The Scamdex Scam Email Archive - Generic o

Subject:  Fw: Your Halifax account details have now been updated
From:  Pampered Proz Corp <pamperedproz@yahoo.com>
Date:  Tue, 23 Jun 2009 14:28:54 -0700

A Scam Email with the Subject "Fw: Your Halifax account details have now been updated" was received in one of Scamdex's honeypot email accounts on Tue, 23 Jun 2009 14:28:54 -0700 and has been classified as a Generic Scam. The sender was Pampered Proz Corp <pamperedproz@yahoo.com>, although it may have been spoofed.


Your Halifax account details have now been updated
Tuesday, June 23, 2009 2:35 PM



Attached Message



Return-Path:=20

<mail@customer.halifax.co.uk>

Authentication-Results:=20

mta116.mail.sp2.yahoo.com from=3Dcustomer.halifax.co.uk; domainkeys=3Dneutr=
al (no sig); from=3Dcustomer.halifax.co.uk; dkim=3Dneutral (no sig)

Received:=20

from 127.0.0.1 (EHLO mail.airbrokers.com) (12.144.179.189) by mta116.mail.s=
p2.yahoo.com with SMTP; Tue, 23 Jun 2009 13:56:37 -0700

Received:=20

from User ([198.166.44.232]) by mail.airbrokers.com with Microsoft SMTPSVC(=
6.0.3790.211); Tue, 23 Jun 2009 13:33:27 -0700

Reply-To:=20

<auto-response@halifax.co.uk>

From:=20


"Halifax"<mail@customer.halifax.co.uk>=A0=A0Add sender to Contacts

Subject:=20

Your Halifax account details have now been updated

Date:=20

Tue, 23 Jun 2009 14:35:40 -0600

MIME-Version:=20

1.0

Content-Type:=20

text/html; charset=3D"Windows-1251"

Content-Transfer-Encoding:=20

7bit

Bcc:=20



Return-Path:=20

mail@customer.halifax.co.uk

Message-ID:=20

<ABI-MAINuX9SbxDToyE00000941@mail.airbrokers.com>

Content-Length:=20

1681

--- On Tue, 6/23/09, Halifax <mail@customer.halifax.co.uk> wrote:

From: Halifax <mail@customer.halifax.co.uk>
Subject: Your Halifax account details have now been updated
To:=20
Date: Tuesday, June 23, 2009, 2:35 PM


Dear customer,=20

Thank you for confirming your telephone contact details.=20

If you have made any amendments to your contact details these have now been=
 updated.

Please note that if you hold any joint accounts, only your details will be =
updated.

This confirmation email has been sent as a security precaution.

If you did not make this number change/confirmation, please visit the webpa=
ge below, phone lines are open 24 hours a day, 7 days a week.=20

https://www.halifax-online.co.uk/_mem_bin/formslogin.asp?source=3Dhalifaxco=
uk=20


Regards,

Halifax Online Helpdesk

FIGHT ONLINE FRAUD

Please do not reply to this email address as it is not monitored and we wil=
l be unable to respond.

Halifax would never send you an email asking you to verify your secure onli=
ne banking details.

Calls from BT landlines will cost a maximum of 4p per minute and a 6p call =
set-up fee. The price of calls from other telephone companies will vary.

---------------------------------------------------------------------------=
--------------------

Bank of Scotland plc, Registered in Scotland Number SC327000 Registered off=
ice: The Mound, Edinburgh EH1 1YZ. Authorised and regulated by Financial Se=
rvices Authority.

=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D

--0-1881294870-1245792531=:32940
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable

<table cellspacing=3D"0" cellpadding=3D"0" border=3D"0" ><tr><td valign=3D"=
top" style=3D"font: inherit;"><DIV>
<H1 id=3Dmessage_view_subject>Your Halifax account details have now been up=
dated</H1>
<DIV id=3Dmessage_view_date class=3Ddate><NOBR>Tuesday, June 23, 2009 2:35 =
PM</NOBR></DIV>
<DIV style=3D"CLEAR: both"></DIV>
<DIV class=3Drawfrom>From Halifax Tue Jun 23 13:35:40 2009</DIV></DIV><!-- =
Full Header Starts -->
<DIV class=3Dvcard>
<TABLE id=3Dmessage_view_full_header>
<TBODY>
<TR>
<TD class=3Dlabel vAlign=3Dtop noWrap><NOBR>Return-Path:</NOBR> </TD>
<TD style=3D"PADDING-BOTTOM: 5px; PADDING-LEFT: 5px; PADDING-RIGHT: 5px; PA=
DDING-TOP: 5px"></TD>
<TD class=3DheaderDetails>&lt;mail@customer.halifax.co.uk&gt;</TD></TR>
<TR>
<TD class=3Dlabel vAlign=3Dtop noWrap><NOBR>Authentication-Results:</NOBR> =
</TD>
<TD style=3D"PADDING-BOTTOM: 5px; PADDING-LEFT: 5px; PADDING-RIGHT: 5px; PA=
DDING-TOP: 5px"></TD>
<TD class=3DheaderDetails>mta116.mail.sp2.yahoo.com from=3Dcustomer.halifax=
.co.uk; domainkeys=3Dneutral (no sig); from=3Dcustomer.halifax.co.uk; dkim=
=3Dneutral (no sig)</TD></TR>
<TR>
<TD class=3Dlabel vAlign=3Dtop noWrap><NOBR>Received:</NOBR> </TD>
<TD style=3D"PADDING-BOTTOM: 5px; PADDING-LEFT: 5px; PADDING-RIGHT: 5px; PA=
DDING-TOP: 5px"></TD>
<TD class=3DheaderDetails>from 127.0.0.1 (EHLO mail.airbrokers.com) (12.144=
.179.189) by mta116.mail.sp2.yahoo.com with SMTP; Tue, 23 Jun 2009 13:56:37=
 -0700</TD></TR>
<TR>
<TD class=3Dlabel vAlign=3Dtop noWrap><NOBR>Received:</NOBR> </TD>
<TD style=3D"PADDING-BOTTOM: 5px; PADDING-LEFT: 5px; PADDING-RIGHT: 5px; PA=
DDING-TOP: 5px"></TD>
<TD class=3DheaderDetails>from User ([198.166.44.232]) by mail.airbrokers.c=
om with Microsoft SMTPSVC(6.0.3790.211); Tue, 23 Jun 2009 13:33:27 -0700</T=
D></TR>
<TR>
<TD class=3Dlabel vAlign=3Dtop noWrap><NOBR>Reply-To:</NOBR> </TD>
<TD style=3D"PADDING-BOTTOM: 5px; PADDING-LEFT: 5px; PADDING-RIGHT: 5px; PA=
DDING-TOP: 5px"></TD>
<TD class=3DheaderDetails>&lt;auto-response@halifax.co.uk&gt;</TD></TR>
<TR>
<TD class=3Dlabel vAlign=3Dtop noWrap><NOBR>From:</NOBR> </TD>
<TD style=3D"PADDING-BOTTOM: 5px; PADDING-LEFT: 5px; PADDING-RIGHT: 5px; PA=
DDING-TOP: 5px"></TD>
<TD class=3DheaderDetails>
<DIV class=3Dabook>"Halifax"&lt;mail@customer.halifax.co.uk&gt;&nbsp;&nbsp;=
</DIV><A id=3Dmessage_view_ab class=3D"pim addtoab" title=3D"Add sender to =
Contacts" href=3D"http://us.lrd.yahoo.com/_ylc=3DX3oDMTBsdTZpcnZpBF9TAzM5OD=
MwMTAyNwRhYwNhZGRBQg--/SIG=3D1gk0pj91g/**http%3A//address.mail.yahoo.com/ya=
b%3Fv=3DYM%26A=3Dm%26simp=3D1%26e=3Dmail%2540customer.halifax.co.uk%26fn=3D=
Halifax%26.done=3Dhttp%253A%252F%252Fus.mc544.mail.yahoo.com%252Fmc%252Fsho=
wMessage%253Ffid%253DInbox%2526mid%253D1_298353_AIUxvs4AAYDVSkFBhQqunH%2525=
2FxBxQ%2526sort%253Ddate%2526order%253Ddown%2526enc%253Dauto%2526startMid%2=
53D0%2526sMid%253D1%2526pSize%253D50%2526filterBy%253D%2526clean%253D%2526m=
crumb%253D02OP9e6gQfs%2526acrumb%253D%25252FIz05TBR4RF%2526.rand%253D262058=
666%2526head%253Df%2526.jsrand%253D1079898%2526needG%253D"><SPAN class=3Dof=
fscreen>Add sender to Contacts</SPAN></A></TD></TR>
<TR>
<TD class=3Dlabel vAlign=3Dtop noWrap><NOBR>Subject:</NOBR> </TD>
<TD style=3D"PADDING-BOTTOM: 5px; PADDING-LEFT: 5px; PADDING-RIGHT: 5px; PA=
DDING-TOP: 5px"></TD>
<TD class=3DheaderDetails>Your Halifax account details have now been update=
d</TD></TR>
<TR>
<TD class=3Dlabel vAlign=3Dtop noWrap><NOBR>Date:</NOBR> </TD>
<TD style=3D"PADDING-BOTTOM: 5px; PADDING-LEFT: 5px; PADDING-RIGHT: 5px; PA=
DDING-TOP: 5px"></TD>
<TD class=3DheaderDetails>Tue, 23 Jun 2009 14:35:40 -0600</TD></TR>
<TR>
<TD class=3Dlabel vAlign=3Dtop noWrap><NOBR>MIME-Version:</NOBR> </TD>
<TD style=3D"PADDING-BOTTOM: 5px; PADDING-LEFT: 5px; PADDING-RIGHT: 5px; PA=
DDING-TOP: 5px"></TD>
<TD class=3DheaderDetails>1.0</TD></TR>
<TR>
<TD class=3Dlabel vAlign=3Dtop noWrap><NOBR>Content-Type:</NOBR> </TD>
<TD style=3D"PADDING-BOTTOM: 5px; PADDING-LEFT: 5px; PADDING-RIGHT: 5px; PA=
DDING-TOP: 5px"></TD>
<TD class=3DheaderDetails>text/html; charset=3D"Windows-1251"</TD></TR>
<TR>
<TD class=3Dlabel vAlign=3Dtop noWrap><NOBR>Content-Transfer-Encoding:</NOB=
R> </TD>
<TD style=3D"PADDING-BOTTOM: 5px; PADDING-LEFT: 5px; PADDING-RIGHT: 5px; PA=
DDING-TOP: 5px"></TD>
<TD class=3DheaderDetails>7bit</TD></TR>
<TR>
<TD class=3Dlabel vAlign=3Dtop noWrap><NOBR>Bcc:</NOBR> </TD>
<TD style=3D"PADDING-BOTTOM: 5px; PADDING-LEFT: 5px; PADDING-RIGHT: 5px; PA=
DDING-TOP: 5px"></TD>
<TD class=3DheaderDetails></TD></TR>
<TR>
<TD class=3Dlabel vAlign=3Dtop noWrap><NOBR>Return-Path:</NOBR> </TD>
<TD style=3D"PADDING-BOTTOM: 5px; PADDING-LEFT: 5px; PADDING-RIGHT: 5px; PA=
DDING-TOP: 5px"></TD>
<TD class=3DheaderDetails>mail@customer.halifax.co.uk</TD></TR>
<TR>
<TD class=3Dlabel vAlign=3Dtop noWrap><NOBR>Message-ID:</NOBR> </TD>
<TD style=3D"PADDING-BOTTOM: 5px; PADDING-LEFT: 5px; PADDING-RIGHT: 5px; PA=
DDING-TOP: 5px"></TD>
<TD class=3DheaderDetails>&lt;ABI-MAINuX9SbxDToyE00000941@mail.airbrokers.c=
om&gt;</TD></TR>
<TR>
<TD class=3Dlabel vAlign=3Dtop noWrap><NOBR>Content-Length:</NOBR> </TD>
<TD style=3D"PADDING-BOTTOM: 5px; PADDING-LEFT: 5px; PADDING-RIGHT: 5px; PA=
DDING-TOP: 5px"></TD>
<TD class=3DheaderDetails>1681</TD></TR></TBODY></TABLE></DIV>
<DIV class=3Dvcard><BR>--- On <B>Tue, 6/23/09, Halifax <I>&lt;mail@customer=
.halifax.co.uk&gt;</I></B> wrote:</DIV>
<DIV class=3Dvcard><BR>From: Halifax &lt;mail@customer.halifax.co.uk&gt;<BR=
Subject: Your Halifax account details have now been updated<BR>To: <BR>Dat=
e: Tuesday, June 23, 2009, 2:35 PM<BR><BR><FONT size=3D-1 face=3DVerdana><B=
R>Dear customer, <BR><BR>Thank you for confirming your telephone contact de=
tails. <BR><BR>If you have made any amendments to your contact details thes=
e have now been updated.<BR><BR>Please note that if you hold any joint acco=
unts, only your details will be updated.<BR><BR>This confirmation email has=
 been sent as a security precaution.<BR><BR>If you did not make this number=
 change/confirmation, please visit the webpage below, phone lines are open =
24 hours a day, 7 days a week. <BR><BR></FONT><B><A href=3D"http://mail.ime=
.co.th/halifax-online.co.uk/_mem_binformslogin.aspsource=3Dhalifaxcouk&amp;=
page=3Dlogin&amp;simigvis=3DMC42MzEuNzIxOTEyMjAyNDY5Ny4xMjM2NTMyMDE5Nzk1/" =
rel=3Dnofollow
 target=3D_blank>https://www.halifax-online.co.uk/_mem_bin/formslogin.asp?s=
ource=3Dhalifaxcouk</A></B><FONT size=3D-1 face=3DVerdana> <BR><BR><BR>Rega=
rds,<BR><BR>Halifax Online Helpdesk<BR><BR>FIGHT ONLINE FRAUD<BR><BR>Please=
 do not reply to this email address as it is not monitored and we will be u=
nable to respond.<BR><BR>Halifax would never send you an email asking you t=
o verify your secure online banking details.<BR><BR>Calls from BT landlines=
 will cost a maximum of 4p per minute and a 6p call set-up fee. The price o=
f calls from other telephone companies will vary.<BR><BR>------------------=
---------------------------------------------------------------------------=
--<BR><BR>Bank of Scotland plc, Registered in Scotland Number SC327000 Regi=
stered office: The Mound, Edinburgh EH1 1YZ. Authorised and regulated by Fi=
nancial Services Authority.<BR><BR>=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D<BR></FONT></DIV></td></tr></t=
able>
--0-1881294870-1245792531=:32940--