From owner-freebsd-hardware@FreeBSD.ORG Mon Jul 31 11:37:02 2006 Return-Path: X-Original-To: hardware@freebsd.org Delivered-To: freebsd-hardware@FreeBSD.ORG Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id A513616A4DD for ; Mon, 31 Jul 2006 11:37:02 +0000 (UTC) (envelope-from joe@joeholden.co.uk) Received: from elise.stf.rewt.org.uk (elise.stf.rewt.org.uk [82.152.108.146]) by mx1.FreeBSD.org (Postfix) with ESMTP id 228DC43D46 for ; Mon, 31 Jul 2006 11:36:58 +0000 (GMT) (envelope-from joe@joeholden.co.uk) Received: from [82.152.108.164] (laptop.stf.rewt.org.uk [82.152.108.164]) (authenticated bits=0) by elise.stf.rewt.org.uk (8.13.7/8.13.4) with ESMTP id k6VBbuOC059965; Mon, 31 Jul 2006 12:38:01 +0100 (BST) (envelope-from joe@joeholden.co.uk) Message-ID: <44CDEBA5.6080409@joeholden.co.uk> Date: Mon, 31 Jul 2006 12:38:13 +0100 From: Joe Holden User-Agent: Thunderbird 1.5.0.4 (Windows/20060516) MIME-Version: 1.0 To: "Julian H. Stacey" References: <200607311124.k6VBO8cW003205@fire.jhs.private> In-Reply-To: <200607311124.k6VBO8cW003205@fire.jhs.private> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 8bit Cc: hardware@freebsd.org, abuse@halifax.co.uk, abuse@bt.com Subject: Re: Accounts Security Alert X-BeenThere: freebsd-hardware@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: General discussion of FreeBSD hardware List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 31 Jul 2006 11:37:02 -0000 Julian H. Stacey wrote: > We, hardware@freebsd.org, & > Halifax seems to be target of an attempt at financial fraud, appended below. > (or at least, someone's fed them a false name, but seems fraud) > Halifax bank ex building society in UK is really http://www.halifax.co.uk > So I've sent to abuse@halifax.co.uk > > Domain owner of apparent fraud appears to be (from whois) > Inca Research Inc > Victoria Chambers > Fir Vale Road > Bournemouth > BH1 2JN > Name Servers are ns0.bt.net ns1.bt.net > whois bt.net fails to give info > (whereas whois other .net give info, .net root service OK) > Maybe bt.net is also a fraud dummy, > so I've also Cc'd bt@abuse.com (British Telecom) & not bt@abuse.net > > Forwarded With Headers > ------------- > >From owner-freebsd-hardware@freebsd.org Mon Jul 31 11:27:12 2006 > Return-Path: > ... > Received: from hub.freebsd.org (hub.freebsd.org [216.136.204.18]) > by mx2.freebsd.org (Postfix) with ESMTP id F29BA5664F; > Mon, 31 Jul 2006 07:25:56 +0000 (GMT) > (envelope-from owner-freebsd-hardware@freebsd.org) > Received: from hub.freebsd.org (localhost [127.0.0.1]) > by hub.freebsd.org (Postfix) with ESMTP id F3C9616A4ED; > Mon, 31 Jul 2006 07:25:55 +0000 (UTC) > (envelope-from owner-freebsd-hardware@freebsd.org) > X-Original-To: hardware@freebsd.org > Delivered-To: freebsd-hardware@FreeBSD.ORG > Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) > by hub.freebsd.org (Postfix) with ESMTP id 697F616A4DA > for ; Mon, 31 Jul 2006 07:25:53 +0000 (UTC) > (envelope-from wwwrun@koz.a03i1.de) > Received: from dd2626.kasserver.com (dd2626.kasserver.com [81.209.184.189]) > by mx1.FreeBSD.org (Postfix) with ESMTP id 9743743D45 > for ; Mon, 31 Jul 2006 07:25:52 +0000 (GMT) > (envelope-from wwwrun@koz.a03i1.de) > Received: by dd2626.kasserver.com (Postfix, from userid 30) > id 94DCF1195A2; Mon, 31 Jul 2006 09:24:48 +0200 (CEST) > To: hardware@freebsd.org > From: Halifax Online Banking > Content-Transfer-Encoding: 8bit > Message-Id: <20060731072448.94DCF1195A2@dd2626.kasserver.com> > Date: Mon, 31 Jul 2006 09:24:48 +0200 (CEST) > MIME-Version: 1.0 > Content-Type: text/plain > X-Content-Filtered-By: Mailman/MimeDel 2.1.5 > Cc: > Subject: Accounts Security Alert > X-BeenThere: freebsd-hardware@freebsd.org > X-Mailman-Version: 2.1.5 > Precedence: list > Reply-To: security@updates.halifax.co.uk > List-Id: General discussion of FreeBSD hardware > List-Unsubscribe: , > > List-Archive: > List-Post: > List-Help: > List-Subscribe: , > > Sender: owner-freebsd-hardware@freebsd.org > Errors-To: owner-freebsd-hardware@freebsd.org > > > [home_banner_left_020502.gif] > Dear Customer, > Our Technical Service department has recently updated our online > banking > software, and due to this upgrade we kindly ask you to follow the > link given below to confirm your online account details. Failure to > confirm the online banking details will suspend you from accessing > your > account online. > > [1]https://www.halifax-online.co.uk/_mem_bin/formslogin.asp > > We use the latest security measures to ensure that your online banking > experience is safe and secure. The administration asks you to accept > our > apologies for the inconvience caused and expresses gratitude for > cooperation. > Regards, > Halifax Online Technical Support > -- > Please do not reply to this email address as it is not monitored and > we > will be unable to respond. > For assistance, log in to your Halifax Online Bank account and choose > the "Help" link on any page. > ^© Halifax plc, Registered in England No. 2367076. Registered Office: > Trinity Road, Halifax, West Yorkshire HX1 2RG. Authorised and > regulated > by the Financial Services Authority. Represents only the Halifax > Financial Services Marketing Group for the purposes of advising on and > selling life assurance > > References > > 1. http://naran.ru/last/FormsLogin.aspsource=halifax.co.uk/Index.PHP > _______________________________________________ > freebsd-hardware@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-hardware > To unsubscribe, send any mail to "freebsd-hardware-unsubscribe@freebsd.org" > > > BT.net certainly isn't fraudulant/whatever, more of a case of BT not following RFC (not uncommon for them) Ta, Joe