http://e26whn2524322mkxb3cbyk27ev2ihhq2biz35hty7gzgsyrwrygq27yd.onion/images/benscomputer_no-ip_org_Archive/2008/Aug/165825082008-3.shtml
Could well be legit, but
taking a look at where the actual payment screen is being accessed from
spreads further doubt. The Registrant for the IP address accessed
(91.208.0.255) is a Still Trade Ltd, from the Russian Federation. The person that the IP range is registered to is one Perevitskiy
Sergey, this in itself could all be quite innocent, but I find it quite
alarming that not only does the software access a page registered to a
company other than the company that...