88.191.36.45 [Proxad, France] is hosting a series of fake banking domains, one of which is detailed by F-Secure.The domains target Finnish and Spanish banks.The following sites appear to be hosted on that IP:bbva-es.comnordea-vf.comnordeasfi.comnordea-if.comnordea-fis.comosuuspankki-fi.comSome sites might use the following subdomains: kultaraha, solo1, solo2, www and xxx.The (fake) registrant details are:  Admin Name……….. Arthur Williams  Admin Address…….. […]