A Christmas PHISH site!

Viruses and worms
1

IP badness history: https://www.virustotal.com/nb/ip-address/104.28.5.123/information/
See: http://sitecheck.sucuri.net/results/christmasgiftshop365.com
Unable to properly scan your site. Site returning error: HTTP/1.1 503 Service Temporarily Unavailable
Bitdefender TrafficLight blocks:
Site was hacked earlier: http://www.zone-h.org/mirror/id/22654144?zh=1
I get a “503 Service Unavailable” Attacks could be via modernizr.min.js exploit

pol

2

Page is not blocked by Avast as of now.

Just an image on there that its opening soon :slight_smile:

3

Avast may not block, but Bitdefender TrafficLight is.
Some links produce a Code: 503,

HTTP/1.1 403 Forbidden
Date: Thu, 25 Dec 2014 15:55:42 GMT
Content-Type: text/html; charset=UTF-8
Connection: close
Set-Cookie: __cfduid=dbb1b6f5cfcb2541772e18d86c59f00661419522942; expires=Fri, 25-Dec-15 15:55:42 GMT; path=/; HttpOnly
Cache-Control: max-age=15
Expires: Thu, 25 Dec 2014 15:55:57 GMT
Server: cloudflare-nginx
CF-RAY: 19e63976ce0c0b02-WAW

<!DOCTYPE html>
<!--[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->
<!--[if IE 7]>    <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->
<!--[if IE 8]>    <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->
<!--[if gt IE 8]><!--> <html class="no-js" lang="en-US"> <!--<![endif]-->
<head>
<title>Direct IP access not allowed | 33f12 | CloudFlare</title></title>
<meta charset="UTF-8" />
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1" />
<meta name="robots" content="noindex, nofollow" />
<meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=1" />
<link rel="stylesheet" id="cf_styles-css" href="/cdn-cgi/styles/cf.errors.css" type="text/css" media="screen,projection" />
<!--[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" type="text/css" media="screen,projection" /><![endif]-->
<style type="text/css">body{margin:0;padding:0}</style>
<!--[if lte IE 9]><script type="text/javascript" src="/cdn-cgi/scripts/jquery.min.js"></script><![endif]-->
<!--[if gte IE 10]><!--><script type="text/javascript" src="/cdn-cgi/scripts/zepto.min.js"></script><!--<![endif]-->
<script type="text/javascript" src="/cdn-cgi/scripts/cf.common.js"></script>

</head>
<body>
  <div id="cf-wrapper">
    <div class="cf-alert cf-alert-error cf-cookie-error" id="cookie-alert" data-translate="enable_cookies">Please enable cookies.</div>
    <div id="cf-error-details" class="cf-error-details-wrapper">
      <div class="cf-wrapper cf-header cf-error-overview">
        <h1>
          <span class="cf-error-type" data-translate="error">Error</span>
          <span class="cf-error-code">1003</span>
          <small class="heading-ray-id">Ray ID: 19e63976ce0c0b02</small>
        </h1>
        <h2 class="cf-subheadline" data-translate="error_desc">Direct IP access not allowed</h2>
      </div><!-- /.header -->

      <section></section><!-- spacer -->

      <div class="cf-section cf-wrapper">
        <div class="cf-columns two">
          <div class="cf-column">
            <h2 data-translate="what_happened">What happened?</h2>
            <p>You've requested an IP address that is part of the <a data-orig-proto="https" data-orig-ref="www.cloudflare.com" target="_blank">CloudFlare</a> network.</p>
          </div>

          
          <div class="cf-column">
            <h2 data-translate="what_can_i_do">What can I do?</h2>
            <p>If you are interested in learning more about CloudFlare, please <a data-orig-proto="https" data-orig-ref="www.cloudflare.com" target="_blank">visit our website</a>.</p>
          </div>
          
        </div>
      </div><!-- /.section -->

      <div class="cf-error-footer cf-wrapper">
  <p>
    <span class="cf-footer-item">CloudFlare Ray ID: <strong>19e63976ce0c0b02</strong></span>
    <span class="cf-footer-separator">&bull;</span>
    <span class="cf-footer-item"><span data-translate="your_ip">Your IP</span>: blurred quad </span>
    <span class="cf-footer-separator">&bull;</span>
    <span class="cf-footer-item"><span data-translate="performance_security_by">Performance &amp; security by</span> <a data-orig-proto="https" data-orig-ref="www.cloudflare.com/5xx-error-landing" id="brand_link" target="_blank">CloudFlare</a></span>
    
  </p>
</div><!-- /.error-footer -->


    </div><!-- /#cf-error-details -->
  </div><!-- /#cf-wrapper -->

  <script type="text/javascript">
  window._cf_translation = {};
  
  
</script>

</body>
</html>

polonus