AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User Anti-Phishing Unit joined AbuseIPDB in December 2021 and has reported 459 IP addresses.

Standing (weight) is good.

INACTIVE USER

IP	Date	Comment	Categories
🇯🇵 192.51.188.108	13 Jul 2022	Phishing mail is distributed from SMS. From June 22, 2022, phishing URLs linked to IP address: 192. ... show more Phishing mail is distributed from SMS. From June 22, 2022, phishing URLs linked to IP address: 192.51.188.108 can be accessed only by smartphones. If you access the phishing URL on an Android smartphone, the malware "japanpost [.] apk" file will be downloaded. Phishing URL: http://4.thqee.com/fgrrefeedh/ http://2ek.yermu.com/fgrrefeedh/ http://o.pcbyr.com/fgrrefeedh/ ・Virus Total https://www.virustotal.com/gui/ip-address/192.51.188.108/relations ・Urlscan https://urlscan.io/ip/192.51.188.108 https://urlscan.io/result/7f652582-2017-4a55-ba89-4de2e5b0c7a0/ https://urlscan.io/result/4e24c0ae-97df-4fe5-8186-66358bde774e/ https://urlscan.io/result/f2488d9d-ce20-4936-904c-f639d90eea1e/ Below are images of legitimate sites used by phishing crime groups when accessing with Android OS. https://www.post.japanpost.jp/index.html Website owner: Japan Post Co., Ltd. show less	Phishing Email Spam Exploited Host
🇰🇷 103.80.134.41	13 Jul 2022	Phishing mail is distributed from SMS. From June 23, 2022, phishing URLs linked to IP address: 103. ... show more Phishing mail is distributed from SMS. From June 23, 2022, phishing URLs linked to IP address: 103.80.134.41 can be accessed only by smartphones. Phishing URL: http://dcpjannhfw.duckdns.org/ja/main http://cwnfinvosc.duckdns.org/ja/main ・Virus Total https://www.virustotal.com/gui/ip-address/103.80.134.41/relations ・Urlscan https://urlscan.io/ip/103.80.134.41 https://urlscan.io/result/13216811-bae7-4411-93cd-0e50de81aed8/ https://urlscan.io/result/80f9ac10-0511-46a5-a2f1-ef9fac94bb0a/ ・Twitter https://twitter.com/NaomiSuzuki_/status/1547059321661521921 https://twitter.com/NaomiSuzuki_/status/1547046608457854978 https://twitter.com/NaomiSuzuki_/status/1546869443753832448 Below are images of legitimate sites used by phishing crime groups when accessing with iOS(iPhone). https://appleid.apple.com/ja_JP Website owner: Apple inc. show less	Fraud Orders Phishing Email Spam
🇰🇷 103.80.134.41	12 Jul 2022	<Phishing URL> http[:]//cstavpaenu[.]duckdns[.]org/ja/main http[:]//csptgdnxeo[.]duckdns[.]org/ja/ ... show more <Phishing URL> http[:]//cstavpaenu[.]duckdns[.]org/ja/main http[:]//csptgdnxeo[.]duckdns[.]org/ja/main http[:]//crfrftsryy[.]duckdns[.]org/ja/main http[:]//cpgdvcrrmz[.]duckdns[.]org/ja/main http[:]//cnxudmiale[.]duckdns[.]org/ja/main http[:]//cefhjagkzb[.]duckdns[.]org/ja/main http[:]//cesvisnxzb[.]duckdns[.]org/ja/main http[:]//cgjnfvorhi[.]duckdns[.]org/ja/main http[:]//ckioxhyhls[.]duckdns[.]org/ja/main http[:]//conaaoofrr[.]duckdns[.]org/ja/main http[:]//cpgdvcrrmz[.]duckdns[.]org/ja/main http[:]//bjpgniqxro[.]duckdns[.]org/ja/main http[:]//bjsadzgmuv[.]duckdns[.]org/ja/main http[:]//bkvbmqrrrl[.]duckdns[.]org/ja/main http[:]//bxltblfnyl[.]duckdns[.]org/ja/main http[:]//bzykkooamk[.]duckdns[.]org/ja/main http[:]//cbmlllmkxx[.]duckdns[.]org/ja/main http[:]//cdhbimqajd[.]duckdns[.]org/ja/main show less	Fraud Orders Phishing Email Spam
🇺🇸 54.88.252.71	11 Jul 2022	Clicking on a URL link in a phishing email that tricks Japan Post or Japan Post will take you to the ... show more Clicking on a URL link in a phishing email that tricks Japan Post or Japan Post will take you to the LOTO6 winning scam site. <Phishing URL> URL link in the phishing email that is the direct source http[:]//0s[.]s0[.]kgver-v-ytyd[.]com/97413844699 IP Address: 54[.]88[.]252[.]71 ↓ http[:]//jovial-terror[.]com/aN5slQ5mXbo IP Address: 216.245.209.156 ↓ http[:]//jovial-terror[.]com/log_index[.]php?page=allmess_miru&s=1657341980&cid=12489&mid=55528339&ddv=7e1bd87e88bc23a96210c172646191d1&%%%%%%%%%%%%%%% IP Address: 216.245.209.156 ・Virus Total https://www.virustotal.com/gui/ip-address/54.88.252.71/relations ・Urlscan https://urlscan.io/result/38ebc3e1-195a-44fc-82d3-ed16ef4e99e7/ https://urlscan.io/result/1dfe54cc-c4fd-481f-a1be-60fec5292d4f/ show less	Fraud Orders Phishing Email Spam
🇰🇷 103.80.134.41	11 Jul 2022	<Phishing URL> http://xpojqxfnve.duckdns.org/ja/main http://xxbcbboozm.duckdns.org/ja/main http:/ ... show more <Phishing URL> http://xpojqxfnve.duckdns.org/ja/main http://xxbcbboozm.duckdns.org/ja/main http://xxkjjwihhz.duckdns.org/ja/main http://yffyinsmej.duckdns.org/ja/main http://ygztsfagfh.duckdns.org/ja/main http://wzptigugki.duckdns.org/ja/main http://xcxzkurzvr.duckdns.org/ja/main http://xhjrqdnmwi.duckdns.org/ja/main http://xikpzfhrqo.duckdns.org/ja/main http://xizxdcxwzb.duckdns.org/ja/main http://xkqeererrs.duckdns.org/ja/main show less	Fraud Orders Phishing Email Spam
🇰🇷 103.80.134.41	11 Jul 2022	・Twitter https://twitter.com/NaomiSuzuki_/status/1546337840908627971 https://twitter.com/NaomiSuzu ... show more ・Twitter https://twitter.com/NaomiSuzuki_/status/1546337840908627971 https://twitter.com/NaomiSuzuki_/status/1546318511710285824 https://twitter.com/NaomiSuzuki_/status/1546144866119589889 https://twitter.com/NaomiSuzuki_/status/1545952751930454016 https://twitter.com/NaomiSuzuki_/status/1545784172731863040 https://twitter.com/NaomiSuzuki_/status/1545597738821521409 https://twitter.com/NaomiSuzuki_/status/1545409928558690305 Phishing URL: http://cazzmmzneq.duckdns.org/ja/main http://bmduhlrwcm.duckdns.org/ja/main http://ananzmrqpc.duckdns.org/ja/main http://apggxkusud.duckdns.org/ja/main http://ayqhotyepi.duckdns.org/ja/main http://azuekevfwj.duckdns.org/ja/main http://bazaznzlkj.duckdns.org/ja/main http://bekbpylyad.duckdns.org/ja/main http://zxkkxjvvuy.duckdns.org/ja/main http://zymwubayeo.duckdns.org/ja/main http://zzanopocpd.duckdns.org/ja/main http://ahkmcjpvxs.duckdns.org/ja/main http://akqqcywtyy.duckdns.org/ja/main http://akwocmxdly.duckdns.org/ja/main show less	Fraud Orders Phishing Email Spam
🇯🇵 192.51.188.108	11 Jul 2022	The following phishing URL tries to download Android malware "japanpost.apk." Phishing URL: http ... show more The following phishing URL tries to download Android malware "japanpost.apk." Phishing URL: http[:]//qgzxv[.]com/fgrrefeedh/ http[:]//s[.]vsbvu[.]com/fgrrefeedh/ http[:]//sxp7[.]ubzuu[.]com/fgrrefeedh/ http[:]//u5x[.]ewybg[.]com/fgrrefeedh/ http[:]//ubyug[.]hrvxe[.]com/fgrrefeedh/ http[:]//usvbh[.]rwptm[.]com/fgrrefeedh/ http[:]//utbtn[.]com/fgrrefeedh/ http[:]//uzshq[.]com/fgrrefeedh/ http[:]//v[.]vsbvu[.]com/fgrrefeedh/ http[:]//vsbvu[.]com/fgrrefeedh/ http[:]//vyp[.]wvrnf[.]com/fgrrefeedh/ http[:]//www[.]ewybg[.]com/fgrrefeedh/ http[:]//x89[.]uzshq[.]com/fgrrefeedh/ http[:]//xqf[.]ubzuu[.]com/fgrrefeedh/ http[:]//yxmnu[.]com/fgrrefeedh/ ・Virus Total https://www.virustotal.com/gui/ip-address/192.51.188.108/relations show less	Phishing Email Spam Exploited Host
🇯🇵 192.51.188.108	11 Jul 2022	The following phishing URL tries to download Android malware "japanpost.apk." Phishing URL: http[: ... show more The following phishing URL tries to download Android malware "japanpost.apk." Phishing URL: http[:]//8[.]cavxv[.]com/fgrrefeedh/ http[:]//9[.]uzshq[.]com/fgrrefeedh/ http[:]//aoxra[.]com/fgrrefeedh/ http[:]//bznrm[.]com/fgrrefeedh/ http[:]//cavxv[.]com/fgrrefeedh/ http[:]//d78b[.]aoxra[.]com/fgrrefeedh/ http[:]//dphqa[.]com/fgrrefeedh/ http[:]//eauzg[.]com/fgrrefeedh/ http[:]//eu[.]qpaqr[.]com/fgrrefeedh/ http[:]//f[.]ubzuu[.]com/fgrrefeedh/ http[:]//hfi3[.]uzshq[.]com/fgrrefeedh/ http[:]//hrz[.]utbtn[.]com/fgrrefeedh/ http[:]//ibrx[.]yermu[.]com/fgrrefeedh/ http[:]//j[.]uzshq[.]com/fgrrefeedh/ http[:]//l[.]yxmnu[.]com/fgrrefeedh/ http[:]//mcod[.]yermu[.]com/fgrrefeedh/ http[:]//oda[.]yxmnu[.]com/fgrrefeedh/ http[:]//qfu[.]wuvqq[.]com/fgrrefeedh/ show less	Phishing Email Spam Exploited Host
🇰🇷 91.204.227.20	11 Jul 2022	Twitter information: https://twitter.com/NaomiSuzuki_/status/1546337840908627971 Phishing mail i ... show more Twitter information: https://twitter.com/NaomiSuzuki_/status/1546337840908627971 Phishing mail is distributed from SMS. From June 23, 2022, phishing URLs linked to IP address: 91.204.227.20 can be accessed only by smartphones. Phishing URLs download Android malware "japanpost [.] apk" files. Phishing URL: http://qbtth.com/sdfgewrwerew/ http://wi3t.qbtth.com/sdfgewrwerew/ http://8r8f.qbtth.com/sdfgewrwerew/ Download URL: http://qbtth.com/japanpost.apk http://wi3t.qbtth.com/japanpost.apk http://8r8f.qbtth.com/japanpost.apk ・Virus Total https://www.virustotal.com/gui/ip-address/91.204.227.20/relations ・Urlscan https://urlscan.io/ip/91.204.227.20 https://urlscan.io/result/b29c8386-331a-479a-b204-01c424f1493a/ https://urlscan.io/result/d9c369e8-75ec-4305-9861-8d6564e6c7f5/ Below are images of legitimate sites used by phishing crime groups when accessing with Android OS. https://www.post.japanpost.jp/index.html Website owner: Japan Post Co., Ltd. show less	Phishing Email Spam Exploited Host
🇰🇷 103.80.134.41	08 Jul 2022	Phishing mail is distributed from SMS. From June 23, 2022, phishing URLs linked to IP address: 103. ... show more Phishing mail is distributed from SMS. From June 23, 2022, phishing URLs linked to IP address: 103.80.134.41 can be accessed only by smartphones. Phishing URL: http://wabgxbonlt.duckdns.org/ja/main http://whajdxemom.duckdns.org/ja/main http://wjsrarpzbs.duckdns.org/ja/main http://wmepjsnvqy.duckdns.org/ja/main http://wsvfxpwntz.duckdns.org/ja/main http://wzexqwzuzz.duckdns.org/ja/main http://uycultfkei.duckdns.org/ja/main http://vdkwriggtj.duckdns.org/ja/main http://vixefthijy.duckdns.org/ja/main http://vkwceiascv.duckdns.org/ja/main http://vuuhuugyxk.duckdns.org/ja/main http://vwogvsmbov.duckdns.org/ja/main http://vxprxwgzjp.duckdns.org/ja/main ・Virus Total https://www.virustotal.com/gui/ip-address/103.80.134.41/relations ・Urlscan https://urlscan.io/ip/103.80.134.41 ・Twitter https://twitter.com/NaomiSuzuki_/status/1545256397717520384 https://twitter.com/NaomiSuzuki_/status/1545232622930243584 https://twitter.com/NaomiSuzuki_/status/1545047806058311680 show less	Fraud Orders Phishing Email Spam
🇰🇷 91.204.227.20	08 Jul 2022	Twitter information: https://twitter.com/NaomiSuzuki_/status/1545256397717520384 Phishing mail i ... show more Twitter information: https://twitter.com/NaomiSuzuki_/status/1545256397717520384 Phishing mail is distributed from SMS. From June 23, 2022, phishing URLs linked to IP address: 91.204.227.20 can be accessed only by smartphones. Phishing URLs download Android malware "japanpost [.] apk" files. Phishing URL: http://utbtn.com/sdfgewrwerew/ http://l7f.utbtn.com/sdfgewrwerew/ Download URL: http://utbtn.com/japanpost.apk http://l7f.utbtn.com/japanpost.apk ・Virus Total https://www.virustotal.com/gui/ip-address/91.204.227.20/relations ・Urlscan https://urlscan.io/ip/91.204.227.20 https://urlscan.io/result/7c52fc5e-78b9-481e-8f34-87c7a8dc4f03/ https://urlscan.io/result/45b62948-d69b-4c3e-9ae9-43224988d294/ Below are images of legitimate sites used by phishing crime groups when accessing with Android OS. https://www.post.japanpost.jp/index.html Website owner: Japan Post Co., Ltd. show less	Phishing Email Spam Exploited Host
🇯🇵 192.51.188.108	07 Jul 2022	Phishing mail is distributed from SMS. From June 22, 2022, phishing URLs linked to IP address: 192. ... show more Phishing mail is distributed from SMS. From June 22, 2022, phishing URLs linked to IP address: 192.51.188.108 can be accessed only by smartphones. If you access the phishing URL on an Android smartphone, the malware "japanpost [.] apk" file will be downloaded. Phishing URL: http://9.rdybz.com/fgrrefeedh/ http://rld.wvrnf.com/fgrrefeedh/ http://2nma.uzshq.com/fgrrefeedh/ ・Virus Total https://www.virustotal.com/gui/ip-address/192.51.188.108/relations ・Urlscan https://urlscan.io/ip/192.51.188.108 https://urlscan.io/result/03ef4203-5fca-4427-9257-85f2d91759ab/ https://urlscan.io/result/f31f7b28-5c35-4895-b543-c8d214518f77/ https://urlscan.io/result/585d4c16-137c-4db4-9e5f-c26e1aaf64bf/ Below are images of legitimate sites used by phishing crime groups when accessing with Android OS. https://www.post.japanpost.jp/index.html Website owner: Japan Post Co., Ltd. show less	Phishing Email Spam Exploited Host
🇰🇷 91.204.227.20	07 Jul 2022	Twitter information: https://twitter.com/NaomiSuzuki_/status/1544892809433743360 Phishing mail i ... show more Twitter information: https://twitter.com/NaomiSuzuki_/status/1544892809433743360 Phishing mail is distributed from SMS. From June 23, 2022, phishing URLs linked to IP address: 91.204.227.20 can be accessed only by smartphones. Phishing URLs download Android malware "japanpost [.] apk" files. Phishing URL: http://qgzxv.com/sdfgewrwerew/ http://uuk.qgzxv.com/sdfgewrwerew/ Download URL: http://qgzxv.com//japanpost.apk http://uuk.qgzxv.com/japanpost.apk ・Virus Total https://www.virustotal.com/gui/ip-address/91.204.227.20/relations ・Urlscan https://urlscan.io/ip/91.204.227.20 https://urlscan.io/result/c7b4454d-3d2c-432f-9ffd-18baea6e153e/ https://urlscan.io/result/6040f330-0270-4a7d-bbc0-e244615be91f/ Below are images of legitimate sites used by phishing crime groups when accessing with Android OS. https://www.post.japanpost.jp/index.html Website owner: Japan Post Co., Ltd. show less	Phishing Email Spam Exploited Host
🇺🇸 172.67.181.98	07 Jul 2022	Twitter Information: 情弱返上？悪玉ちゃん！@cX8oKyVKoqucXfR https://twitter.com/cX8oKyVKoqucXfR/status/154490 ... show more Twitter Information: 情弱返上？悪玉ちゃん！@cX8oKyVKoqucXfR https://twitter.com/cX8oKyVKoqucXfR/status/1544902261620367361 <Phishing URL> https://pricesprivacymarketplace.top/index.php ↓ https://pricesprivacymarketplace.top/yz.php ↓ https://pricesprivacymarketplace.top/TokenYz.php ↓ https://pricesprivacymarketplace.top/Information.php ↓ https://pricesprivacymarketplace.top/postUserinfo.php <Evidence> ・VirusTotal（↓Domain link status to IP） https://www.virustotal.com/gui/domain/pricesprivacymarketplace.top/relations https://www.virustotal.com/gui/ip-address/104.21.67.215/relations https://www.virustotal.com/gui/ip-address/172.67.181.98/relations ・Urlscan https://urlscan.io/result/a1355997-e6c9-4dd6-aa3f-04959c9110f2/ https://urlscan.io/result/b82f46df-e340-47be-8421-6870bdb2bffb/ show less	Fraud Orders Phishing Email Spam
🇺🇸 104.21.67.215	07 Jul 2022	Twitter Information: 情弱返上？悪玉ちゃん！@cX8oKyVKoqucXfR https://twitter.com/cX8oKyVKoqucXfR/status/154490 ... show more Twitter Information: 情弱返上？悪玉ちゃん！@cX8oKyVKoqucXfR https://twitter.com/cX8oKyVKoqucXfR/status/1544902261620367361 <Phishing URL> https://pricesprivacymarketplace.top/index.php ↓ https://pricesprivacymarketplace.top/yz.php ↓ https://pricesprivacymarketplace.top/TokenYz.php ↓ https://pricesprivacymarketplace.top/Information.php ↓ https://pricesprivacymarketplace.top/postUserinfo.php <Evidence> ・VirusTotal（↓Domain link status to IP） https://www.virustotal.com/gui/domain/pricesprivacymarketplace.top/relations https://www.virustotal.com/gui/ip-address/104.21.67.215/relations https://www.virustotal.com/gui/ip-address/172.67.181.98/relations ・Urlscan https://urlscan.io/result/a1355997-e6c9-4dd6-aa3f-04959c9110f2/ https://urlscan.io/result/b82f46df-e340-47be-8421-6870bdb2bffb/ show less	Fraud Orders Phishing Email Spam
🇰🇷 91.204.227.20	06 Jul 2022	Twitter information: https://twitter.com/NaomiSuzuki_/status/1544524414720815104 Phishing mail i ... show more Twitter information: https://twitter.com/NaomiSuzuki_/status/1544524414720815104 Phishing mail is distributed from SMS. From June 23, 2022, phishing URLs linked to IP address: 91.204.227.20 can be accessed only by smartphones. Phishing URLs download Android malware "japanpost [.] apk" files. Phishing URL: http://y.yxmnu.com/sdfgewrwerew/ http://7446.bznrm.com/sdfgewrwerew/ Download URL: http://y.yxmnu.com/japanpost.apk http://7446.yxmnu.com/japanpost.apk ・Virus Total https://www.virustotal.com/gui/ip-address/91.204.227.20/relations ・Urlscan https://urlscan.io/ip/91.204.227.20 https://urlscan.io/result/3b6c46a0-3ab1-4d3a-bbd6-c5d9e799128d/ https://urlscan.io/result/7772cb74-158d-4bc6-b740-bad3b8d879b5/ Below are images of legitimate sites used by phishing crime groups when accessing with Android OS. https://www.post.japanpost.jp/index.html Website owner: Japan Post Co., Ltd. show less	Phishing Email Spam Exploited Host
🇰🇷 91.204.227.20	06 Jul 2022	Twitter information: https://twitter.com/NaomiSuzuki_/status/1544524414720815104 Phishing mail i ... show more Twitter information: https://twitter.com/NaomiSuzuki_/status/1544524414720815104 Phishing mail is distributed from SMS. From June 23, 2022, phishing URLs linked to IP address: 91.204.227.20 can be accessed only by smartphones. Phishing URLs download Android malware "japanpost [.] apk" files. Phishing URL: http://yxmnu.com/sdfgewrwerew/ http://bznrm.com/sdfgewrwerew/ Download URL: http://yxmnu.com/japanpost.apk http://yxmnu.com/japanpost.apk ・Virus Total https://www.virustotal.com/gui/ip-address/91.204.227.20/relations ・Urlscan https://urlscan.io/ip/91.204.227.20 https://urlscan.io/result/dafe0cc3-f12c-4814-9922-c8e84b1ef10d/ https://urlscan.io/result/0f022919-18a8-44c4-a881-836444746dc4/ Below are images of legitimate sites used by phishing crime groups when accessing with Android OS. https://www.post.japanpost.jp/index.html Website owner: Japan Post Co., Ltd. show less	Phishing Email Spam Exploited Host
🇯🇵 192.51.188.108	06 Jul 2022	Phishing mail is distributed from SMS. From June 22, 2022, phishing URLs linked to IP address: 192. ... show more Phishing mail is distributed from SMS. From June 22, 2022, phishing URLs linked to IP address: 192.51.188.108 can be accessed only by smartphones. If you access the phishing URL on an Android smartphone, the malware "japanpost [.] apk" file will be downloaded. Phishing URL: http[:]//50f[.]ewybg[.]com/fgrrefeedh/ http[:]//d[.]yengn[.]com/fgrrefeedh/ ・Virus Total https://www.virustotal.com/gui/ip-address/192.51.188.108/relations ・Urlscan https://urlscan.io/ip/192.51.188.108 https://urlscan.io/result/b9b68fb3-3d63-4801-9ff1-e144f7431bf8/ https://urlscan.io/result/56f93979-4520-4e1c-8cb4-1af173838078/ Below are images of legitimate sites used by phishing crime groups when accessing with Android OS. https://www.post.japanpost.jp/index.html Website owner: Japan Post Co., Ltd. show less	Phishing Email Spam Exploited Host
🇺🇸 216.245.209.156	06 Jul 2022	I am reporting the URL of the fake LOTO6 winning fraud that deceived Japan Post and Japan Post by ... show more I am reporting the URL of the fake LOTO6 winning fraud that deceived Japan Post and Japan Post by phishing email. ・Twitter Information https://twitter.com/HI_KUNNANASE7/status/1544324797718339584 <Phishing URL> http://iq.hu.bdas--anse.com/zCj21rP72rQ7 113.212.143.246 ↓ http://zodiac-mystic.com/ZRhJi2Dhylr 216.245.209.156 ↓ http://zodiac-mystic.com/log_index.php?page=allmess_miru&s=1656986769&cid=12489&mid=55403093&ddv=d89030c15cb840090b27441170601970&%%%%%%%%%% 216.245.209.156 ・Virus Total https://www.virustotal.com/gui/ip-address/216.245.209.156/relations https://www.virustotal.com/gui/ip-address/113.212.143.246/relations ・Urlscan.io https://urlscan.io/result/b1af0ccd-f708-4a7f-bd69-0d5e0e859c49/ https://urlscan.io/result/74d6c71f-b5f2-4a83-8b62-09aa6066a8e1/ show less	Fraud Orders Phishing Email Spam
🇯🇵 113.212.143.246	06 Jul 2022	I am reporting the URL of the fake LOTO6 winning fraud that deceived Japan Post and Japan Post by ... show more I am reporting the URL of the fake LOTO6 winning fraud that deceived Japan Post and Japan Post by phishing email. ・Twitter Information https://twitter.com/HI_KUNNANASE7/status/1544324797718339584 <Phishing URL> http://iq.hu.bdas--anse.com/zCj21rP72rQ7 113.212.143.246 ↓ http://zodiac-mystic.com/ZRhJi2Dhylr 216.245.209.156 ↓ http://zodiac-mystic.com/log_index.php?page=allmess_miru&s=1656986769&cid=12489&mid=55403093&ddv=d89030c15cb840090b27441170601970&%%%%%%%%%% 216.245.209.156 ・Virus Total https://www.virustotal.com/gui/ip-address/216.245.209.156/relations https://www.virustotal.com/gui/ip-address/113.212.143.246/relations ・Urlscan.io https://urlscan.io/result/b1af0ccd-f708-4a7f-bd69-0d5e0e859c49/ https://urlscan.io/result/74d6c71f-b5f2-4a83-8b62-09aa6066a8e1/ show less	Fraud Orders Phishing Email Spam
🇰🇷 103.80.134.41	05 Jul 2022	Phishing mail is distributed from SMS. From June 23, 2022, phishing URLs linked to IP address: 103. ... show more Phishing mail is distributed from SMS. From June 23, 2022, phishing URLs linked to IP address: 103.80.134.41 can be accessed only by smartphones. Phishing URL: http://tmsxkylkhj.duckdns.org/ja/main http://szcoytcsit.duckdns.org/ja/main ・Virus Total https://www.virustotal.com/gui/ip-address/103.80.134.41/relations ・Urlscan https://urlscan.io/ip/103.80.134.41 https://urlscan.io/result/f6ffe203-52dd-46a6-954c-d5dec5b43f45/ https://urlscan.io/result/4f75fc27-7d9a-4e18-90e0-d77266dd7741/ ・Twitter https://twitter.com/NaomiSuzuki_/status/1544505476603609089 https://twitter.com/NaomiSuzuki_/status/1544325778053414912 Below are images of legitimate sites used by phishing crime groups when accessing with iOS(iPhone). https://appleid.apple.com/ja_JP Website owner: Apple inc. show less	Fraud Orders Phishing Email Spam
🇰🇷 103.80.134.41	05 Jul 2022	Twitter https://twitter.com/NaomiSuzuki_/status/1544505476603609089 https://twitter.com/NaomiSuzuk ... show more Twitter https://twitter.com/NaomiSuzuki_/status/1544505476603609089 https://twitter.com/NaomiSuzuki_/status/1544325778053414912 <Phishing URL> http://tmsxkylkhj.duckdns.org/ja/main http://szcoytcsit.duckdns.org/ja/main http://tbdqvssxtt.duckdns.org/ja/main http://tfqeqefdqp.duckdns.org/ja/main http://tizbctgxtr.duckdns.org/ja/main http://tlhhpkgpks.duckdns.org/ja/main http://tmqfeexieq.duckdns.org/ja/main http://sezosfdxll.duckdns.org/ja/main http://sgumboikbr.duckdns.org/ja/main http://skwnthcbhf.duckdns.org/ja/main http://sqcdvvitvi.duckdns.org/ja/main http://sqrjgrqtek.duckdns.org/ja/main http://ssirdbkutd.duckdns.org/ja/main http://syfkelfnzt.duckdns.org/ja/main show less	Fraud Orders Phishing Email Spam
🇰🇷 91.204.227.20	05 Jul 2022	Twitter information: https://twitter.com/NaomiSuzuki_/status/1544171287337381888 https://twitter.c ... show more Twitter information: https://twitter.com/NaomiSuzuki_/status/1544171287337381888 https://twitter.com/NaomiSuzuki_/status/1544179252270362625 Phishing mail is distributed from SMS. From June 23, 2022, phishing URLs linked to IP address: 91.204.227.20 can be accessed only by smartphones. Phishing URLs download Android malware "japanpost [.] apk" files. Phishing URL: http://ibrx.yermu.com/sdfgewrwerew/ Download URL: http://ibrx.yermu.com/japanpost.apk ・Virus Total https://www.virustotal.com/gui/ip-address/91.204.227.20/relations ・Urlscan https://urlscan.io/ip/91.204.227.20 https://urlscan.io/result/c95bf61b-b22a-4e89-8a07-abade864e858/ Below are images of legitimate sites used by phishing crime groups when accessing with Android OS. https://www.post.japanpost.jp/index.html Website owner: Japan Post Co., Ltd. show less	Phishing Email Spam Exploited Host
🇰🇷 103.80.134.41	05 Jul 2022	Phishing mail is distributed from SMS. From June 23, 2022, phishing URLs linked to IP address: 103. ... show more Phishing mail is distributed from SMS. From June 23, 2022, phishing URLs linked to IP address: 103.80.134.41 can be accessed only by smartphones. Phishing URL: http://qytbcziuxu.duckdns.org/ja/main http://qsxdvuwztz.duckdns.org/ja/main ・Virus Total https://www.virustotal.com/gui/ip-address/103.80.134.41/relations ・Urlscan https://urlscan.io/ip/103.80.134.41 https://urlscan.io/result/1ec09b26-1839-4649-b979-dcd4c4ff5ae5/ https://urlscan.io/result/078e32ad-dca9-4902-ac1f-309d55d9fe6f/ ・Twitter https://twitter.com/NaomiSuzuki_/status/1544140894278131712 https://twitter.com/NaomiSuzuki_/status/1543970492667039744 Below are images of legitimate sites used by phishing crime groups when accessing with iOS(iPhone). https://appleid.apple.com/ja_JP Website owner: Apple inc. show less	Fraud Orders Phishing Email Spam
🇯🇵 192.51.188.108	05 Jul 2022	Phishing mail is distributed from SMS. From June 22, 2022, phishing URLs linked to IP address: 192. ... show more Phishing mail is distributed from SMS. From June 22, 2022, phishing URLs linked to IP address: 192.51.188.108 can be accessed only by smartphones. If you access the phishing URL on an Android smartphone, the malware "japanpost [.] apk" file will be downloaded. Phishing URL: http://b.hyeyu.com/fgrrefeedh/ http://ubzuu.com/fgrrefeedh/ http://hs1n.rdybz.com/fgrrefeedh/ ・Virus Total https://www.virustotal.com/gui/ip-address/192.51.188.108/relations ・Urlscan https://urlscan.io/ip/192.51.188.108 https://urlscan.io/result/35cef419-95a0-4e5e-8d3c-28e47b0d756b/ https://urlscan.io/result/6f644655-9a47-4f2a-8d31-4dfde77b6312/ https://urlscan.io/result/bedf280c-8270-4e28-83df-0eb2bb74bfcc/ Below are images of legitimate sites used by phishing crime groups when accessing with Android OS. https://www.post.japanpost.jp/index.html Website owner: Japan Post Co., Ltd. show less	Phishing Email Spam Exploited Host