$ host www.lhv-autentimine.com www.lhv-autentimine.com is an alias for lhv-autentimine.com. lhv-autentimine.com has address 199.188.201.139
Рубрика: namecheap.com
Phishing payload against LHV (Estonian banking group)
$ host konto-lhv.com konto-lhv.com has address 199.188.201.148 This IP hosts a live bank phishing payload. The domain was registered exclusively for this purpose.
Phishing payload against Nordea Bank (Nordics)
$ host 3920-nor.xyz 3920-nor.xyz has address 162.0.217.20 Phishing payload in a recent Nordea Bank phishing spam.
spam support (domains)
domain used in spam operation linksale745.xyz|192.64.119.127
Phishing payload against LHV Pank (Estonia)
$ host pank-lhvee.com pank-lhvee.com has address 162.0.235.12
spam support (domains)
domain used in spam operation 4wh456e.xyz|192.64.119.70
phishing / fraud sites
bnkenglandonline.com has address 162.0.232.161 legitidentitydocument.com has address 162.0.232.161
Spamvertised website
Received: from mail-wm1-x32a.google.com ([2a00:1450:4864:20::32a]) From: Temobase Clothing <nitdaica@gmail.com> Reply-To: nancy@temogearstore.com Date: Sat, 16 Oct 2021 02:30:07 +0900 Subject:4 gift ideas for you, []! https://fbtees.bar/[] 198.54.115.238 https://trendtify.shop/[] 66.29.141.34 https://trontee.com/[] 34.149.47.41
Spamvertised website
Received: from mail-wm1-x32a.google.com ([2a00:1450:4864:20::32a]) From: Temobase Clothing <nitdaica@gmail.com> Reply-To: nancy@temogearstore.com Date: Sat, 16 Oct 2021 02:30:07 +0900 Subject:4 gift ideas for you, []! https://fbtees.bar/[] 198.54.115.238 https://trendtify.shop/[] 66.29.141.34 https://trontee.com/[] 34.149.47.41
spam support (domains)
domain used in spam operation w45hw345h.xyz|192.64.119.231