Can some experts look at this email from my kids bank?

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

Posted: Sat Jan 31, 2009 6:27 am

I'm suspicious about this email I received from Regions Bank. The first two links say "URL/Regions not found" but the one on the very bottom that says "Please sign on to your secure on line banking session at regions.com, etc. goes right to the bank log-in site. Both of my kids have acct's at Regions, so I think I need to warn them. Also, the link is live in the email, but it's not showing that way when I post it here. (Apelord says Dallas, TX & Valencia, Spain) Thanks!

Images - Options

Flag this message
Online Banking Alert
Sunday, January 25, 2009 11:34 AM
From Regions Bank Sun Jan 25 09:34:58 2009
Return-Path: <[email protected]>
Authentication-Results: mta160.mail.ac4.yahoo.com from=regions.com; domainkeys=neutral (no sig); from=regions.com; dkim=neutral (no sig)
Received: from 174.36.164.9 (EHLO media.mpdedicated.com) (174.36.164.9) by mta160.mail.ac4.yahoo.com with SMTP; Fri, 30 Jan 2009 02:10:33 -0800
Received: from 84.126.42.228.dyn.user.ono.com ([84.126.42.228] helo=User) by host314218.mpdedicated.com with esmtpa (Exim 4.69) (envelope-from <[email protected]>) id 1LR8sx-000230-Rr; Sun, 25 Jan 2009 11:35:05 -0600
From:
"Regions Bank"<[email protected]>
Add sender to Contacts
Subject: Online Banking Alert
Date: Sun, 25 Jan 2009 18:34:58 +0100
MIME-Version: 1.0
Content-Type: text/html; charset="Windows-1251"
Content-Transfer-Encoding: 7bit
Content-Length: 1991
Compact Headers

We have noticed irregular activity on your Regions check card.

In view of this, your RegionsNET online profile has been locked. This has been done to secure your accounts and to protect your private information. Regions Bank is committed to making sure that your online transactions are secure.

To unlock your account, and verify your identity please follow this link and sign in:
https://www.regions.com

Sincerely,
Regions
Online Customer Service
Protect yourself from fraud and identity theft. To learn more, go to
http://www.regions.com

If you have a question about your account, please sign on to your secure online banking session at regions.com, click the Sign On button and then select "Contact Us."

Posted: Sat Jan 31, 2009 6:42 am

Header says 84.126.42.228 Spain (Valencia) Wink

and even with out that I would say.

First of all your bank will never ask that online, second that link can show you https://www.regions.com but go somewhere else, can't check that from here, look in message source where the link leads.
third

Quote:

Address lookup
canonical name regions.com.
addresses 205.255.240.13
Domain Name: REGIONS.COM
Registrar: NETWORK SOLUTIONS, LLC.
Whois Server: whois.networksolutions.com
Referral URL: http://www.networksolutions.com
Name Server: DNS1.REGIONS.COM
Name Server: NS1.AMSOUTH.COM
Status: clientDeleteProhibited
Status: clientTransferProhibited
Status: clientUpdateProhibited
Updated Date: 19-dec-2008
Creation Date: 13-apr-2000
Expiration Date: 13-apr-2013
Registrant:
Regions Financial Corporation
2090 Parkway Office Circle
Birmingham, AL 35244
US
Administrative Contact, Technical Contact:
Regions Financial Corporation [email protected]
2090 Parkway Office Circle
Birmingham, AL 35244
US
1-800-REGIONS fax: 205-261-6863

Record expires on 13-Apr-2013.
Record created on 13-Apr-2000.
Database last updated on 31-Jan-2009 01:23:29 EST.
Network Whois record

Queried whois.arin.net with "205.255.240.13"...

OrgName: AmSouth Bank
OrgID: AMSOUT
Address: 720 39th Street North
City: Birmingham
StateProv: AL
PostalCode: 35222
Country: US

looks real enough if the link really takes you there, but does it?

Best phone/visit the bank and clear the problem, then you know who you're dealing with.

Can you post the email as you can see it when you go for the header?

EDIT. just to be sure, IT IS FAKE!

If you post the source of the email where it will list a different website I'll go after them and try to close them down

Posted: Sat Jan 31, 2009 6:47 am

This is a phishing attempt.

Although the link looks like the real bank if you follow the link it will show a different address. The scammers are trying to get your username and password.

NO bank EVER asks you to verify your details via an email, EVER Smile

Posted: Sat Jan 31, 2009 3:58 pm

Thank you Bill2 and Artemus! Yes, I did call the toll free no. late last night when I saw it but couldn't get past the menu. So now I know for sure and can warn my children & others. Sad to have to live in a world with your defenses up all the time.... Crying or Very sad

Posted: Sat Jan 31, 2009 4:33 pm

Hey, you lock your car and take the keys in the house, you lock your house why would the computer not bring in criminal elements into your house, just a new door to your stuff and money that criminals are banging on 24/7, it's a big bad world out there Confused

Better get used to it, firewall up? Virus scanner updated? Explained to your family about 419 scams? Never to pay strangers any money? All part of modern living. Laughing

Not quite a Newb Joined: 14 Jul 2005 Posts: 41

Moved here.

Master Baiter Joined: 14 Feb 2009 Posts: 209

One thing I try sometimes (just to see if its fake) is try to login with something obscene as the login and password.

If I get let in, its obviously a fake.

Now, I don't know if any of the scammers websites pass on your details and actually log you in while stealing them at the same time, so that if you gave them fake info, it would reject you?

Not quite a Newb Joined: 14 Jul 2005 Posts: 41

Quote:

just to see if its fake

Emails like this are always going to be fake, Hoorah, as Artemis pointed out. Very Happy

Just a friendly word of warning - many phishing sites are malicious, so if you are following links and viewing pages I suggest you have good protection.

Posted: Thu Feb 19, 2009 5:24 pm

hoorah wrote:

One thing I try sometimes (just to see if its fake) is try to login with something obscene as the login and password.

If I get let in, its obviously a fake.

Now, I don't know if any of the scammers websites pass on your details and actually log you in while stealing them at the same time, so that if you gave them fake info, it would reject you?

Not all of them work like that though. I've looked through the code of a few a while ago and not all grant access with bad info, so you can't go by that 100% of the time.

Can some experts look at this email from my kids bank?	View next topic View previous topic