104.224.29.138

Phishing IP: 104.224.29.138
Received: from server.kicheko.com (169.255.115.235)
Received: from elf.co.kr (104.224.29.138)
Date: 24 Oct 2022 05:34:04 -0600
From: [email protected]
Subject: {Spam?} RE: Invoice remittance
Body: 请参阅 10 月 19 日发票所附的付款通知。发货应提前通知。
Attachment: *.html (Phishing URL detected!).
Phishing url: https://formspree.io/f/mwkzngpr
Bulk: yes!!!!!!!!!!
Other: blocked by Dnsbl
LZAC-MAC-Never Expires

Domain info:
Domain Name: KICHEKO.COM
Updated Date: 2022-01-10T10:02:33Z
Creation Date: 2001-04-26T18:05:39Z
Registry Expiry Date: 2025-04-26T18:05:39Z
Registrar: Tucows Domains Inc.

kicheko.com mail exchanger = 10 mail.kicheko.com
mail.kicheko.com ip=169.255.115.235