Skip to content

Conversation

@SiGe11
Copy link
Contributor

@SiGe11 SiGe11 commented Sep 23, 2024

Phishing Domain/URL/IP(s):

https://dwb24.top/vKpgi/

Impersonated domain

https://www.dpd.com/

Describe the issue

Pretend to be the DPD currier.

Screenshot

dpd_phish

Click to expand

@spirillen
Copy link
Contributor

Domain do no longer have an assigned IP address, closing

drill -T dwb24.top
.       518400  IN      NS      a.root-servers.net.
.       518400  IN      NS      b.root-servers.net.
.       518400  IN      NS      c.root-servers.net.
.       518400  IN      NS      d.root-servers.net.
.       518400  IN      NS      e.root-servers.net.
.       518400  IN      NS      f.root-servers.net.
.       518400  IN      NS      g.root-servers.net.
.       518400  IN      NS      h.root-servers.net.
.       518400  IN      NS      i.root-servers.net.
.       518400  IN      NS      j.root-servers.net.
.       518400  IN      NS      k.root-servers.net.
.       518400  IN      NS      l.root-servers.net.
.       518400  IN      NS      m.root-servers.net.
top.    172800  IN      NS      a.zdnscloud.com.
top.    172800  IN      NS      f.zdnscloud.com.
top.    172800  IN      NS      c.zdnscloud.com.
top.    172800  IN      NS      i.zdnscloud.com.
top.    172800  IN      NS      b.zdnscloud.com.
top.    172800  IN      NS      g.zdnscloud.com.
top.    172800  IN      NS      d.zdnscloud.com.
top.    172800  IN      NS      j.zdnscloud.com.
dwb24.top.      3600    IN      NS      ezra.ns.cloudflare.com.
dwb24.top.      3600    IN      NS      rosa.ns.cloudflare.com.
$

Please let us know if it should turn back on

@spirillen spirillen closed this Sep 23, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants