This is Nicolás Moret from Hispasec Sistemas, an international IT security company.
I’m contacting you because we have detected a phishing hosted on your servers.
IP address: 151.139.128.10
URLs:
* hxxps://demo3.cloudwp.dev/trial-7zt6z245/wp-content/plugins/se/
The fraudulent page is trying to simulate an official banking website in order to steal passwords of online banking users.
Proof of fraudulent activities:
* https://www.virustotal.com/gui/url/b6ea4add64c5ef2e518efb1bb99a2b426eb4a834778cfba060f658ddea98d57d
* https://www.virustotal.com/gui/ip-address/151.139.128.10
The official site(s) is(are):
* caixabank.es
Please, remove the fraudulent content as soon as possible. Thank you in advance.