Until fifteen minutes ago, when I received the following e-mail message, which bears the (evidently forged) return address "firstname.lastname@example.org", I didn't know that Credit Union West even existed:
Your CU West Online Services has expired. You must renew it immediately or your account will be closed.
If you intend to use these services in the future, you must take action at once!
To continue click here [link: ], login to your CU West account and begin the renewal process.
Thank you for using CU West
CU West Customer Service Department."
The domain name "onlineservices-cuwest.com" refers to a Yahoo-hosted site. The return path in the e-mail header is "email@example.com"; zinch.com is a college admissions portal intended to help prospective students and admissions officers find one another. The IP address from which the e-mail originated is 18.104.22.168, which appears to be an American address of indeterminate location hosted by Schlund + Partner AG, an ISP based in Karlsruhe, Germany.
Note that the legitimate CU West website is hosted by CrystalTech Web Hosting Inc. of Phoenix, Arizona.