SmartFeedSmartFeed          

Porsche Hangout


WELCOME - YOU ARE CURRENTLY VIEWING 419EATER AS A GUEST

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

ScamWarners.com - Internet Anti-Fraud Center - now open!


 afchine.org

View next topic
View previous topic
 
Post new topicReply to topic
Author Message
Dharma
Baiting Guru


Joined: 11 Jun 2008
Posts: 2144
Location: The Empty Quarter


PostPosted: Sat Apr 17, 2010 1:35 pm Reply with quoteBack to top

Quote:
Delivered-To:******@googlemail.com
Received: by 10.86.76.17 with SMTP id y17cs132253fga;
Wed, 14 Apr 2010 13:33:03 -0700 (PDT)
Received: by 10.229.191.76 with SMTP id dl12mr9478810qcb.97.1271277178927;
Wed, 14 Apr 2010 13:32:58 -0700 (PDT)
Return-Path: <[email protected]>
Received: from besselmanlittle.com (mail2.besselmanlittle.com [70.169.80.208])
by mx.google.com with ESMTP id f23si1881556qcz.91.2010.04.14.13.32.56;
Wed, 14 Apr 2010 13:32:58 -0700 (PDT)
Received-SPF: neutral (google.com: 70.169.80.208 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=70.169.80.208;
Authentication-Results: mx.google.com; spf=neutral (google.com: 70.169.80.208 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected]
X-Antispam: NO; Spamcatcher 5.2.1. Score 84
Thread-Topic: HSBC Bank plc - iBanking Online Alert
Received: from User ([218.208.3.204]) by besselmanlittle.com with Microsoft SMTPSVC(6.0.3790.3959); Wed, 14 Apr 2010 14:49:26 -0500
From: "HSBC Bank plc." <[email protected]>
Subject: HSBC Bank plc - iBanking Online Alert
Date: Thu, 15 Apr 2010 03:39:35 +0800
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0105_01C2A9A6.5928FAAA"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.4325
Bcc:
Return-Path: <[email protected]>
Message-ID: <[email protected]>
X-OriginalArrivalTime: 14 Apr 2010 19:49:26.0719 (UTC) FILETIME=[96DB5CF0:01CADC0B]



Quote:
HSBC Bank plc - iBanking Online Alert

We detected irregular activity on your HSBC Internet banking account on 13/04/2010.

For your protection, you must verify this activity before you can continue using your account.

Please visit http://www.hsbc.co.uk/1/2/ to review your account activity.

We will review the activity on your account with you and upon verification,

and we will remove any restrictions placed on your account.

Please disregard this notice if you have already accessed the web site or spoken with one of our representatives.

Want to confirm this email is from HSBC Group?

Sign in to Internet Banking and select Alerts History to verify this alert.

__________________________________________________________________________
Because email is not a secure form of communication, this email box is not equipped to handle replies.
If you have any questions about your account or need assistance, please call the phone number on your statement or go to Contact Us at www.hsbc.co.uk.

HSBC Group , Member FDIC.
© 2010 HSBC Bank Plc. . All Rights Reserved.


in the email, if you click in any of these links it will lead you to this site

http://www.afchine.org/?lang=fr

which is quite awkward since the site is not English?


Quote:
Domain ID:D132639728-LROR
Domain Name:AFCHINE.ORG
Created On:10-Nov-2006 22:48:37 UTC
Last Updated On:14-Apr-2010 08:47:54 UTC
Expiration Date:10-Nov-2010 22:48:37 UTC
Sponsoring Registrar:1 & 1 Internet AG (R73-LROR)
Status:OK
Registrant ID:SPAG-35362090
Registrant Name:Oneandone Private Registration
Registrant Organization:1&1 Internet, Inc. - http://1and1.com/contact
Registrant Street1:701 Lee Road, Suite 300
Registrant Street2:ATTN: afchine.org
Registrant Street3:
Registrant City:Chesterbrook
Registrant State/Province:PA
Registrant Postal Code:19087
Registrant Country:US
Registrant Phone:+1.8772064254
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email:
Admin ID:SPAG-35362090
Admin Name:Oneandone Private Registration
Admin Organization:1&1 Internet, Inc. - http://1and1.com/contact
Admin Street1:701 Lee Road, Suite 300
Admin Street2:ATTN: afchine.org
Admin Street3:
Admin City:Chesterbrook
Admin State/Province:PA
Admin Postal Code:19087
Admin Country:US
Admin Phone:+1.8772064254
Admin Phone Ext.:
Admin FAX:
Admin FAX Ext.:
Admin Email:
Tech ID:SPAG-35362090
Tech Name:Oneandone Private Registration
Tech Organization:1&1 Internet, Inc. - http://1and1.com/contact
Tech Street1:701 Lee Road, Suite 300
Tech Street2:ATTN: afchine.org
Tech Street3:
Tech City:Chesterbrook
Tech State/Province:PA
Tech Postal Code:19087
Tech Country:US
Tech Phone:+1.8772064254
Tech Phone Ext.:
Tech FAX:
Tech FAX Ext.:
Tech Email:



any suggestions? Question

_________________
Penguin
Trafalgar Square 2013
Safari X5, Lagos - Accra- Cotonou- Ndjamena- Abeche(with SH) Isaac
Safari Accra- Douala(i only have one thing to say to you, go Fuck yourself and have a nice day Ok)
Safari London to Edinburgh(with DD)Sterck
Safari The Road to West Darfur (with Dr Mike)
Safari X2 Accra- Douala- Mundemba (Why do you put me in pain)
Safari Ireland to Sweden- Zion
Safari Nigeria- Chad (with Dr Mike and Agda)
Safari X2 Liberia- Ivory Coast, (with IG)
Safari X3 Nigeria to Chad- Steve & Tony(T**T team)
Safari X3 Belgium-Sweden-Denmark- Congo(with Dr Mike and Dane)
(Safari Safari Safari) X2 Operation Gold 2011
Safari X23 Random safaris (You are a bastard beast)Akmal
Golden Pith Rame Head 2013

Upgrade!
Scambaiting Tools!
View user's profileSend private message
justjay
Baiting Guru


Joined: 22 Mar 2007
Posts: 2412
Location: ~Data Miner & Esoteric Trivia Collecter~


PostPosted: Sat Apr 17, 2010 3:58 pm Reply with quoteBack to top

Hmmmm.

offhand looks like the http://www.afchine.org/ is probably a legit site.
Quote:
Created On:10-Nov-2006 22:48:37 UTC
Last Updated On:14-Apr-2010 08:47:54 UTC
Expiration Date:10-Nov-2010 22:48:37 UTC


Quote:
From: "HSBC Bank plc." <[email protected]>

is the actual source


and for that I get
Quote:
RCPT TO:<[email protected]>
554 5.1.1 <[email protected]>: Recipient address rejected: undeliverable address: unknown user: "[email protected]"



Personal suggestion would be to forward the whole email and headers to the real HSBC at [email protected].

_________________
Dubitando ad veritatem pervenimus
aa419.org member
Site Killing Mortar x uncounted numbers
Mugu Resellerpyramid Closed lad accountsAustraliaUnited StatesUnited KingdomNetherlandsSwitzerlandGhanaBelgiumChinaNigeriaSpain
Ivory CoastCanadaBurkina FasoSenegalHong KongSouth AfricaEuropean UnionBahamas, TheBeninMalaysiaGermanyItalyTogo|¿?|
Over 1000 - no longer counting since sometime in 2008 + #unknown# assists
WDPRs >150 Netcraft>115
----
pony pony pony - just because...
View user's profileSend private message
Ima Baeder
419Eater Admin


Joined: 03 May 2007
Posts: 18314


PostPosted: Sun Apr 18, 2010 5:04 pm Reply with quoteBack to top

Thanks for the heads up in PM, justjay.

This looks like phishing. Unless I'm missing something, http://www.hsbc.co.uk/1/2/ now leads to what appears to be the real HSBC site.

Marking n/a and will move this thread over to misc. scams in a bit.

_________________
348 Fake Sites killed United StatesUnited KingdomUnited NationsMaltaNigeriaGhanaBeninGermanySouth AfricaRussiaTogoMalaysiaEuropean UnionJapanIvory CoastSpainFranceSwitzerlandChinaCanadaItalyThailand

Star Mugu Reseller Mortar Closed lad accounts x 100 Sand Timer 2 Years Pretty Rose Mc Fry Mc Fry Nurse Nastys Audi TT Goat Flying Monkey Easter Egg 2011
View user's profileSend private message
Display posts from previous:      
Post new topicReply to topic


 Jump to:   



View next topic
View previous topic
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum



** Find out information about your IP address **


All Content © 2003 - 419Eater.com
Powered by phpBB © 2001, 2002 phpBB Group :S5: FI Theme :: All times are GMT