Hello,
ATTENTION: another phishing webpage has been detected on your service (see below), please fix this problem as soon as possible !
It has been brought to our attention that you’re hosting a phishing webpage on your service ip-135.125.20.32/28.
A malicious person has probably taken control of all or part of your website, and injected this page without your knowledge.
This kind of webpage is made to steal personal information from victims by impersonating well-known legitimage websites (such as banks, e-commerce websites or others).
If you’re using a content manager system (aka «CMS») on your shared hosting offer or on your server, such as WordPress, Joomla or Drupal, check that it’s being maintained up to date at all times. This kind of software is widely used on Internet which is why it’s often targeted when hackers are trying to take control of a website such as yours. Please also verify that any plugins that you may have installed are also up to date, and avoid any unofficial plugin, as those have a higher chance of being malicious or not seriously maintained.
Below is the list of URLs pointing to the phishing webpage you’re hosting :
* https://baphias.info/en/biprp5/blog16/?flow=822&l=877&utm_source=252196935699110&fb=3118241745070765&fbe=Lead
* https://granddaddies.info/en/biprp5/blog16/?flow=822&l=877&utm_source=1372&fb=4183161715108520&fbe=Lead
It is possible that some of those URLs are not accessible right now, because our anti-phishing system might have been activated, protecting victims of this type of fraud, while you’re working to fix the problem.
Please delete these phishing webpages and secure your service (CMS update, system update, password change) to ensure it cannot be hacked again.
When you have fixed the problem, please answer to this e-mail address.
Cordially,
The OVHcloud Abuse team.
