Header:
X-Apparently-To: xxx; Thu, 09 Nov 2017
Return-Path: <info@tsb-bnkplc.co.uk>
X-YahooFilteredBulk: 106.10.242.97
Received-SPF: none (domain of tsb-bnkplc.co.uk does not designate permitted sender hosts)
X-Originating-IP: [106.10.242.97]
Authentication-Results: mta1217.mail.bf1.yahoo.com from=tsb-bnkplc.co.uk; domainkeys=neutral (no sig); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO sonic301-34.consmr.mail.sg3.yahoo.com) (106.10.242.97)
by mta1217.mail.bf1.yahoo.com with SMTPS; Thu, 09 Nov 2017
Received: from sonic.gate.mail.ne1.yahoo.com by sonic301.consmr.mail.sg3.yahoo.com with HTTP; Thu, 9 Nov 2017
Date: Thu, 9 Nov 2017
From: "TSB BANK (UK)" <info@tsb-bnkplc.co.uk>
Reply-To: "TSB BANK (UK)" <info@tsb-bnkplc.co.uk>
To: "cc.info@tsb-bnkplc.co.uk" <cc.info@tsb-bnkplc.co.uk>
Message-ID: <247281204.6743940.1510242399817@mail.yahoo.com>
Subject: YOUR OFFSHORE BANK ACCOUNT HAS BEEN ESTABLISHED
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_Part_6743939_751128709.1510242399813"
References: <247281204.6743940.1510242399817.ref@mail.yahoo.com>
X-Mailer: WebService/1.1.10849 YahooMailNeo Mozilla/5.0 (Windows NT 6.1; rv:50.0) Gecko/20100101 Firefox/50.0
The fake site impersonates TSB Bank. The domain is used only for the email address.
From the fake site details -
https://db.aa419.org/fakebanksview.php?key=128265:
Domain name:
tsb-bnkplc.co.uk
Registrant:
Sarah-Jane Bloggs
Registrant type:
Unknown
Registrant's address:
119 Rucklers Lane
Kings Langley
Hertfordshire
WD4 8BA
United Kingdom
Registrar:
Crazy Domains FZ-LLC
Relevant dates:
Registered on: 07-Jun-2017 Expiry date: 07-Jun-2018
Last updated: 07-Jun-2017