[Abuse #WFTHFLNTXQ] Abusive use of your service ip-54.36.71.192/29

Hello,
We received a copyright infringement complaint regarding an abuse content hosted on your service.

— start of the technical details —

Hello,

Cloudflare received a phishing report regarding invspb.ru

Cloudflare offers network service solutions including pass-through security services, a content distribution network (CDN), and registrar services. Due to the pass-through nature of our services, our IP addresses appear in WHOIS and DNS records for websites using Cloudflare, and Cloudflare cannot remove material from the Internet that is hosted by others.

The actual host for invspb.ru are the following IP addresses. 54.36.71.192. Using the following command, you can confirm the site in question is hosted at that IP address: curl -v -H «Host: invspb.ru» 54.36.71.192/

Below is the information we received:

Reporter’s Name: SOC Team
Reporter’s Email Address: email-removed@provider.com
Reporter’s Company Name: Phishlabs

Reported URLs:

    https://invspb.ru/wp-library/index.php?elf=janicelewis29%40xplornet.ca
    https://invspb.ru/wp-library/V182812R812.php?elf=rhicken%40xplornet.com&32b96508844139c99fc564d14a78e2370a4daa8d7b1f13bdecd66880c7cd859281e4a998e1aa3c56b1ea4e3f05d03d82e7ccc3362603601df27f2a5c7fe76d2bbe261756e9f31eb482d5fcb9217d79f000054cf417b65f2ae550
    https://invspb.ru/wp-library/index.php?elf=rhicken%40xplornet.com
    https://invspb.ru/wp-library/V182812R812.php?elf=4bdm%40inethome.ca&8449bc34b4e4eb2b43298893ab05edfd3a4151f5b78934dfdef39ea8fef0000157688909e2a234867a7dd886411f2cc2326c0d1dfc66a19706f12157fc5b75b674c3a5dd6ca104522a39e96a5e7df2c635cb68caf9e87ee7a0bc
    https://invspb.ru/wp-library/index.php?elf=4bdm%40inethome.ca
    https://invspb.ru/wp-library/V182812R812.php?elf=janicelewis29%40xplornet.ca&d606bf123216bf87d9ec0dc136a08f698ea9daeecc04f21473f133f7f1805b96967c8010c998b5b3ef4ec74139eec45d7435c26724c8a48764b890d3b96fa80da35bf4a6b75329e40cdbe2ae2ea1ad75524ca78fa982351dbb56

Logs or Evidence of Abuse: Phish Targeting: Royal Bank of Canada
[104.21.39.180 172.67.171.42 2606:4700:3035::ac43:ab2a 2606:4700:3030::6815:27b4]
Comments:

Please address this issue with your customer.

Regards,
Cloudflare Trust & Safety

— end of the technical details —

Your should investigate and fix this problem, as it constitutes a violation to our terms of service.

Please answer to this e-mail indicating which measures you’ve taken to stop the abusive behaviour.

Cordially,

The OVHcloud Trust & Safety team.