Skip to content

So now we have a fourth site on the Earthlink web server 66.175.58.9 that is hosting an Authorize.net phishing page.

The latest is http://www.turtlelovedesigns.com/account.authorize.net.yAKHwLZIjr4xVllpswKn7NWpLMeuIzJTgiVp1OsKODFUZ90e8N85Av8e7VO8V0em88NVJFHSsclll/

The phishing page has since been taken down. It’s a good thing that Authorize.net accounts are not the common unless you are a merchant of some kind.

Share

Another domain using the same Earthlink web server (66.175.58.9) as joecroninfishing.com and ttouchequine.com

http://bethelcconline.org/account.authorize.net.yAKHwLZIjr4xVllpswKn7NWpLMeuIzJTgiVp1OsKODFUZ90e8N85Av8e7VO8V0em88NVJFHSsclll/

Phishing Email was routed through mail.aidsthai.net, located in Thailand via 88.208.216.223 located in the UK.

Share

I have noticed a new round of phishing attacks using fake Authorize.net Late Fee Warning Notices.

So far I have examined two samples and both hacked websites are hosted on the same Earthlink web server (66.175.58.9).

The two domains that are currently hosting the phishing sites are ttouchequine.com and joecroninfishing.com. I’ll update this post if I find any others.

Share

I found some nice information about tuning FeeeNAS 7.x from a few sources last week.

A blog post HERE made by Learned By Error details some settings to use for tuning FreeNAS for increased network performance. That post combined with information from the FreeBSD Wiki article called ZFS Tuning Guide and a U.S. Department of Energy article called TCP Tuning Guide – FreeBSD Tuning helped me determine the optimal tuning settings for my system. Prior to the TCP settings I was only getting around 25-30 MBps between my PC and the server. Now, with the new settings, I am getting up to 80-90 MBps (bursts) with common speeds of 55-60 MBps.

Here are the settings I currently have under System -> Advanced -> sysctl.conf

freenas.sysctl.conf

Share