| Author |
Message |
Festus
Hello I'm New here!
Joined: 29 Jan 2015
Posts: 9
Location: Dol Guldur, Essex UK
|
 Posted:
Fri Feb 27, 2015 9:54 am |
  |
Not visited site as on work computer ergo unreported. Rec'd as part of a running bait. Will try and get around to visiting later or if anyone does visit I would be obliged if you could leave details of what site is, I am presuming fake etransfer site but would be nice to confirm.
http://etransferconfirm.bg.tf
IP: 188.40.70.29
domain: bg.tf
status: ACTIVE
hold: NO
holder-c: CCTF230-FRNIC
admin-c: CCTF230-FRNIC
billing-c: CCTF63-FRNIC
tech-c: CCTF63-FRNIC
zone-c: NFC1-FRNIC
nsl-id: NSL9771-FRNIC
registrar: AFNIC registry
anniversary: 26/10
created: 05/09/2000
last-update: 26/10/2004
source: FRNIC
ns-list: NSL9771-FRNIC
nserver: ns1.idnscan.net
nserver: ns2.idnscan.net
source: FRNIC
registrar: AFNIC registry
type: Isp Option 2
anonymous: YES
registered: 22/05/1997
source: FRNIC
nic-hdl: CCTF230-FRNIC
type: PERSON
contact: Interdots International
address: c/o Marus Strasser
address: P.O. Box 51
address: 57004 Nea Michaniona
country: GR
phone: ++1-253-323-0927
fax-no: ++1-253-323-0927
e-mail: Email Masking [email protected]
remarks: This contact is used in .tf domains.
registrar: AFNIC registry
changed: 26/10/2004 Email Masking [email protected]
anonymous: NO
obsoleted: NO
source: FRNIC
nic-hdl: CCTF63-FRNIC
type: PERSON
contact: Juergen Riedel
address: Postfach 131142
address: 70069 Stuttgart
country: DE
phone: ++49711-286-5799
fax-no: ++49711-286-8450
e-mail: Email Masking [email protected]
remarks: This contact is used in .tf domains.
registrar: AFNIC registry
changed: 26/10/2004 Email Masking [email protected]
anonymous: NO
obsoleted: NO
source: FRNIC |
|
|
|
|
|
Toomuchtime
Baiting Guru
Joined: 12 Jan 2013
Posts: 10394
|
| Posted:
Fri Feb 27, 2015 10:34 am |
|
Just a single page
Online Transfer
| Quote: |
| Please log in with a Valid Email and Password to confirm your transfer online. |
| Quote: |
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html><!-- UNONIC (www.unonic.com) -->
<head><title>TRANSFER CONFIRMATION</title>
<meta http-equiv=content-type content="text/html; charset=UTF-8">
<meta name="Description" content="etransferconfirm - learn more about etransferconfirm. Here you will find all the info ...">
<meta name="Keywords" content="">
<META name="LANGUAGE" content="">
<meta http-equiv="content-language" content="">
<meta name="ROBOTS" content="index,follow">
<meta name="DISTRIBUTION" content="global">
<link href="/zzz/css.css" rel="stylesheet" type="text/css">
<script type="text/javascript" src="/zzz/gas.js"></script>
</head>
<body>
<table cellspacing="0" cellpadding="0" id="main">
<tr><td><iframe src="http://trwu.2fh.co/default/common/files/ge/tr/online/confirmation/group" name="fid1" id="fid1" width="100%" height="100%" marginwidth="0" marginheight="0" frameborder="0"></iframe></td></tr></table>
<div align="center" id="bottom">
<h1><a href="etransferconfirm.bg.tf">TRANSFER CONFIRMATION</a></h1><br><br>
<h2><a href="http://trwu.2fh.co/default/common/files/ge/tr/online/confirmation/group">etransferconfirm - learn more about etransferconfirm. Here you will find information about etransferconfirm...</a></h2><br><br>
<a href="http://www.unonic.com/">Kostenlose Domains f�r alle! Registrieren Sie kostenlos Ihre eigene Domain! - Free Domains</a><br><br>
</div>
<script type='text/javascript' src='http://adboost.serverpower.net/js.php'></script>
</body>
<!-- V6.14FC -->
</html> |
http://etransferconfirm.bg.tf/zzz/
| Quote: |
This website is being suspended for HIGH CPU usage. This means that hosted website will not be available for the next 24 hours until the CPU limit resets. If you are the website owner of this website, please understand that this is a free service and for this reason we limit CPU usage. However, in most cases HIGH CPU usage is caused by auto refreshing pages or DDOS attack to your website, so you might consider reviewing the website code.
Thank you for your understanding |
|
|
|
|
|
|
woody999
Baiting Guru
Joined: 30 May 2009
Posts: 20608
Location: East of Humptulips
|
| Posted:
Fri Feb 27, 2015 12:11 pm |
|
the site is phishing for email accounts and passwords. This is not the type of site that we deal with in this forum. Phishing sites have a short shelf life so this one will probably disappear soon.
Marking n/a and can be moved offline |
_________________
"thank you for making me a fool" CC lad
"I lost my assories" Barr. Angus Bu...g
"YOU NEED SOME DOCTOR" Barrister Peter Paul
I dont know who is lieing ,either you or F3lcha1r
is annoying to watch my email for a whole day and not read from you-
  >178  x 200     x2
                   
                  
Peru : sri lanka : USVI : Oman x 5816
 x 45  x2 |
|
|
|
|
Festus
Hello I'm New here!
Joined: 29 Jan 2015
Posts: 9
Location: Dol Guldur, Essex UK
|
| Posted:
Fri Feb 27, 2015 12:12 pm |
|
Nice! Thanks for that Toomuchtime, much appreciated! |
_________________
------------------------------
Whatever it is - I didn't do it |
|
|
|
|
Artemis
Baiting Guru
Joined: 19 Feb 2006
Posts: 31267
Location: Lower Elements
|
| Posted:
Fri Feb 27, 2015 3:51 pm |
|
Changing state from "Add to DB" |
_________________
Total kills 21667 +  x 5  x10
  |
|
|
|
|
|
|
SmartFeed
