Namecheap hosts the domain palikioeks.com, which redirects to a phish site targeting Danske Bank Customers in Finland.
PHISH SAMPLE:
Received: from omaik.com (170-187-155-146.ip.linodeusercontent.com [170.187.155.146])
Date: Fri, 8 Apr 2022 13:##:## +0000 (UTC)
From: Danske Bank <support@omaik.com>
Reply-To: support@omaik.com
Subject: ? Sinulla on uusi viestie
<snip>
Sinulla on (1) tärkeä viesti suojatussa
postilaatikossasi.
Katsoaksesi sen, napsauta alla olevaa linkkiä:Lisää tietoaKirjaudu Ystävällisin terveisin,Danske Bank
[ Kirjaudu ]
[[ http://palikioeks.com/ ]
<snip>
$ host palikioeks.com
palikioeks.com has address 162.255.119.228
palikioeks.com mail is handled by 20 eforward5.registrar-servers.com.
palikioeks.com mail is handled by 15 eforward4.registrar-servers.com.
palikioeks.com mail is handled by 10 eforward1.registrar-servers.com.
palikioeks.com mail is handled by 10 eforward2.registrar-servers.com.
palikioeks.com mail is handled by 10 eforward3.registrar-servers.com.
[whois.namecheaphosting.com]
%rwhois V-1.0,V-1.5:00090h:00 billing.web-hosting.com (Ubersmith RWhois Server V-4.5.5)
autharea=162.255.119.0/24
xautharea=162.255.119.0/24
network:Class-Name:network
network:Auth-Area:162.255.119.0/24
network:ID:NET-79087.162.255.119.0/24
network:Network-Name:anycast-edge-fwd-range
network:IP-Network:162.255.119.0/24
network:IP-Network-Block:162.255.119.0 — 162.255.119.255
network:Org-Name:Web-hosting.com
network:Street-Address:900 N. Alameda St., Suite 220
network:City:Los Angeles
network:State:CA
network:Postal-Code:90012
network:Country-Code:US
network:Tech-Contact:MAINT-79087.162.255.119.0/24
network:Created:20190523133959000
network:Updated:20190523163000000
network:Updated-By:net-admin@namecheap.com
contact:POC-Name:Network team
contact:POC-Email:net-admin@namecheap.com
contact:POC-Phone:
contact:Tech-Name:Network team
contact:Tech-Email:net-admin@namecheap.com
contact:Tech-Phone:
contact:Abuse-Name:Abuse team
contact:Abuse-Email:abuse@namecheaphosting.com
%ok