Following Up On Slipcraft Investigation: Cloudflare Inc Restricts Access to Slipcraft URLs After Sahara Reporters Investigation

By Yisau Babatunde 

Cloudflare response to the report.

Cloudflare Inc, a Canada based domain registrar has restricted the access to the domain Slipcraft.net. The restrictions came after Adewale Olalekan, a cybersecurity analyst, reported the website to Cloudflare.

Recall that Sahara Reporters published an investigation documenting how Slipcraft, a website, helps scammers fake transfer, generate fraudulent receipts. The development came hours after the publication. Published on 20 September, the investigation traced the fraudulent operations of Slipcraft, by testing the functionality of the website.

In an email shared with this reporter, Mr Adewale explained that he made the report shortly after reading the report.

“I read your investigation on Slipcraft and reported slipcraft.net to Cloudflare using their abuse form. Cloudflare confirmed the report, said it restricted access to the reported URLs, and forwarded it to the host,” Mr Adewale wrote in an email shared with our reporter.

He further said that he had also reported their channels (@scriptcraftupdates, @slipcraft_support) to Telegram. “Hopefully, they will also be able to do something about it,” he hoped.

Slipcraft response through their Telegram messaging box.


Will Slipcraft Resume Operation?

Shortly after the website was brought down, the handler of Slipcraft's telegram channel dropped a message assuring subscribers that they were working on the issue.

“Please be patient while we try to bring the website back up,” the message reads in part.

When asked about the possibility of the website resuming operations, Mr Adewale explained that, the only possibility is if they stopped using Cloudflare as their names servers.

“The restriction is not actually from their hosting provider, which I suspect is Hostinger,” he noted.

“But we will keep an eye on them to know when their service is back online, whether using the same name or under a different name. Just keep on the lookout,” he noted.

In a later email, he confirmed their real web server IP address 91.108.101.164, belongs to Hostinger.

“I have set up a Python script that monitors the HTTP status code of the website if it changes from 403 to 200, and I will receive an email alert,” he ended.

Post a Comment

Previous Post Next Post