what's this - "U.S. Bank" ?? email

[WillyChang]

[?]

(copied in full)

*********************************************

From: "U.S. Bank" <Luella_Farhan@rocketmail.com> Save Address

--------------------------------------------------------------------------------

To: <moderators@ausmicro.com>

Subject: Your account at U.S. Bank has been suspended.

Date: Tue, 20 Jan 2004 02:53:46 -0400 (EST)

--------------------------------------------------------------------------------

Dear U.S. Bank account holder,

We regret to inform you, that we had to block your U.S. Bank account

because we have been notified that your account may have been compromised by outside parties.

Our terms and conditions you agreed to state that your account must always be under your control or those you designate at all times.

We have noticed some activity related to your account that indicates that other parties may have access and or control of your information in your account.

These parties have in the past been involved with money laundering, illegal drugs, terrorism and various Federal Title 18 violations.

In order that you may access your account we must verify your identity by clicking on the link below.

Please be aware that until we can verify your identity no further access to your account will be allowed and we will have no other liability for your

account or any transactions that may have occurred as a result of your failure to reactivate your account as instructed below.

Thank you for your time and consideration in this matter.

https://www.usbank.com/account_verify/cgi/index.htm

Before you reactivate your account, all payments have been frozen, and you will not be able to use your account in any way until we have verified your

identity.

Received: from tamiya.titaninternet.co.uk [217.77.181.20] by ns1.titaniumdns.net with ESMTP

(SMTPD32-6.06) id A0511AEE00DC; Mon, 19 Jan 2004 13:49:05 +0000

Received: from 127.0.0.1 ([127.0.0.1]) by tamiya.titaninternet.co.uk with Microsoft SMTPSVC(6.0.3790.0);

Mon, 19 Jan 2004 13:47:33 +0000

From: David <veilside_azn@hotmail.com>

To: <pandabear@ausmicro.com>

Message-Id: <20041901.134733.27dbba98@hotmail.com>

Date: Mon, 19 Jan 2004 13:47:33 GMT

X-MSMail-Priority: Normal

X-mailer: AspMail 4.0 4.11 (SMT44A3D1F)

Subject: Enquiry from Tamiyaclub.com

Mime-Version: 1.0

Content-Type: text/plain; charset="us-ascii"

Content-Transfer-Encoding: 7bit

Return-Path: veilside_azn@hotmail.com

X-OriginalArrivalTime: 19 Jan 2004 13:47:34.0030 (UTC) FILETIME=[CA7D32E0:01C3DE92]

X-RCPT-TO: <pandabear@ausmicro.com>

X-UIDL: 374517052

Status: U

Message left at you member details page...

THIS MESSAGE HAS NOT BEEN SENT FROM A KNOWN/LOGGED-IN MEMBER OF TamiyaClub.

To confirm the details of this email then please click on the following link:

http://www.tamiyaclub.com/confirmemail.asp?pw=93K4W38&id=104

-----------------------------------------------------------------------------

Does the TB-01 chassis have metal ball diffs?

[spice]

Most likely another scam to steal your personal details. btw, that reminds me, in order to verify your posts and your id, I urgently require you to e-mail me your paypal id and password for verification purposes.

Thank you for your support and understanding. [}]

spice

[DJTheo]

Obviously another scam, if you type the link it doesnt even work, probably the email hides another link, if you forward it to me I can check it.

Cheers

[TWINSET]

Hey Willy - it's doing the rounds, I got it last nite

[WillyChang]

Gentlemen, you are missing the gist of my query. [:I]

Its not just another usual bank/eBay/Yahoo etc spam attempt

(that's a daily ho-hum for my mailboxes, sad to admit) but

that its coming from "tamiya.titaninternet.co.uk [217.77.181.20]".

Did it come thru TamiyaClub and/or its members?

Could it be a virus/trojan/harvester of some kind?

Or has Chris' database been hacked into.

[DJTheo]

Don't emails which are send through the TC system all come from there? [?]

Also its not very hard to fake an email sender plus the header.

Cheers

[netsmithUK]

I don't really understand what I am seeing here?

quote:

---

Received: from tamiya.titaninternet.co.uk [217.77.181.20] by ns1.titaniumdns.net with ESMTP

(SMTPD32-6.06) id A0511AEE00DC; Mon, 19 Jan 2004 13:49:05 +0000

Received: from 127.0.0.1 ([127.0.0.1]) by tamiya.titaninternet.co.uk

...

etc

...

Message left at you member details page...

THIS MESSAGE HAS NOT BEEN SENT FROM A KNOWN/LOGGED-IN MEMBER OF TamiyaClub.

To confirm the details of this email then please click on the following link:

http://www.tamiyaclub.com/confirmemail.asp?pw=93K4W38&id=104

-----------------------------------------------------------------------------

Does the TB-01 chassis have metal ball diffs?

---

id="quote">id="quote">

Is what you would expect in a message sent through the club via the 'contact a member' service - its the club sending you the message after all, not the senders ISP. The bit above that about the bank fraud I've got no idea about looks more likely something has gone screwy with your email account/package as it appears above the actual internet header of the second part, which I just can't see how this could happen or find its way through the internet, regardless of it coming through the club or not. Theres always got to be some header at the top. It looks like two completely seperate emails that have somehow got combined somewhere down the line[?]

Chris