| Author |
Message |
El Capitan Borracho
Baiting Guru
Joined: 17 Jun 2012
Posts: 18365
Location: Back until the artwork begins again
|
 Posted:
Tue Oct 09, 2012 3:36 am |
  |
Don't worry - the main site is a Chinese mess, but they've got a NatWest login:
http://chanelpurses-outlets.com/local/online/nwolb/login.html
No linkable images - all images are coming from legitimate sites. Links redirect to legitimate site as well.
Privacy protected registrant
| Quote: |
addresses 65.75.167.142
Domain Whois record
Queried whois.internic.net with "dom chanelpurses-outlets.com"...
Domain Name: CHANELPURSES-OUTLETS.COM
Registrar: GODADDY.COM, LLC
Whois Server: whois.godaddy.com
Referral URL: http://registrar.godaddy.com
Name Server: F1G1NS1.DNSPOD.NET
Name Server: F1G1NS2.DNSPOD.NET
Status: clientDeleteProhibited
Status: clientRenewProhibited
Status: clientTransferProhibited
Status: clientUpdateProhibited
Updated Date: 15-may-2012
Creation Date: 10-may-2012
Expiration Date: 10-may-2013 |
Please add to DB and free to report
*Note - Report can be sent here in Chinese: https://www.dnspod.cn/Report
or to Mark here:
[email protected] |
|
|
|
|
|
El Capitan Borracho
Baiting Guru
Joined: 17 Jun 2012
Posts: 18365
Location: Back until the artwork begins again
|
| Posted:
Tue Oct 09, 2012 3:41 am |
|
Sent in email - forgot to add that:
| Quote: |
Just to let you know that we are upgrading all our customers online account during our regular update.
Due to this we implore all our customers to follow the provided steps below and therefore required to verify your details to regain access to online service and prompt services.
<*Log into Online Banking at natwest.com*> to regain instant access
Please keep this email with the NatWest Secure site link in a safe place.
Thank you.
NatWest Customer Service Centre |
<**> is the link: http://chanelpurses-outlets.com/local/online/nwolb/login.html
Email is pretending to come from natwest.com but isn't:
| Quote: |
From NatWest PLC Mon Oct 8 08:05:11 2012
X-Apparently-To: <edit>@yahoo.com via 98.136.214.243; Mon, 08 Oct 2012 08:09:01 -0700
Return-Path: <[email protected]>
X-YahooFilteredBulk: 95.141.32.216
Received-SPF: none (domain of lnx1.registrotoyota.it does not designate permitted sender hosts)
X-Originating-IP: [95.141.32.216]
Authentication-Results: mta1130.mail.gq1.yahoo.com from=natwest.com; domainkeys=neutral (no sig); from=natwest.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO lnx1.registrotoyota.it) (95.141.32.216)
by mta1130.mail.gq1.yahoo.com with SMTP; Mon, 08 Oct 2012 08:09:01 -0700
Received: from apache by lnx1.registrotoyota.it with local (Exim 4.72)
(envelope-from <[email protected]>)
id 1TLEtL-0005f2-SD
for <edit>@yahoo.com; Mon, 08 Oct 2012 17:05:11 +0200
Date: Mon, 8 Oct 2012 17:05:11 +0200
To: <edit>@yahoo.com
From: NatWest PLC <[email protected]>
Subject: What we're doing to put things right
Message-ID: <[email protected]>
X-Priority: 1
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html; charset="us-ascii"
Content-Length: 2806
|
|
|
|
|
|
|
music man
Baiting Guru
Joined: 22 Sep 2005
Posts: 14807
Location: East Harlemshire , yo!
|
| Posted:
Tue Oct 09, 2012 7:38 am |
|
Hmmm. Not too sure about this one. Looks to be very close to a straightforward phishing site. |
_________________
 x2  x2   x104  x213  x4  x20  x4    x2  x1  x2  x2   x2  x2   x2  x13
You will rot in jail.watch your back- any shadow could be mine ! YOU ARE VERY EASY TO TRACK IN YOU NEIGHBOURHOOD ! DRUNKARD AND A SCUMBAG LIKE YOU!
mike lawrence (cheque scammer)
Go fuck your dead parents asshole!!!How can a deaf fool make clean money..The money that you have will never be spent on anything reasonable.
So fuck off..dont reply me again until the cops get your stinking ass...
Lyord Melson- cheque scammer
$4.002million and £214K in fake cheques taken out of circulation. (updated May 2009)
 |
|
|
|
|
buried under 419 emails
Baiting Guru
Joined: 10 Oct 2003
Posts: 4747
|
| Posted:
Tue Oct 09, 2012 7:58 am |
|
I am not sure about a db entry, but I have a general rule is “kill em all, let God sort them out”. 
I get the feeling that this is NOT s “hack”, it is just a someone doing scams on the cheap, but this is just my opinion. The index is really suspect. |
_________________
"my dear,
you realy made me a fool which i dont expected from you" mr malambo
"Any money you send to Africa to receive your payment is at your own risk " David Mark
over 1,000 fakes deaded since Oct 2005. This is my current rampage!  x6   |
|
|
|
|
El Capitan Borracho
Baiting Guru
Joined: 17 Jun 2012
Posts: 18365
Location: Back until the artwork begins again
|
| Posted:
Tue Oct 09, 2012 8:35 am |
|
|
|
|
|
Artemis
Baiting Guru
Joined: 19 Feb 2006
Posts: 31267
Location: Lower Elements
|
| Posted:
Thu Oct 11, 2012 6:04 am |
|
Bump for a move to offline |
_________________
Total kills 21667 +  x 5 x10
   |
|
|
|
|
Ima Baeder
Baiting Guru
Joined: 03 May 2007
Posts: 18313
|
| Posted:
Thu Oct 11, 2012 1:51 pm |
|
Since it looks like phishing, I'll move it to misc. scams. Does someone want to report it to NatWest? |
_________________
348 Fake Sites killed              
 x 100  2 Years        |
|
|
|
|
El Capitan Borracho
Baiting Guru
Joined: 17 Jun 2012
Posts: 18365
Location: Back until the artwork begins again
|
| Posted:
Thu Oct 11, 2012 5:59 pm |
|
|
|
|
|
music man
Baiting Guru
Joined: 22 Sep 2005
Posts: 14807
Location: East Harlemshire , yo!
|
| Posted:
Thu Oct 11, 2012 7:10 pm |
|
Moving to Misc Scams |
_________________
x2 x2 x104 x213 x4 x20 x4 x2 x1 x2 x2 x2 x2 x2 x13
You will rot in jail.watch your back- any shadow could be mine ! YOU ARE VERY EASY TO TRACK IN YOU NEIGHBOURHOOD ! DRUNKARD AND A SCUMBAG LIKE YOU!
mike lawrence (cheque scammer)
Go fuck your dead parents asshole!!!How can a deaf fool make clean money..The money that you have will never be spent on anything reasonable.
So fuck off..dont reply me again until the cops get your stinking ass...
Lyord Melson- cheque scammer
$4.002million and £214K in fake cheques taken out of circulation. (updated May 2009)
|
|
|
|
|
El Capitan Borracho
Baiting Guru
Joined: 17 Jun 2012
Posts: 18365
Location: Back until the artwork begins again
|
| Posted:
Fri Oct 12, 2012 2:29 am |
|
Doesn't really matter - but for what it's worth it's suspended now |
|
|
|
|
|
|
|
SmartFeed
