154.13.5.111

Phishing IP: 154.13.5.111
Received: from cloudtranslation.com (218.85.119.90)
Received: from unknown (117.36.231.22)
Date: Mon, 13 Feb 2023
From: OA管理员 <[email protected]>
Subject: {Spam?} OA系统更新处理
Phishing url: https://fkvv.xyz
Bulk: yes
Other: blocked by Dnsbl
LZAC-MAC-Never Expires

Domain info:
Domain Name: CLOUDTRANSLATION.COM
Updated Date: 2021-06-01T16:16:03Z
Creation Date: 2008-08-06T05:53:05Z
Registry Expiry Date: 2027-08-06T05:53:05Z
Registrar: Alibaba Cloud Computing (Beijing) Co., Ltd.

Domain Name: 52SMWL.COM
MXRecords: NONE
Updated Date: 2022-07-01T06:31:49Z
Creation Date: 2020-11-27T04:58:40Z
Registry Expiry Date: 2023-11-27T04:58:40Z
Registrar: DNSPod, Inc.

cloudtranslation.com mail exchanger = 10 mail.cloudtranslation.com
mail.cloudtranslation.com ip = 218.85.119.90

fkvv.xyz canonical name = 300g.52smwl.com
300g.52smwl.com ip = 154.13.5.111
300g.52smwl.com ip = 154.13.5.88

52smwl.com ip = 119.91.217.48