Not sure if this is the right place for this, but the Argentinian version of the FBI and the U.S. IRS haven't done too well, so I thought maybe someone here would do a better job.
We have someone who's been hacking into our server to send large quantities of phishing spams to collect credit card and social security numbers. They were shut down at the first place we reported, but they're back.
Is anyone here capable of hacking into a php script and finding out where this illegally-gathered information is going?
Here's the page he's using right now, it might change by time anyone looks at it though:
http://165.233.48.227/index.html