ffp.ryqud.com/ http://ryqud.com/ <Evidence> ・Twitter https://twitter.co ... show more <Phishing URL> http://ffp.ryqud.com/ http://ryqud.com/ <Evidence> ・Twitter https://twitter.com/NaomiSuzuki_/status/1593509897978531840 ・VirusTotal https://www.virustotal.com/gui/ip-address/103.80.134.41/relations ・Urlscan https://urlscan.io/result/11a0b5d2-679c-4c7f-b211-ccfccb9dcec2/ https://urlscan.io/result/844f4434-bc6f-41ca-b0bf-22761784f20f/ show less	Fraud Orders Phishing Email Spam Exploited Host
🇰🇷 91.204.227.86	18 Nov 2022	<Phishing URL> http://zykkylxden.duckdns.org/ja/main http://zxlxrrdccc.duckdns.org/ja/main http:/ ... show more <Phishing URL> http://zykkylxden.duckdns.org/ja/main http://zxlxrrdccc.duckdns.org/ja/main http://zupnxscbpl.duckdns.org/ja/main http://zukybvtcmg.duckdns.org/ja/main http://ztnviplrxa.duckdns.org/ja/main http://ztenwpixms.duckdns.org/ja/main http://esjerelrar.duckdns.org/ja/main http://eqpqsrferi.duckdns.org/ja/main http://eoezvsdnkw.duckdns.org/ja/main http://dpwkqpkdem.duckdns.org/ja/main http://zzmzmmlznf.duckdns.org/ja/main http://zyxxkpoobo.duckdns.org/ja/main <Evidence> ・Twitter https://twitter.com/NaomiSuzuki_/status/1593437255846092800 https://twitter.com/NaomiSuzuki_/status/1593255096057417728 ・VirusTotal https://www.virustotal.com/gui/ip-address/91.204.227.86/relations show less	Fraud Orders Phishing Email Spam
🇩🇪 144.76.113.27	16 Nov 2022	This URL is a phishing site (credit card fraud site) that has tampered with the legitimate site Word ... show more This URL is a phishing site (credit card fraud site) that has tampered with the legitimate site WordPress. https://www.webjapan-post.addre.freeremix.fun/takeme.php ↓ https://kinetic-holding.com/wp-admin/mypage/POST%20JAPAN/ ↓ https://kinetic-holding.com/wp-admin/mypage/POST%20JAPAN/OZEJK98HJSDJS/ https://kinetic-holding.com/wp-admin/mypage/POST%20JAPAN/OZEJK98HJSDJS/index.php?FGDD=1 ↓ https://kinetic-holding.com/wp-admin/mypage/POST%20JAPAN/OZEJK98HJSDJS/Loading.php?FGDD=1#sHFHJHDHDHKJDJDSDSJDSJKJDSJDSDJJDSHYKJHGFG#_ ↓ https://kinetic-holding.com/wp-admin/mypage/POST%20JAPAN/OZEJK98HJSDJS/C.php?FGDD=1#sHFHJHDHDHKJDJDSDSJDSJKJDSJDSDJJDSHYKJHGFG#_$dispatch ↓ https://kinetic-holding.com/wp-admin/mypage/POST%20JAPAN/OZEJK98HJSDJS/C.php?FGDD=1#sHFHJHDHDHKJDJDSDSJDSJKJDSJDSDJJDSHYKJHGFG# <Evidence> ・Urlscan https://urlscan.io/result/8ca4f1f4-814e-4367-94c2-e91a8e66a3ca/ show less	Fraud Orders Phishing Email Spam Exploited Host
🇩🇪 23.88.7.241	16 Nov 2022	This URL is a redirector URL that directs WordPress to a tampered phishing site (credit card fraud s ... show more This URL is a redirector URL that directs WordPress to a tampered phishing site (credit card fraud site). <Phishing URL> redirector URL https://www.webjapan-post.addre.freeremix.fun/takeme.php ↓ https://kinetic-holding.com/wp-admin/mypage/POST%20JAPAN/ ↓ https://kinetic-holding.com/wp-admin/mypage/POST%20JAPAN/OZEJK98HJSDJS/ https://kinetic-holding.com/wp-admin/mypage/POST%20JAPAN/OZEJK98HJSDJS/index.php?FGDD=1 ↓ https://kinetic-holding.com/wp-admin/mypage/POST%20JAPAN/OZEJK98HJSDJS/Loading.php?FGDD=1#sHFHJHDHDHKJDJDSDSJDSJKJDSJDSDJJDSHYKJHGFG#_ ↓ https://kinetic-holding.com/wp-admin/mypage/POST%20JAPAN/OZEJK98HJSDJS/C.php?FGDD=1#sHFHJHDHDHKJDJDSDSJDSJKJDSJDSDJJDSHYKJHGFG#_$dispatch ↓ https://kinetic-holding.com/wp-admin/mypage/POST%20JAPAN/OZEJK98HJSDJS/C.php?FGDD=1#sHFHJHDHDHKJDJDSDSJDSJKJDSJDSDJJDSHYKJHGFG# <Evidence> ・Twitter りしぇ@rsie_2000 https://twitter.com/rsie_2000/status/1592660744835051521 show less	Fraud Orders Phishing Email Spam Exploited Host
🇩🇪 144.76.113.27	16 Nov 2022	It is believed that WordPress, a user site (hxxps [://]inetic-holding [.] com/) linked to IP address ... show more It is believed that WordPress, a user site (hxxps [://]inetic-holding [.] com/) linked to IP address: 144 [.] 76 [.] 113 [.] 27, has been tampered with, and a Japan Post phishing site has been set up. ① hxxps[://]www[.]webjapan-post[.]addre[.]freeremix[.]fun/takeme[.]php ↓ ② hxxps[://]kinetic-holding[.]com/wp-admin/mypage/POST%20JAPAN/ ↓ ③ hxxps[://]kinetic-holding[.]com/wp-admin/mypage/POST%20JAPAN/OZEJK98HJSDJS/ ③ hxxps[://]kinetic-holding[.]com/wp-admin/mypage/POST%20JAPAN/OZEJK98HJSDJS/index[.]php?FGDD=1 ↓ ④ hxxps[://]kinetic-holding[.]com/wp-admin/mypage/POST%20JAPAN/OZEJK98HJSDJS/Loading[.]php?FGDD=1#sHFHJHDHDHKJDJDSDSJDSJKJDSJDSDJJDSHYKJHGFG#_ ↓ ⑤ hxxps[://]kinetic-holding[.]com/wp-admin/mypage/POST%20JAPAN/OZEJK98HJSDJS/C[.]php?FGDD=1#sHFHJHDHDHKJDJDSDSJDSJKJDSJDSDJJDSHYKJHGFG#_$dispatch ↓ ⑥ hxxps[://]kinetic-holding[.]com/wp-admin/mypage/POST%20JAPAN/OZEJK98HJSDJS/C[.]php?FGDD=1#sHFHJHDHDHKJDJDSDSJDSJKJDSJDSDJJDSHYKJHGFG# show less	Fraud Orders Phishing Email Spam Exploited Host
🇰🇷 91.204.227.86	16 Nov 2022	<Phishing URL> http://grqcpugtgg.duckdns.org/ja/main http://gmdlmcsbrs.duckdns.org/ja/main http:/ ... show more <Phishing URL> http://grqcpugtgg.duckdns.org/ja/main http://gmdlmcsbrs.duckdns.org/ja/main http://gkqnwrrmjt.duckdns.org/ja/main http://gjmcrhhwqg.duckdns.org/ja/main http://giudtyijsc.duckdns.org/ja/main http://ghjuhgwlhf.duckdns.org/ja/main http://ifnuibjqlh.duckdns.org/ja/main http://idvpnsjszx.duckdns.org/ja/main http://hxnemdkndg.duckdns.org/ja/main http://hvnxknlvjw.duckdns.org/ja/main http://hnrvswnelc.duckdns.org/ja/main http://gwuohtijcb.duckdns.org/ja/main <Evidence> ・Twitter https://twitter.com/NaomiSuzuki_/status/1592725282863316992 https://twitter.com/NaomiSuzuki_/status/1592542180576755714 https://twitter.com/NaomiSuzuki_/status/1592711915062853632 ・VirusTotal https://www.virustotal.com/gui/ip-address/91.204.227.86/relations ・Urlscan https://urlscan.io/result/739d64ff-5e2b-4549-b304-401a268baf2e/ https://urlscan.io/result/70c18727-e928-429d-abbb-c5a08987d796/ https://urlscan.io/result/34f28312-effa-4b9e-8b0d-96503ed0f4b4/ show less	Fraud Orders Phishing Email Spam
🇰🇷 103.80.134.41	14 Nov 2022	<Phishing URL> http://iqvec.com/ http://l.iqvec.com/ <Evidence> ・Twitter https://twitter.com/ ... show more <Phishing URL> http://iqvec.com/ http://l.iqvec.com/ <Evidence> ・Twitter https://twitter.com/NaomiSuzuki_/status/1592374331208007681 ・VirusTotal https://www.virustotal.com/gui/ip-address/103.80.134.41/relations ・Urlscan https://urlscan.io/result/c3210f8e-6639-4c2d-b9ea-478b6621a8df/ https://urlscan.io/result/9c287072-5b48-4cf6-84df-f79360bbb525/ show less	Phishing Email Spam Exploited Host
🇰🇷 103.80.134.41	14 Nov 2022	<Phishing URL> http://jmovihtgxx.duckdns.org/ja/main http://jjimjchqxs.duckdns.org/ja/main http:/ ... show more <Phishing URL> http://jmovihtgxx.duckdns.org/ja/main http://jjimjchqxs.duckdns.org/ja/main http://jegpymkiaf.duckdns.org/ja/main http://ixahcueqtk.duckdns.org/ja/main http://ivuhuiamly.duckdns.org/ja/main http://ivqutzhonh.duckdns.org/ja/main http://isgumwmarr.duckdns.org/ja/main http://insjchmebm.duckdns.org/ja/main http://imzecudmjl.duckdns.org/ja/main http://iivwwwiinn.duckdns.org/ja/main http://iiashcjcog.duckdns.org/ja/main http://ihpkexvoxr.duckdns.org/ja/main <Evidence> ・Twitter https://twitter.com/NaomiSuzuki_/status/1592159782424940544 https://twitter.com/NaomiSuzuki_/status/1592345325788090368 ・VirusTotal https://www.virustotal.com/gui/ip-address/91.204.227.86/relations ・Urlscan https://urlscan.io/result/50edd79c-70a8-4ce6-8839-a32754758427/ https://urlscan.io/result/cf3d2247-5126-4cc7-86f6-a23b13fb39fb/ https://urlscan.io/result/267b59ba-79fb-4662-95ba-e08f0928f24a/ https://urlscan.io/result/d2170839-1fdf-464d-9afd-5117a0aa6548/ show less	Fraud Orders Phishing Email Spam
🇰🇷 103.80.134.41	14 Nov 2022	<Phishing URL> http://igmxw.com/ http://cg.igmxw.com/ http://tqomz.com/ http://lax.tqomz.com/ h ... show more <Phishing URL> http://igmxw.com/ http://cg.igmxw.com/ http://tqomz.com/ http://lax.tqomz.com/ http://zwmdv.com/ http://8ao.zwmdv.com/ http://gqm8.zwmdv.com/ http://fpaw.zwmdv.com/ http://zh4w.zwmdv.com/ http://bn2.zwmdv.com/ http://7gj.zwmdv.com/ http://po.zwmdv.com/ <Evidence> ・Twitter https://twitter.com/NaomiSuzuki_/status/1592021189538746368 https://twitter.com/NaomiSuzuki_/status/1591638524750884868 https://twitter.com/NaomiSuzuki_/status/1591273107893125120 ・Urlscan https://urlscan.io/result/e0944ccf-42e4-4952-bf18-f2fa39909c15/ https://urlscan.io/result/3f980ffb-7d84-487d-b116-b3576ec08f4c/ https://urlscan.io/result/75287886-366b-48bd-b8c6-45385ac5a159/ https://urlscan.io/result/7bd85b95-9515-4933-81fb-0e7963de943b/ https://urlscan.io/result/8bf62adb-9730-4e60-8447-bf667e2de4a9/ https://urlscan.io/result/be3e5459-77b8-45ec-bb39-c78d331dd489/ ・VirusTotal https://www.virustotal.com/gui/ip-address/103.80.134.41/relations show less	Phishing Email Spam Exploited Host
🇰🇷 91.204.227.86	14 Nov 2022	<Phishing URL> http://nykbhbipft.duckdns.org/ja/main http://nwpjexoupb.duckdns.org/ja/main http:/ ... show more <Phishing URL> http://nykbhbipft.duckdns.org/ja/main http://nwpjexoupb.duckdns.org/ja/main http://nuplraehjr.duckdns.org/ja/main http://nfmjawsypq.duckdns.org/ja/main http://ncopsyrtmp.duckdns.org/ja/main http://ptcxfiksrb.duckdns.org/ja/main http://pozzzyzyyl.duckdns.org/ja/main http://pmkfcltcuk.duckdns.org/ja/main http://pazyzzyykc.duckdns.org/ja/main http://ohrmuvbmhr.duckdns.org/ja/main http://oamsfserwx.duckdns.org/ja/main <Evidence> ・Twitter https://twitter.com/NaomiSuzuki_/status/1591979302186516480 https://twitter.com/NaomiSuzuki_/status/1591801035882131458 https://twitter.com/NaomiSuzuki_/status/1591625168757338112 https://twitter.com/NaomiSuzuki_/status/1591485555376009216 https://twitter.com/NaomiSuzuki_/status/1591255453404893184 https://twitter.com/NaomiSuzuki_/status/1591070038311997444 show less	Fraud Orders Phishing Email Spam
🇰🇷 103.80.134.41	10 Nov 2022	<Phishing URL> http://vghyo.com/ http://r1k8.vghyo.com/ <Evidence> ・Twitter https://twitter.c ... show more <Phishing URL> http://vghyo.com/ http://r1k8.vghyo.com/ <Evidence> ・Twitter https://twitter.com/NaomiSuzuki_/status/1590908062298439680 ・VirusTotal https://www.virustotal.com/gui/ip-address/103.80.134.41/relations ・Urlscan.io https://urlscan.io/result/664f612a-a133-4dab-a76c-2e1c33c56d6b/ https://urlscan.io/result/a4ebe96b-6419-4056-8205-e4a7d2aab98a/ show less	Phishing Email Spam Exploited Host
🇰🇷 91.204.227.86	10 Nov 2022	<Phishing URL> http://txxyyzmmnc.duckdns.org/ja/main http://twzsjadtyc.duckdns.org/ja/main http:/ ... show more <Phishing URL> http://txxyyzmmnc.duckdns.org/ja/main http://twzsjadtyc.duckdns.org/ja/main http://tsivuhgklm.duckdns.org/ja/main http://svpereqekl.duckdns.org/ja/main http://svnublyhql.duckdns.org/ja/main http://sdretxwkjw.duckdns.org/ja/main http://vtfrffeihu.duckdns.org/ja/main http://vhvvhuglkd.duckdns.org/ja/main http://vcojpjqzur.duckdns.org/ja/main http://uzpotpjoul.duckdns.org/ja/main http://utisztagjt.duckdns.org/ja/main http://tytejsuiyk.duckdns.org/ja/main <Evidence> ・Twitter https://twitter.com/NaomiSuzuki_/status/1590558290186240000 https://twitter.com/NaomiSuzuki_/status/1590532154890801152 https://twitter.com/NaomiSuzuki_/status/1590348439833186305 ・VirusTotal https://www.virustotal.com/gui/ip-address/91.204.227.86/relations ・Urlscan https://urlscan.io/result/23b25228-e36f-4432-8853-ae794e637ed5/ https://urlscan.io/result/051fed5d-8cca-4e6d-9cf8-6a8f95ece8f3/ https://urlscan.io/result/6509fb36-ed5f-46f7-b168-ceaf6108cf30/ show less	Fraud Orders Phishing Email Spam
🇰🇷 103.80.134.41	09 Nov 2022	<Phishing URL> http://xcquy.com/ http://x17.xcquy.com/ <Evidence> ・Twitter https://twitter.co ... show more <Phishing URL> http://xcquy.com/ http://x17.xcquy.com/ <Evidence> ・Twitter https://twitter.com/NaomiSuzuki_/status/1590558290186240000 ・VirusTotal https://www.virustotal.com/gui/ip-address/103.80.134.41/relations ・Urlscan.io https://urlscan.io/result/a192790b-9dbb-4f1f-81a1-a59ba80dd036/ https://urlscan.io/result/2e2cc6f6-3b5c-421b-8857-3efe0ad6ea87/ show less	Phishing Email Spam Exploited Host
🇰🇷 103.80.134.41	09 Nov 2022	<Phishing URL> http://xwmpn.com/ http://dx.xwmpn.com/ http://yz.xwmpn.com/ http://b.xwmpn.com/ ... show more <Phishing URL> http://xwmpn.com/ http://dx.xwmpn.com/ http://yz.xwmpn.com/ http://b.xwmpn.com/ http://bp.xwmpn.com/ <Evidence> ・Twitter https://twitter.com/NaomiSuzuki_/status/1590185165338578944 ・VirusTotal https://www.virustotal.com/gui/ip-address/103.80.134.41/relations ・Urlscan https://urlscan.io/result/ff4d75e8-dc6b-441a-951d-523de39c13dd/ https://urlscan.io/result/2de1f944-58f0-489a-8f68-e6f5537dae2f/ https://urlscan.io/result/a9fa1c2a-c6fc-4099-a923-8f2fd92376e6/ https://urlscan.io/result/404b9430-3f69-493f-a9ae-6a8a466bb9cc/ https://urlscan.io/result/29bf940f-38db-4bd3-8be1-288b00b19796/ show less	Phishing Email Spam Exploited Host
🇰🇷 91.204.227.86	09 Nov 2022	<Phishing URL> http://zhozetcwtb.duckdns.org/ja/main http://yehypdjhna.duckdns.org/ja/main http:/ ... show more <Phishing URL> http://zhozetcwtb.duckdns.org/ja/main http://yehypdjhna.duckdns.org/ja/main http://ybwuofsrxo.duckdns.org/ja/main http://xvixykykwb.duckdns.org/ja/main http://xhjlrzwcqb.duckdns.org/ja/main http://xezwgmwrgm.duckdns.org/ja/main http://wugfsrrsfu.duckdns.org/ja/main http://wrqspqsjdj.duckdns.org/ja/main http://wrdizfwger.duckdns.org/ja/main http://wqghkciqky.duckdns.org/ja/main http://wngcujmimb.duckdns.org/ja/main http://vyrxcshxff.duckdns.org/ja/main <Evidence> ・Twitter https://twitter.com/NaomiSuzuki_/status/1590185165338578944 ・Urlscan https://urlscan.io/result/f30ab270-aa22-4d1c-b4bb-76011f9f40ac/ https://urlscan.io/result/3bb89ec6-6247-4591-8958-e1a48babb242/ https://urlscan.io/result/a5def0ab-31e6-43db-a102-b8929e266c0f/ https://urlscan.io/result/209d6c2c-531e-41fc-b2d6-1d4fd3ffe937/ ・Check-Host https://check-host.net/ip-info?host=zhozetcwtb.duckdns.org https://check-host.net/check-dns?host=zhozetcwtb.duckdns.org show less	Fraud Orders Phishing Email Spam
🇰🇷 103.80.134.41	08 Nov 2022	<Phishing URL> hxxp[://]hmrgt[.]com/ hxxp[://]fd[.]hmrgt[.]com/ hxxp[://]pio[.]hmrgt[.]com/ hxxp ... show more <Phishing URL> hxxp[://]hmrgt[.]com/ hxxp[://]fd[.]hmrgt[.]com/ hxxp[://]pio[.]hmrgt[.]com/ hxxp[://]3voa[.]hmrgt[.]com/ hxxp[://]g8o[.]hmrgt[.]com/ <Evidence> ・Twitter https://twitter.com/NaomiSuzuki_/status/1589836769360760832 ・VirusTotal https://www.virustotal.com/gui/ip-address/103.80.134.41/relations ・Urlscan https://urlscan.io/ip/103.80.134.41 https://urlscan.io/result/ba58d6ef-dfb7-4f70-a98f-29c6d670b0be/ https://urlscan.io/result/499bb7c9-e0fa-4068-9618-df8092637cf1/ https://urlscan.io/result/ce32abf8-ae15-4a13-b757-622c7cb53d95/ https://urlscan.io/result/2820556d-568f-4d5a-849e-5bd97811c05f/ https://urlscan.io/result/d5884050-79c8-4dd0-881b-f057a7e38833/ show less	Phishing Email Spam Exploited Host
🇰🇷 91.204.227.86	07 Nov 2022	<Phishing URL> hxxp[://]xcduivocgt[.]duckdns[.]org/ja/main hxxp[://]xdazegbych[.]duckdns[.]org/ja/ ... show more <Phishing URL> hxxp[://]xcduivocgt[.]duckdns[.]org/ja/main hxxp[://]xdazegbych[.]duckdns[.]org/ja/main hxxp[://]xdfnhpwpya[.]duckdns[.]org/ja/main hxxp[://]xdmiajsmrn[.]duckdns[.]org/ja/main hxxp[://]xdzhfrbunt[.]duckdns[.]org/ja/main hxxp[://]xhgtftfqpc[.]duckdns[.]org/ja/main hxxp[://]wuhuunnnno[.]duckdns[.]org/ja/main hxxp[://]wuzdndnxcw[.]duckdns[.]org/ja/main hxxp[://]wvuvvjvnmz[.]duckdns[.]org/ja/main hxxp[://]wwqxuqxrxj[.]duckdns[.]org/ja/main hxxp[://]wwvixjvvuh[.]duckdns[.]org/ja/main hxxp[://]wzzzzlqpcc[.]duckdns[.]org/ja/main hxxp[://]wheocpmjvp[.]duckdns[.]org/ja/main hxxp[://]wlgpngmtkt[.]duckdns[.]org/ja/main hxxp[://]wmfzhucvng[.]duckdns[.]org/ja/main hxxp[://]wmmacpcqcq[.]duckdns[.]org/ja/main hxxp[://]wpdersfsff[.]duckdns[.]org/ja/main hxxp[://]wrvciafmge[.]duckdns[.]org/ja/main <Evidence> ・VirusTotal https://www.virustotal.com/gui/ip-address/91.204.227.86/relations show less	Fraud Orders Phishing Email Spam
🇰🇷 103.80.134.41	07 Nov 2022	At the time of confirmation, the screen design disguised as the Japan Post website was not displaye ... show more At the time of confirmation, the screen design disguised as the Japan Post website was not displayed apk file download available. <Phishing URL> http://yewhd.com/ http://yj.yewhd.com/ http://tbeew.com/ http://295.tbeew.com/ http://duogz.com/ http://dc.duogz.com/ <Evidence> ・VirusTotal https://www.virustotal.com/gui/ip-address/103.80.134.41/relations ・Urlscan https://urlscan.io/result/2819889c-36af-4dd8-be99-cdcdeaab6880/ https://urlscan.io/result/185b08fb-d99f-4382-b19b-182fc0a9dfc2/ https://urlscan.io/result/249c6406-1cfe-41da-88fc-5b7dc4282fda/ https://urlscan.io/result/81469494-8e57-4693-8bf2-8177c58b8d4d/ ・Twitter https://twitter.com/NaomiSuzuki_/status/1589096376725819392 https://twitter.com/NaomiSuzuki_/status/1589460504132857856 https://twitter.com/NaomiSuzuki_/status/1588731595825217537 show less	Phishing Email Spam Exploited Host
🇰🇷 91.204.227.86	04 Nov 2022	<Phishing URL> http://vwmsfoyqek.duckdns.org/ja/main http://vxpzjmuneu.duckdns.org/ja/main http:/ ... show more <Phishing URL> http://vwmsfoyqek.duckdns.org/ja/main http://vxpzjmuneu.duckdns.org/ja/main http://vzoskhafxc.duckdns.org/ja/main http://wbldydwrdj.duckdns.org/ja/main http://wdasjnrvbh.duckdns.org/ja/main http://wfauctuftg.duckdns.org/ja/main <Evidence> ・Twitter https://twitter.com/NaomiSuzuki_/status/1588353058404466688 show less	Fraud Orders Phishing Email Spam
🇰🇷 91.204.227.22	02 Nov 2022	<Phishing URL> http://mrdzv.com/ http://5u4.mrdzv.com/ http://rriwx.com/ <Evidence> ・Twitter ... show more <Phishing URL> http://mrdzv.com/ http://5u4.mrdzv.com/ http://rriwx.com/ <Evidence> ・Twitter https://twitter.com/NaomiSuzuki_/status/1587647479109259264 ・VirusTotal https://www.virustotal.com/gui/ip-address/91.204.227.22/relations ・Urlscan.io https://urlscan.io/search/#91.204.227.22 show less	Phishing Email Spam Exploited Host
🇰🇷 91.204.227.86	02 Nov 2022	<Phishing URL> http://sbaqgfllsf.duckdns.org/ja/main http://sfggftsrvx.duckdns.org/ja/main http:/ ... show more <Phishing URL> http://sbaqgfllsf.duckdns.org/ja/main http://sfggftsrvx.duckdns.org/ja/main http://sfgtiwihtt.duckdns.org/ja/main http://siluohckbt.duckdns.org/ja/main http://skexsqgenk.duckdns.org/ja/main http://slorjmknei.duckdns.org/ja/main http://qywkidmhsp.duckdns.org/ja/main http://repppdpcai.duckdns.org/ja/main http://rklhsolvsi.duckdns.org/ja/main http://rrrdeetusf.duckdns.org/ja/main http://ruiikllmyy.duckdns.org/ja/main http://rxmbyvgpyw.duckdns.org/ja/main <>Evidence> ・VirusTotal https://www.virustotal.com/gui/ip-address/91.204.227.86/relations ・Urlscan https://urlscan.io/result/72f7bebf-ccce-490e-af1a-b182dc7f5234/ https://urlscan.io/result/47b7afa9-0e5b-4120-9440-c44689b8a3e7/ https://urlscan.io/result/dae4bc9c-b098-491b-aa52-eb9a1090ef46/ https://urlscan.io/result/df410634-50fd-40e1-b3b5-04d2ec974b6c/ show less	Fraud Orders Phishing Email Spam
🇰🇷 91.204.227.86	31 Oct 2022	<Phishing URL> http://nsjbsovzcv.duckdns.org/ja/main http://nvcxgkrmtf.duckdns.org/ja/main http:/ ... show more <Phishing URL> http://nsjbsovzcv.duckdns.org/ja/main http://nvcxgkrmtf.duckdns.org/ja/main http://oaanbomfes.duckdns.org/ja/main http://ocskvqhydi.duckdns.org/ja/main http://oessgtklvj.duckdns.org/ja/main http://ofpjqhrdrs.duckdns.org/ja/main http://mzlmmmylcq.duckdns.org/ja/main http://nfxctxotpu.duckdns.org/ja/main http://nlkkkcbana.duckdns.org/ja/main http://nnyyyxmlcp.duckdns.org/ja/main http://npidimrkhh.duckdns.org/ja/main http://nptkgrtplx.duckdns.org/ja/main <Evidence> ・Twitter https://twitter.com/NaomiSuzuki_/status/1586934686512975872 https://twitter.com/NaomiSuzuki_/status/1586565597667954688 https://twitter.com/NaomiSuzuki_/status/1586243275270520832 https://twitter.com/NaomiSuzuki_/status/1586827342705758208 https://twitter.com/NaomiSuzuki_/status/1586561896995762176 https://twitter.com/NaomiSuzuki_/status/1586371439753859078 https://twitter.com/NaomiSuzuki_/status/1586186035863891968 https://twitter.com/NaomiSuzuki_/status/1586024402847924224 show less	Fraud Orders Phishing Email Spam