Hello,

We are sorry to inform you that your network is hosting a "Malware:URL" threat from the IP address "172[.]98[.]192[.]243".

Please find the technical information identified by our systems below.

The CRDF Labs lab issues alerts to the service providers responsible for hosting this malicious content so that the provider can stop the problem immediately. If you would like to know more about the CRDF Threat Center, please visit this webpage: https://threatcenter.crdf.fr/faq.html#answer_149

----

* IP Address: 172[.]98[.]192[.]243
* Type of the detected threat: Malware:URL
* URL: hxxp://joyparajoy[.]com/bg/?m=20180524
* Domain name: joyparajoy[.]com

----

We recommend taking the necessary steps to identify and treat compromised machines.
It is also your responsibility to research the cause of the infection and to do what is necessary to correct it.

Important: for any answer, please include the following reference to all your exchanges.
:ref:5da9af27b9562:ref:

WARNING: CRDF Labs processes notifications to abuse in an automated way by our systems. The email address "abuse_notification@crdflabs.fr" is not monitored because we receive too many automatic replies from abuse team.

----

If you have done the necessary on your side regarding this issue, thank you kindly click on the link below to confirm the closure of this issue:

https://threatcenter.crdf.fr/abuse.php?closed&reference=5da9af27b9562

By clicking on this link, CRDF Labs will consider that the malicious resource is no longer accessible from your network. Thus, CRDF Labs will launch a specific procedure to remove the IP address and domain name blacklisted by CRDF Threat Center.

----

If you no longer wish to receive our email alerts (they are useful), please follow the link below:

https://threatcenter.crdf.fr/abuse.php?stop&reference=5da9af27b9562

Regards,
CRDF Labs Takedown Service,

Website: https://threatcenter.crdf.fr
CRDF Labs contact : labs@crdf.fr