Comments

Fake Pricewaterhouse Coopers LLP “Overdue Invoice” delivers Trickbot — 1 Comment

  1. I have received both this and the companies house mail.

    Yesterday at 11:13:25 i received the companies house mail, it came from IP address 185.238.2.121
    Today at 11:28:49 I received the pwc mail, this came from IP 185.238.3.242

    below is the Whois lookup for these IP’s, they are both on the same small network so be worth blacklisting the whole network.

    Regards
    Mike

    Source: whois.ripe.netIP Address: 185.238.2.121
    % This is the RIPE Database query service.
    % The objects are in RPSL format.
    %
    % The RIPE Database is subject to Terms and Conditions.
    % See http://www.ripe.net/db/support/db-terms-conditions.pdf

    % Note: this output has been filtered.
    % To receive output for a database update, use the “-B” flag.

    % Information related to ‘185.238.0.0 – 185.238.3.255’

    % Abuse contact for ‘185.238.0.0 – 185.238.3.255’ is ‘support-link.ac@yandex.ru’

    inetnum: 185.238.0.0 – 185.238.3.255
    netname: SC-INTERNET-INC-20171220
    country: NL
    org: ORG-IICI6-RIPE
    admin-c: IM5378-RIPE
    tech-c: IM5378-RIPE
    status: ALLOCATED PA
    mnt-by: RIPE-NCC-HM-MNT
    mnt-by: sc-virtual-trade-ltd-1-mnt
    created: 2017-12-20T12:15:25Z
    last-modified: 2018-04-26T12:51:01Z
    source: RIPE

    organisation: ORG-IICI6-RIPE
    org-name: INTERNET IT COMPANY INC
    org-type: LIR
    address: Global Gateway 8, Rue De La Perle, Providence
    address: 00000
    address: Mahe
    address: SEYCHELLES
    admin-c: IM5378-RIPE
    tech-c: IM5378-RIPE
    abuse-c: AR45992-RIPE
    mnt-ref: sc-virtual-trade-ltd-1-mnt
    mnt-by: RIPE-NCC-HM-MNT
    mnt-by: sc-virtual-trade-ltd-1-mnt
    created: 2017-12-18T18:12:59Z
    last-modified: 2018-10-19T15:24:54Z
    source: RIPE # Filtered
    phone: +380685850483

    person: Ievgen Mysyk
    address: Global Gateway 8, Rue De La Perle, Providence
    address: 00000
    address: Mahe
    address: SEYCHELLES
    phone: +380685850483
    nic-hdl: IM5378-RIPE
    mnt-by: sc-virtual-trade-ltd-1-mnt
    created: 2017-12-18T18:12:58Z
    last-modified: 2018-08-07T15:33:59Z
    source: RIPE

    % Information related to ‘185.238.2.0/24AS200313’

    route: 185.238.2.0/24
    origin: AS200313
    mnt-by: sc-internet-company-1-mnt
    mnt-by: sc-internet-it-1-mnt
    created: 2018-08-30T18:28:43Z
    last-modified: 2018-08-30T18:28:43Z
    source: RIPE

    This query was served by the RIPE Database Query Service version 1.92.6 (BLAARKOP)

Leave a Reply

Your email address will not be published. Required fields are marked *