Spoof email links to a spoof webpage where victim is prompted to enter their details believing the site is genuine. Details are then forwarded to a local script and captured.

http://nationwide.co.uk.usermaindll.com:9120/nw/

1. Email claims to be from Nationwide asking you to confirm your account data by clicking on the link. You will be taken to a spoof login page where your details will be captured by the phishers.

2. Nationwide never send users emails requesting details in this way.

3. URL disguised by an image of the text in the body of the email - a technique used to bypass spam filters.