xn--xgvsmpcra-zna36clafc13b18bk4a3331bea.sawitgokil.com
First seen Jun 10, 2026
- No SSL certificate
- 1 community report from users
Details
Related Domains
No known connections to other entities yet.
Community Reports
Phishing Email from office365alerts Recieved an email from System Reminder from "office365alerts" from with the attached image which links to "`xn--xgvsmpcra-zna36clafc13b18bk4a3331bea.sawitgokil.com"`, a Ukrainian site. Does anyone know how the phisher is able to generate what appears to be a valid Office 365 Alert? The only thing I can notice in the email header is a set of X-MS-Exchange-Cross-Tenant items, including "`X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=b5faabfc-8be7-46e5-a20d-a1c5b9a7ce01;Ip=[2a10:1fc0:11::8ebd:7e36];Helo=[nequeivhhy.vicicollection.com]"` `"vicicollection.com"` points to `"myshopify.com"` but I cannot resolve "`nequeivhhy.vicicollection.com."` Is there a better subreddit for this?
Share Your Experience
What's Your Exposure?
Know your risk exposure to this message with a Thorough Analysis. It returns a detailed report covering the complaint history, your data breach exposure, related scam entities, and risk signals tied to this email message. Check the box and enter your email address now.