commonwealth.visit.ws

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

Master of Master Baiters Joined: 25 Sep 2008 Posts: 785

This page was sent to me in a phishing attempt, but I think it is a site that needs to be taken down. The site is claiming to be from Australia. Someone please kill this once it gets a DB entry.

http://www.commonwealth.visit.ws/

image with handbagssuperstore site in the properties?

Whois

Quote:

Domain Whois record
Queried whois.worldsite.ws with "visit.ws"...

Domain Name: VISIT.WS

Registrar Name: .WS Registry
Registrar Email: [email protected]
Registrar Telephone: ---
Registrar Whois: whois.website.ws

Registrant Name: Arvydas Strausas
Registrant Email: [email protected]

Administrative Contact Email: [email protected]
Administrative Contact Telephone: +37052324444

Domain Created: 2002-04-08
Domain Last Updated: 2008-01-28
Domain Currently Expires: 2011-04-08

Current Nameservers:

ns1.serveriai.lt
ns2.serveriai.lt

e-mail header and header

Quote:

X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0xO0Q9MTtTQ0w9MQ==
X-Message-Status: n:0
X-SID-PRA: Commonwealth Bank of Australia <[email protected]>
X-Message-Info: GT5wTyc/kVhnmhj/pyiVYlQl30+u3wo2WyZ/KGc7WajKGtsIQfJBfO4nhX97u5ItMKXUcPDySs/FO2RHcmg13gF7PNjUwixXlBAR9mUHFKs=
Received: from idcmail-mo2no.shaw.ca ([64.59.134.9]) by bay0-mc2-f21.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2668);
Thu, 21 May 2009 15:43:54 -0700
Received: from pd4mo1so.prod.shaw.ca ([10.0.123.198])
by pd6mo1no-svcs.prod.shaw.ca with ESMTP; 21 May 2009 16:43:47 -0600
Message-Id: <[email protected]>
Received: from pd3ml2so-ssvc.prod.shaw.ca ([10.0.141.138])
by pd4mo1so-svcs.prod.shaw.ca with ESMTP; 21 May 2009 16:43:47 -0600
X-Cloudmark-SP-Filtered: true
X-Cloudmark-SP-Result: v=1.0 c=0 a=_KGtJyeFAAAA:8 a=akHO7lgxAAAA:8 a=sg4Z62MrAAAA:8 a=_N8XziFypuYY6NQGK1AA:9 a=DP2NxX-hiOhMs-zfUisA:7 a=e9_5FiKzW4hRe8EiR9zsw6vESk8A:4 a=M8ASy7tUpI8A:10 a=lgNm5mARXnQA:10 a=XLrKVp9OabwA:10 a=oJL9TIRMo0YA:10
Received: from unknown (HELO User) ([24.76.164.162])
by pd3ml2so-dmz.prod.shaw.ca with SMTP; 21 May 2009 16:43:45 -0600
Reply-To: [email protected]
From: Commonwealth Bank of Australia<[email protected]>
Subject: Your NetBank account may have been accessed from an unauthorized computer!
Date: Thu, 21 May 2009 18:22:47 -0400
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Bcc:
Return-Path: [email protected]
X-OriginalArrivalTime: 21 May 2009 22:43:54.0591 (UTC) FILETIME=[9EB3DEF0:01C9DA65]

<img src="http://xs839.xs.to/xs839/09214/index_r1_c2970.gif" border="0"> 


Dear Commonwealth Bank customer, 

We recently reviewed your account, and we are suspecting that your NetBank account may have been accessed from an unauthorized computer. 

This may be due to changes in your IP address or location. Protecting the security of your account and of the Commonwealth network is our primary concern. 

We are asking you to immediately login and report any unauthorized withdrawals, and check your account profile to make sure no changes have been made. 

Please click on the following link, to verify your account activity: 

<a href="http://www.commonwealth.visit.ws" target="_blank">https://www.commbank.com.au/netbank</a> (this link redirects to site)

We apologize for any inconvenience this may cause, and appreciate your support in helping us maintaining the integrity of the entire Commonwealth Bank system. Please login as soon as possible. 

Thank you, 
Commonwealth Bank Security Advisor.

419Eater is my life Joined: 02 Aug 2008 Posts: 435

I'll go ahead and kill it, though I'm not sure it'll get a DB entry since it's a phishing site. It doesn't matter to me though, I'll take it down anyways.

EDIT: Actually, just forward the email to the company at [email protected], they'll take care of it for you.

Posted: Fri May 22, 2009 2:40 pm

Already disabled