PHISH on suspicious -domain.dot.tk

Re: https://urlquery.net/report/61d051ad-3987-403d-b014-1077a7ff956d
Currently flagged by Google: https://aw-snap.info/file-viewer/?protocol=not-secure&ref_sel=GSP2&ua_sel=ff&chk-cache=&fs=1&tgt=MTItbFttW3R7Iy5eZmA%3D~encXXX

In code [quote] (iframe) -domain.dot.tk/p/?d=12-LIMITED.CF&i=204.152.206.106&c=1&ro=0&ref=http:/http:/XXX.com/
status: (referer=-domain.dot.tk/p/?d=12-LIMITED.CF&i=204.152.206.106&c=1&ro=0&ref=http:/http:/XXX.com/web?q=puppies&=1539790425857)saved 5871 bytes ff5aca0fbf3e44770aef65b9f7fce0bb0594338e
info: [script] -code.jquery.com/jquery-1.12.4.js
info: [script] -code.jquery.com/ui/1.12.1/jquery-ui.js
info: [script] -maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js
info: [script] -domain.dot.tk/js/dos.js * =working dosbox
info: [script] -domain.dot.tk/js/searchr.js
info: [img] -domain.dot.tk/images.v2/icon-dashboard.png
info: [img] -domain.dot.tk/images.v2/icon-plus.png
info: [img] -domain.dot.tk/images.v2/icon-privacy.png
info: [img] -domain.dot.tk/images.v2/icon-dashboard-green.png
info: [img] -domain.dot.tk/images.v2/network.png
&
URL=-domain.dot.tk/p/?d=12-LIMITED.CF&i=204.152.206.106&c=1&ro=0&ref=http%3A%2F%2Fhttp%3A%2F%2Fwww.ask.com%2Fweb%3Fq%3Dpuppies&
=1539790425857
info: [decodingLevel=1] found JavaScript
error: undefined variable redir
&
found JavaScript
error: undefined variable jQuery
error: undefined variable $.ui
error: line:1: SyntaxError: missing ; before statement:
error: line:1: var $.ui = 1;
error: line:1: …^
suspicious: maxruntime exceeded 10 seconds

[quote] confirmed at https://www.maltiverse.com/hostname/12-limited.cf
see: https://checkphish.ai/ip/195.20.51.59

polonus (volunteer website security analyst and website error-hunter)