Date: Fri, 11 Dec 2015 19:38:44 -0500
Subject: Fwd: [13-443577-405]: CloudFlare received a phishing report regarding your site.
From: tavonk.tk@gmail.com
To: OfficialDuckmodz@gmail.com


---------- Forwarded message ----------
From: CloudFlare <abuse@cloudflare.com>
Date: Wed, Dec 9, 2015 at 6:49 PM
Subject: [13-443577-405]: CloudFlare received a phishing report regarding your site.
To: tavonk.tk@gmail.com


CloudFlare received a phishing report regarding:

mcsnipes.com

Below is the report we received:

Reporter's Name: RSA Security
Reporter's Email Address: afcc@rsa.com
Reported URLs:
        http://www.mcsnipes.com/sign-in.html
Logs or Evidence of Abuse: Fraudulent site - please shut down![Microsoft E1881433] IP: 104.27.181.215


To whom it may concern,

RSA, The Security Division of EMC (“RSA”), an information security
company, has been appointed to assist Microsoft in preventing or
terminating online activity that targets, or may target Microsoft’s
clients as potential fraud victims.

RSA has been made aware that your company appears to be providing
internet services to a website, which is making unauthorized use of
Microsoft’s trademarks. This site http://www.mcsnipes.com/sign-in.html
not only violates Microsoft’s copyright, trademarks and other
intellectual property rights, but may also become a host to a phishing
attack, or other fraudulent scams directed against Microsoft and
Microsoft’s clients.

The fraudulent website not only represents a misappropriation of
Microsoft’s intellectual property; its purpose is to mislead Microsoft’s
clients. Our experience has shown that such sites become a host of
phishing* and other fraudulent scams against our customer’s account
holders.

Please take all necessary steps to immediately shut down the fraudulent
website, terminate its availability on the Internet and discontinue the
transmission of any e-mails associated with this website.

We understand that you may not be aware of this improper use of your
services and we appreciate your cooperation. We specifically ask that
you also take the following actions wherever relevant or possible:



*       Please provide us with a tar/zip file of the source code for
this website, so that we may analyze it to help prevent further attacks;
*       If any customer data has been captured that is stored on your
systems or equipment, please send us that data so that the customers to
whom that data relates can be notified and take steps to protect their
credit;

We specifically would ask that you also provide a copy of any records
you maintain that indicate the name, contact information, method of
payment or similar information that may be useful in helping learn the
identity and location of the customer for whom the website has been
operated.

The foregoing is without prejudice to any and all of rights and remedies
of any financial institution in connection with this matter, which are
hereby expressly reserved.

RSA is providing this notification to you in the interest of preventing
the proliferation of phishing scams and the information contained herein
is provided to you on an "AS-IS" basis, without representation or
warranty of any kind.

Thank you for your cooperation to prevent and terminate this fraudulent
activity.


If you need further information, please do not hesitate to contact RSA
at the numbers below.

Sincerely,

RSA SECURITY INC.



RSA Anti-Fraud Command Center
Tel: +44 (0)800-032-7751
Tel: +1-866-408-7525
E-mail:afcc@rsa.com

Title: Assistant General Counsel
Name: Richard Boscovich
Address: 5600 148th Ave. N.E., Redmond WA, 98052
Telephone: 425-704-0867
E-mail: rbosco@microsoft.com

*“Phishing” generally refers to a variety of web based scams that make
use of an illegitimate website which passes itself off as being that of
a targeted financial institution together with associated data
collection points (including web based email accounts) in order to
deceive the account holders of the financial institution into revealing
their personal information, including but not limited to their credit or
debit account numbers, checking account information, social security
numbers, or banking account passwords. Once these account holder
credentials are collected they can then be used to commit wire fraud or
other similar activities of a criminal nature.



74


We have provided the name of your hosting provider to the reporter. Additionally, we have forwarded this complaint to your hosting provider. We have also restricted access to the phishing-related content until it has been removed.

Regards,

CloudFlare Abuse