One thing to consider is to bother the server host,
First one points to 66.135.47.125 (name server #1) http://whois.arin.net/rest/net/NET-66-135-32-0-1/pft?s=66.135.47.125 OrgAbuseHandle: SNAE-ARIN OrgAbuseName: Serverbeach Network AUP Enforcement OrgAbusePhone: +1-604-484-2588 OrgAbuseEmail: [email protected] OrgAbuseRef: http://whois.arin.net/rest/poc/SNAE-ARIN Their AUP: http://www.peer1.com/about-us/legal/acceptable-use-policy There's a second namesever also being used 85.17.25.202 (nameserver #2) remarks: Please send all abuse notifications to the following email address: [email protected]. To ensure proper processing of your abuse notification, please visit the website www.leaseweb.com/abuse for notification requirements. All police and other government agency requests must be sent to [email protected]. And the final malicious server is 208.91.196.145 (redirect server) OrgAbuseHandle: ABUSE3065-ARIN OrgAbuseName: Abuse Admin OrgAbusePhone: +1-917-386-6118 OrgAbuseEmail: [email protected] OrgAbuseRef: http://whois.arin.net/rest/poc/ABUSE3065-ARIN I am thinking confluence is the one to go after, the name servers could be legit but its hard to tell with how stupidly they are trying to hide it. _______________________________________________ Mailing list: https://launchpad.net/~kicad-developers Post to : [email protected] Unsubscribe : https://launchpad.net/~kicad-developers More help : https://help.launchpad.net/ListHelp

