Рубрика: google.com

The usual KDDI AU phish. Where there is one, there are many. Status Code URL IP Page Type Redirect Type Redirect URL 200 https://flat-cake-c258.wafidoy7421238.workers.dev/ 200 https://kddc-av0ne.serveirc.com/ Resolving kddc-av0ne.serveirc.com (kddc-av0ne.serveirc.com)… 34.64.152.195

This is a KDDI AU phish, served by malicious redirectors and dynamic dns providers: Status Code URL IP Page Type Redirect Type Redirect URL 200 https://late-union-8173.lenadfriedlandl92.workers.dev/%22%7C 301 http://auto-type.ddns.net/ 200 https://auto-type.ddns.net/ auto-type.ddns.net has address 34.97.28.225

securecomm-services.com.au has address 34.129.230.162 Login | NetBank Login to NetBank _____________________ _____________________ Created with Sketch.Show password Login Forgot Client ID or Forgot password? © Commonwealth Securities LimitedABN 60 067 254 399 AFSL 238814 Important informationImportant information Created with Sketch.(Opens in new window)Financial services guide Created with Sketch.(Opens in new window)Privacy policy Created with Sketch.(Opens in… Читать далее phishing server

34.150.111.50|amaoznejapane.cf|2022-03-31 16:26:25 34.150.111.50|amaoznejapn.ga|2022-04-02 22:53:02 34.150.111.50|etc-maisaijp.cf|2022-03-26 16:56:28 34.150.111.50|etc-maisaijp.ga|2022-03-27 15:46:06 34.150.111.50|etc-maisaijp.gq|2022-03-28 16:57:23 34.150.111.50|etc-maisaijp.ml|2022-03-26 16:51:09 34.150.111.50|etc-meisaizjp.cf|2022-04-03 19:27:39 34.150.111.50|etc-meisazi.ga|2022-04-03 08:21:45 34.150.111.50|etc-meisazi.gq|2022-03-27 15:41:41 34.150.111.50|etc-meisazi.ml|2022-03-26 16:45:50

Fake URL shorteners for phishing. 35.230.20.151|0nli7ne-auth04.com|2022-04-01 23:26:17 35.230.20.151|0nli7ne-auth04.info|2022-04-01 22:26:57 35.230.20.151|0nli7ne-auth04.net|2022-04-01 22:27:01 35.230.20.151|0nli7ne-auth04.org|2022-04-01 20:56:12 35.230.20.151|0nli9ne-auth4.com|2022-03-31 22:02:09 35.230.20.151|0nli9ne-auth4.net|2022-03-31 19:46:35 35.230.20.151|0nli9ne-auth4.org|2022-03-31 18:17:27 35.230.20.151|0nline1-authen02.com|2022-03-30 19:01:35 35.230.20.151|0nline1-authen02.info|2022-03-30 19:36:42 35.230.20.151|0nline1-authen02.net|2022-03-30 18:22:17 35.230.20.151|0nline1-authen02.org|2022-03-30 17:37:59 35.230.20.151|0nline2-auth3.com|2022-03-30 22:51:35 35.230.20.151|0nline2-auth3.info|2022-03-30 20:46:24 35.230.20.151|0nline2-auth3.net|2022-03-30 20:08:01 35.230.20.151|0nline2-auth3.org|2022-03-30 19:31:49 35.230.20.151|cartechfan.com|2021-04-08 08:46:12 35.230.20.151|secbe3-server9.com|2022-03-29 21:46:31 35.230.20.151|secbe3-server9.info|2022-03-29 21:16:24 35.230.20.151|secbe3-server9.net|2022-03-29 19:12:01 35.230.20.151|secbe3-server9.org|2022-03-29 18:12:54 35.230.20.151|secube06-user03.com|2022-03-28 23:06:28 35.230.20.151|secube06-user03.info|2022-03-28 22:02:12 35.230.20.151|secube06-user03.net|2022-03-28 21:22:21 35.230.20.151|secube06-user03.org|2022-03-28 20:56:44 35.230.20.151|secure04-c0nnect3.com|2022-03-30 22:16:33… Читать далее phishing server

Phishing hosting located here: 365aib-online.com A 34.78.22.201 365online-loginportal.com A 34.78.22.201 365online-reviewportal.com A 34.78.22.201 365online-reviewsportal.com A 34.78.22.201 365termsconditionboi.com A 34.78.22.201 aibauthupgrades.com A 34.78.22.201 aibonline-bankingsupport.com A 34.78.22.201 aibupgradeauth.com A 34.78.22.201 aibupgradgeportal.com A 34.78.22.201 aibverifiedservice.com A 34.78.22.201 aibverifiedservices.com A 34.78.22.201 aibweb-online.com A 34.78.22.201 barclays-verify-account.com A 34.78.22.201 boi365termsetup.com A 34.78.22.201 boitermconditionsetting.com A 34.78.22.201 boitermssetup.com A 34.78.22.201 cic-authentifier.com A 34.78.22.201… Читать далее Phishing hosting @34.78.22.201

It is extremely unlikely that these have any legitimate purpose: irs-account-federal.com irs-sub-federal.com irs-subs.com Especially not hosted on Google.

Fake URL shorteners for phishing 34.83.90.245|client02-supp0rt5.info|2022-03-23 21:51:16 34.83.90.245|client02-supp0rt5.net|2022-03-23 21:36:48 34.83.90.245|client03-supp0rt2.com|2022-03-23 18:02:26 34.83.90.245|securle05-web1.com|2022-03-22 18:22:39 34.83.90.245|server-security02.com|2022-03-23 02:40:44 34.83.90.245|server-security02.info|2022-03-23 00:55:56 34.83.90.245|server-security02.net|2022-03-23 00:35:36 34.83.90.245|web02users-server.com|2022-03-22 22:56:21

35.200.127.154|aeoncojapan.nltwkp.cn|2022-03-17 04:10:19 35.200.127.154|etc-meisazi.cf|2022-03-23 16:42:27 35.200.127.154|etc-mesiaixjp.ga|2022-03-23 16:42:36 35.200.127.154|etc-mesiaixjp.tk|2022-03-23 16:51:45 35.200.127.154|smt.docomo.chickenkiller.com|2022-03-19 10:27:45 35.200.127.154|ufjapan.nvzfh.cn|2022-03-17 04:01:49 35.200.127.154|ufjapan.penjingw.cn|2022-03-16 12:10:54

34.92.83.202|amaoznjaapan.cf|2022-03-05 04:41:11 34.92.83.202|amaoznjaapan.ga|2022-03-04 18:56:53 34.92.83.202|amaoznjaapan.gq|2022-03-04 18:56:44 34.92.83.202|amaoznjapancom.cf|2022-03-03 23:02:07 34.92.83.202|amaoznjapancom.gq|2022-03-02 16:18:21 34.92.83.202|amaoznjapancom.ml|2022-03-02 16:12:43 34.92.83.202|amazonjatpan.cf|2022-03-03 17:57:58 34.92.83.202|bkmufgjapan.uk.ms|2022-03-15 16:52:18 34.92.83.202|bkmufgjp.crabdance.com|2022-03-18 10:28:41 34.92.83.202|etc-mdisai.chickenkiller.com|2022-03-19 10:28:28 34.92.83.202|etc-meianznjp.bakkoda.com|2022-03-21 21:15:42 34.92.83.202|etc-meiasiz.serveirc.com|2022-03-11 09:09:04 34.92.83.202|etc-meisasijp.cf|2022-03-22 09:01:41 34.92.83.202|etc-meisasijp.ga|2022-03-22 09:02:23 34.92.83.202|etc-meisasijp.gq|2022-03-22 09:02:13 34.92.83.202|etc-meisasijp.ml|2022-03-22 09:01:51 34.92.83.202|etc-meisxi.eggdrop.one.pl|2022-03-17 18:25:55 34.92.83.202|etc-mesiaixjp.cf|2022-03-22 09:02:02 34.92.83.202|etc-mesiaixjp.ml|2022-03-22 09:01:35 34.92.83.202|etcmeisai.amaoznejapanc.ml|2022-03-10 17:37:29