Osumi, Yusuke Profile picture
Jun 26 4 tweets 3 min read
⚠️ #Phishing Alert
IP: 158.51.96[.]35 (AS397270 NetInformatik)
IoC: otx.alienvault.com/pulse/62b87f1c…
Brand: JR East えきねっと

eki-nzt[.]com[.]iofo[.]crmiet[.]com[.]cn
eki-nzt[.]com[.]iofo[.]jgmm[.]com[.]cn
eki-nzt[.]com[.]iofo[.]jgmd[.]com[.]cn
eki-nzt[.]com[.]iofo[.]jgmh[.]com[.]cn
#phishing
eki-nzt[.]com[.]iofo[.]zxtj[.]com[.]cn
eki-nzt[.]com[.]personal[.]crmiet[.]com[.]cn
eki-nzt[.]com[.]personal[.]jgmd[.]com[.]cn
eki-nzt[.]com[.]personal[.]jgmh[.]com[.]cn
eki-nzt[.]com[.]personal[.]jgmm[.]com[.]cn
eki-nzt[.]com[.]personal[.]zxtj[.]com[.]cn
#Phishing Domain Owner
叶丽琴 13544470904@163.com
井小军 848231239@qq.com
林耀盛 fangshao999@hotmail.com
曲聪源 885629@qq.com
#Phishing #詐欺 メール
【重要】えきねっとアカウントの自動退会処理について
日頃より「えきねっと」をご利用いただきありがとうございます。
「えきねっと」は 2022 年 6 月 26 日にサービスをリニューアルいたしました。これ に伴い、「えきねっと」利用規約・会員規約を変更し、最後にログイン

• • •

Missing some Tweet in this thread? You can try to force a refresh
 

Keep Current with Osumi, Yusuke

Osumi, Yusuke Profile picture

Stay in touch and get notified when new unrolls are available from this author!

Read all threads

This Thread may be Removed Anytime!

PDF

Twitter may remove this content at anytime! Save it as PDF for later use!

Try unrolling a thread yourself!

how to unroll video
  1. Follow @ThreadReaderApp to mention us!

  2. From a Twitter thread mention us with a keyword "unroll"
@threadreaderapp unroll

Practice here first or read more on our help page!

More from @ozuma5119

Jun 25
🔥⚠️Massive 2618 #Phishing Sites on 1 IP! 🔥
Domain: com[.]cn🇨🇳
IP: 107.175.3[.]44 (AS36352 COLOCROSSING)
IoC: otx.alienvault.com/pulse/62b7301b…
Brand: VISA/Master/JCB/AMEX

➡️DGA based, Third Level Domain
hxxp://www[.]masccsorod[.]asosscemend[.]6ei2p4y1[.]com[.]cn/ic6oXx7P3s/page1.php
... ImageImageImage
This Actor uses domains just before they expire.
They may be purchasing second-hand domains(二手域名) at a discount.❓ ImageImage
caochui[.]com[.]cn

金帅帅 wanjerng7@163.com
→ 魏端贵 khdt6178@foxmail.com
→ 杭州时尚速度科技有限公司 bihmm90@gmail.com Image
Read 4 tweets

Did Thread Reader help you today?

Support us! We are indie developers!


This site is made by just two indie developers on a laptop doing marketing, support and development! Read more about the story.

Become a Premium Member ($3/month or $30/year) and get exclusive features!

Become Premium

Don't want to be a Premium member but still want to support us?

Make a small donation by buying us coffee ($5) or help with server cost ($10)

Donate via Paypal

Or Donate anonymously using crypto!

Ethereum

0xfe58350B80634f60Fa6Dc149a72b4DFbc17D341E copy

Bitcoin

3ATGMxNzCUFzxpMCHL5sWSt4DVtS8UqXpi copy

Thank you for your support!

Follow Us on Twitter!

:(