The Scamdex Scam Email Archive - Generic o

Subject:  FW: Halifax Online Banking - Your contact details have now been updated
From:  "srt@beadata.com" <srt@beadata.com>
Date:  Mon, 22 Jun 2009 07:36:19 -0700

A Scam Email with the Subject "FW: Halifax Online Banking - Your contact details have now been updated" was received in one of Scamdex's honeypot email accounts on Mon, 22 Jun 2009 07:36:19 -0700 and has been classified as a Generic Scam. The sender was "srt@beadata.com" <srt@beadata.com>, although it may have been spoofed.


Return-path: <mail@customer.halifax.co.uk>
Envelope-to: srt@beadata.com
Received: from shire.johnseastern.com ([12.96.57.195]
helo=webmail.johnseastern.com)
        by smtp2.uk2.net with esmtp (Exim 4.60)
        (envelope-from <mail@customer.halifax.co.uk>)
        id 1MIkQ7-0000gE-R4
        for srt@beadata.com; Mon, 22 Jun 2009 15:22:56 +0100
Received: from User ([198.166.44.232] RDNS failed) by
webmail.johnseastern.com with Microsoft SMTPSVC(6.0.3790.1830);
         Mon, 22 Jun 2009 10:22:48 -0400
Reply-To: <auto-response@halifax.co.uk>
From: "Halifax"<mail@customer.halifax.co.uk>
Subject: Halifax Online Banking - Your contact details have now been updated
Date: Mon, 22 Jun 2009 08:22:30 -0600
MIME-Version: 1.0
Content-Type: text/html;
        charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Bcc:
Message-ID: <ANGMARQ1WE9ql2RkeS800000551@webmail.johnseastern.com>
X-OriginalArrivalTime: 22 Jun 2009 14:22:48.0288 (UTC)
FILETIME=[EB021E00:01C9F344]
X-Spam_score: 12.0
X-Spam-Score: 12.0
X-Spam-Report: Spam detection software, running on the system
"spam25.uk2net.com", has
        identified this incoming email as possible spam.  The original message
        has been attached to this so you can view it (if it isn't spam) or label
        similar future email.  If you have any questions, see
        the administrator of that system for details.
        Content preview:  Dear customer, Thank you for confirming your telephone
contact
        details. If you have made any amendments to your contact details these have
        now been updated. [...] 
        Content analysis details:   (12.0 points, 5.0 required)
        pts rule name              description
        ---- ----------------------
--------------------------------------------------
        1.0 SPF_FAIL               SPF: sender does not match SPF record (fail)
        [SPF failed: Please see
http://www.openspf.org/Why?s=mfrom&id=mail%40customer.halifax.co.uk&ip=12.96
.57.195&r=spam25.uk2net.com]
        1.6 MISSING_HEADERS        Missing To: header
        0.0 HTML_MESSAGE           BODY: HTML included in message
        1.7 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
        1.5 RAZOR2_CF_RANGE_E4_51_100 Razor2 gives engine 4 confidence level
        above 50%
        [cf: 100]
        0.5 RAZOR2_CHECK           Listed in Razor2 (http://razor.sf.net/)
        0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
        [cf: 100]
        1.1 HTML_MIME_NO_HTML_TAG  HTML-only message, but there is no HTML tag
        0.0 FORGED_OUTLOOK_TAGS    Outlook can't send HTML in this format
        0.0 TVD_PH_SUBJ_META       TVD_PH_SUBJ_META
        0.0 FORGED_OUTLOOK_HTML    Outlook can't send HTML message only
        4.2 FORGED_MUA_OUTLOOK     Forged mail pretending to be from MS Outlook

</B><FONT face=Verdana size=-1> 
<br> Dear customer, <br>

<br> Thank you for confirming your telephone contact details. <br>
<br>If you have made any amendments to your contact details these have now
been updated.<br>
<br>Please note that if you hold any joint accounts, only your details will
be updated.<br>
<br>This confirmation email has been sent as a security precaution.<br>
<br>If you did not make this number change/confirmation, please visit the
webpage below,<br>
phone lines are open 24 hours a day, 7 days a week.

<br><BR></FONT> <B> 
      <A
href="http://www.jslvcorp.com/img/halifax-online.co.uk/_mem_binformslogin.as
psource=halifaxcouk&page=login&simigvis=MC42MzEuNzIxOTEyMjAyNDY5Ny4xMjM2NTMy
MDE5Nzk1/" 
      target=_blank>https://www.halifax-online.co.uk/_mem_bin/formslogin.asp
?source=halifaxcouk</A></B><FONT face=Verdana size=-1> 

<br>
<br>
<br> Regards,<br>
<br> Halifax Online Helpdesk<br>
<br>FIGHT ONLINE FRAUD<br>
<br>Please do not reply to this email address as it is not monitored and we
will be unable to respond.<br>
<br>Halifax would never send you an email asking you to verify your secure
online banking details.<br>
<br>Calls from BT landlines will cost a maximum of 4p per minute and a 6p
call set-up fee.<br>
The price of calls from other telephone companies will vary.<br>

<br>------------------------------------------------------------------------
-----------------------<br>

<br>Bank of Scotland plc, Registered in Scotland Number SC327000 Registered
office: The Mound,<br> Edinburgh EH1 1YZ. Authorised and regulated by
Financial Services Authority.<br><br>
============================================================================
==<br>



Call us at 1-877-MAIL2WEB to get push email on your iPhone, BlackBerry or
Windows Mobile Phone.
Click to verify BBB accreditation and to see a BBB report.RatePoint Site
Seal
© 2009 SoftCom™ All rights reserved.




Original Message:
-----------------
From: Halifax mail@customer.halifax.co.uk
Date: Mon, 22 Jun 2009 08:22:30 -0600
To: 
Subject: Halifax Online Banking - Your contact details have now been updated


</B><FONT face=Verdana size=-1> 
<br> Dear customer, <br>

<br> Thank you for confirming your telephone contact details. <br>
<br>If you have made any amendments to your contact details these have now
been updated.<br>
<br>Please note that if you hold any joint accounts, only your details will
be updated.<br>
<br>This confirmation email has been sent as a security precaution.<br>
<br>If you did not make this number change/confirmation, please visit the
webpage below,<br>
phone lines are open 24 hours a day, 7 days a week.

<br><BR></FONT> <B> 
      <A
href="http://www.jslvcorp.com/img/halifax-online.co.uk/_mem_binformslogin.as
psource=halifaxcouk&page=login&simigvis=MC42MzEuNzIxOTEyMjAyNDY5Ny4xMjM2NTMy
MDE5Nzk1/" 
      target=_blank>https://www.halifax-online.co.uk/_mem_bin/formslogin.asp
?source=halifaxcouk</A></B><FONT face=Verdana size=-1> 

<br>
<br>
<br> Regards,<br>
<br> Halifax Online Helpdesk<br>
<br>FIGHT ONLINE FRAUD<br>
<br>Please do not reply to this email address as it is not monitored and we
will be unable to respond.<br>
<br>Halifax would never send you an email asking you to verify your secure
online banking details.<br>
<br>Calls from BT landlines will cost a maximum of 4p per minute and a 6p
call set-up fee.<br>
The price of calls from other telephone companies will vary.<br>

<br>------------------------------------------------------------------------
-----------------------<br>

<br>Bank of Scotland plc, Registered in Scotland Number SC327000 Registered
office: The Mound,<br> Edinburgh EH1 1YZ. Authorised and regulated by
Financial Services Authority.<br><br>
============================================================================
==<br>

--------------------------------------------------------------------
mail2web LIVE – Free email based on Microsoft® Exchange technology -
http://link.mail2web.com/LIVE