AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User Anti-Phishing Unit joined AbuseIPDB in December 2021 and has reported 459 IP addresses.

Standing (weight) is good.

INACTIVE USER

IP	Date	Comment	Categories
🇰🇷 91.204.227.21	27 Oct 2022	When you click on the phishing URL in the phishing email received by SMS on your Android OS smartpho ... show more When you click on the phishing URL in the phishing email received by SMS on your Android OS smartphone, the malware's chrome.apk file is downloaded. Phishing URL: http://zniph.com/ http://gp.zniph.com/ http://y.zniph.com/ <Evidence> ・Twitter https://twitter.com/NaomiSuzuki_/status/1585471143791984640 ・Urlscan https://urlscan.io/result/63e603e0-00d7-4787-ad06-4dc59e0d6b88/ https://urlscan.io/result/776b96c8-8fce-45b1-927a-f34003a4c160/ https://urlscan.io/result/6e10a3eb-28a5-4f3e-bdb4-ab4888f3e363/ ・VirusTotal https://www.virustotal.com/gui/ip-address/91.204.227.21/relations show less	Phishing Email Spam Exploited Host
🇺🇸 23.247.42.161	26 Oct 2022	<Phishing URL Transition Patterns> https://paidiy.lol/ ↓ https://paidiy.lol/index123.php?t=5efa09 ... show more <Phishing URL Transition Patterns> https://paidiy.lol/ ↓ https://paidiy.lol/index123.php?t=5efa09ca70f04722c695484d71ff09e0384fddd22634ae639a05973238033b40 ↓ https://paidiy.lol/index.php ↓ ※Click the "Request delivery here (in Japanese)" button. https://paidiy.lol/index.php/index/Login/index.html ↓ ※Entry screen for delivery address (personal information) information https://paidiy.lol/index/index/index ↓ ※Credit card entry screen https://paidiy.lol/index/index/index2 show less	Fraud Orders Phishing Email Spam
🇰🇷 91.204.227.21	26 Oct 2022	Phishing URL: http://ya.wsznx.com/ http://wsznx.com/ http://xo.wsznx.com <Evidence> ・Twitter ... show more Phishing URL: http://ya.wsznx.com/ http://wsznx.com/ http://xo.wsznx.com <Evidence> ・Twitter https://twitter.com/NaomiSuzuki_/status/1585108382230654977 ・VirusTotal https://www.virustotal.com/gui/ip-address/91.204.227.21/relations ・Urlscan.io https://urlscan.io/result/9ae58d84-d87c-4a18-a8bf-e59cefc931b1/ https://urlscan.io/result/fd8d777a-17dc-4742-bbfc-b803337eb1ea/ https://urlscan.io/result/df6e2058-0dbe-44d4-99bc-3ad3ffd333e4/ show less	Phishing Email Spam Exploited Host
🇰🇷 91.204.227.86	26 Oct 2022	Phishing URL: http://faxsupltoy.duckdns.org/ja/main http://fbwywvdali.duckdns.org/ja/main http:// ... show more Phishing URL: http://faxsupltoy.duckdns.org/ja/main http://fbwywvdali.duckdns.org/ja/main http://fcboonoccj.duckdns.org/ja/main http://feqwiiwvvn.duckdns.org/ja/main http://ffftssfydj.duckdns.org/ja/main http://fgkzooonnz.duckdns.org/ja/main http://egaswoeurw.duckdns.org/ja/main http://ejqlidqlhc.duckdns.org/ja/main http://eozozwgdzk.duckdns.org/ja/main http://epgtgsredq.duckdns.org/ja/main http://etrmtzsbwe.duckdns.org/ja/main http://eveitctkin.duckdns.org/ja/main <>Evidence> ・VirusTotal https://www.virustotal.com/gui/ip-address/91.204.227.86/relations ・Urlscan.io https://urlscan.io/result/4398586f-425a-408b-b3c7-669ef0653b4e/ https://urlscan.io/result/7e814096-2424-4f96-8eff-695a6554016b/ https://urlscan.io/result/a6ef2094-115f-460f-8b3c-4bf1de040678/ https://urlscan.io/result/bbfb3a14-7018-46a2-a780-463e220f4f57/ ・Twitter https://twitter.com/NaomiSuzuki_/status/1585108382230654977 https://twitter.com/NaomiSuzuki_/status/1585098820052189186 show less	Fraud Orders Phishing Email Spam
🇺🇸 23.247.42.161	24 Oct 2022	<Phishing URL> hxxps[://]japanpost[.]lol/ hxxps[://]postonl[.]com/ hxxps[://]paiday[.]lol/ hxxps ... show more <Phishing URL> hxxps[://]japanpost[.]lol/ hxxps[://]postonl[.]com/ hxxps[://]paiday[.]lol/ hxxps[://]paidby[.]lol/ hxxps[://]paidiy[.]lol/ hxxps[://]amnpmr[.]com/ hxxps[://]amnpms[.]com/ hxxps[://]amnpmd[.]com/ hxxps[://]amnpmc[.]com/ hxxps[://]amnpmf[.]com/ hxxps[://]amnpme[.]com/ hxxps[://]azopmgd[.]com/ hxxps[://]azopmge[.]com/ hxxps[://]amnpmb[.]com/ hxxps[://]amnpma[.]com/ hxxps[://]azopmra[.]com/ hxxps[://]amnpgs[.]com/ hxxps[://]azopmsf[.]com/ hxxps[://]amnpml[.]com/ <Evidence> ・Twitter information https://twitter.com/KesaGataMe0/status/1584691843589033984 ・Urlscan https://urlscan.io/result/54e4e717-0b90-4e37-a97b-52103d6849e6/ https://urlscan.io/result/a3437340-f74e-4cd5-bd1b-a1445ecfdbc4/ ・Virus Total https://www.virustotal.com/gui/ip-address/23.247.42.161/relations show less	Fraud Orders Phishing Email Spam
🇰🇷 91.204.227.86	24 Oct 2022	<Phishing URL> http://rvgajgpetq.duckdns.org/ja/main http://sfgiwvviac.duckdns.org/ja/main http:/ ... show more <Phishing URL> http://rvgajgpetq.duckdns.org/ja/main http://sfgiwvviac.duckdns.org/ja/main http://siycipwtxg.duckdns.org/ja/main http://skgbjpwscv.duckdns.org/ja/main http://skickqxfzv.duckdns.org/ja/main http://bzayipjetu.duckdns.org/ja/main http://qzcddmagte.duckdns.org/ja/main http://qzghnnhjzl.duckdns.org/ja/main http://rdhhiivihu.duckdns.org/ja/main http://reyydqqpcb.duckdns.org/ja/main http://rhzhbpwask.duckdns.org/ja/main http://rjbdvcvqvd.duckdns.org/ja/main http://qncbyehwpe.duckdns.org/ja/main http://qpuvhihhtg.duckdns.org/ja/main http://qqhhgtsfew.duckdns.org/ja/main http://qqqqdjdxci.duckdns.org/ja/main http://qwtyuvwivw.duckdns.org/ja/main http://qyhzgzgpfm.duckdns.org/ja/main http://pskdxwrxfx.duckdns.org/ja/main http://psrredqpob.duckdns.org/ja/main http://ptxdjbvswc.duckdns.org/ja/main http://pxyylllmgl.duckdns.org/ja/main http://qflruljbei.duckdns.org/ja/main show less	Fraud Orders Phishing Email Spam
🇰🇷 91.204.227.21	21 Oct 2022	<Phishing URL> http://1m.rpqec.com/ http://w.rpqec.com/ http://o.rpqec.com/ http://ps.rpqec.com/ ... show more <Phishing URL> http://1m.rpqec.com/ http://w.rpqec.com/ http://o.rpqec.com/ http://ps.rpqec.com/ http://b.rpqec.com/ http://rpqec.com/ <Evidence> ・Urlscan.io https://urlscan.io/result/8c19faf7-fc26-4344-9a86-408df20062ca/ https://urlscan.io/result/503429d7-43be-4aae-aca3-29c04562bc1c/ https://urlscan.io/result/929851ad-01fc-4a93-acc9-869a3f4f7900/ https://urlscan.io/result/97626385-3716-43fe-b0cb-1bcb1f933ce5/ https://urlscan.io/result/8d000d8e-fb56-46c1-ab11-2f4f1e527726/ https://urlscan.io/result/3831d402-3546-4e5c-b7b2-d8d0f0d13000/ show less	Phishing Email Spam Exploited Host
🇰🇷 91.204.227.86	21 Oct 2022	Phishing URL: http://nljjjvuhhv.duckdns.org/ja/main http://nlkllxxpbb.duckdns.org/ja/main http:// ... show more Phishing URL: http://nljjjvuhhv.duckdns.org/ja/main http://nlkllxxpbb.duckdns.org/ja/main http://nodtgknigb.duckdns.org/ja/main http://nsiauakbhc.duckdns.org/ja/main http://nylnpjytmr.duckdns.org/ja/main http://ohjyxyxxxx.duckdns.org/ja/main http://nbqkfmgmus.duckdns.org/ja/main http://nfsfnwkiqk.duckdns.org/ja/main http://nggtssffre.duckdns.org/ja/main http://nhxvgqaxxj.duckdns.org/ja/main http://nifqmdayup.duckdns.org/ja/main http://nisbzuvqnv.duckdns.org/ja/main <Evidence> ・Twitter https://twitter.com/NaomiSuzuki_/status/1583305697332449284 https://twitter.com/NaomiSuzuki_/status/1583100914671702017 https://twitter.com/NaomiSuzuki_/status/1583304091358621697 ・Urlscan https://urlscan.io/result/4e6e5a03-5d19-4991-9857-701ef7d27ad9/ https://urlscan.io/result/3f3abe82-b40f-4301-bfd6-93941f7c5e96/ https://urlscan.io/result/0fafc9c3-a33e-4e48-b6d6-0dd16c0d0c5d/ https://urlscan.io/result/f4ecff79-d095-4dd9-8487-f1fddc631117/ show less	Fraud Orders Phishing Email Spam
🇰🇷 91.204.227.20	20 Oct 2022	<Phishing URL> http://qdzng.com/ http://2ebq.qdzng.com/ http://1.qdzng.com/ http://a.qdzng.com/ ... show more <Phishing URL> http://qdzng.com/ http://2ebq.qdzng.com/ http://1.qdzng.com/ http://a.qdzng.com/ <Evidence> ・Twitter https://twitter.com/NaomiSuzuki_/status/1582934260847357953 ・Urlscan https://urlscan.io/result/93540e56-a710-4fb8-b6a4-7f6d3c76aa58/ https://urlscan.io/result/baba19e5-9200-4670-8619-df7e7355c07e/ https://urlscan.io/result/9d93ccf4-8a65-4ca1-ac04-fdd1bf60a6b5/ https://urlscan.io/result/9fcaf707-d1b4-484c-a4fc-4fc6bda96d50/ show less	Phishing Email Spam Exploited Host
🇰🇷 91.204.227.85	06 Oct 2022	Phishing URL: http://dpnaammlly.duckdns.org/ja/main http://drvosxfpgk.duckdns.org/ja/main http:// ... show more Phishing URL: http://dpnaammlly.duckdns.org/ja/main http://drvosxfpgk.duckdns.org/ja/main http://dumyraxswb.duckdns.org/ja/main http://dvjrlocwms.duckdns.org/ja/main http://dwtrinjren.duckdns.org/ja/main http://ecmumemgzr.duckdns.org/ja/main http://efstnazzma.duckdns.org/ja/main http://eiuvvviiii.duckdns.org/ja/main http://elotxogkca.duckdns.org/ja/main http://enpywalnuu.duckdns.org/ja/main http://epocpbnmre.duckdns.org/ja/main http://eqivvuhttg.duckdns.org/ja/main http://ehqinimquj.duckdns.org/ja/main http://ekvsptplis.duckdns.org/ja/main http://emifcodyhe.duckdns.org/ja/main http://epbnpoonap.duckdns.org/ja/main http://eqalvytwmj.duckdns.org/ja/main http://erqewxxjjx.duckdns.org/ja/main http://drgwqsvkmo.duckdns.org/ja/main http://drzpqzljbl.duckdns.org/ja/main http://duurldcltd.duckdns.org/ja/main http://dwjtcwkbxr.duckdns.org/ja/main http://ebiteqdurj.duckdns.org/ja/main http://edqefgiwbp.duckdns.org/ja/main show less	Fraud Orders Phishing Email Spam
🇰🇷 91.204.227.85	03 Oct 2022	Phishing URL: http://auamgzgmtl.duckdns.org/ja/main http://ayjjwivhhh.duckdns.org/ja/main http:// ... show more Phishing URL: http://auamgzgmtl.duckdns.org/ja/main http://ayjjwivhhh.duckdns.org/ja/main http://azyxxkykjw.duckdns.org/ja/main http://banoppcuya.duckdns.org/ja/main http://bdgxpsxofn.duckdns.org/ja/main http://bmaxguqmcd.duckdns.org/ja/main http://avpmwawmct.duckdns.org/ja/main http://azyxkjwwib.duckdns.org/ja/main http://azyymyyxkj.duckdns.org/ja/main http://baqqdpbboo.duckdns.org/ja/main http://bebzivggit.duckdns.org/ja/main http://bmcfvyncxz.duckdns.org/ja/main http://adrreereft.duckdns.org/ja/main http://aexogfinhz.duckdns.org/ja/main http://ahavkqihrb.duckdns.org/ja/main http://ajuifebxce.duckdns.org/ja/main http://aocdranocd.duckdns.org/ja/main http://asodnkiqku.duckdns.org/ja/main http://aefthhvjxx.duckdns.org/ja/main http://afaxyvueou.duckdns.org/ja/main http://aiohavwaru.duckdns.org/ja/main http://anqsilbpwh.duckdns.org/ja/main http://arpuohovgo.duckdns.org/ja/main http://atnnkkjend.duckdns.org/ja/main http://zmoeserfer.duckdns.org/ja/main show less	Fraud Orders Phishing Email Spam
🇭🇰 154.221.21.73	29 Sep 2022	Redirector URL to forward to phishing URL. The idea seems to be to trick Japan Post into stealing ... show more Redirector URL to forward to phishing URL. The idea seems to be to trick Japan Post into stealing credit card information by tricking users into entering fake credit cards. Phishing URL: https://zhibiaopojie.com/w1uim96/-/MY87454LTD/ ↓ https://zhibiaopojie.com/w1uim96/-/MY87454LTD/confirm.php ↓ https://zhibiaopojie.com/w1uim96/-/MY87454LTD/sms.php Phishing IP: 154[.]221[.]21[.]73 ・URLScan https://urlscan.io/result/24ca63aa-afea-40a4-8876-463e075bc3bd/ https://urlscan.io/result/8ab0b6d4-1fb1-42df-bf1f-ca773284d49b/ https://urlscan.io/result/4cca47cb-5f80-4847-b607-36b1503d09c6/ ・VirusTotal https://www.virustotal.com/gui/domain/zhibiaopojie.com/relations https://www.virustotal.com/gui/ip-address/154.221.21.73/relations ・Check-Host https://check-host.net/ip-info?host=zhibiaopojie.com https://check-host.net/check-dns?host=zhibiaopojie.com show less	Fraud Orders Phishing
🇰🇷 91.204.227.85	27 Sep 2022	Phishing mail is distributed from SMS. From September 20, 2022, phishing URLs linked to IP address: ... show more Phishing mail is distributed from SMS. From September 20, 2022, phishing URLs linked to IP address: 91.204.227.85 can be accessed only by smartphones. Phishing URL: http://gqesgtghqe.duckdns.org/ja/main http://grdqddjviv.duckdns.org/ja/main http://gthvzzmyzn.duckdns.org/ja/main ・Virus Total https://www.virustotal.com/gui/ip-address/91.204.227.85/relations ・Urlscan https://urlscan.io/result/efd97363-e8e2-4f1d-998e-ff2755af9d64/ https://urlscan.io/result/2f6e249b-4804-408a-9034-48b3b56d5fa7/ ・Twitter https://twitter.com/NaomiSuzuki_/status/1574603015394590721 https://twitter.com/NaomiSuzuki_/status/1574594931502755840 Below are images of legitimate sites used by phishing crime groups when accessing with iOS(iPhone). https://appleid.apple.com/ja_JP Website owner: Apple inc. show less	Fraud Orders Phishing Email Spam
🇰🇷 91.204.227.85	21 Sep 2022	Phishing mail is distributed from SMS. From September 20, 2022, phishing URLs linked to IP address: ... show more Phishing mail is distributed from SMS. From September 20, 2022, phishing URLs linked to IP address: 91.204.227.85 can be accessed only by smartphones. Phishing URL: http://hsdqpugtss.duckdns.org/ja/main http://jiijwivugy.duckdns.org/ja/main http://jutughgkkk.duckdns.org/ja/main ・Virus Total https://www.virustotal.com/gui/ip-address/91.204.227.85/relations ・Urlscan https://urlscan.io/result/114ab761-c4f6-433a-a0f3-fb9577666efb/ https://urlscan.io/result/b623523c-28fe-4d39-87a0-edec9c0d6ce0/ https://urlscan.io/result/aaaeaf02-28f8-44ff-a038-0921e8b12cfa/ https://urlscan.io/result/d869f364-2dd1-4e82-ab0c-fe9b371f374a/ ・Twitter https://twitter.com/NaomiSuzuki_/status/1572432635477266434 https://twitter.com/NaomiSuzuki_/status/1572432638564257793 Below are images of legitimate sites used by phishing crime groups when accessing with iOS(iPhone). https://appleid.apple.com/ja_JP Website owner: Apple inc. show less	Fraud Orders Phishing Email Spam
🇺🇸 216.245.209.156	07 Aug 2022	・Twitter Bassist Steve⭐️@bassist_Steve https://twitter.com/bassist_Steve/status/155612014625910374 ... show more ・Twitter Bassist Steve⭐️@bassist_Steve https://twitter.com/bassist_Steve/status/1556120146259103744 IP: 3.87.53.215 14618 (AMAZON-AES) http://ws.bu.lhcb5-vjtfl.com/392297228678 ↓ IP: 216.245.209.156 46475 (LIMESTONENETWORKS) http://bandit-mirage.com/FQvxRypbaH/ ↓ IP: 216.245.209.156 46475 (LIMESTONENETWORKS) http://bandit-mirage.com/log_index.php?page=allmess_miru&s=1659836471&cid=12489&mid=56474353&ddv=cd16881038e30183b6ce4409f357fa47 ・Urlscan https://urlscan.io/result/8453f95b-7020-431d-a6f9-696021aa66b7/ show less	Fraud Orders Phishing Email Spam
🇯🇵 192.51.188.108	04 Aug 2022	Phishing mail is distributed from SMS. From June 22, 2022, phishing URLs linked to IP address: 192. ... show more Phishing mail is distributed from SMS. From June 22, 2022, phishing URLs linked to IP address: 192.51.188.108 can be accessed only by smartphones. If you access the phishing URL on an Android smartphone, the malware "japanpost.apk" file will be downloaded. Phishing URL: http[:]//qipug[.]com/fgrrefeedh/ http[:]//ssbyi[.]com/fgrrefeedh/ Download URL: ・Virus Total https://www.virustotal.com/gui/ip-address/192.51.188.108/relations ・Urlscan https://urlscan.io/ip/192.51.188.108 https[:]//urlscan[.]io/result/10f9e66f-aafb-4b57-aaf8-30ff3b1104eb/ https[:]//urlscan[.]io/result/0c4ed343-f381-4938-aefd-618b88f983f9/ ・Twitter https[:]//twitter[.]com/NaomiSuzuki_/status/1554856638229913601 Below are images of legitimate sites used by phishing crime groups when accessing with Android OS. https://www.post.japanpost.jp/index.html Website owner: Japan Post Co., Ltd. show less	Phishing Email Spam Exploited Host
🇰🇷 91.204.227.20	04 Aug 2022	Twitter information: https://twitter.com/NaomiSuzuki_/status/1555036125437521920 Phishing mail i ... show more Twitter information: https://twitter.com/NaomiSuzuki_/status/1555036125437521920 Phishing mail is distributed from SMS. From June 23, 2022, phishing URLs linked to IP address: 91.204.227.20 can be accessed only by smartphones. Phishing URLs download Android malware "japanpost.apk" files. Phishing URL: http://akdyb.com/sdfgewrwerew/ http://ndq.akdyb.com/sdfgewrwerew/ Malware Download URL: http://akdyb.com/japanpost.apk http://ndq.akdyb.com/japanpost.apk ・Virus Total https://www.virustotal.com/gui/ip-address/91.204.227.20/relations ・Urlscan https://urlscan.io/ip/91.204.227.20 https://urlscan.io/result/8d26f0e1-8a4f-4ad6-959f-a721d76d3189/ https://urlscan.io/result/0c693c31-60fc-4e8c-bcca-3f7b629073a6/ Below are images of legitimate sites used by phishing crime groups when accessing with Android OS. https://www.post.japanpost.jp/index.html Website owner: Japan Post Co., Ltd. show less	Phishing Email Spam Exploited Host
🇰🇷 103.80.134.41	29 Jul 2022	Phishing mail is distributed from SMS. From June 23, 2022, phishing URLs linked to IP address: 103. ... show more Phishing mail is distributed from SMS. From June 23, 2022, phishing URLs linked to IP address: 103.80.134.41 can be accessed only by smartphones. Phishing URL: http://pyujpipfev.duckdns.org/ja/main http://ppdsssrqqh.duckdns.org/ja/main ・Virus Total https://www.virustotal.com/gui/ip-address/103.80.134.41/relations ・Urlscan https://urlscan.io/ip/103.80.134.41 https://urlscan.io/result/0d83d9ae-cfbc-4576-bde8-68874f979b6b/ https://urlscan.io/result/b056337f-b536-4f42-95b9-d3de1304d238/ ・Twitter https://twitter.com/NaomiSuzuki_/status/1552850629319864320 Below are images of legitimate sites used by phishing crime groups when accessing with iOS(iPhone). https://appleid.apple.com/ja_JP Website owner: Apple inc. show less	Fraud Orders Phishing Email Spam
🇯🇵 192.51.188.108	29 Jul 2022	Phishing mail is distributed from SMS. From June 22, 2022, phishing URLs linked to IP address: 192. ... show more Phishing mail is distributed from SMS. From June 22, 2022, phishing URLs linked to IP address: 192.51.188.108 can be accessed only by smartphones. If you access the phishing URL on an Android smartphone, the malware "japanpost.apk" file will be downloaded. Phishing URL: http://oxwmz.com/fgrrefeedh/ http://qthar.com/fgrrefeedh/ Download URL: http://oxwmz.com/japanpost.apk http://qthar.com/japanpost.apk ・Virus Total https://www.virustotal.com/gui/ip-address/192.51.188.108/relations ・Urlscan https://urlscan.io/ip/192.51.188.108 https://urlscan.io/result/2dd42f1a-a232-440c-9853-53d860ee7ea6/ https://urlscan.io/result/33f966dd-1227-4cc4-bcb4-c87e162e3bc5/ ・Twitter https://twitter.com/NaomiSuzuki_/status/1552604960277536770 Below are images of legitimate sites used by phishing crime groups when accessing with Android OS. https://www.post.japanpost.jp/index.html Website owner: Japan Post Co., Ltd. show less	Phishing Email Spam Exploited Host
🇰🇷 91.204.227.20	29 Jul 2022	Twitter information: https://twitter.com/NaomiSuzuki_/status/1552862868919689216 Phishing mail i ... show more Twitter information: https://twitter.com/NaomiSuzuki_/status/1552862868919689216 Phishing mail is distributed from SMS. From June 23, 2022, phishing URLs linked to IP address: 91.204.227.20 can be accessed only by smartphones. Phishing URLs download Android malware "japanpost.apk" files. Phishing URL: http://5oxq.uvoeu.com/sdfgewrwerew/ http://10y.uvoeu.com/sdfgewrwerew/ Malware Download URL: http://5oxq.uvoeu.com/japanpost.apk http://10y.uvoeu.com/japanpost.apk ・Virus Total https://www.virustotal.com/gui/ip-address/91.204.227.20/relations ・Urlscan https://urlscan.io/ip/91.204.227.20 https://urlscan.io/result/f6da1aaf-509f-42b4-b7d1-3d81a3aab169/ https://urlscan.io/result/e9aaf9ad-7ec8-491e-b8d9-0e1296456bd5/ Below are images of legitimate sites used by phishing crime groups when accessing with Android OS. https://www.post.japanpost.jp/index.html Website owner: Japan Post Co., Ltd. show less	Phishing Email Spam Exploited Host
🇯🇵 192.51.188.108	27 Jul 2022	Phishing mail is distributed from SMS. From June 22, 2022, phishing URLs linked to IP address: 192. ... show more Phishing mail is distributed from SMS. From June 22, 2022, phishing URLs linked to IP address: 192.51.188.108 can be accessed only by smartphones. If you access the phishing URL on an Android smartphone, the malware "japanpost.apk" file will be downloaded. Phishing URL: http://52.qthar.com/fgrrefeedh/ http://1o3.yyoqt.com/fgrrefeedh/ Download URL: http://52.qthar.com/japanpost.apk http://1o3.yyoqt.com/japanpost.apk ・Virus Total https://www.virustotal.com/gui/ip-address/192.51.188.108/relations ・Urlscan https://urlscan.io/ip/192.51.188.108 https://urlscan.io/result/ca836718-6d74-4e8d-8671-05e98e9caa85/ https://urlscan.io/result/84c236ef-0d5e-4837-a637-343a22d4e5b3/ ・Twitter https://twitter.com/NaomiSuzuki_/status/1552310585253314560 Below are images of legitimate sites used by phishing crime groups when accessing with Android OS. https://www.post.japanpost.jp/index.html Website owner: Japan Post Co., Ltd. show less	Phishing Email Spam Exploited Host
🇰🇷 103.80.134.41	27 Jul 2022	Phishing mail is distributed from SMS. From June 23, 2022, phishing URLs linked to IP address: 103. ... show more Phishing mail is distributed from SMS. From June 23, 2022, phishing URLs linked to IP address: 103.80.134.41 can be accessed only by smartphones. Phishing URL: http://mzzzmmanzf.duckdns.org/ja/main http://mwpxsovbzg.duckdns.org/ja/main ・Virus Total https://www.virustotal.com/gui/ip-address/103.80.134.41/relations ・Urlscan https://urlscan.io/ip/103.80.134.41 https://urlscan.io/result/7bb703e4-e5f5-47dd-9a7f-a78176e8144c/ https://urlscan.io/result/02c1448d-94b3-4244-b687-e72618033a4e/ ・Twitter https://twitter.com/NaomiSuzuki_/status/1552304281189253121 Below are images of legitimate sites used by phishing crime groups when accessing with iOS(iPhone). https://appleid.apple.com/ja_JP Website owner: Apple inc. show less	Fraud Orders Phishing Email Spam
🇰🇷 91.204.227.20	27 Jul 2022	Twitter information: https://twitter.com/NaomiSuzuki_/status/1552218872836947968 Phishing mail i ... show more Twitter information: https://twitter.com/NaomiSuzuki_/status/1552218872836947968 Phishing mail is distributed from SMS. From June 23, 2022, phishing URLs linked to IP address: 91.204.227.20 can be accessed only by smartphones. Phishing URLs download Android malware "japanpost.apk" files. Phishing URL: http://qthar.com/sdfgewrwerew/ http://n.qthar.com/sdfgewrwerew/ Malware Download URL: http://qthar.com/japanpost.apk http://n.qthar.com/japanpost.apk ・Virus Total https://www.virustotal.com/gui/ip-address/91.204.227.20/relations ・Urlscan https://urlscan.io/ip/91.204.227.20 https://urlscan.io/result/5dbd084b-98cc-47d4-96e0-ed1ce0def57f/ https://urlscan.io/result/77bb6739-d4cb-416f-b88e-21ec2fcf8e7c/ Below are images of legitimate sites used by phishing crime groups when accessing with Android OS. https://www.post.japanpost.jp/index.html Website owner: Japan Post Co., Ltd. show less	Phishing Email Spam Exploited Host
🇯🇵 192.51.188.108	27 Jul 2022	Phishing mail is distributed from SMS. From June 22, 2022, phishing URLs linked to IP address: 192. ... show more Phishing mail is distributed from SMS. From June 22, 2022, phishing URLs linked to IP address: 192.51.188.108 can be accessed only by smartphones. If you access the phishing URL on an Android smartphone, the malware "japanpost.apk" file will be downloaded. Phishing URL: http://wmn.qbhab.com/fgrrefeedh/ http://ndfd.zzehq.com/fgrrefeedh/ Download URL: http://wmn.qbhab.com/japanpost.apk http://ndfd.zzehq.com/japanpost.apk ・Virus Total https://www.virustotal.com/gui/ip-address/192.51.188.108/relations ・Urlscan https://urlscan.io/ip/192.51.188.108 https://urlscan.io/result/0bd25c26-f55a-4af9-9ce3-e5031c857fb3/ https://urlscan.io/result/3f615bbd-03ea-489f-96fb-4a88be17e201/ ・Twitter https://twitter.com/NaomiSuzuki_/status/1551942216670920704 https://twitter.com/NaomiSuzuki_/status/1551578826953859073 Below are images of legitimate sites used by phishing crime groups when accessing with Android OS. https://www.post.japanpost.jp/index.html Website owner: Japan Post Co., Ltd. show less	Phishing Email Spam Exploited Host
🇰🇷 103.80.134.41	27 Jul 2022	Phishing mail is distributed from SMS. From June 23, 2022, phishing URLs linked to IP address: 103. ... show more Phishing mail is distributed from SMS. From June 23, 2022, phishing URLs linked to IP address: 103.80.134.41 can be accessed only by smartphones. Phishing URL: http://mfodaksoyw.duckdns.org/ja/main http://lnvmfqxnjq.duckdns.org/ja/main ・Virus Total https://www.virustotal.com/gui/ip-address/103.80.134.41/relations ・Urlscan https://urlscan.io/ip/103.80.134.41 https://urlscan.io/result/bb00ec9f-c591-49d2-aaa4-dfe7e9474422/ https://urlscan.io/result/95ab0bce-9171-4070-a93b-8c1303b63713/ ・Twitter https://twitter.com/NaomiSuzuki_/status/1552121756705779712 Below are images of legitimate sites used by phishing crime groups when accessing with iOS(iPhone). https://appleid.apple.com/ja_JP Website owner: Apple inc. show less	Fraud Orders Phishing Email Spam