Author |
Message |
Catcher In The Lie
Master of Master Baiters
Joined: 22 Sep 2008
Posts: 877
Location: 404 Yellow Brick Road
|
Posted:
Sat Jan 31, 2009 6:27 am |
|
I'm suspicious about this email I received from Regions Bank. The first two links say "URL/Regions not found" but the one on the very bottom that says "Please sign on to your secure on line banking session at regions.com, etc. goes right to the bank log-in site. Both of my kids have acct's at Regions, so I think I need to warn them. Also, the link is live in the email, but it's not showing that way when I post it here. (Apelord says Dallas, TX & Valencia, Spain) Thanks!
Images - Options
Flag this message
Online Banking Alert
Sunday, January 25, 2009 11:34 AM
From Regions Bank Sun Jan 25 09:34:58 2009
Return-Path: <[email protected]>
Authentication-Results: mta160.mail.ac4.yahoo.com from=regions.com; domainkeys=neutral (no sig); from=regions.com; dkim=neutral (no sig)
Received: from 174.36.164.9 (EHLO media.mpdedicated.com) (174.36.164.9) by mta160.mail.ac4.yahoo.com with SMTP; Fri, 30 Jan 2009 02:10:33 -0800
Received: from 84.126.42.228.dyn.user.ono.com ([84.126.42.228] helo=User) by host314218.mpdedicated.com with esmtpa (Exim 4.69) (envelope-from <[email protected]>) id 1LR8sx-000230-Rr; Sun, 25 Jan 2009 11:35:05 -0600
From:
"Regions Bank"<[email protected]>
Add sender to Contacts
Subject: Online Banking Alert
Date: Sun, 25 Jan 2009 18:34:58 +0100
MIME-Version: 1.0
Content-Type: text/html; charset="Windows-1251"
Content-Transfer-Encoding: 7bit
Content-Length: 1991
Compact Headers
We have noticed irregular activity on your Regions check card.
In view of this, your RegionsNET online profile has been locked. This has been done to secure your accounts and to protect your private information. Regions Bank is committed to making sure that your online transactions are secure.
To unlock your account, and verify your identity please follow this link and sign in:
https://www.regions.com
Sincerely,
Regions
Online Customer Service
Protect yourself from fraud and identity theft. To learn more, go to
http://www.regions.com
If you have a question about your account, please sign on to your secure online banking session at regions.com, click the Sign On button and then select "Contact Us." |
_________________ x 11 x 20
"I don't want you to be burdered again." Ali the hitlad Sule
Click here to support 419Eater.com |
|
|
|
bill2
Baiting Guru
Joined: 10 Sep 2006
Posts: 5495
Location: Yeah who can tell me where I am?
|
Posted:
Sat Jan 31, 2009 6:42 am |
|
Header says 84.126.42.228 Spain (Valencia) and even with out that I would say.
First of all your bank will never ask that online, second that link can show you https://www.regions.com but go somewhere else, can't check that from here, look in message source where the link leads.
third
Quote: |
Address lookup
canonical name regions.com.
addresses 205.255.240.13
Domain Name: REGIONS.COM
Registrar: NETWORK SOLUTIONS, LLC.
Whois Server: whois.networksolutions.com
Referral URL: http://www.networksolutions.com
Name Server: DNS1.REGIONS.COM
Name Server: NS1.AMSOUTH.COM
Status: clientDeleteProhibited
Status: clientTransferProhibited
Status: clientUpdateProhibited
Updated Date: 19-dec-2008
Creation Date: 13-apr-2000
Expiration Date: 13-apr-2013
Registrant:
Regions Financial Corporation
2090 Parkway Office Circle
Birmingham, AL 35244
US
Administrative Contact, Technical Contact:
Regions Financial Corporation [email protected]
2090 Parkway Office Circle
Birmingham, AL 35244
US
1-800-REGIONS fax: 205-261-6863
Record expires on 13-Apr-2013.
Record created on 13-Apr-2000.
Database last updated on 31-Jan-2009 01:23:29 EST.
Network Whois record
Queried whois.arin.net with "205.255.240.13"...
OrgName: AmSouth Bank
OrgID: AMSOUT
Address: 720 39th Street North
City: Birmingham
StateProv: AL
PostalCode: 35222
Country: US
|
looks real enough if the link really takes you there, but does it?
Best phone/visit the bank and clear the problem, then you know who you're dealing with.
Can you post the email as you can see it when you go for the header?
EDIT. just to be sure, IT IS FAKE!
If you post the source of the email where it will list a different website I'll go after them and try to close them down |
_________________ I don't do bling, I just do lads
Last edited by bill2 on Sat Jan 31, 2009 6:50 am; edited 1 time in total |
|
|
|
Artemis
Baiting Guru
Joined: 19 Feb 2006
Posts: 31267
Location: Lower Elements
|
Posted:
Sat Jan 31, 2009 6:47 am |
|
This is a phishing attempt.
Although the link looks like the real bank if you follow the link it will show a different address. The scammers are trying to get your username and password.
NO bank EVER asks you to verify your details via an email, EVER |
_________________ Total kills 21667 + x 5 x10
|
|
|
|
Catcher In The Lie
Master of Master Baiters
Joined: 22 Sep 2008
Posts: 877
Location: 404 Yellow Brick Road
|
Posted:
Sat Jan 31, 2009 3:58 pm |
|
Thank you Bill2 and Artemus! Yes, I did call the toll free no. late last night when I saw it but couldn't get past the menu. So now I know for sure and can warn my children & others. Sad to have to live in a world with your defenses up all the time.... |
_________________ x 11 x 20
"I don't want you to be burdered again." Ali the hitlad Sule
Click here to support 419Eater.com |
|
|
|
bill2
Baiting Guru
Joined: 10 Sep 2006
Posts: 5495
Location: Yeah who can tell me where I am?
|
Posted:
Sat Jan 31, 2009 4:33 pm |
|
Hey, you lock your car and take the keys in the house, you lock your house why would the computer not bring in criminal elements into your house, just a new door to your stuff and money that criminals are banging on 24/7, it's a big bad world out there Better get used to it, firewall up? Virus scanner updated? Explained to your family about 419 scams? Never to pay strangers any money? All part of modern living. |
_________________ I don't do bling, I just do lads |
|
|
|
Tsnerd
Not quite a Newb
Joined: 14 Jul 2005
Posts: 41
|
Posted:
Sat Jan 31, 2009 4:54 pm |
|
Moved here. |
_________________
Fakers: many, many, lots; an SSL and a couple of Resellers.
x 6
AH, AH, AH! Two little ! |
|
|
|
hoorah
Master Baiter
Joined: 14 Feb 2009
Posts: 209
|
Posted:
Thu Feb 19, 2009 4:33 pm |
|
One thing I try sometimes (just to see if its fake) is try to login with something obscene as the login and password.
If I get let in, its obviously a fake.
Now, I don't know if any of the scammers websites pass on your details and actually log you in while stealing them at the same time, so that if you gave them fake info, it would reject you? |
|
|
|
|
Tsnerd
Not quite a Newb
Joined: 14 Jul 2005
Posts: 41
|
Posted:
Thu Feb 19, 2009 4:54 pm |
|
Quote: |
just to see if its fake |
Emails like this are always going to be fake, Hoorah, as Artemis pointed out.
Just a friendly word of warning - many phishing sites are malicious, so if you are following links and viewing pages I suggest you have good protection. |
_________________
Fakers: many, many, lots; an SSL and a couple of Resellers.
x 6
AH, AH, AH! Two little ! |
|
|
|
OxygenDeprived
Baiting Guru
Joined: 05 Mar 2007
Posts: 4138
Location: Crushing Lad's spirits, one at a time...
|
Posted:
Thu Feb 19, 2009 5:24 pm |
|
hoorah wrote: |
One thing I try sometimes (just to see if its fake) is try to login with something obscene as the login and password.
If I get let in, its obviously a fake.
Now, I don't know if any of the scammers websites pass on your details and actually log you in while stealing them at the same time, so that if you gave them fake info, it would reject you? |
Not all of them work like that though. I've looked through the code of a few a while ago and not all grant access with bad info, so you can't go by that 100% of the time. |
_________________ Premium Membership | Need a Mentor? | Eater University
Kelv1n
Sandra, Owerri to Lagos 18+ months | Oga Mark - Dakar to St. Louis, Senegal
N4ncy & Yeb0ah - Accra to Abidjan | Barrister Stone 13+ months
PD Results: x18
AS Results: x4
x 15
x 3
x 56
138 sites killed |
|
|
|
|
|
View next topic
View previous topic
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
|