By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here. - Internet Anti-Fraud Center - now open!

View next topic
View previous topic
Post new topicReply to topic
Author Message
The Monsignor
Baiting Guru

Joined: 08 Nov 2006
Posts: 3221
Location: St Michael's Chapel

PostPosted: Fri Feb 10, 2012 6:22 pm Reply with quoteBack to top

Please add to DB. Needs Report.

Western Union Money Transfers

Hotlinked Image URL:

Site is copying

WHOIS information for :

%% This is the AFNIC Whois server.
%% complete date format : DD/MM/YYYY
%% short date format : DD/MM
%% version : FRNIC-2.5
%% Rights restricted by copyright.
%% See
%% Use '-h' option to obtain more information about this service.
%% [(edit) REQUEST] >>
%% RL Net [##########] - RL IP [#########.]

status: ACTIVE
hold: NO
holder-c: ANO00-FRNIC
admin-c: O2798-FRNIC
tech-c: O2798-FRNIC
zone-c: NFC1-FRNIC
nsl-id: NSL29045-FRNIC
registrar: ONLINE SAS
anniversary: 28/12
created: 28/12/2011
last-update: 28/12/2011
source: FRNIC

ns-list: NSL29045-FRNIC
source: FRNIC

registrar: ONLINE SAS
type: Isp Option 1
address: 8 Rue de la Ville l'Ev�que
address: PARIS
country: FR
phone: +33 1 73 50 20 00
fax-no: +33 1 73 50 26 05
e-mail: [email protected]
anonymous: NO
registered: 01/04/1999
source: FRNIC

nic-hdl: ANO00-FRNIC
type: PERSON
contact: Ano Nymous
remarks: -------------- WARNING --------------
remarks: While the registrar knows him/her,
remarks: this person chose to restrict access
remarks: to his/her personal data. So PLEASE,
remarks: don't send emails to Ano Nymous. This
remarks: address is bogus and there is no hope
remarks: of a reply.
remarks: -------------- WARNING --------------
changed: 21/12/2011 [email protected]
anonymous: YES
obsoleted: NO
eligstatus: ok
eligdate: 21/12/2011 09:17:44
source: FRNIC

nic-hdl: O2798-FRNIC
contact: O2SWITCH
address: boulevard Gustave Flaubert
address: 63000 Clermont Ferrand
country: FR
phone: +33 4 44 44 60 40
fax-no: +33 4 44 44 60 41
e-mail: [email protected]
changed: 19/08/2011 [email protected]
anonymous: NO
obsoleted: NO
eligstatus: ok
eligdate: 22/09/2010 16:34:06
source: FRNIC

Return-path: <[email protected]>
Envelope-to: (edit)
Delivery-date: Fri, 10 Feb 2012 16:15:43 +0000
Received: from [] (
by with esmtp (PlusNet MXCore v2.00) id 1Rvt8R-0002Yt-NR
for (edit); Fri, 10 Feb 2012 16:15:43 +0000
Received: from ([])
by with Plusnet Cloudmark Gateway
id YGFh1i0012qS7qp01GFj7w; Fri, 10 Feb 2012 16:15:43 +0000
X-BV-Spam-Flag: Yes
X-IPAS: Level1
X-CM-Score: 100.00
X-CNFS-Analysis: v=2.0 cv=RZ4S+iRv c=1 sm=1 p=R7FwDBW0AtINHl2Gip0A:9
a=PLnz64TrisVQvZUAOI4m6g==:17 a=eIhxMilvRf8A:10 a=E8elo-_pJM8A:10
a=2t1ZY8MDeEgA:10 a=8EU9Q7FnrCoA:10 a=u7lIbIMsAAAA:8 a=IWhvKg0ZaJyearvoOAoA:7
a=_W_S_7VecoQA:10 a=zfX96Siy-_xNKIXO:21 a=8cwSxBenOh7snzQm:21
Received: from USER ([]) by with MailEnable ESMTP; Fri, 10 Feb 2012 18:14:55 +0200
Content-Type: text/html
FROM: Western Union<[email protected]>
Message-ID: <[email protected]>
Date: Fri, 10 Feb 2012 18:14:55 +0200
X-pn-pstn: Spam 1
X-PN-Virus-Filtered: by PlusNet MXCore (v5.00)
X-PN-Spam-Filtered: by PlusNet MXCore (v5.00)
Subject: Required Account Identification postmaster password
X-Brightmail-Tracker: AAAAAA==
X-Brightmail-Tracker: AAAAAA==

From: Western Union [mailto:[email protected]]
Sent: 10 February 2012 16:15
Subject: Required Account Identification postmaster password

Dear Western Union valued customer,

You received this email as a notice for the database update for this month. This update is designed by our IT engineers to provide higher security to our customers online accounts, prevent unauthorized account access and other types of online fraud.

You are required to update your online profile by clicking on the following link:

Click here to access your online profile

Please note that this a one-time task that will take only 3-5 minutes of your precious time. However, failure in updating your profile will result in limiting your account access. We appologize for any inconvenience.

Thank you,
George H. Scott,
IT Assistant,
Western Union.

Safari x 66
<a href="">Ghana-UK</a> /Ghana-Chad/Ghana-CdI x 2/Ghana-Benin x 7/Ghana-Nigeria x 2/Benin-Ghana/Ekpoma-Kano/Lagos-Port Harcourt/Nigeria-Ghana x 2/Nigeria-Benin x 6/Mali-CdI x 2/Örebro-Malmö/RoI-UK x 2/Netherlands-UK x 2/Belgium-UK/France-UK x 2/London-York x 2/London-Liskeard x 2/London-Looe x 4/London-Plymouth x 5/London-Rame Head x 17
Golden Pith CBC Safaris
Golden Pith HELL Safari
Golden Pith Channel 4 Safaris

Globe Sand Timer Closed lad accounts Cellphone United Kingdom Mortar Suitcase TV Star Mc Fry Goat
‘You are an animal and a bastard’
‘Fuck you and your deputy randy 1 million times’
View user's profileSend private message

Joined: 18 Nov 2008
Posts: 9264
Location: Magnolia, Mississippi

PostPosted: Fri Feb 10, 2012 7:29 pm Reply with quoteBack to top


The fake bank forum doesn't deal with phishing and the best thing to do is to forward the email (with header) that you have to the legitimate WU.
Send it to: [email protected] ( )

Also you can send it to Phish Tank ( ) and APWG ( ).

Marking this NA and then this can go to Misc Scams forum. Very Happy

United StatesCanadaUnited KingdomNigeriaGhanaBeninMalaysiaSouth AfricaSwitzerlandTogoChinaSpainMadagascar FlagBulgeriaUnited Arab EmiratesUkraineUnited NationsItalyLibya FlagCzech Republic
NetherlandsNew ZealandRussiaSaudi ArabiaAustraliaBahamas, TheIvory CoastDenmarkBelgiumHong KongFranceGermanyRomaniaBahamas, TheNew ZealandcameroonBurkina Faso x 2714
Easter Egg 2012 Cellphone Closed lad accounts Mortar pony pony Nurse Nastys Audi TT Nurse Nastys Audi TT Goat Tattoo Mc Fry Elite Ninja Team Member
Safari Vcamera Paga John Safari Vcamera Paga Willie Safari Vcamera Paga Kingsley Safari James

Safari The Dynamic Duo Travels! Vcamera Sand Timer
View user's profileSend private message
Ima Baeder
Baiting Guru

Joined: 03 May 2007
Posts: 18314

PostPosted: Fri Feb 10, 2012 10:51 pm Reply with quoteBack to top

Moved here from Fake Sites.

348 Fake Sites killed United StatesUnited KingdomUnited NationsMaltaNigeriaGhanaBeninGermanySouth AfricaRussiaTogoMalaysiaEuropean UnionJapanIvory CoastSpainFranceSwitzerlandChinaCanadaItalyThailand

Star Mugu Reseller Mortar Closed lad accounts x 100 Sand Timer 2 Years Pretty Rose Mc Fry Mc Fry Nurse Nastys Audi TT Goat Flying Monkey Easter Egg 2011
View user's profileSend private message
Display posts from previous:      
Post new topicReply to topic

 Jump to:   

View next topic
View previous topic
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum

E-Mail Header Analysis

All Content © 2003 -
Powered by phpBB © 2001, 2002 phpBB Group :S5: FI Theme :: All times are GMT