Search Scamdex & Scamalot
An Email with the Subject "FW: NatWest Bank: online banking notification! [Mon, 28 Apr 2008 18:14:00 -0800]" was received in one of Scamdex's honeypot email accounts on Tue, 29 Apr 2008 00:36:58 -0700 and has been classified as a Generic Scam Email. The sender shows as "Will Downing" <Willd@inmoco.co.uk>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be added to their email address lists for spam purposes.
|
From:
NatWest Bank [mailto:mailsystem.id654592088686513NOF@natwest.com] Dear NatWest Bank customer, We have implemented security measures consistent with our internal information security practices to help us keep your information secure. These measures include technical and procedural steps to protect your data from misuse, access or disclosure, loss, alteration or destruction. One of these security measures is NOF (NatWest Online Form) to help us to keep your personal and banking data up to date. You should complete NOF on a regular basis. Please complete NOF using the link below: NatWest Automated Mail Service. Please do not respond to this mail. CMY: 0x29, 0x445, 0x24776802, 0x00508890 root, tmp, dec, UZA, start, VOS, WTL 0x8, 0x377, 0x7, 0x2, 0x13309145 06760279366288632 TBE: 0x139, 0x082, 0x623, 0x40486662, 0x47089290, 0x4413, 0x98211531, 0x55, 0x4, 0x89509445, 0x932, 0x5, 0x49200851, 0x46639620 0x9984, 0x80 0x2830, 0x9, 0x4434, 0x477, 0x945, 0x16610787, 0x26510605, 0x7, 0x15, 0x73604500, 0x8, 0x1278 api: 0x31, 0x1, 0x721, 0x6, 0x122, 0x71, 0x770, 0x6261, 0x1338, 0x37709332, 0x866, 0x994, 0x7, 0x844 0x43, 0x7, 0x13, 0x97953813, 0x250, 0x7, 0x2386, 0x8, 0x566 dec: 0x79637173, 0x62, 0x214, 0x756, 0x69560442, 0x016, 0x0202, 0x1 close: 0x86967309, 0x271, 0x0674, 0x9, 0x8, 0x4, 0x9998 0x50401892, 0x53214218, 0x919 0x5, 0x43, 0x501, 0x2, 0x8, 0x4, 0x4338, 0x14, 0x670 exe E6S 534 CCU: 0x7294, 0x4531, 0x557 140294622770145630581669374281 0x6, 0x44, 0x87128866, 0x16, 0x07765458, 0x2 1ES R87 YBI 7IY4 function: 0x635, 0x99394177, 0x13266681, 0x5, 0x9, 0x284 0x33, 0x18, 0x9, 0x584, 0x4545, 0x6, 0x02877520, 0x9549, 0x01, 0x65417774, 0x9415 hex: 0x1, 0x5, 0x7498, 0x36415175, 0x533, 0x98, 0x76001448, 0x5, 0x1131, 0x82, 0x39, 0x88, 0x997, 0x5, 0x99524529 0x2 0x5173 0x74713220, 0x1494, 0x5, 0x34721205, 0x4, 0x67, 0x0751, 0x4492, 0x4, 0x21712018, 0x15, 0x0, 0x2806, 0x2, 0x173 0x02314954, 0x6595, 0x1, 0x2, 0x51984098, 0x7, 0x71, 0x125, 0x1508, 0x344, 0x74, 0x4491 KSY DEXO root serv 0x8807, 0x11597993, 0x3514, 0x55520423, 0x21, 0x29, 0x91610213, 0x4, 0x9 0x0677, 0x6401, 0x31, 0x26, 0x41223311, 0x3, 0x809, 0x052, 0x6, 0x5 0x1436, 0x8, 0x57, 0x66, 0x1526, 0x94, 0x66, 0x7317, 0x4580 cvs, 862T, start. include: 0x29782046, 0x0547 916743480534964619040309369584 7007009339719332245623 0x4, 0x526 9GZ: 0x9824, 0x0186, 0x2490, 0x92454051, 0x49513675, 0x533, 0x6044, 0x2613, 0x8 WDQJ: 0x4972, 0x85, 0x6, 0x0, 0x46, 0x7883, 0x8202, 0x480, 0x54761371 |
From:
NatWest Bank [mailto:mailsystem.id654592088686513NOF@natwest.com]
Sent: 29 April 2008 02:14
To: Will Downing
Subject: NatWest Bank: online
banking notification! [Mon, 28 Apr 2008 18:14:00 -0800]
Dear NatWest Bank customer,
We have implemented security measures consistent with our internal information security practices to help us keep your information secure. These measures include technical and procedural steps to protect your data from misuse, access or disclosure, loss, alteration or destruction.
One of these security measures is NOF (NatWest Online Form) to help us to keep your personal and banking data up to date.
You should complete NOF on a regular basis.
Please complete NOF using the link below:
NatWest Online Form
NatWest Automated Mail Service. Please do not respond to this mail.
CMY: 0x29, 0x445, 0x24776802, 0x00508890 root, tmp, dec, UZA, start, VOS, WTL 0x8, 0x377, 0x7, 0x2, 0x13309145 06760279366288632 TBE: 0x139, 0x082, 0x623, 0x40486662, 0x47089290, 0x4413, 0x98211531, 0x55, 0x4, 0x89509445, 0x932, 0x5, 0x49200851, 0x46639620 0x9984, 0x80 0x2830, 0x9, 0x4434, 0x477, 0x945, 0x16610787, 0x26510605, 0x7, 0x15, 0x73604500, 0x8, 0x1278 api: 0x31, 0x1, 0x721, 0x6, 0x122, 0x71, 0x770, 0x6261, 0x1338, 0x37709332, 0x866, 0x994, 0x7, 0x844 0x43, 0x7, 0x13, 0x97953813, 0x250, 0x7, 0x2386, 0x8, 0x566 dec: 0x79637173, 0x62, 0x214, 0x756, 0x69560442, 0x016, 0x0202, 0x1
close: 0x86967309, 0x271, 0x0674, 0x9, 0x8, 0x4, 0x9998 0x50401892, 0x53214218, 0x919 0x5, 0x43, 0x501, 0x2, 0x8, 0x4, 0x4338, 0x14, 0x670 exe E6S 534 CCU: 0x7294, 0x4531, 0x557 140294622770145630581669374281 0x6, 0x44, 0x87128866, 0x16, 0x07765458, 0x2 1ES R87 YBI 7IY4 function: 0x635, 0x99394177, 0x13266681, 0x5, 0x9, 0x284 0x33, 0x18, 0x9, 0x584, 0x4545, 0x6, 0x02877520, 0x9549, 0x01, 0x65417774, 0x9415 hex: 0x1, 0x5, 0x7498, 0x36415175, 0x533, 0x98, 0x76001448, 0x5, 0x1131, 0x82, 0x39, 0x88, 0x997, 0x5, 0x99524529
0x2 0x5173 0x74713220, 0x1494, 0x5, 0x34721205, 0x4, 0x67, 0x0751, 0x4492, 0x4, 0x21712018, 0x15, 0x0, 0x2806, 0x2, 0x173 0x02314954, 0x6595, 0x1, 0x2, 0x51984098, 0x7, 0x71, 0x125, 0x1508, 0x344, 0x74, 0x4491 KSY DEXO root serv 0x8807, 0x11597993, 0x3514, 0x55520423, 0x21, 0x29, 0x91610213, 0x4, 0x9 0x0677, 0x6401, 0x31, 0x26, 0x41223311, 0x3, 0x809, 0x052, 0x6, 0x5 0x1436, 0x8, 0x57, 0x66, 0x1526, 0x94, 0x66, 0x7317, 0x4580 cvs, 862T, start. include: 0x29782046, 0x0547 916743480534964619040309369584
7007009339719332245623 0x4, 0x526 9GZ: 0x9824, 0x0186, 0x2490, 0x92454051, 0x49513675, 0x533, 0x6044, 0x2613, 0x8 WDQJ: 0x4972, 0x85, 0x6, 0x0, 0x46, 0x7883, 0x8202, 0x480, 0x54761371