Chinese phisher trying to phish RAKUTEN. (landing sites)

40.81.212.26 raketenm-bhnydd.net
40.81.212.26 raketenm-haoeoy.net
40.81.212.26 raketenm-orjrfk.net
40.81.212.26 raketenm-ppfnml.net
40.81.212.26 raketenm-ykwmor.net
40.81.212.30 raketenm-bhnydd.org
40.81.212.30 raketenm-haoeoy.org
40.81.212.30 raketenm-orjrfk.org
40.81.212.30 raketenm-ppfnml.org
40.81.212.30 raketenm-ykwmor.org
40.81.212.37 raketanm-bhnydd.net
40.81.212.37 raketanm-haoeoy.net
40.81.212.37 raketanm-orjrfk.net
40.81.212.37 raketanm-ppfnml.net
40.81.212.37 raketanm-ykwmor.net
40.81.212.55 raketanm-bhnydd.org
40.81.212.55 raketanm-haoeoy.org
40.81.212.55 raketanm-orjrfk.org
40.81.212.55 raketanm-ppfnml.org

This same spammer is on
11, 12, 18, 19, 22, 24 73, 75,76,
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
and his amazon one is on 68 and 78

Received: from mail0.raketunm-omeeo.net (raketunm-omeeo.net [5.188.3.23])
From: «Rakuten» <info@raketunm-omeeo.net>
To: <x>
Subject: =?utf-8?B?44CQ6YeN6KaB44Gq44GK55+l44KJ44Gb44CR44Kr44O844OJ5oOF5aCx5pu05paw44Gu44GK55+l44KJ?=
=?utf-8?B?44Gb?=
Date: Sat, 17 Oct 2020 x +0800

楽天カードアプリ | 楽天e-NAVI
3hwcz21uno9sikz9owt4tj4um
【重要なお知らせ】カード情報更新のお知らせ

http://raketenm-ppfnml.net/
Resolving raketenm-ppfnml.net (raketenm-ppfnml.net)… 40.81.212.26
Connecting to raketenm-ppfnml.net (raketenm-ppfnml.net)|40.81.212.26|:80… connected.
HTTP request sent, awaiting response… 302 Moved Temporarily

Добавить комментарий

Ваш адрес email не будет опубликован. Обязательные поля помечены *