216.73.216.67

Phishers hide scam links with IPv6 trick in 'free toothbrush' emails

· Published 16/03/2026 10:23 · Modified 16/03/2026 10:51

Export JSON

Essential information

Published
16/03/2026 10:23
Modified
16/03/2026 10:51
Tags
2026-03-16 email scam phishing pii theft
Related entities
2 observables, 4 techniques (mitre), 3 others

Description

A recurring scheme impersonates United Healthcare, offering a free Oral-B toothbrush as bait. The scammers have evolved their tactics, now using IPv6-mapped IPv4 addresses to obfuscate links in emails. This technique makes the IP addresses appear confusing while remaining valid and routable. The emails direct victims to fast-rotating landing pages, likely aiming to collect personal information and card data under the guise of confirming eligibility or paying for shipping. The article provides technical details on how the IPv6 trick works and offers advice on staying safe, including steps to take if personal information has been compromised.

External references