Cloudflare received a phishing report regarding:
aiart74.ru
Please be aware Cloudflare is a network provider offering a reverse proxy, pass-through security service. We are not a hosting provider. Cloudflare does not control the content of our customers.
The actual host for aiart74.ru are the following IP addresses. 138.201.203.14. Using the following command, you can confirm the site in question is hosted at that IP address: curl -v -H "Host: aiart74.ru" 138.201.203.14/
Below is the report we received:
Reporter: Anonymous
Reported URLs:
http://whatsapp.aiart74.ru/login/code https://whatsapp.aiart74.ru/login/code/?phone=%2079824480647&code=XDXVYQF7&nid=17117004379063883%2F
Logs or Evidence of Abuse: Hello,
We have discovered a phishing attack located on your network:
https://whatsapp.aiart74.ru/login/code/?phone=%2079824480647&code=XDXVYQF7&nid=17117004379063883
This attack targets our customer, Whatsapp, website URL https://www.whatsapp.com/.
Would it be possible to have the fraudulent content, and any other associated fraudulent content, taken down as soon as you are able to?
Additionally, please keep the fraudulent content safe so that our customer and law enforcement agencies can investigate this incident further once the site is offline.
Many thanks,
Netcraft
Phone: +44(0)1225 447500
Fax: +44(0)1225 448600
Netcraft Issue Number: 54965894
Please address this issue with your customer.
Regards,
Cloudflare Trust & Safety
