[Abuse #MCQNZLTSRB] Abusive use of your service ip-151.80.120.64/28

Hello,

The hosting of an abusive content (Phishing) behind your IP ip-151.80.120.64/28 has been reported to or noticed by our Abuse Team.

Technical details (such as URLs) showing the aforementioned problem follow :

— start of the technical details —
\— about — 151.80.120.79 \— description follows — To Whom It May Concern,

CSC Digital Brand Services has been informed that there is currently a website hosted by your company that is involved in a phishing scheme to obtain personal account information from the customers of Cdiscount. CSC Digital Brand Services has received numerous complaints and e-mails regarding the Web site listed below:

https://shmiczdanila.site/skmei-100-original-white-watch-box-good-fxd/

% This query was served by the RIPE Database Query Service version 1.97 (WAGYU)

On behalf of Cdiscount, CSC Digital Brand Services requests that the Web site(s) listed above be deactivated immediately and the domain name removed from your servers. Cdiscount would like you to provide CSC Digital Brand Services with the source code, including any data collected, of this Web site for analysis to help prevent further phishing schemes. If any customer data has been collected, it will be forwarded to Cdiscount so that they may notify their customers regarding this issue and take other appropriate actions as needed.

Please contact us if any further information is required to expedite the process of removing this Web site from service. If needed, forward this e-mail and request to the appropriate contact that is able to deactivate this site.

Thank you for your time and consideration.
\— logs follow — [NETWORK WHOIS: N/A]

Network Whois record
Queried whois.ripe.net with "-B 151.80.120.75"…

% Information related to ‘151.80.120.64 — 151.80.120.79’

% Abuse contact for ‘151.80.120.64 — 151.80.120.79′ is email-removed@provider.com’

inetnum: 151.80.120.64 — 151.80.120.79
netname: OVH_260840005
country: GB
descr: Failover Ips
org: ORG-KA784-RIPE
admin-c: OTC14-RIPE
tech-c: OTC14-RIPE
status: LEGACY
mnt-by: OVH-MNT
created: 2020-02-21T12:08:25Z
last-modified: 2020-02-21T12:08:25Z
source: RIPE

organisation: ORG-KA784-RIPE
org-name: Kishtovkaya Aliona
org-type: OTHER
address: Jormungand 404
address: 630000 Nerv 13
address: RU
e-mail: email-removed@provider.com
phone: +7.9139714482
abuse-c: ACRO29215-RIPE
mnt-ref: OVH-MNT
mnt-by: OVH-MNT
created: 2019-12-16T10:14:12Z
last-modified: 2019-12-16T10:14:12Z
source: RIPE

role: OVH UK Technical Contact
address: OVH Ltd
address: New London House, 6 London Street
address: EC3R 7LP, LONDON
address: UK
e-mail: email-removed@provider.com
admin-c: OK217-RIPE
tech-c: GM84-RIPE
nic-hdl: OTC14-RIPE
abuse-mailbox: email-removed@provider.com
notify: email-removed@provider.com
mnt-by: OVH-MNT
created: 2009-09-16T16:09:57Z
last-modified: 2017-01-17T09:52:03Z
source: RIPE

% Information related to ‘151.80.0.0/16AS16276’

route: 151.80.0.0/16
descr: OVH
origin: AS16276
mnt-by: OVH-MNT
created: 2015-01-22T17:55:49Z
last-modified: 2015-01-22T17:55:49Z
source: RIPE

% This query was served by the RIPE Database Query Service version 1.97 (WAGYU) Category: phishing \— Forwarded email(s) —

— end of the technical details —

Your should investigate and fix this problem, as it constitutes a violation to our terms of service.

Please answer to this e-mail indicating which measures you’ve taken to stop the abusive behaviour.

Cordially,

The OVH Abuse team.