www.edilimpianti.rn.it/eventi/Image/boa

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

Posted: Mon Nov 02, 2009 7:55 am

Fake Bank of America - http://www.edilimpianti.rn.it/eventi/Image/boa

Add to DB, I'll kill.

Quote:

Delivered-To: xxxxxxx@gmail.com
Received: by 10.216.54.200 with SMTP id i50cs58376wec;
Sun, 1 Nov 2009 17:58:10 -0800 (PST)
Received: by 10.224.63.219 with SMTP id c27mr2560546qai.168.1257127090229;
Sun, 01 Nov 2009 17:58:10 -0800 (PST)
Return-Path: <onlineid@bankofamerica.com>
Received: from mail.johnv.com (mail.johnv.com [63.119.139.19])
by mx.google.com with ESMTP id 38si6824774qyk.17.2009.11.01.17.58.06;
Sun, 01 Nov 2009 17:58:10 -0800 (PST)
Received-SPF: softfail (google.com: domain of transitioning onlineid@bankofamerica.com does not designate 63.119.139.19 as permitted sender) client-ip=63.119.139.19;
Authentication-Results: mx.google.com; spf=softfail (google.com: domain of transitioning onlineid@bankofamerica.com does not designate 63.119.139.19 as permitted sender) smtp.mail=onlineid@bankofamerica.com
Received: from User ([75.150.80.105]) by mail.johnv.com with Microsoft SMTPSVC(6.0.3790.3959);
Sun, 1 Nov 2009 20:58:04 -0500
From: "Bank of America"<onlineid@bankofamerica.com>
Subject: Important Notice Regarding Your Account
Date: Sun, 1 Nov 2009 20:55:40 -0500
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1250"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Bcc:
Return-Path: onlineid@bankofamerica.com
Message-ID: <JVSWEBU6q5ijb1u2ZN9000208a3@mail.johnv.com>
X-OriginalArrivalTime: 02 Nov 2009 01:58:04.0861 (UTC) FILETIME=[EA8CFED0:01CA5B5F]

<html>

<head>

</style>
</head>

<body>
<table width="520" cellspacing="0" cellpadding="0">


<img src="https://wealthmanagement.bankofamerica.com/nsm/demo/images/logo_bofa.gif" width="250" height="60" /> 
 
We are sorry to inform you that due to the number of incorrect login
attempts,you account has been locked for security.Restore your account by
clicking on the link below: 
 
<a href="ref.php?url=http://www.edilimpianti.rn.it/eventi/Image/boa">https://bankofamerica.com/efs/servlet/login.jsp</a> 
 
Thank you for your prompt attention to this matter. 
We apologize for any inconvenience. 
 
Thank you for using Online Banking! 
 
</body>
</html>

Quote:

Domain: rn.it
Status: GEOGRAPHIC
Created: 1996-01-29 00:00:00
Last Update: 2007-08-20 15:07:19
Expire Date: 2013-12-31

Registrant
Name: ccTLD '.it' Registry - IIT/CNR
Organization: ccTLD '.it' Registry - IIT/CNR
ContactID: CCTL1-ITNIC
Address: Via Giuseppe Moruzzi 1
Pisa
56124
PI
IT
Created: 2007-03-01 10:26:04
Last Update: 2008-04-01 16:52:03

Admin Contact
Name: Domenico Laforenza
Organization: Istituto di Informatica e Telematica del CNR - ccTLD ".it" Registry
ContactID: DL1-ITNIC
Address: Via Giuseppe Moruzzi, 1
Pisa
56124
PI
IT
Created: 2008-07-11 11:23:04
Last Update: 2008-07-11 11:23:04

Technical Contacts
Name: Technical Unit Of The Italian Domain Name Registry
ContactID: TUR1-ITNIC
Address: CNR-IIT
Via G. Moruzzi, 1
Pisa
56124
PI
IT
Created: 2002-07-03 00:00:00
Last Update: 2007-03-01 07:38:38

Registrar
Organization: ccTLD 'it' Registry
Name: REGISTRY-MNT

Nameservers
itgeo.nic.it
itgeo.tix.it
itgeo.mix-it.net

Posted: Mon Nov 02, 2009 5:51 pm

This looks like a phishing scam which do not go in the DB.

I would report it to the bank

Posted: Mon Nov 02, 2009 8:46 pm

Oops. That's what I get for posting before bedtime.

Reported to BOA's abuse.. Since it doesn't belong here, what do I do with this thread? I'm marking it as Report Sent, but please let me know what the proper thing to do is. Thanks!

Posted: Mon Nov 02, 2009 11:34 pm

I'll move this thread off to the misc. scams forum. While we don't need any phishing sites posted here at Eater, it's always good to report them. Thumbs up