SmartFeedSmartFeed          

Porsche Hangout


WELCOME - YOU ARE CURRENTLY VIEWING 419EATER AS A GUEST

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

ScamWarners.com - Internet Anti-Fraud Center - now open!


 Can some experts look at this email from my kids bank?

View next topic
View previous topic
 
Post new topicReply to topic
Author Message
Catcher In The Lie
Master of Master Baiters


Joined: 22 Sep 2008
Posts: 877
Location: 404 Yellow Brick Road


PostPosted: Sat Jan 31, 2009 6:27 am Reply with quoteBack to top

I'm suspicious about this email I received from Regions Bank. The first two links say "URL/Regions not found" but the one on the very bottom that says "Please sign on to your secure on line banking session at regions.com, etc. goes right to the bank log-in site. Both of my kids have acct's at Regions, so I think I need to warn them. Also, the link is live in the email, but it's not showing that way when I post it here. (Apelord says Dallas, TX & Valencia, Spain) Thanks!

Images - Options

Flag this message
Online Banking Alert
Sunday, January 25, 2009 11:34 AM
From Regions Bank Sun Jan 25 09:34:58 2009
Return-Path: <[email protected]>
Authentication-Results: mta160.mail.ac4.yahoo.com from=regions.com; domainkeys=neutral (no sig); from=regions.com; dkim=neutral (no sig)
Received: from 174.36.164.9 (EHLO media.mpdedicated.com) (174.36.164.9) by mta160.mail.ac4.yahoo.com with SMTP; Fri, 30 Jan 2009 02:10:33 -0800
Received: from 84.126.42.228.dyn.user.ono.com ([84.126.42.228] helo=User) by host314218.mpdedicated.com with esmtpa (Exim 4.69) (envelope-from <[email protected]>) id 1LR8sx-000230-Rr; Sun, 25 Jan 2009 11:35:05 -0600
From:
"Regions Bank"<[email protected]>
Add sender to Contacts
Subject: Online Banking Alert
Date: Sun, 25 Jan 2009 18:34:58 +0100
MIME-Version: 1.0
Content-Type: text/html; charset="Windows-1251"
Content-Transfer-Encoding: 7bit
Content-Length: 1991
Compact Headers



We have noticed irregular activity on your Regions check card.

In view of this, your RegionsNET online profile has been locked. This has been done to secure your accounts and to protect your private information. Regions Bank is committed to making sure that your online transactions are secure.

To unlock your account, and verify your identity please follow this link and sign in:
https://www.regions.com

Sincerely,
Regions
Online Customer Service
Protect yourself from fraud and identity theft. To learn more, go to
http://www.regions.com

If you have a question about your account, please sign on to your secure online banking session at regions.com, click the Sign On button and then select "Contact Us."

_________________
Closed lad accounts x 11 United Kingdom x 20 Nigeria Italy Senegal Ghana United States Senegal Vietnam Flag Malaysia China Romania

pony
"I don't want you to be burdered again." Ali the hitlad Sule
Click here to support 419Eater.com
View user's profileSend private message
bill2
Baiting Guru


Joined: 10 Sep 2006
Posts: 5496
Location: Yeah who can tell me where I am?


PostPosted: Sat Jan 31, 2009 6:42 am Reply with quoteBack to top

Header says 84.126.42.228 Spain (Valencia) Wink and even with out that I would say.


First of all your bank will never ask that online, second that link can show you https://www.regions.com but go somewhere else, can't check that from here, look in message source where the link leads.
third
Quote:
Address lookup
canonical name regions.com.
addresses 205.255.240.13
Domain Name: REGIONS.COM
Registrar: NETWORK SOLUTIONS, LLC.
Whois Server: whois.networksolutions.com
Referral URL: http://www.networksolutions.com
Name Server: DNS1.REGIONS.COM
Name Server: NS1.AMSOUTH.COM
Status: clientDeleteProhibited
Status: clientTransferProhibited
Status: clientUpdateProhibited
Updated Date: 19-dec-2008
Creation Date: 13-apr-2000
Expiration Date: 13-apr-2013
Registrant:
Regions Financial Corporation
2090 Parkway Office Circle
Birmingham, AL 35244
US
Administrative Contact, Technical Contact:
Regions Financial Corporation [email protected]
2090 Parkway Office Circle
Birmingham, AL 35244
US
1-800-REGIONS fax: 205-261-6863


Record expires on 13-Apr-2013.
Record created on 13-Apr-2000.
Database last updated on 31-Jan-2009 01:23:29 EST.
Network Whois record

Queried whois.arin.net with "205.255.240.13"...

OrgName: AmSouth Bank
OrgID: AMSOUT
Address: 720 39th Street North
City: Birmingham
StateProv: AL
PostalCode: 35222
Country: US
looks real enough if the link really takes you there, but does it?

Best phone/visit the bank and clear the problem, then you know who you're dealing with.

Can you post the email as you can see it when you go for the header?

EDIT. just to be sure, IT IS FAKE!

If you post the source of the email where it will list a different website I'll go after them and try to close them down

_________________
I don't do bling, I just do lads Evil or Very Mad

Last edited by bill2 on Sat Jan 31, 2009 6:50 am; edited 1 time in total
View user's profileSend private message
Artemis
Baiting Guru


Joined: 19 Feb 2006
Posts: 31268
Location: Lower Elements


PostPosted: Sat Jan 31, 2009 6:47 am Reply with quoteBack to top

This is a phishing attempt.

Although the link looks like the real bank if you follow the link it will show a different address. The scammers are trying to get your username and password.

NO bank EVER asks you to verify your details via an email, EVER Smile

_________________
Total kills 21667 + Mugu Reseller x 5 Mortar x10
Star Purple Flower Easter Egg Easter 2015
View user's profileSend private message
Catcher In The Lie
Master of Master Baiters


Joined: 22 Sep 2008
Posts: 877
Location: 404 Yellow Brick Road


PostPosted: Sat Jan 31, 2009 3:58 pm Reply with quoteBack to top

Thank you Bill2 and Artemus! Yes, I did call the toll free no. late last night when I saw it but couldn't get past the menu. So now I know for sure and can warn my children & others. Sad to have to live in a world with your defenses up all the time.... Crying or Very sad

_________________
Closed lad accounts x 11 United Kingdom x 20 Nigeria Italy Senegal Ghana United States Senegal Vietnam Flag Malaysia China Romania

pony
"I don't want you to be burdered again." Ali the hitlad Sule
Click here to support 419Eater.com
View user's profileSend private message
bill2
Baiting Guru


Joined: 10 Sep 2006
Posts: 5496
Location: Yeah who can tell me where I am?


PostPosted: Sat Jan 31, 2009 4:33 pm Reply with quoteBack to top

Hey, you lock your car and take the keys in the house, you lock your house why would the computer not bring in criminal elements into your house, just a new door to your stuff and money that criminals are banging on 24/7, it's a big bad world out there Confused Better get used to it, firewall up? Virus scanner updated? Explained to your family about 419 scams? Never to pay strangers any money? All part of modern living. Laughing

_________________
I don't do bling, I just do lads Evil or Very Mad
View user's profileSend private message
Tsnerd
Not quite a Newb


Joined: 14 Jul 2005
Posts: 41


PostPosted: Sat Jan 31, 2009 4:54 pm Reply with quoteBack to top

Moved here.

_________________

Fakers: many, many, lots; an SSL and a couple of Resellers.
Mortar x 6
AH, AH, AH! Two little !
View user's profileSend private message
hoorah
Master Baiter


Joined: 14 Feb 2009
Posts: 210


PostPosted: Thu Feb 19, 2009 4:33 pm Reply with quoteBack to top

One thing I try sometimes (just to see if its fake) is try to login with something obscene as the login and password.

If I get let in, its obviously a fake.

Now, I don't know if any of the scammers websites pass on your details and actually log you in while stealing them at the same time, so that if you gave them fake info, it would reject you?
View user's profileSend private messageSkype Name
Tsnerd
Not quite a Newb


Joined: 14 Jul 2005
Posts: 41


PostPosted: Thu Feb 19, 2009 4:54 pm Reply with quoteBack to top

Quote:
just to see if its fake


Emails like this are always going to be fake, Hoorah, as Artemis pointed out. Very Happy

Just a friendly word of warning - many phishing sites are malicious, so if you are following links and viewing pages I suggest you have good protection.

_________________

Fakers: many, many, lots; an SSL and a couple of Resellers.
Mortar x 6
AH, AH, AH! Two little !
View user's profileSend private message
OxygenDeprived
Baiting Guru


Joined: 05 Mar 2007
Posts: 4138
Location: Crushing Lad's spirits, one at a time...


PostPosted: Thu Feb 19, 2009 5:24 pm Reply with quoteBack to top

hoorah wrote:
One thing I try sometimes (just to see if its fake) is try to login with something obscene as the login and password.

If I get let in, its obviously a fake.

Now, I don't know if any of the scammers websites pass on your details and actually log you in while stealing them at the same time, so that if you gave them fake info, it would reject you?


Not all of them work like that though. I've looked through the code of a few a while ago and not all grant access with bad info, so you can't go by that 100% of the time.

_________________
Premium Membership | Need a Mentor? | Eater University
Kelv1n
Safari Sandra, Owerri to Lagos Sand Timer 18+ months | Safari Oga Mark - Dakar to St. Louis, Senegal
Safari N4ncy & Yeb0ah - Accra to Abidjan | Safari Safari Safari Safari Safari Barrister Stone Sand Timer 13+ months
PD Results: Safari x18
AS Results: Safari x4
Closed lad accounts x 15
Mortar x 3
Cellphone x 56 Easter Egg 2013
United Kingdom 138 sites killed
View user's profileSend private messageVisit poster's website
Display posts from previous:      
Post new topicReply to topic


 Jump to:   



View next topic
View previous topic
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum



E-Mail Header Analysis


All Content © 2003 - 419Eater.com
Powered by phpBB © 2001, 2002 phpBB Group :S5: FI Theme :: All times are GMT