Stealing via Western Union

  • -5
    Kristela
    | 4 replies
    Hello people :)
    I was actually a victim of the stealing via Western Union.But I have a website they sent me.Can anybody find out more infos about this website?I would be soooo thankful. http://www. westernunion.de.wucomweb.net/WUCOMWEB/transferStatusIntlAction.domethod=countryload=de&nextSecurePage=Y.htm
  • +6
    DaFox replies to Kristela
    I would stay away from that site.
    WhoIs data shows it to be hidden behind a Russian Domain proxy and the website was created only a couple weeks ago:

    WHOIS
    wucomweb.net

    Contact Information
    Registrant Contact
    Name: Privacy protection service - whoisproxy.ru
    Organization: Privacy protection service - whoisproxy.ru
    Mailing Address: PO box 99, whoisproxy.ru, Moscow Moscow 123308 RU
    Phone: +7.4957856536
    Ext:
    Fax:
    Fax Ext:
    Email:
    Admin Contact
    Name: Privacy protection service - whoisproxy.ru
    Organization: Privacy protection service - whoisproxy.ru
    Mailing Address: PO box 99, whoisproxy.ru, Moscow Moscow 123308 RU
    Phone: +7.4957856536
    Ext:
    Fax:
    Fax Ext:
    Email:
    Tech Contact
    Name: Privacy protection service - whoisproxy.ru
    Organization: Privacy protection service - whoisproxy.ru
    Mailing Address: PO box 99, whoisproxy.ru, Moscow Moscow 123308 RU
    Phone: +7.4957856536
    Ext:
    Fax:
    Fax Ext:
    Email:
    Registrar
    WHOIS Server: whois.nic.ru
    URL: http://www.nic.ru
    Registrar: Regional Network Information Center, JSC dba RU-CENTER
    IANA ID: 463
    Abuse Contact Email: tld-abuse@nic.ru
    Abuse Contact Phone: +7.4959944601
    Status
    Domain Status: clientTransferProhibited
    Important Dates
    Updated Date: 2015-06-08
    Created Date: 2015-06-08
    Registration Expiration Date: 2016-06-07
    Name Servers
    ns1.wucomweb.net 109.163.239.229
    ns2.wucomweb.net 109.163.239.229
    Raw WHOIS Record

    Domain Name: WUCOMWEB.NET
    Registry Domain ID: 1936595963_DOMAIN_NET-VRSN
    Registrar WHOIS Server: whois.nic.ru
    Registrar URL: http://www.nic.ru
    Updated Date: 2015-06-08T17:30:55Z
    Creation Date: 2015-06-08T17:28:41Z
    Registrar Registration Expiration Date: 2016-06-07T21:00:00Z
    Registrar: Regional Network Information Center, JSC dba RU-CENTER
    Registrar IANA ID: 463
    Registrar Abuse Contact Email: tld-abuse@nic.ru
    Registrar Abuse Contact Phone: +7.4959944601
    Domain Status: clientTransferProhibited
    Registry Registrant ID:
    Registrant Name: Privacy protection service - whoisproxy.ru
    Registrant Organization: Privacy protection service - whoisproxy.ru
    Registrant Street: PO box 99, whoisproxy.ru
    Registrant City: Moscow
    Registrant State/Province: Moscow
    Registrant Postal Code: 123308
    Registrant Country: RU
    Registrant Phone: +7.4957856536
    Registrant Phone Ext:
    Registrant E-mail: wucomweb.net@whoisproxy.ru
    Registry Admin ID:
    Admin Name: Privacy protection service - whoisproxy.ru
    Admin Organization: Privacy protection service - whoisproxy.ru
    Admin Street: PO box 99, whoisproxy.ru
    Admin City: Moscow
    Admin State/Province: Moscow
    Admin Postal Code: 123308
    Admin Country: RU
    Admin Phone: +7.4957856536
    Admin Phone Ext:
    Admin E-mail: wucomweb.net@whoisproxy.ru
    Registry Tech ID:
    Tech Name: Privacy protection service - whoisproxy.ru
    Tech Organization: Privacy protection service - whoisproxy.ru
    Tech Street: PO box 99, whoisproxy.ru
    Tech City: Moscow
    Tech State/Province: Moscow
    Tech Postal Code: 123308
    Tech Country: RU
    Tech Phone: +7.4957856536
    Tech Phone Ext:
    Tech E-mail: wucomweb.net@whoisproxy.ru
    Name Server: ns1.wucomweb.net 109.163.239.229
    Name Server: ns2.wucomweb.net 109.163.239.229
    DNSSEC: unsigned
    URL of the ICANN WHOIS Data Problem Reporting System: http://wdprs.internic.net/
    >>> Last update of WHOIS database: 2015.06.23T14:28:59Z <<<
  • +7
    Slim replies to Kristela
    800notes is a website where we can discuss (and sometimes investigate) phone numbers.
    You did not give us a phone number.

    We can also try to reveal phone scams, and suggest ways to avoid them.
    You did not give us the details of a phone scam.

    You seem to claim Western Union is being used to steal from you
    But, the site you gave is not a legitimate Western Union site.
    Domain is registered with nic.ru
    Domain Name Server (DNS) is hosted by Saulhost Hosting, Germany
    Domain was created on 6/8/2015   <<<<<<<<<<<<<   (New site, typical of scam sites)
    Domain expires on 6/7/2016    <<<<<<<<<<<<<<
    The domain is protected by a privacy protection proxy, so we do not know the details of the registrant.
    The proxy's Registrant City: Moscow

    Yes, there are many criminals who ask for payment via Western Union.  However, the Western Union people (at least those in the USA) are instructed to ask the sender of money if the recipient is a relative (or at least a trusted recipient).  WU is a money transfer service.  It is the responsibility of the sender to assure the transfer is for a legitimate reason, to a legitimate entity.

    I am sorry you have been scammed.
    Consider contacting Law Enforcement.

    Lurkers:
    I do NOT recommend clicking on the link in the original post!
  • +7
    Badge714
    You see something on a web page you like, or are asked to send money. The person 'helpfully' provides a link. As we see, you find out later that you have been a victim of a look-alike, sound-alike web site. Never click in a link given to you, especially if it involves financial information (yours!). As far as Western Union, or any cash wire transfer service goes - NEVER use these services for an internet purchase, business transaction, or where you do not personally know who is receiving the money. NO real business accepts this form of payment, that's why crooks use it. It's CASH!
  • +7
    JoeyDee
    I hope NO ONE clicks on that link (which should be removed) as it is likely to be a malware site that can infect just by visiting it. Reported for removal or at least munging of the llink.
  • +6
    Yoda1725
    If you have to click that link, and I sure won't you had better be running a sandbox, or vm. Take it from an IT professional, don't do it.
  • +5
    William
    800notes interposes a warning page so to get to that website one has to click here, then click a second time on the warning page.

    What would be good is for 800notes to emphasize the domain part of every link (heavier font), and de-emphasize the rest of the URL (lighter font) to make the domain part stand out really well.
  • +6
    Chewbacca-the-Wookie
    | 1 reply
    Also, it's a good idea to educate yourself about what to look for.  The e-mail and social media scammers are good at their craft.  They can send you an e-mail or PM that looks like it came from someone you know (or even from yourself), but with a malicious link.  Some even impersonate legitimate institutions such as your bank or credit union, attempting to make the message look "official".  These are usually easy to spot if you know what you're looking for.  For instance, if the message:
    • is poorly written, contains incorrect grammar/spelling, or appears to be in broken English,
    • includes little or no explanation of the link other than You've gotta see this! or Check this out!,
    • makes a suspicious claim like I just scored $1000 by clicking here!,
    • claims your security has been compromised in one way or another and asks for "verification" of personal information (this one is most commonly related to fake bank messages or any other attempt to get your passwords, PIN's, account numbers, SSN, etc),
    • claims you've won a contest you never entered and/or asks you to pay something (i.e. a "processing fee") to claim your "winnings",
    • asks for any suspicious method of payment that cannot be traced (Western Union, Green Dot, prepaid debit card, etc),
    • displays a link with a suspicious URL that is likely not connected to the institution or company in question (you can find the REAL URL with a quick Google search and do a WHOIS lookup on the suspicious one),
    • looks suspiciously generic, as if it could be bulk-sent to a large audience (which it likely is),
    • asks for ANY of your e-mail or other online login information (scammers can use this info to get into your contacts list and spam others posing as you).
    ​Good rule of thumb - if you have ANY doubt whatsoever, don't click ANYTHING.  If the e-mail appears to come from someone you know, confirm whether or not they sent it.  If they didn't, notify them that their e-mail and/or social media accounts may have been compromised, and that they should change their login credentials IMMEDIATELY.  If the message appears to come from a financial institution or legitimate company, call them IMMEDIATELY to report your suspicion.  Most will issue fraud alerts to their customers to help prevent someone else from being taken, and will follow up with the proper authorities.

    When it comes right down to it, it's about trusting your instincts.  The more you exercise them, the sharper they'll become.
  • +2
    Hmmmmmm
    Now that summer is here I am taking a little time to relax. About to hit the beach for some sun and mai tais. Just like Wolfman. The scam callers have been calling and stalking me for a while so they know me enough, my routine etc. There is nothing more to know. If they want to talk to me any further I would like to know some about them from their own mouth. Like which country are they scamming from? Which western union do they go to? Kindly update us with your information, who you are and what your intentions are....
  • +2
    NineLives
    | 2 replies
    I love maitais. I love pina coladas. La isla bonita!
  • +2
    William replies to Chewbacca-the-Wookie
    Some scammers blast out emails hoping that a few recipients will not notice it is a scam because the recipient already gets email from that particular bank. I have never clicked any link in any bank email. I am signed up for email notices with Wells Fargo. One time after I did a transaction at a teller, I got an email notice soon after, but that email notice wasn't quite right. After comparing it with other email notices I found the little oddities that proved it was a scam. Sheer coincidence that time. The real email notice arrived the next day, or rather, I found it the next day, as I don't constantly look at email.

    Years ago I got a Cingular account. Some time after AT&T took it over, they stopped sending out paper listings of all the numbers calling or called, and required people to sign up online to get the listings if they wanted them. So I signed up. I went for a while without checking the listings - as I stayed within the minutes - and they sent me an email asking me to log in AND they provided a link to do it. Sheesh.
  • +1
    Chewbacca-the-Wookie replies to NineLives
    | 1 reply
    Wow!  You took me right back to the 80's with that one!  :-)
  • +1
    NineLives replies to Chewbacca-the-Wookie
    Here you go.... :-)

    https://youtu.be/qqIIW7nxBgc
  • +2
    mmmdonuts
    | 1 reply
    Cool.  Phishing in a phishing forum.
  • +1
    1-C replies to mmmdonuts
    Yep! The sheer irony of it all ;)

Reply to topic