Return-Path: <autogenerated@abuse.customer-config.de>
X-Original-To: gesendet@abuse.customer-config.de
Delivered-To: gesendet@abuse.customer-config.de
Received: by server5.customer-config.de (Postfix, from userid 0)
	id 2E8B53A800C; Mon,  7 Jun 2010 22:33:06 +0200 (CEST)
To: "abuse_mtu.ru" <gesendet@abuse.customer-config.de>
Subject: [noreply] abuse report about 91.78.17.xxx (Domain) - Mon,  7 Jun 2010 22:32:19 +0200 -- service: http (First x 1) RID: 103499
MIME-Version: 1.0
Reply-To: "Abuse-Team" <abuse-team@customer-config.de>
From: "Abuse-Team (auto-generated)" <autogenerated@abuse.customer-config.de>
Sender: abuse-team@customer-config.de
X-Mailer: blocklist.de
X-Abuse-Contact: abuse@customer-config.de
Errors-To: autogenerated@abuse.customer-config.de
Auto-Submitted: auto-generated
Content-Transfer-Encoding: 7bit
Content-Type: multipart/mixed; 
	 boundary="Abuse-5ead3bcd2dd49a20a59d14a1d27f6d8e";
X-Arf: yes
X-Report-ID: 103499 
Message-Id: <20100607203306.2E8B53A800C@server5.customer-config.de>
Date: Mon,  7 Jun 2010 22:33:06 +0200 (CEST)


--Abuse-5ead3bcd2dd49a20a59d14a1d27f6d8e
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset=utf-8;

Hello Abuse-Team,

your Server with the IP: 91.78.17.xxx is hosting a phishing/scam-site
at Time: Mon,  7 Jun 2010 22:32:19 +0200.

You can parse this Mail with X-ARF-Tools (1. attachment = Details, 2. attachment = Logs).
You found more Information about X-Arf under http://www.x-arf.org/specification.html

We found your address in the Whois-Data from the IP under the SearchString "abuse-mailbox"
Answer us to rewrite the address (to abuse-quiet or a special address) for all upcoming reports.
 

------------------------------
Martin Schiftan
This message was sent automatically, please answer us for Questions
or go to: http://www.blocklist.de/en/contact.html
------------------------------

--Abuse-5ead3bcd2dd49a20a59d14a1d27f6d8e
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset=utf-8; name="report.txt";

---
Reported-From: autogenerated@abuse.customer-config.de
Category: fraud
Report-Type: phishing
Service: http
Version: 0.1
User-Agent: Fail2BanFeedBackScript blocklist.de V0.1
Date: Mon,  7 Jun 2010 22:32:19 +0200
Source-Type: uri
Source: http://domain.tld/images/login.html
Domain: domain.tld
Port: 80
Report-ID: 103499@blocklist.de
Schema-URL: http://www.x-arf.org/schema/fraud_0.1.3.json
Attachment: none


--Abuse-5ead3bcd2dd49a20a59d14a1d27f6d8e--