By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here. - Internet Anti-Fraud Center - now open!

View next topic
View previous topic
Post new topicReply to topic
Author Message
Master of Master Baiters

Joined: 25 Sep 2008
Posts: 785

PostPosted: Fri May 22, 2009 12:26 am Reply with quoteBack to top

This page was sent to me in a phishing attempt, but I think it is a site that needs to be taken down. The site is claiming to be from Australia. Someone please kill this once it gets a DB entry.

image with handbagssuperstore site in the properties?



Domain Whois record
Queried with ""...

Domain Name: VISIT.WS

Registrar Name: .WS Registry
Registrar Email: [email protected]
Registrar Telephone: ---
Registrar Whois:

Registrant Name: Arvydas Strausas
Registrant Email: [email protected]

Administrative Contact Email: [email protected]
Administrative Contact Telephone: +37052324444

Domain Created: 2002-04-08
Domain Last Updated: 2008-01-28
Domain Currently Expires: 2011-04-08

Current Nameservers:

e-mail header and header

X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0xO0Q9MTtTQ0w9MQ==
X-Message-Status: n:0
X-SID-PRA: Commonwealth Bank of Australia <[email protected]>
X-Message-Info: GT5wTyc/kVhnmhj/pyiVYlQl30+u3wo2WyZ/KGc7WajKGtsIQfJBfO4nhX97u5ItMKXUcPDySs/FO2RHcmg13gF7PNjUwixXlBAR9mUHFKs=
Received: from ([]) by with Microsoft SMTPSVC(6.0.3790.2668);
Thu, 21 May 2009 15:43:54 -0700
Received: from ([])
by with ESMTP; 21 May 2009 16:43:47 -0600
Message-Id: <[email protected]>
Received: from ([])
by with ESMTP; 21 May 2009 16:43:47 -0600
X-Cloudmark-SP-Filtered: true
X-Cloudmark-SP-Result: v=1.0 c=0 a=_KGtJyeFAAAA:8 a=akHO7lgxAAAA:8 a=sg4Z62MrAAAA:8 a=_N8XziFypuYY6NQGK1AA:9 a=DP2NxX-hiOhMs-zfUisA:7 a=e9_5FiKzW4hRe8EiR9zsw6vESk8A:4 a=M8ASy7tUpI8A:10 a=lgNm5mARXnQA:10 a=XLrKVp9OabwA:10 a=oJL9TIRMo0YA:10
Received: from unknown (HELO User) ([])
by with SMTP; 21 May 2009 16:43:45 -0600
Reply-To: [email protected]
From: Commonwealth Bank of Australia<[email protected]>
Subject: Your NetBank account may have been accessed from an unauthorized computer!
Date: Thu, 21 May 2009 18:22:47 -0400
MIME-Version: 1.0
Content-Type: text/html;
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Return-Path: [email protected]
X-OriginalArrivalTime: 21 May 2009 22:43:54.0591 (UTC) FILETIME=[9EB3DEF0:01C9DA65]

<img src="" border="0"><br><br>
<font face="Verdana" size="2">

Dear Commonwealth Bank customer,<br><br>

We recently reviewed your account, and we are suspecting that your NetBank account may have been accessed from an unauthorized computer. <br><br>

This may be due to changes in your IP address or location. Protecting the security of your account and of the Commonwealth network is our primary concern.<br><br>

We are asking you to immediately login and report any unauthorized withdrawals, and check your account profile to make sure no changes have been made.<br><br>

Please click on the following link, to verify your account activity:<br><br>

<a href="" target="_blank"><b></b></a><br><br> (this link redirects to site)

We apologize for any inconvenience this may cause, and appreciate your support in helping us maintaining the integrity of the entire Commonwealth Bank system. Please login as soon as possible.<br><br>

Thank you,<br>
Commonwealth Bank Security Advisor.

38 Fake Checks / Money Orders worth $393,970.79 USD

Safari Prince otubor Kwabena - Accra, Ghana to Abidjan, Cote d'Ivoire
SafariSafari Barr. Kofi Williams Lome, Togo to Accra, Ghana Safari (Wimped) Lome, Togo to Lagos, Nigeria
Safari Mohammad Tofiki Accra, Ghana to Lagos, Nigeria

Nigeria x15 Ghana x4 Malaysia X3 United Kingdom x54 United States x6 United Nations x2 Canada Spain x3 Ireland Japan Liberian Flag China Thailand x3 Togo Ivory Coast Switzerland
pyramid x3 Closed lad accounts x90
View user's profileSend private message
Reverse Psychology
419Eater is my life

Joined: 02 Aug 2008
Posts: 435

PostPosted: Fri May 22, 2009 1:32 am Reply with quoteBack to top

I'll go ahead and kill it, though I'm not sure it'll get a DB entry since it's a phishing site. It doesn't matter to me though, I'll take it down anyways.

EDIT: Actually, just forward the email to the company at [email protected], they'll take care of it for you.

United Kingdom x15 United States x8 Nigeria x3 Canada x2 Germany x2 Benin x2 China x2 Switzerland Columbia Ghana
Closed lad accounts x36 Cellphone x130 pyramid
"i am 24yrs old 165cm tall,chocolate skinned,with brown sexy eye balls" - jasm1ne awa
"I am suspecting you it seems you are FB I Agent" - derek b1ttman
"Western Union and Money Gram are your shit father and your fucking mother" - Peter Bill
"There is a saying in my tribe that a man does not urinate into a well he hope to drink from, this is a project I will benefit from I will never mislead you." - Daniels J0hn
View user's profileSend private message
Baiting Guru

Joined: 19 Feb 2006
Posts: 31268
Location: Lower Elements

PostPosted: Fri May 22, 2009 2:40 pm Reply with quoteBack to top

Already disabled

Total kills 21667 + Mugu Reseller x 5 Mortar x10
Star Purple Flower Easter Egg Easter 2015
View user's profileSend private message
Display posts from previous:      
Post new topicReply to topic

 Jump to:   

View next topic
View previous topic
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum

E-Mail Header Analysis

All Content © 2003 -
Powered by phpBB © 2001, 2002 phpBB Group :S5: FI Theme :: All times are GMT