http://account2867wu7461.controletechnique-montmoreau.fr/wum

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

Posted: Fri Feb 10, 2012 6:22 pm

Please add to DB. Needs Report.

Western Union Money Transfers http://account2867wu7461.controletechnique-montmoreau.fr/wumt/?access=secure

Hotlinked Image URL: https://www.westernunion.co.uk/WUCOMWEB/staticMid.do?pagename=HomePage&method=load

Site is copying www.westernunion.co.uk

Quote:

WHOIS information for controletechnique-montmoreau.fr :

[Querying whois.nic.fr]
[whois.nic.fr]
%%
%% This is the AFNIC Whois server.
%%
%% complete date format : DD/MM/YYYY
%% short date format : DD/MM
%% version : FRNIC-2.5
%%
%% Rights restricted by copyright.
%% See http://www.afnic.fr/afnic/web/mentions-legales-whois_en
%%
%% Use '-h' option to obtain more information about this service.
%%
%% [(edit) REQUEST] >> controletechnique-montmoreau.fr
%%
%% RL Net [##########] - RL IP [#########.]
%%

domain: controletechnique-montmoreau.fr
status: ACTIVE
hold: NO
holder-c: ANO00-FRNIC
admin-c: O2798-FRNIC
tech-c: O2798-FRNIC
zone-c: NFC1-FRNIC
nsl-id: NSL29045-FRNIC
registrar: ONLINE SAS
anniversary: 28/12
created: 28/12/2011
last-update: 28/12/2011
source: FRNIC

ns-list: NSL29045-FRNIC
nserver: ns2.o2switch.net
nserver: ns1.o2switch.net
source: FRNIC

registrar: ONLINE SAS
type: Isp Option 1
address: 8 Rue de la Ville l'Ev�que
address: PARIS
country: FR
phone: +33 1 73 50 20 00
fax-no: +33 1 73 50 26 05
e-mail: hebergement@online.net
website: http://www.online.net
anonymous: NO
registered: 01/04/1999
source: FRNIC

nic-hdl: ANO00-FRNIC
type: PERSON
contact: Ano Nymous
remarks: -------------- WARNING --------------
remarks: While the registrar knows him/her,
remarks: this person chose to restrict access
remarks: to his/her personal data. So PLEASE,
remarks: don't send emails to Ano Nymous. This
remarks: address is bogus and there is no hope
remarks: of a reply.
remarks: -------------- WARNING --------------
changed: 21/12/2011 anonymous@nowhere.xx.fr
anonymous: YES
obsoleted: NO
eligstatus: ok
eligdate: 21/12/2011 09:17:44
source: FRNIC

nic-hdl: O2798-FRNIC
type: ORGANIZATION
contact: O2SWITCH
address: boulevard Gustave Flaubert
address: 63000 Clermont Ferrand
country: FR
phone: +33 4 44 44 60 40
fax-no: +33 4 44 44 60 41
e-mail: support@o2switch.fr
changed: 19/08/2011 nic@nic.fr
anonymous: NO
obsoleted: NO
eligstatus: ok
eligdate: 22/09/2010 16:34:06
source: FRNIC

Quote:

Return-path: <support@online.com>
Envelope-to: (edit)
Delivery-date: Fri, 10 Feb 2012 16:15:43 +0000
Received: from [212.159.9.108] (helo=avasin06.plus.net)
by inmx16.plus.net with esmtp (PlusNet MXCore v2.00) id 1Rvt8R-0002Yt-NR
for (edit); Fri, 10 Feb 2012 16:15:43 +0000
Received: from SERVERISJIASI1.click.isjiasi.ro ([217.73.168.131])
by avasin06.plus.net with Plusnet Cloudmark Gateway
id YGFh1i0012qS7qp01GFj7w; Fri, 10 Feb 2012 16:15:43 +0000
X-BV-Spam-Flag: Yes
X-IPAS: Level1
X-CM-Score: 100.00
X-CNFS-Analysis: v=2.0 cv=RZ4S+iRv c=1 sm=1 p=R7FwDBW0AtINHl2Gip0A:9
a=PLnz64TrisVQvZUAOI4m6g==:17 a=eIhxMilvRf8A:10 a=E8elo-_pJM8A:10
a=2t1ZY8MDeEgA:10 a=8EU9Q7FnrCoA:10 a=u7lIbIMsAAAA:8 a=IWhvKg0ZaJyearvoOAoA:7
a=_W_S_7VecoQA:10 a=zfX96Siy-_xNKIXO:21 a=8cwSxBenOh7snzQm:21
a=PLnz64TrisVQvZUAOI4m6g==:117
Received: from USER ([46.166.143.226]) by click.isjiasi.ro with MailEnable ESMTP; Fri, 10 Feb 2012 18:14:55 +0200
Content-Type: text/html
FROM: Western Union<support@online.com>
Message-ID: <6D7F7B6875CC4E9F83670D89D6F42F1A.MAI@click.isjiasi.ro>
Date: Fri, 10 Feb 2012 18:14:55 +0200
X-pn-pstn: Spam 1
X-PN-Virus-Filtered: by PlusNet MXCore (v5.00)
X-PN-Spam-Filtered: by PlusNet MXCore (v5.00)
Subject: Required Account Identification 217.73.168.131 postmaster password
X-Brightmail-Tracker: AAAAAA==
X-Brightmail-Tracker: AAAAAA==

From: Western Union [mailto:support@online.com]
Sent: 10 February 2012 16:15
Subject: Required Account Identification 217.73.168.131 postmaster password

Dear Western Union valued customer,

You received this email as a notice for the database update for this month. This update is designed by our IT engineers to provide higher security to our customers online accounts, prevent unauthorized account access and other types of online fraud.

You are required to update your online profile by clicking on the following link:

Click here to access your online profile

Please note that this a one-time task that will take only 3-5 minutes of your precious time. However, failure in updating your profile will result in limiting your account access. We appologize for any inconvenience.

Thank you,
George H. Scott,
IT Assistant,
Western Union.

Posted: Fri Feb 10, 2012 7:29 pm

TM,

The fake bank forum doesn't deal with phishing and the best thing to do is to forward the email (with header) that you have to the legitimate WU.
Send it to: spoof@westernunion.com ( http://www.westernunion.com/info/faqSecurity.asp?country=global )

Also you can send it to Phish Tank ( http://www.phishtank.com/ ) and APWG ( http://www.antiphishing.org/ ).

Marking this NA and then this can go to Misc Scams forum. Very Happy

Moderator Joined: 03 May 2007 Posts: 16352

Moved here from Fake Sites.

http://account2867wu7461.controletechnique-montmoreau.fr/wum	View next topic View previous topic