<div dir="ltr">We are tracking that as a Locky payment page.<div><br></div><div>Abuse.ch also agrees:</div><div><br></div><div><a href="https://ransomwaretracker.abuse.ch/host/25z5g623wpqpdwis.onion.to/">https://ransomwaretracker.abuse.ch/host/25z5g623wpqpdwis.onion.to/</a><br><div><br></div><div><br></div></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Fri, Apr 1, 2016 at 12:03 PM, Virgil Griffith <span dir="ltr"><<a href="mailto:i@virgil.gr" target="_blank">i@virgil.gr</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><br><br>---------- Forwarded message ----------<br>From: <b>Hover Support</b> <<a href="mailto:help@hover.com" target="_blank">help@hover.com</a>><br>Date: Saturday, 2 April 2016<br>Subject: Request received: Questionable content on domain <a href="http://tor2web.org" target="_blank">tor2web.org</a><br>To: Virgil Griffith <<a href="mailto:i@virgil.gr" target="_blank">i@virgil.gr</a>><br><br><br><u></u>
<div>
<p style="text-align:center;font-size:7pt"><span style="color:#777777">## When replying, please ensure your reply is above this line ##</span></p>
<table width="600" border="0" cellpadding="0" cellspacing="0" style="margin:auto">
<tbody><tr>
<td style="padding-bottom:15px" align="left">
<a href="http://help.hover.com" target="_blank"><img alt="Hover" border="0"></a>
</td>
<td style="padding-bottom:15px;font-size:12px;color:#777" align="right">
Customer Service is available: <strong>8am to 11pm EST Mon-Fri</strong> and <strong>8am to 8pm EST Sat-Sun</strong><br>
No-hold toll free: <strong><a href="tel:1.866.731.6556" value="+18667316556" target="_blank">1.866.731.6556</a></strong> email: <strong><a>help@hover.com</a></strong>
</td>
</tr>
<tr>
<td colspan="2" align="center" style="border-top:solid 3px #eee;padding-top:15px"></td>
</tr>
</tbody></table>
<table width="600" border="0" cellpadding="0" cellspacing="0" style="margin:auto">
<tbody><tr>
<td style="padding-bottom:25px">
<p></p><h3>You have a new message from Hover!<br><span style="font-size:10pt;color:#58585a">Your reference number is #<span style="text-decoration:none">1084535.</span></span></h3><p></p><div style="margin-top:25px"><table width="100%" cellpadding="0" cellspacing="0" border="0"><tbody><tr><td width="100%" style="padding:15px 0;border-top:1px dotted #c5c5c5"> <table width="100%" cellpadding="0" cellspacing="0" border="0" style="table-layout:fixed"><tbody><tr><td valign="top" style="padding:0 15px 0 15px;width:40px"> <img alt="Travis Smi" height="40" style="min-height:auto;line-height:100%;outline:none;text-decoration:none;border-radius:5px" width="40"></td> <td width="100%" style="padding:0;margin:0" valign="top"> <p style="font-family:'Lucida Grande','Lucida Sans Unicode','Lucida Sans',Verdana,Tahoma,sans-serif;font-size:15px;line-height:18px;margin-bottom:0;margin-top:0;padding:0;color:#1b1d1e"> <strong>Travis Smith</strong> <span>(Hover Help Center)</span> </p> <p style="font-family:'Lucida Grande','Lucida Sans Unicode','Lucida Sans',Verdana,Tahoma,sans-serif;font-size:13px;line-height:25px;margin-bottom:15px;margin-top:0;padding:0;color:#bbbbbb"> Apr 1, 13:35 </p> <div style="color:#2b2e2f;font-family:'Lucida Sans Unicode','Lucida Grande','Tahoma',Verdana,sans-serif;font-size:14px;line-height:22px;margin:15px 0"><p style="color:#2b2e2f;font-family:'Lucida Sans Unicode','Lucida Grande','Tahoma',Verdana,sans-serif;font-size:14px;line-height:22px;margin:15px 0">Good afternoon </p><p style="color:#2b2e2f;font-family:'Lucida Sans Unicode','Lucida Grande','Tahoma',Verdana,sans-serif;font-size:14px;line-height:22px;margin:15px 0">We have been contacted by the RSA anti-fraud centre in regards to content on your domain <a href="http://tor2web.org" target="_blank">tor2web.org</a>. This link <<a href="http://25z5g623wpqpdwis.tor2web.org/" rel="nofollow noreferrer" target="_blank">http://25z5g623wpqpdwis.tor2web.org/</a>> seems to be infected with malware and they have requested that the page be removed. It is recommended that you contact your hosting provider to have them delete the URL to stop the malware.</p><p style="color:#2b2e2f;font-family:'Lucida Sans Unicode','Lucida Grande','Tahoma',Verdana,sans-serif;font-size:14px;line-height:22px;margin:15px 0">If you could please take care of this as soon as possible and let me know when you have had them delete the url it would be appreciated. </p><p style="color:#2b2e2f;font-family:'Lucida Sans Unicode','Lucida Grande','Tahoma',Verdana,sans-serif;font-size:14px;line-height:22px;margin:15px 0">Regards</p><p style="color:#2b2e2f;font-family:'Lucida Sans Unicode','Lucida Grande','Tahoma',Verdana,sans-serif;font-size:14px;line-height:22px;margin:15px 0">Travis Smith <br>Senior Customer Service Advisor <br>Toll-Free: <a href="tel:1-866-731-6556" value="+18667316556" target="_blank">1-866-731-6556</a> <br>International Toll-Free: +1.800.371.69922</p></div> </td> </tr></tbody></table></td> </tr></tbody></table></div><p>To add additional comments, you can simply reply to this email or <a href="http://help.hover.com/hc/requests/1084535" target="_blank">view the request online.</a></p>
</td>
</tr>
</tbody></table>
<table width="600" border="0" cellpadding="0" cellspacing="0" style="margin:auto">
<tbody><tr>
<td colspan="2" align="center" style="padding-top:7px;padding-bottom:7px;border-top:3px solid #777;border-bottom:1px dotted #777">
<span style="font-size:12px;line-height:14px" face="Arial, sans-serif">
More helpful links:
<a href="http://hover.com/blog" target="_blank">Blog</a>
|
<a href="http://help.hover.com/forums" target="_blank">Help & Forums</a>
|
<a href="http://twitter.com/Hover" target="_blank">
<img style="display:inline" alt="Twitter" align="absmiddle" border="0" height="24" width="24"></a>
|
<a href="http://www.facebook.com/Hover" target="_blank">
<img style="display:inline" alt="Facebook" align="absmiddle" border="0" height="24" width="24"></a>
</span>
</td>
</tr>
<tr>
<td align="left">
<br>
<p style="font-size:12px;line-height:14px;color:#777">You have been sent this message because you recently opened a help request with Hover.</p>
</td>
</tr>
</tbody></table>
<span style="color:#ffffff">[JLR358-27PJ]</span></div>
<div> <div> </div></div><br>
<br>_______________________________________________<br>
Tor2web-talk mailing list<br>
<a href="mailto:Tor2web-talk@lists.tor2web.org">Tor2web-talk@lists.tor2web.org</a><br>
<a href="https://lists.ghserv.net/mailman/listinfo/tor2web-talk" rel="noreferrer" target="_blank">https://lists.ghserv.net/mailman/listinfo/tor2web-talk</a><br></blockquote></div><br></div>