Update add-domain

[AnthonyJoh586]

Phishing Domain/URL/IP(s):

https://bitflyerjajplogin.sviluppo.host/
https://bitflyerjp.mtl2k23.workers.dev/
149.62.185.88

Impersonated domain

bitflyer.com

Describe the issue

Phishing site impersonating bitFlyer, Inc which is Japanese crypto currency exchange company.
The site tries to the customer's login info and currency.

bitflyerjp.mtl2k23.workers.dev is just used as redirector . This domain may be distributed on email or sms to lead customers to this phishing domain.

Related external source

[URL scan] https://urlscan.io/result/61691f9d-40b5-4b57-a688-be849427a040/

There was phishing site similar to this. Look like same phisher.
https://urlscan.io/result/379957ed-5c3b-4fdf-9961-971b2358c184/

Screenshot

Click to expand

[AnthonyJoh586]

Add request of phishing domain

[spirillen]

screenshot is required as it is a non public site

[g0d33p3rsec]

for https://bitflyerjajplogin.sviluppo.host/, it looks like it's been removed by the subdomain host.
Before: https://urlscan.io/result/2790f591-3588-440f-9aee-318c182a4e73/
Current: https://urlscan.io/result/3ee5c92f-fff1-49d8-9528-06530e4f56f6/

more info on the host: https://host.it/servizi/staging-e-sviluppo
https://urlscan.io/search/#sviluppo.host
cloudlfare workers: https://developers.cloudflare.com/workers/configuration/routing/workers-dev/
https://urlscan.io/search/#workers.dev

an argument could be made for blocking either of the two hosts, but they do seem to be responsive to abuse reports.

[g0d33p3rsec]

looking into https://bitflyer.jp.net/, which redirects to the domain you listed. That may be the more worthwhile block.
https://app.any.run/tasks/f46a041e-378c-457c-b54a-f040d0d7fc55

[spirillen]

Crimeflare are miraculous enough marking bitflyerjp.mtl2k23.workers.dev as suspected phishing...

What is it with the IP?, I don't see any reason to this project for blacklisting it

[AnthonyJoh586]

Hi
Sorry for confusing. the IP adress was typo and I fixed it.
As you guys mentioned, The concerned domains are restricted by the provider.

Thank you for your contributions.