| 
                    
                    
                     
                     |   |  
                        | Date Reported: 6th February 2010  | Risk Level: MEDIUM-HIGH  |  | 
              
                |  | 
              
                |  | 
              
                |  | 
              
                |  | 
              
              
                | Email Subject:  | your VISA 4XXX-XXXX-XXXX-XXXX: possible fraudulent transaction ID 07693202 | 
              
              
                |  | 
              
                | Apparent Sender:  | VISA  | 
              
                |  | 
              
                | Return Address:  | alerts@mail.visa.com  | 
              
                |  | 
              
                | Email Format: | HTML  | 
              
                |  | 
              
                | URL of Web Content:  | http://alerts.cforms.visa.com.udaswy.cz/secureapps /vdir/cholderform.php?ref3388467956868010499925301
 204091351327652644482754547&email=tpertsinidis
 @yahoo.com.au
 
  | 
              
                |  | 
			  
			    
                | Anchor text of URLs:  | 1) http://alerts.cforms.visa.com/secureapps/vdir
 /cholderform.php?ref0634500698401194747707294
 7727392880438345814&email=tpertsinidis@ya
 hoo.com.au, 2)
 http://alerts.cforms.visa.com/secureapps/vdir
 /cholderform.php?ref0634500698401194747707294
 7727392880438345814&email=tpertsinidis@ya
 hoo.com.au
  | 
              
                |  | 
              
                | Location:  | Location not available  | 
			  
		
                |  | 
              
              
                | Scam number: | 7735-101654-324295 | 
         
              
              
                |  | 
              
                | Comments: | Email asks you to confirm/update/verify your account data at VISA  by visiting the given link. You will be taken to a spoof website where your details will be captured for the phishers.
 
 VISA  never send their users emails requesting personal details in this way.
 
 The anchor text appears as a legitimate URL, but don't be fooled - clicking on it will take you to a phishing site!
 
 | 
              
                |  |  |  | 
              
                |  | 
              
                |  | 
              
                |  | 
              
                | 				
				
		  
			  
			  
 | 
              
                |  | 
              
                | Received: Sunday, 7 February, 2010, 5:30 AM
 Dear VISA card holder,
 
 A recent review of your transaction history
 determined that your card was used at an ATM
 located in United Arab
 Emirates, but for security reasons the
 requested transaction was refused. You need
 to complete the VISA Card Holder
 Form. You can do this by clicking the link
 below:
 
 HTTP://ALERTS.CFORMS.VISA.COM/SECUREAPPS/VDI
 R/CHOLDERFORM.PHP?REF063450069840119474770729
 47727392880438345814&EMAIL=TPERTSIN...
 
 
 | 
              
                | 
 | 
              
                |  Click for full size image
 | 
              
                |  | 
              
                | Website: |  |  | 
              
                |  | 
              
                |  | 
              
                |  Click for full size image
 |