Read on TwitterThere is an active spam emails impersonating @saudipost
observed in Saudi.
https://urlscan.io/result/dd8bfb8a-e057-4855-ab96-d99925d39a38/
sender">https://urlscan.io/result/dd... domain is freshdesk[.]com
Warning https://abs.twimg.com/emoji/v2/... draggable="false" alt="⚠️" title="Warnsignal" aria-label="Emoji: Warnsignal">There is an active spam emails impersonating @saudipost observed in Saudi. https://urlscan.io/result/dd... domain is freshdesk[.]com" title="https://abs.twimg.com/emoji/v2/... draggable="false" alt="⚠️" title="Warnsignal" aria-label="Emoji: Warnsignal"> Warning https://abs.twimg.com/emoji/v2/... draggable="false" alt="⚠️" title="Warnsignal" aria-label="Emoji: Warnsignal">There is an active spam emails impersonating @saudipost observed in Saudi. https://urlscan.io/result/dd... domain is freshdesk[.]com" class="img-responsive" style="max-width:100%;"/>
The initial phishing domain (phishing link) is naturcosmetika[.]com is which redirects to the page above (click on @urlscanio link for full url)
![The initial phishing domain (phishing link) is naturcosmetika[.]com is which redirects to the page above (click on @urlscanio link for full url)](https://pbs.twimg.com/media/Eh0udM0WsAI4Wq_.png "The initial phishing domain (phishing link) is naturcosmetika[.]com is which redirects to the page above (click on @urlscanio link for full url)")
