Real Examples of Phishing Scams | LINE Corporation

Phishing occurs when scammers take over user accounts by faking their messages as being from LINE Corporation, tricking users into accessing a fake website etc. that prompts them to enter their personal information (e.g. email addresses and passwords). This article outlines real examples of phishing that have occurred in the past few years.
Please refer to these pages for more information.

If you receive a message like any of the examples described, please think twice before clicking on their links as it may be phishing scam.
Furthermore, if you happen to find a phishing email or website that claim to be by LINE Corporation, please report it to the following email address.

- Email address to report phishing scams:dl_pm-report@linecorp.com
※ Note: As this email address is only used for collecting information, you will not receive a response.

1. Real examples of messages that lead to a phishing website (2021): - Sent via SMS or emailへ; - Sent via social mediaへ
2. Real examples of phishing websites (2021): - Targeting LINE accountsへ; - Targeting LINE Pay accountsへ
3. Examples of phishing website FQDNs (by year): - FQDN of phishing websites (2021)へ; - FQDN of phishing websites (2020)へ

1. Real examples of messages that lead to a phishing website

Below are actual cases of phishing scams that have occurred to date in 2021.

	Main text
1 Email August 2021	私のlineのアカウントはロックされました、解除するには、何人かの友人の確認が必要となりますので、下のlineのサイトにログインして解除していただけますか www[.]line110[.]com translation : My line account is locked. To unlock my account, I need confirmation from several friends, so can you log in to the following line site and unlock my account? www[.]line110[.]com
2 SMS August 2021	[LINE]お客様のアカウントは悪用された可能性があります。速やかに安全認証を実施ください。認証はこちら www[.]accessline[.]me translation: [LINE] Your account may have been misused. Please verify your account's safety as soon as possible. Verify at www[.]accessline[.]me
3 SMS 2021/05	【重要】他の端末LINEから電話番号による認証が要求されました、ご確認ください。 http://ttvmgbhber[.]duckdns[.]org translation: 【Important】A request to verify your phone number was made from another device's LINE app. Please confirm. http://ttvmgbhber[.]duckdns[.]org
4 SMS 2021/05	【重要】他の端末LINEから電話番号による認証が要求されました、ご確認ください。 http://tulldlplld[.]duckdns[.]org translation: 【Important】A request to verify your phone number was made from another device's LINE app. http://tulldlplld[.]duckdns[.]org
5 SMS 2021/04	ご本人様不在の為お荷物を持ち帰りました。ご確認ください。 http://bbtyumxbsk[.]duckdns[.]org translation: Your parcel was sent back as you were not at home. Please confirm. http://bbtyumxbsk[.]duckdns[.]org
6 SMS 2021/03	お客さまの【LINE】のアカウントに異常ログインの可能性がございます。下記URLで検証お願いします：https://lineoe[.]com translation: There may have been a suspicious login to your【LINE】 account. Please verify using the URL below: https://lineoe[.]com

	メッセージの実例
1 October 2021	私のlineのアカウントはロックされました。解除するには、何人かの友人の確認が必要となりますので、下のlineのサイトにログインして解除していただけますか www[.]line6219[.]top translation: My line account is locked. To unlock my account, I need confirmation from several friends, so can you log in to the following line website and unlock my account? www[.]line6219[.]top
2 August 2021	私のlineのアカウントはロックされました。解除するには、何人かの友人の確認が必要となりますので、下のlineのサイトにログインして解除していただけますか www[.]line639[.]top translation: My line account is locked. To unlock my account, I need confirmation from several friends, so can you log in to the following line website and unlock my account? www[.]line639[.]top
3 July 2021	私のlineのアカウントはロックされました。解除するには、何人かの友人の確認が必要となりますので、下のlineのサイトにログインして解除していただけますか www[.]line60[.]xyz translation: My line account is locked. To unlock my account, I need confirmation from several friends, so can you log in to the following line website and unlock my account? www[.]line60[.]xyz
4 July 2021	私のlineのアカウントはロックされました。解除するには、何人かの友人の確認が必要となりますので、下のlineのサイトにログインして解除していただけますか www[.]line57[.]xyz translation: My line account is locked. To unlock my account, I need confirmation from several friends, so can you log in to the following line website and unlock my account? www[.]line57[.]xyz

2. Real examples of phishing websites

Below are actual phishing websites that have been identified to date in 2021.

To steal users' accounts, scammers have created websites similar to LINE's login screen that prompts users to enter their phone number, password, and verification number.

LINE Corporation will never send you an email asking you to log in to your account, so you must not access these websites.

Scammers have created websites similar to LINE's login screen (https://access.line.me/) to steal users' LINE-registered email address and password as well as LINE Pay passcode.
Image on the left: Screen requiring users to enter their LINE-registered email address and password. Image on the right: Screen requiring users to enter their LINE Pay passcode

These screens look similar to the real login page, but take note of the fact that the URLs are different. If you have any doubts about the website you are accessing, close it and try to access the website again from the official LINE app or a page that you have bookmarked.

3. Real examples of phishing website FDQNs

A Fully Qualified Domain Name (FQDN) is the complete name of a specific website on the internet and is a string of characters consisting of a host name and domain name.

Below are examples of FQDNs that have been identified as phishing websites to date. Please do not access these websites.

2021

linesn[.]com
jppaypay[.]com
lineoe[.]com
lineci[.]com
linecrv[.]com
lineckf[.]com
vgerzvrdf[.]ddns[.]net
line112[.]com
docomozz[.]com
line[.]docomoip[.]com
a[.]docomoip[.]com
line[.]docomoy[.]com
a[.]docomoy[.]com
xxssddd[.]duckdns[.]org
b[.]docoml[.]com
b[.]docomoze[.]com
c[.]docomoze[.]com
a[.]docona[.]xyz
a[.]doconc[.]xyz
a[.]docond[.]xyz
a[.]docone[.]xyz
a[.]doconf[.]xyz
a[.]doconh[.]xyz
a[.]doconj[.]xyz
a[.]doconk[.]xyz
a[.]doconl[.]xyz
a[.]doconn[.]xyz
a[.]doconp[.]xyz
a[.]doconq[.]xyz
a[.]doconr[.]xyz
a[.]docons[.]xyz
a[.]docont[.]xyz
a[.]doconti[.]xyz
a[.]doconu[.]xyz
a[.]doconw[.]xyz
a[.]doconx[.]xyz
a[.]docony[.]xyz
b[.]docona[.]xyz
b[.]doconc[.]xyz
b[.]docond[.]xyz
b[.]docone[.]xyz
b[.]doconf[.]xyz
b[.]doconh[.]xyz
b[.]doconj[.]xyz
b[.]doconk[.]xyz
b[.]doconl[.]xyz
b[.]doconn[.]xyz
b[.]doconp[.]xyz
b[.]doconq[.]xyz
b[.]doconr[.]xyz
b[.]docons[.]xyz
b[.]docont[.]xyz
b[.]doconti[.]xyz
b[.]doconu[.]xyz
b[.]doconw[.]xyz
b[.]doconx[.]xyz
b[.]docony[.]xyz
c[.]docona[.]xyz
c[.]doconc[.]xyz
c[.]docond[.]xyz
c[.]docone[.]xyz
c[.]doconf[.]xyz
c[.]doconh[.]xyz
c[.]doconj[.]xyz
c[.]doconk[.]xyz
c[.]doconl[.]xyz
c[.]doconn[.]xyz
c[.]doconp[.]xyz
c[.]doconq[.]xyz
c[.]doconr[.]xyz
c[.]docons[.]xyz
c[.]docont[.]xyz
c[.]doconti[.]xyz
c[.]doconu[.]xyz
c[.]doconw[.]xyz
c[.]doconx[.]xyz
c[.]docony[.]xyz
c[.]docoma[.]xyz
c[.]docomd[.]xyz
c[.]docomf[.]xyz
c[.]docomg[.]xyz
c[.]docomh[.]xyz
c[.]docomj[.]xyz
c[.]docomk[.]xyz
c[.]docoml[.]xyz
c[.]docomll[.]xyz
c[.]docoms[.]xyz
c[.]docooe[.]xyz
c[.]docooi[.]xyz
c[.]docooo[.]xyz
c[.]docooq[.]xyz
c[.]docoor[.]xyz
c[.]docoot[.]xyz
c[.]docoou[.]xyz
c[.]docoow[.]xyz
c[.]docooy[.]xyz
a[.]docomia[.]xyz
a[.]docomib[.]xyz
a[.]docomic[.]xyz
a[.]docomid[.]xyz
a[.]docomie[.]xyz
a[.]docomif[.]xyz
a[.]docomxa[.]xyz
a[.]docomxb[.]xyz
a[.]docomxc[.]xyz
a[.]docomxd[.]xyz
a[.]docomxe[.]xyz
a[.]docomxf[.]xyz
a[.]docomxg[.]xyz
www[.]line57[.]xyz
www[.]line58[.]xyz
www[.]line59[.]xyz
dlkzoycghn[.]duckdns[.]org
ezznpjwulo[.]duckdns[.]org
ocexoujhcx[.]duckdns[.]org
pigwfzybay[.]duckdns[.]org
wruttncilc[.]duckdns[.]org
www[.]line60[.]xyz
ccdeokqwha[.]duckdns[.]org
ducaopztio[.]duckdns[.]org
gyijbenqgm[.]duckdns[.]org
jdooheumsp[.]duckdns[.]org
ljsrfxiqgk[.]duckdns[.]org
lphsozzdhh[.]duckdns[.]org
nxokowlugm[.]duckdns[.]org
ofddkcqynu[.]duckdns[.]org
okhbxdmrrp[.]duckdns[.]org
qqjxoxnmak[.]duckdns[.]org
rtejihiwry[.]duckdns[.]org
rtoqkzavqj[.]duckdns[.]org
wldvcckwaz[.]duckdns[.]org
wwbhxjweet[.]duckdns[.]org
www[.]accessline[.]me
kssupesncfhjguatdhzkkgxxufpjahtxrnunckab[.]gnasg4[.]cn
www[.]line107[.]com
www[.]line109[.]com
line99[.]xyz
line115[.]com
line116[.]com
line118[.]com
line121[.]com
line125[.]com
line122[.]com
line127[.]com
www[.]line550[.]top
www[.]line253[.]top
www[.]line630[.]top
www[.]line638[.]top
www[.]line663[.]top
tcbwawphdhatwswsxwkxywvvthuakqbdumezdxhk[.]ymxhx5[.]shop
gldny[.]qsqde[.]com
www[.]line5361[.]top
www[.]line6398[.]top
line6201[.]top
line6025[.]top
line6303[.]top
amalvgnawt[.]duckdns[.]org
biqjfovjbf[.]duckdns[.]org
bwflftbnwg[.]duckdns[.]org
bwnhrehwtz[.]duckdns[.]org
drofpgsvkq[.]duckdns[.]org
dstzpcwgra[.]duckdns[.]org
dymcmaqlbq[.]duckdns[.]org
epxjsgxpey[.]duckdns[.]org
grpxynubav[.]duckdns[.]org
gvzmwaphqg[.]duckdns[.]org
hnnhcscsea[.]duckdns[.]org
iezzqzeljt[.]duckdns[.]org
iylmxwayga[.]duckdns[.]org
jowjznafkm[.]duckdns[.]org
lbzrocxnpj[.]duckdns[.]org
lhdxpgbnzl[.]duckdns[.]org
lmabcgrwti[.]duckdns[.]org
lwzgikqtfm[.]duckdns[.]org
mbxncgeeos[.]duckdns[.]org
moaagnmgmo[.]duckdns[.]org
moovhllpwo[.]duckdns[.]org
mpjbrfspzm[.]duckdns[.]org
mvtdyexqih[.]duckdns[.]org
nivmprbqek[.]duckdns[.]org
odblcyhnel[.]duckdns[.]org
odvrexhecn[.]duckdns[.]org
ozovhrwgek[.]duckdns[.]org
qbclovfrdg[.]duckdns[.]org
qoqoulodje[.]duckdns[.]org
rmsvrxbwon[.]duckdns[.]org
tiylqvpqtp[.]duckdns[.]org
ttyqziuhwl[.]duckdns[.]org
uajwoqpzit[.]duckdns[.]org
uihmuambyw[.]duckdns[.]org
ujoxybuvhr[.]duckdns[.]org
vygpoghwsy[.]duckdns[.]org
wfjzhrpaog[.]duckdns[.]org
wlnfyefhga[.]duckdns[.]org
xxclcwcgmx[.]duckdns[.]org
xxnebqdkxt[.]duckdns[.]org
yazsjqadhp[.]duckdns[.]org
yehzdudrkz[.]duckdns[.]org
yetdccegkp[.]duckdns[.]org
yhxjupcqdw[.]duckdns[.]org
yxnxmvkcrp[.]duckdns[.]org

2020

www[.]bedrf[.]com
www[.]tfgewfd[.]com
www[.]uvhtu[.]com
www[.]cbnkus[.]com
www[.]fsxchd[.]com
www[.]wtdsf[.]com
www[.]enbfh[.]com
www[.]mynhy[.]com
www[.]enbgft[.]com
www[.]tgsfhe[.]com
www[.]nghyus[.]com
www[.]ewtrews[.]com
www[.]nbuks[.]com
www[.]fduhsd[.]com
www[.]nmhks[.]com
www[.]lwisad[.]com
www[.]nhgbs[.]com
www[.]etukol[.]com
www[.]ieukhg[.]com
www[.]pdfsue[.]com
lineverification[.]com
www[.]vbhuts[.]com
www[.]linea1s[.]com
www[.]lineaccountapp[.]com
www[.]linecontapp[.]com
www[.]linecountlife[.]com
www[.]linemecapa[.]com
lineproblem[.]com
www[.]bhytgs[.]com
line-log-in[.]com
www[.]line3s[.]com
www[.]linelog[.]one
lineme-safety[.]com
line-blog[.]top
login-line[.]com
www[.]sline1ds[.]com
www[.]lineas2[.]com
www[.]vline-ddsfusa[.]com
www[.]cbhtrs[.]com
www[.]fdsdhfusd[.]com
linenow[.]top
login-lineclub[.]com
www[.]fdsdh[.]com
www[.]usvshre[.]com
www[.]ddhfd[.]com
www[.]dsfsu[.]com
www[.]vshks[.]com
www[.]irtghk[.]com
www[.]edijkors[.]com
www[.]ebkoa[.]com
www[.]dvuks[.]com
www[.]cbnbk[.]com
www[.]yssdsf[.]com
linecould[.]top
www[.]xdbog[.]com
www[.]xdtrainer[.]com
www[.]tsddfuhs[.]com
www[.]mdsyasyd[.]com
www[.]caia[.]jp
www[.]dthuos[.]com
linecould[.]club
www[.]qsdf15s[.]com
www[.]swbeos[.]com
www[.]fooyg[.]com
www[.]vsdtyhs[.]com
www[.]bghfg[.]com
www[.]rsyag[.]com
www[.]wpdsfh[.]com
www[.]berbryt[.]com
www[.]trfkd[.]com
www[.]gassdj[.]com
www[.]gahzj[.]com
www[.]jkuyts[.]com
www[.]bxsuw[.]com
www[.]gthkos[.]com
www[.]hahzz[.]com
www[.]ryuhops[.]com
www[.]tnuyjhs[.]com
www[.]fbkyte[.]com
www[.]xjrtwrs[.]com
www[.]linecould[.]top
www[.]tdasgs[.]com
www[.]rldfas[.]com
www[.]sdtgr[.]com
www[.]rghyjkos[.]com
www[.]tdsua[.]com
www[.]fdghs[.]com
www[.]t01548[.]com
www[.]vsdrths[.]com
www[.]vdrshy[.]com
www[.]vsdsfl[.]com
www[.]idakpkoc[.]cn
zihtllh[.]cn
www[.]gzkda[.]com
www[.]vnbtkls[.]com
www[.]linecorporationn[.]com
www[.]dghuk[.]com
www[.]vgtres[.]com
ltscr[.]cn
www[.]pdssye[.]com
www[.]iozxw[.]com
www[.]vdhet[.]com
gdfgd[.]co
www[.]fdssus[.]com
www[.]vbnthk[.]com
www[.]hzjda[.]com
www[.]tgdlsd[.]com
www[.]vdhme[.]com
www[.]vjddsux[.]co
www[.]vghtyks[.]com
www[.]dadsabc[.]com
www[.]vcdap[.]com
www[.]vcixe[.]com
www[.]pdeisd[.]com
www[.]rldpss[.]com
www[.]vbfus[.]com
www[.]fgdjse[.]com
www[.]vbxdrs[.]com
www[.]vbdek[.]com
www[.]vcbgh[.]com
www[.]vnhuks[.]com
pustakalewi[.]info
pay[.]line[.]me-portal-jp-main[.]f9150cf1172804761[.]temporary[.]link
www[.]vnhus[.]com
www[.]tddfs[.]com
www[.]vbcsdc[.]com
www[.]vbcsdgtv[.]com
www[.]vcryu[.]com
www[.]tdsdfs[.]com
www[.]vcryyu[.]com
www[.]vxetak[.]com
www[.]tdosh[.]com
www[.]tfdsds[.]com
www[.]vxebao[.]com
www[.]vdbnj[.]com
www[.]vdbnyk[.]com
www[.]vbfthns[.]com
www[.]fdjhds[.]com
www[.]vbfthnco[.]com
www[.]fghfr[.]com
www[.]spdshs[.]com
www[.]vgrthjfit[.]com
www[.]vcdxs[.]com
www[.]rsjdus[.]com
www[.]qdsud[.]com
www[.]wpdsad[.]com
www[.]vfrgyts[.]com
www[.]tgfdd[.]com
www[.]kdfgiu[.]com
www[.]yodisau[.]com
www[.]vasdu[.]com
www[.]prfsue[.]com
www[.]dethu[.]com
www[.]tdusdu[.]com
www[.]ltdsie[.]com
www[.]vcdegh[.]com
www[.]lseosd[.]com
www[.]sptdse[.]com
www[.]vdegh[.]com
www[.]tdfud[.]com
www[.]pdtude[.]com
www[.]vxser[.]com
www[.]wdfued[.]com
www[.]grewyu[.]com
www[.]vfrgyhjks[.]com
www[.]vfrgyhjks[.]com
www[.]jdfgur[.]com
www[.]pdsfye[.]com
www[.]tyghuk[.]com
www[.]ydusedf[.]com
www[.]vfrgt[.]com
www[.]rdsedf[.]com
www[.]lfrud[.]com
www[.]vfruk[.]com
www[.]kfdugr[.]com
www[.]kfdugr[.]com
www[.]vxswqefit[.]com
www[.]hdfgue[.]com
www[.]vsxergtyhu[.]com
www[.]pdfgry[.]com
www[.]pdfgry[.]com
www[.]thykop[.]com
www[.]kfdgur[.]com
www[.]ldfesd[.]com
www[.]vertgh[.]com
www[.]dferyd[.]com
www[.]mdudgf[.]com
www[.]vdefwgyhs[.]com
www[.]tfdgss[.]com
www[.]theverftyhu[.]com
www[.]theverftyhu[.]com
www[.]pdfedy[.]com
www[.]woefrtyhu[.]com
www[.]lffeif[.]com
www[.]hfsdfey[.]com
www[.]ndsfeo[.]com
www[.]pairlp[.]com
www[.]pfsfye[.]com
www[.]dewqua[.]com
www[.]ksdfey[.]com
www[.]pfsfedk[.]com
www[.]pdfeys[.]com
www[.]vrtyuhkos[.]com
www[.]dfgisde[.]com
licojp[.]com
www[.]sdeyfs[.]com
www[.]kdsfes[.]com
www[.]hyjkopti[.]com
www[.]pfrusf[.]com
www[.]benhvd[.]com
lineajp[.]ml
lieoo[.]ml
lieoo[.]tk
lieoo[.]tk
linee[.]tk
linee[.]tk
lieoo[.]ml
www[.]kdsfe[.]com
login-lineclub[.]com
www[.]hrngfn[.]com
www[.]hyfrtis[.]com
www[.]cdfdsys[.]com
www[.]brtjty[.]com
www[.]kdsfi[.]com
www[.]ntwhdn[.]com[.]cn
www[.]yiyuancx[.]com
www[.]kdssf[.]com
www[.]erjrtyer[.]com
www[.]fdsdy[.]co
line-cord[.]com
www[.]linemelogin[.]com
www[.]kosdf[.]com
www[.]bdftjio[.]com
www[.]tktdsf[.]com
www[.]vthjkol[.]com
www[.]crthhnk[.]com
www[.]xcvhtyu[.]com
www[.]vrttjuyi[.]com
www[.]btyuiok[.]com
lineconty[.]cool
www[.]bdhrtru[.]com
www[.]ntrrde[.]com
www[.]brtrjyk[.]com
www[.]verhrujk[.]com
www[.]ntreyui[.]com
www[.]hretfdfg[.]com
www[.]geyjyrjy[.]com
www[.]ntjtyiret[.]com
www[.]trynuok[.]com
www[.]rtyhfyui[.]com
www[.]lejhasd[.]life