Hello,
An abusive behaviour (Malware) originating from your IP ip-37.59.80.208/29 has been reported to or noticed by our Abuse Team.
Technical details showing the aforementioned problem follow :
— start of the technical details —
Hello,
Cloudflare received a DMCA copyright infringement complaint regarding sms-rate.pw
Cloudflare offers network service solutions including pass-through security services, a content distribution network (CDN), and registrar services. Due to the pass-through nature of our services, our IP addresses appear in WHOIS and DNS records for websites using Cloudflare, and Cloudflare cannot remove material from the Internet that is hosted by others.
The actual host for sms-rate.pw are the following IP addresses. 37.59.80.214. Using the following command, you can confirm the site in question is hosted at that IP address: curl -v -H «Host: sms-rate.pw» 37.59.80.214/
Below is the information we received:
Reporter’s Name: Pete Wilde
Copyright Holder’s Name: New Zealand Post (NZ POST)
Reporter’s Email Address: security@fraudwatch.com
Reporter’s Address: PO Box 311, VIC, Blackburn , AU
Reported URLs:
https://sms-rate.pw/dswax
Original Work: TAKEDOWN NOTICE PURSUANT TO THE DIGITAL MILLENNIUM COPYRIGHT ACT OF 1998
Dear Sir or Madam,
This is a notice in accordance with the Digital Millennium Copyright Act of 1998 requesting that you cease to provide access to copyrighted material.
Infringement detail: This login page is an exact duplicate of our client’s. Both the source code and all digital assets have been retrieved from our client’s copyright protected website.
This incident is only viewable on a mobile device with NZ proxy.
IP Address: 172.67.196.179
The infringing material is located at the following URLs:
https://sms-rate.pw/dswax
Screenshot of infringing content: https://www.phishportal.com/images/incidents/9/4/62049d3af415aeb98056dcab80f019/9462049d3af415aeb98056dcab80f019.jpg
The original material is located at the following URLs:
http://nzpost.co.nz/
Contact information:
Pete
FraudWatch Security
Mailing address: PO Box 311. Blackburn VIC 3130, Australia
Telephone number: +61398876777
Fax number: +61 3 8660 2688
E-mail address: email-removed@provider.com
Client information:
New Zealand Post (NZ POST)
The reported pages are copying login pages from the legitimate website belonging to New Zealand Post (NZ POST) and are being utilised in a phishing attack against New Zealand Post (NZ POST) and their clients.
I have a good faith belief that the use of the described material in the manner complained of is not authorized by the copyright owner, its agent, or the law.
I swear that the information in the notification is accurate and, under penalty of perjury, that I am the copyright owner or am authorized to act on behalf of the owner of an exclusive right that is allegedly infringed.
Electronic Signature: Pete Wilde
Comments:
Please address this issue with your customer.
Regards,
Cloudflare Trust & Safety
— end of the technical details —
Your should investigate and fix this problem, as it constitutes a violation to our terms of service.
Please answer to this e-mail indicating which measures you’ve taken to stop the abusive behaviour.
Cordially,
The OVHcloud Trust & Safety team.
