Phishing site: https://dilscordilgifxr.com/LT
https://who.is/whois/dilscordilgifxr.com
Natalya Yurkina
[email protected]
After a google search with that email address, I have found some other phishing pages and his youtube channel with 1.5k subscribers. It seems mostly inactive with the last upload being six months ago, but maybe there’s something deeper someone smarter than me can find.
Telegram channel: Telegram: Contact @krolfj
Discord server: Нора
This website contacted 5 IPs in 3 countries across 4 domains to perform 28 HTTP transactions . The main IP is 190.115.18.17 , located in Belize City, Belize and belongs to DDOS-GUARD CORP., BZ. The main domain is nitrodiscorb.icu .
TLS certificate: Issued by R3 on June 16th 2022. Valid for: 3 months.[ nitrodiscorb.icu ]Show Scans 7 3570 similar pages on different IPs, domains and ASNs foundShow Scans 3570
Targeting these brands: Discord (Instant Messenger)
Google Safe Browsing: Malicious for nitrodiscorb.icu
Current DNS A record: 190.115.18.17 (AS262254 - DDOS-GUARD CORP., BZ)
