With the correct magic sauce, this is a credit card phish.
Without, some default wordpress template.
168.119.170.192 microsoft.tronsfertmex.co.uk
168.119.170.192 tronsfertmex.co.uk
168.119.170.192 d9c08f5.tronsfertmex.co.uk
168.119.170.192 find-you.co.uk
168.119.170.192 coinmolun.co.uk
e.g.
http://tronsfertmex.co.uk/?act=cl&pid=11111&uid=1111&vid=111&ofid=111&lid=1111&cid=1111
—> mongoldrape . com (broken due to geo fencing)