People based in RUSSIA recently started a massive phishing campaign (i personally got a text from them today) against LEDGER (bitcoin hardware provider)
I investigated it a bit and found a bunch of websites, all hosted on SERVERIUS.net
http://us-ledger.com/
https://xn--ldgr-vvac.com/update/
http://de-ledger.com/
https://xn--ldgr-vvac.com/update/
http://it-ledger.com/
http://fr-ledger.com/
http://us-ledger.com/