select `id`, `dir`, `index`, `Subject` from `emailscamdata` where (`id` between 7995691 and 7995701) AND `id` <> '7995696' order by `id` limit 6
Scam Email: Confirm Account Ownership: Account Accessed From A Different Location from Halifax [date added: 2016-07-20 20:01:15] | Scamdex
Search Scamdex & Scamalot
The Scamdex Scam Email Archive
Subject: Confirm Account Ownership: Account Accessed From A Different Location
An
Email with the Subject "Confirm Account Ownership: Account Accessed From A Different Location" was
received in one of Scamdex's honeypot email accounts on Wed, 19 Dec 2012 05:04:23 -0800
and has been classified as a Generic Scam Email.
The sender shows as Halifax <internetbanking@halifax.co.uk>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
halifaxbankverificationcontactsafeaccountcustomerserviceinternetaccessprocesscustomverifysecureonlinemailreference will securitydearhttps://internetbanking.h...https://www.halifax.co.uk...
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] =>
[envelope-to:] => scamdex@scamdex.com
[delivery-date:] => Wed, 19 Dec 2012 05:04:23 -0800
[received:] => Array
(
[0] => from unassigned-89-255-16-76.rdns.hosting-concepts.nl ([89.255.16.76]:57009 helo=wp-accp.flexservers.nl)by lester.newsblaze.com with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)(Exim 4.80)(envelope-from )id 1TlJJr-0004Tn-L0for scamdex@scamdex.com; Wed, 19 Dec 2012 05:04:23 -0800
[1] => by wp-accp.flexservers.nl (Postfix, from userid 48)id 14385CABD90; Wed, 19 Dec 2012 15:57:31 +0300 (MSK)
)
[to:] => scamdex@scamdex.com
[subject:] => Confirm Account Ownership: Account Accessed From A Different Location
[x-php-originating-script:] => 48:external_79cb868411f8106e51dfa32d322889e5.php
[from:] => Halifax
[reply-to:] =>
[mime-version:] => 1.0
[content-type:] => text/html
[content-transfer-encoding:] => 8bit
[message-id:] => <20121219125731.14385CABD90@wp-accp.flexservers.nl>
[date:] => Wed, 19 Dec 2012 15:57:31 +0300 (MSK)
[x-spam-status:] => No, score=2.8
[x-spam-score:] => 28
[x-spam-bar:] => ++
[x-ham-report:] => Spam detection software, running on the system "lester.newsblaze.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seethe administrator of that system for details.Content preview: Dear Customer: We recently have determined that you accessed your account from a different location. We deem it fit the need to safeguard your acount, therefore we are issuing you this verification process to enable you verify your account ownership. [...] Content analysis details: (2.8 points, 4.0 required) pts rule name description---- ---------------------- -------------------------------------------------- 0.7 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.4 RDNS_DYNAMIC Delivered to internal network by host with dynamic-looking rDNS 0.0 T_REMOTE_IMAGE Message contains an external image
[x-spam-flag:] => NO
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
We recently have determined that you accessed your account from a
different location. We deem it fit the need to safeguard your acount, therefore we are issuing you this verification process to
enable you verify your account ownership.
PS: ENSURE THE INFORMATION PROVIDED MATCHES THAT ON OUR SECURE SYSTEM
The message will be available in your Secure Message Center until 21/12/2012.
Thank you for being a valued
Halifax customer.
ABOUT THIS MESSAGE: This service message was delivered to you as a Halifax customer to provide you
with account updates and information about your account benefits. Halifax values your privacy and your preferences.
If
you want to contact Halifax, please do not reply to this message, but instead go to https://www.halifax.co.uk/internetbanking. For faster service, please enroll or log on to your account.
Replies to this message will not be read or responded to.
Your personal information is protected by state-of-the-art
technology. For more detailed security information or to update your privacy choices, go to our Online Privacy Notice. To
change your e-mail address, please log on to Halifax Online and click your e-mail address on the left-hand side of the My
Accounts Page.
Dear Customer:
We recently have determined that you accessed your account from a
different location. We deem it fit the need to safeguard your acount, therefore we are issuing you this verification process to
enable you verify your account ownership.
PS: ENSURE THE INFORMATION PROVIDED MATCHES THAT ON OUR SECURE SYSTEM
To get
started, please click the link below:
https://internetbanking.halifax.co.uk/
The message will be available in your Secure Message Center until 21/12/2012.
Thank you for being a valued
Halifax customer.
ABOUT THIS MESSAGE: This service message was delivered to you as a Halifax customer to provide you
with account updates and information about your account benefits. Halifax values your privacy and your preferences.
If
you want to contact Halifax, please do not reply to this message, but instead go to https://www.halifax.co.uk/internetbanking. For faster service, please enroll or log on to your account.
Replies to this message will not be read or responded to.
Your personal information is protected by state-of-the-art
technology. For more detailed security information or to update your privacy choices, go to our Online Privacy Notice. To
change your e-mail address, please log on to Halifax Online and click your e-mail address on the left-hand side of the My
Accounts Page.
