afchine.org

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

Posted: Sat Apr 17, 2010 1:35 pm

Quote:

Delivered-To:******@googlemail.com
Received: by 10.86.76.17 with SMTP id y17cs132253fga;
Wed, 14 Apr 2010 13:33:03 -0700 (PDT)
Received: by 10.229.191.76 with SMTP id dl12mr9478810qcb.97.1271277178927;
Wed, 14 Apr 2010 13:32:58 -0700 (PDT)
Return-Path: <[email protected]>
Received: from besselmanlittle.com (mail2.besselmanlittle.com [70.169.80.208])
by mx.google.com with ESMTP id f23si1881556qcz.91.2010.04.14.13.32.56;
Wed, 14 Apr 2010 13:32:58 -0700 (PDT)
Received-SPF: neutral (google.com: 70.169.80.208 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=70.169.80.208;
Authentication-Results: mx.google.com; spf=neutral (google.com: 70.169.80.208 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected]
X-Antispam: NO; Spamcatcher 5.2.1. Score 84
Thread-Topic: HSBC Bank plc - iBanking Online Alert
Received: from User ([218.208.3.204]) by besselmanlittle.com with Microsoft SMTPSVC(6.0.3790.3959); Wed, 14 Apr 2010 14:49:26 -0500
From: "HSBC Bank plc." <[email protected]>
Subject: HSBC Bank plc - iBanking Online Alert
Date: Thu, 15 Apr 2010 03:39:35 +0800
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0105_01C2A9A6.5928FAAA"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.4325
Bcc:
Return-Path: <[email protected]>
Message-ID: <[email protected]>
X-OriginalArrivalTime: 14 Apr 2010 19:49:26.0719 (UTC) FILETIME=[96DB5CF0:01CADC0B]

Quote:

HSBC Bank plc - iBanking Online Alert

We detected irregular activity on your HSBC Internet banking account on 13/04/2010.

For your protection, you must verify this activity before you can continue using your account.

Please visit http://www.hsbc.co.uk/1/2/ to review your account activity.

We will review the activity on your account with you and upon verification,

and we will remove any restrictions placed on your account.

Please disregard this notice if you have already accessed the web site or spoken with one of our representatives.

Want to confirm this email is from HSBC Group?

Sign in to Internet Banking and select Alerts History to verify this alert.

__________________________________________________________________________
Because email is not a secure form of communication, this email box is not equipped to handle replies.
If you have any questions about your account or need assistance, please call the phone number on your statement or go to Contact Us at www.hsbc.co.uk.

HSBC Group , Member FDIC.
© 2010 HSBC Bank Plc. . All Rights Reserved.

in the email, if you click in any of these links it will lead you to this site

http://www.afchine.org/?lang=fr

which is quite awkward since the site is not English?

Quote:

Domain ID:D132639728-LROR
Domain Name:AFCHINE.ORG
Created On:10-Nov-2006 22:48:37 UTC
Last Updated On:14-Apr-2010 08:47:54 UTC
Expiration Date:10-Nov-2010 22:48:37 UTC
Sponsoring Registrar:1 & 1 Internet AG (R73-LROR)
Status:OK
Registrant ID:SPAG-35362090
Registrant Name:Oneandone Private Registration
Registrant Organization:1&1 Internet, Inc. - http://1and1.com/contact
Registrant Street1:701 Lee Road, Suite 300
Registrant Street2:ATTN: afchine.org
Registrant Street3:
Registrant City:Chesterbrook
Registrant State/Province:PA
Registrant Postal Code:19087
Registrant Country:US
Registrant Phone:+1.8772064254
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email:
Admin ID:SPAG-35362090
Admin Name:Oneandone Private Registration
Admin Organization:1&1 Internet, Inc. - http://1and1.com/contact
Admin Street1:701 Lee Road, Suite 300
Admin Street2:ATTN: afchine.org
Admin Street3:
Admin City:Chesterbrook
Admin State/Province:PA
Admin Postal Code:19087
Admin Country:US
Admin Phone:+1.8772064254
Admin Phone Ext.:
Admin FAX:
Admin FAX Ext.:
Admin Email:
Tech ID:SPAG-35362090
Tech Name:Oneandone Private Registration
Tech Organization:1&1 Internet, Inc. - http://1and1.com/contact
Tech Street1:701 Lee Road, Suite 300
Tech Street2:ATTN: afchine.org
Tech Street3:
Tech City:Chesterbrook
Tech State/Province:PA
Tech Postal Code:19087
Tech Country:US
Tech Phone:+1.8772064254
Tech Phone Ext.:
Tech FAX:
Tech FAX Ext.:
Tech Email:

any suggestions? Question

Posted: Sat Apr 17, 2010 3:58 pm

Hmmmm.

offhand looks like the http://www.afchine.org/ is probably a legit site.

Quote:

Created On:10-Nov-2006 22:48:37 UTC
Last Updated On:14-Apr-2010 08:47:54 UTC
Expiration Date:10-Nov-2010 22:48:37 UTC

Quote:

From: "HSBC Bank plc." <[email protected]>

is the actual source

and for that I get

Quote:

RCPT TO:<[email protected]>
554 5.1.1 <[email protected]>: Recipient address rejected: undeliverable address: unknown user: "[email protected]"

Personal suggestion would be to forward the whole email and headers to the real HSBC at [email protected].

Baiting Guru Joined: 03 May 2007 Posts: 18313

Thanks for the heads up in PM, justjay.

This looks like phishing. Unless I'm missing something, http://www.hsbc.co.uk/1/2/ now leads to what appears to be the real HSBC site.

Marking n/a and will move this thread over to misc. scams in a bit.