What is this?

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

Hello I'm New here! Joined: 07 Jul 2010 Posts: 5

Recieved this from one of my lad friends today. Have not clicked on link for fear of accidently installing spyware on my computer. Does anyone know what this actually is?

-----------------------
ATTENTION.....CUSTOMER DATE:07-07-2010

This is to inform you that your mail was received and we would like to inform you that you are to click on the link below and when the web page opens, Click on LOG IN on the top right corner and it takes you to a new page, on the page click on LOG IN SECURELY, then enter the user ID and password then hold ON for 5 seconds. You can the click on TRANSFER FUNDS to make transfer to your personal account.

kindly click http://www2..com to access the account with the below information ;

http://www2..com

User ID : jvcbbc5
Password: 1977

Warm Regards,

Hello I'm New here! Joined: 07 Jul 2010 Posts: 5

I just releazed that my post turned the URLs into working links, so have removed the domain name. The domain name is onlinentwestukplc

Posted: Thu Jul 08, 2010 4:17 am

Is this an email from a lad that you are baiting?

If so and the lad has your money in a "bank" and wants you to see the informtion. He has nothing to gain by messing with your computer as that would mess up his expected payday.

Post the email with headers and put spaces in the url to disable cliking and then we can all take at look and make a better decision.

Hello I'm New here! Joined: 07 Jul 2010 Posts: 5

Yes, this is a lad i am baiting. Here is the email w/ headers:

--------------

Delivered-To: [email protected]
Received: by 10.220.186.138 with SMTP id cs10cs114458vcb;
Wed, 7 Jul 2010 02:27:20 -0700 (PDT)
Received: by 10.100.92.18 with SMTP id p18mr7150992anb.181.1278494839615;
Wed, 07 Jul 2010 02:27:19 -0700 (PDT)
Return-Path: <[email protected]>
Received: from col0-omc1-s3.col0.hotmail.com (col0-omc1-s3.col0.hotmail.com [65.55.34.13])
by mx.google.com with ESMTP id n13si11139886anh.129.2010.07.07.02.27.19;
Wed, 07 Jul 2010 02:27:19 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 65.55.34.13 as permitted sender) client-ip=65.55.34.13;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of [email protected] designates 65.55.34.13 as permitted sender) [email protected]
Received: from COL103-W34 ([65.55.34.7]) by col0-omc1-s3.col0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675);
Wed, 7 Jul 2010 02:25:14 -0700
Message-ID: <[email protected]>
Return-Path: [email protected]
Content-Type: multipart/alternative;
boundary="_ebf2c5ab-e095-4481-bea5-365dcafe428c_"
X-Originating-IP: [41.138.183.213]
From: NATWEST BANK PLC <[email protected]>
To: <[email protected]>
Subject: =?windows-1256?Q?ACCOUNT_DE?= =?windows-1256?Q?TAILS.=FE=FE=FE=FE?=
=?windows-1256?B?/v7+/g==?=
Date: Wed, 7 Jul 2010 10:25:14 +0100
Importance: Normal
In-Reply-To: <[email protected]>
References: <[email protected]>
MIME-Version: 1.0
X-OriginalArrivalTime: 07 Jul 2010 09:25:14.0469 (UTC) FILETIME=[4E468950:01CB1DB6]

--_ebf2c5ab-e095-4481-bea5-365dcafe428c_
Content-Type: text/plain; charset="windows-1256"
Content-Transfer-Encoding: 8bit

ATTENTION.....CUSTOMER DATE:07-07-2010

This is to inform you that your mail was received and we would like to inform you that you are to click on the link below and when the web page opens, Click on LOG IN on the top right corner and it takes you to a new page, on the page click on LOG IN SECURELY, then enter the user ID and password then hold ON for 5 seconds. You can the click on TRANSFER FUNDS to make transfer to your personal account.

kindly click http://www2.online ntwestukplc.com to access the account with the below information ;

http://www2.online ntwestukplc.com

User ID : jvcbbc5
Password: 1977

Warm Regards,
Telvin Cooper
(Foreign Transfer Manger)
Natwest Online Bank Department.
70 - 74 High Street,
Rainham ME8 7JH,
United Kingdom.
Phone: +447035958864,
+447045729745,
Fax: +448715044768
..........................................................................................................................................................................................
This message contains privileged and confidential information intended only for the person or entity to which it is addressed. Any review, retransmission, dissemination, copy or other use of, or taking of any action in reliance upon this information by persons or entities other than the intended recipient, is prohibited. If you received this message in error, please notify the sender immediately by e-mail, facsimile or telephone and thereafter delete the material from any computer. Any views expressed in this message are those of the individual sender, except where the sender specifically states them to be the view of the entity transmitting the message.
...........................................................................................................................................................................................

Posted: Thu Jul 08, 2010 5:12 am

Welcome to eater CrockHunter.

if your character is Txxxx Gixxx you have a little over 4.8 mil in the bank Laughing

This is a fake lad bank and the anti phising software is raising a stink but I went ahead and logged in. Keep baiting this lad and I will post the info in fake bank forum..

Posted in fake banks

Posted: Thu Jul 08, 2010 5:57 pm

Nice bank catch there CrocHunter

Posted: Fri Jul 09, 2010 11:26 pm

Your lads fake bank is toast. Tell him to get it fixed before you will complete the transaction and then if he creates a new site for you we will whack him again. Very Happy

Hello I'm New here! Joined: 07 Jul 2010 Posts: 5

Great idea.. email has been sent asking for clarification and to resend a working site.

CrocHunter

Posted: Sat Jul 10, 2010 4:43 am

I'll have to try to pry "bank" info out of my lads after seeing this.
Keep up the good work crochunter!