This one is very convincing, and going out now is timed to con as many unwary people as possible at the start of the academic year, which is when you might expect to hear from Student Finance England. See attached image for how it looks, and the code below for the origin, the [redacted] info pertains only to my email address and email service. there were 4 tracking ID's embedded in the email also, all redacted as well in the copy below.
Don't fall for it, it's FAKE!
Return-Path: <return@gsuit.icu>
Delivered-To: [redacted]
Received: from [redacted]
by [redacted] with LMTP id [redacted]
for [redacted] ; Wed, 05 Sep 2018 03:49:28 +0100
Return-path: <return@gsuit.icu>
Envelope-to: [redacted]
Delivery-date: Wed, 05 Sep 2018 03:49:28 +0100
Received: from gsuitmta0.gsuit.icu ([204.44.102.166]:47631)
by [redacted] with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.91)
(envelope-from <return@gsuit.icu>)
id 1fxNsm-004rBF-5k
for [redacted]; Wed, 05 Sep 2018 03:49:28 +0100
Date: Tue, 4 Sep 2018 21:48:06 -0500
To: [redacted]
From: Student Finance England <no-reply@slc.co.uk>
Reply-To: no-reply@slc.co.uk
Subject: ABOUT YOUR 2018/19 ACADEMIC SESSION PAYMENTS
Message-ID: <0949e80986818fbf3928d4049a0d2133@gsuit.icu>
List-Unsubscribe: <http://gsuit.icu/mailer/unsubscribe.php?id=[redacted] >
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="b1_087b7a039f99b1ff69f8f678b126c2a3"
--b1_087b7a039f99b1ff69f8f678b126c2a3
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
Dear Customer,
It's the begining of the new academic year and we will like to ensure =
that your payments are received promptly.
Kindly follow this link to confirm your remittance details.
Yours sincerely
Student Finance England
Please don't reply to this email; it's been automatically produce=
d from an address that can't accept incoming mail.
--b1_087b7a039f99b1ff69f8f678b126c2a3
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE html>
<?xml encoding=3D"UTF-8"><html><head></head><body>
<table id=3D"mastertable" width=3D"0%" cellspacing=3D"0" cellpadding=3D"0" =
border=3D"0" align=3D"center"><tbody><tr></tr><tr><td valign=3D"top">
<div id=3D"LHC">
<table id=3D"bodytable" width=3D"0%" cellspacing=3D"0" cellpadding=3D"0" bo=
rder=3D"0"><tbody><tr><td colspan=3D"2">
<table style=3D"display: block;" width=3D"600px" cellspacing=3D"0" cellpadd=
ing=3D"0" border=3D"0" align=3D"center"><tbody style=3D"width: 600px; displ=
ay: block;"><tr><td width=3D"600">
<table width=3D"100%" cellspacing=3D"0" cellpadding=3D"16" border=3D"0"><tb=
ody style=3D"display: block; padding-top: 30px;"><tr><td><img src=3D"https:=
//logon.slc.co.uk/aut-res/dgv/images/SFElogo.png" alt=3D" Logo"></td>
</tr></tbody></table></td>
</tr><tr><td height=3D"20">
<table width=3D"100%" cellspacing=3D"0" cellpadding=3D"20" border=3D"0"><tb=
ody><tr><td style=3D"border-bottom: 2px solid #FF0099;">
<h1 align=3D"center">2018/19 ACADEMIC SESSION PAYMENTS.</h1>
</td>
</tr></tbody></table></td>
</tr><tr><td width=3D"600" height=3D"20">
<table width=3D"100%" cellspacing=3D"0" cellpadding=3D"20" border=3D"0"><tb=
ody style=3D"width: 600px; display: block;"><tr><td align=3D"left">
<p>Dear Customer,</p>
<p>It's the begining of the new academic year and we will like to ensure th=
at your payments are received promptly.</p>
<p>Kindly <a href=3D"http://gsuit.icu/mailer/redirect.php?id=[redacted] ">follow this link</a> to co=
nfirm your remittance details.</p>
</td>
</tr></tbody></table></td>
</tr><tr><td height=3D"20">
<table width=3D"100%" cellspacing=3D"0" cellpadding=3D"20" border=3D"0"><tb=
ody><tr><td>
<p>Yours sincerely</p>
<p>Student Finance England</p>
</td>
</tr><tr><td colspan=3D"2" style=3D"font-family: arial; font-style: italic;=
font-size: 14px; line-height: 21px; color: #737373; padding: 10px 75px; te=
xt-align: center;" width=3D"600px" align=3D"center">Please don't reply to t=
his email; it's been automatically produced from an address that can't acce=
pt incoming mail.</td>
</tr></tbody></table></td>
</tr><tr><td height=3D"20"></td>
</tr></tbody></table></td>
</tr></tbody></table></div>
</td>
</tr><tr></tr></tbody></table><p></p>
</body></html>
<div style=3D'float:left; clear:both; font-family:Arial; margin:40px auto; =
width:100%; line-height:175%; font-size:11px; color:#434343'>
=09=09=09=09=09=09=09=09=09=09=09<img border=3D0 src=3D'http://gsuit.icu/m=
ailer/logo_image.php?id=[redacted] ' width=3D1 height=3D1 alt=3D''></div>=09<div style=3D'float:=
left; clear:both; font-family:Arial; margin:40px auto; width:100%; line-hei=
ght:175%; font-size:11px; color:#434343'>
=09=09=09=09=09=09=09=09=09=09=09=09<a href=3D'http://gsuit.icu/mailer/unsu=
bscribe.php?id=[redacted] ' >Unsubscribe</a> From this mailing list.
=09=09=09=09=09=09=09=09=09=09=09</div>
--b1_087b7a039f99b1ff69f8f678b126c2a3--
