This doesn't look good, I did a search on the registrant's email address :firstname.lastname@example.org
and found some more sites : salefree2012.com, freesdeal.com, winfrees.com, freesnice.com, the list keeps going. The first site has an expiry date for this December, so only a short term lease.
There is also a Phishing Warning report going back to May 2012.
I would recommend that your friend very urgently contacts their credit card company, report what has happened, try to ensure that the card details are not used without permission.