The Scamdex Scam Email Archive - Generic o

Subject:  Fw: Your NetBank access has been LOCKED
From:  "Deborah Kembro \(Marino\)" <dharma0814@yahoo.com>
Date:  Mon, 01 Jun 2009 17:59:27 -0700

A Scam Email with the Subject "Fw: Your NetBank access has been LOCKED" was received in one of Scamdex's honeypot email accounts on Mon, 01 Jun 2009 17:59:27 -0700 and has been classified as a Generic Scam. The sender was "Deborah Kembro \(Marino\)" <dharma0814@yahoo.com>, although it may have been spoofed.


 



Monday, June 1, 2009 7:35 PM



Attached Message



Return-Path:=20

<ucbeus@yahoo.com>

Authentication-Results:=20

mta165.mail.re2.yahoo.com from=3Dyahoo.com; domainkeys=3Dneutral (no sig); =
from=3Dyahoo.com; dkim=3Dneutral (no sig)

Received:=20

from 24.71.223.10 (EHLO idcmail-mo1so.shaw.ca) (24.71.223.10) by mta165.mai=
l.re2.yahoo.com with SMTP; Mon, 01 Jun 2009 16:35:31 -0700

Message-Id:=20

<7rj1mp$3s0iop@pd3mo1so-svcs.prod.shaw.ca>

Received:=20

from pd4ml2so-ssvc.prod.shaw.ca ([10.0.141.136]) by pd3mo1so-svcs.prod.shaw=
.ca with ESMTP; 01 Jun 2009 17:35:25 -0600

Received:=20

from unknown (HELO User) ([70.71.7.90]) by pd4ml2so-dmz.prod.shaw.ca with S=
MTP; 01 Jun 2009 17:35:16 -0600

Reply-To:=20

ucbeus@yahoo.com

From:=20


Commonwealth Bank of Australia<ucbeus@yahoo.com>=A0=A0Add sender to Contact=
s

Subject:=20

Your NetBank access has been LOCKED

Date:=20

Mon, 1 Jun 2009 19:35:24 -0400

MIME-Version:=20

1.0

Content-Type:=20

text/html; charset=3D"Windows-1251"

Content-Transfer-Encoding:=20

7bit

Content-Length:=20

1146
Compact Headers

Dear Commonwealth Bank Customer,

You have received this email because you or someone had used your account f=
rom different locations. For security purpose, we are required to open an i=
nvestigation into this matter.

In order to safeguard your account, we require that you confirm your bankin=
g details.

The help speed up to this process, please access the following link so we c=
an complete the verification of your Commonwealth Online Branch Account reg=
istration information.

http://www.netbank.com.au

If we do no receive the appropriate account verification within 24 hours, t=
hen we will assume this Commonwealth Bank account is fraudulent and will be=
 suspended.

The purpose of this verification is to ensure that your bank account has no=
t been fraudulently used and to combat the fraud from our community.

We appreciate your support and understanding and thank you for your prompt =
attention to this matter.

=A9 Copyright 2009 Commonwealth Bank of Australia, All right reserved


=0A=0A=0A      
--0-71575553-1243904367=:88398
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable

<table cellspacing=3D"0" cellpadding=3D"0" border=3D"0" ><tr><td valign=3D"=
top" style=3D"font: inherit;"><DIV class=3Dclearfix id=3DshowMessagePage>
<DIV class=3D"pagination_left floatleft">&nbsp;</DIV>
<DIV class=3Dmsgheader>
<DIV class=3Dsubjectbar>
<DIV>
<DIV class=3Ddate id=3Dmessage_view_date><NOBR>Monday, June 1, 2009 7:35 PM=
</NOBR></DIV>
<DIV style=3D"CLEAR: both"></DIV>
<DIV class=3Drawfrom>From Commonwealth Bank of Australia Mon Jun 1 16:35:24=
 2009</DIV></DIV></DIV>
<DIV class=3Dvcard><!-- Full Header Starts -->
<TABLE id=3Dmessage_view_full_header>
<TBODY>
<TR>
<TD class=3Dlabel vAlign=3Dtop noWrap><NOBR>Return-Path:</NOBR> </TD>
<TD style=3D"PADDING-RIGHT: 5px; PADDING-LEFT: 5px; PADDING-BOTTOM: 5px; PA=
DDING-TOP: 5px"></TD>
<TD class=3DheaderDetails>&lt;ucbeus@yahoo.com&gt;</TD></TR>
<TR>
<TD class=3Dlabel vAlign=3Dtop noWrap><NOBR>Authentication-Results:</NOBR> =
</TD>
<TD style=3D"PADDING-RIGHT: 5px; PADDING-LEFT: 5px; PADDING-BOTTOM: 5px; PA=
DDING-TOP: 5px"></TD>
<TD class=3DheaderDetails>mta165.mail.re2.yahoo.com from=3Dyahoo.com; domai=
nkeys=3Dneutral (no sig); from=3Dyahoo.com; dkim=3Dneutral (no sig)</TD></T=
R>
<TR>
<TD class=3Dlabel vAlign=3Dtop noWrap><NOBR>Received:</NOBR> </TD>
<TD style=3D"PADDING-RIGHT: 5px; PADDING-LEFT: 5px; PADDING-BOTTOM: 5px; PA=
DDING-TOP: 5px"></TD>
<TD class=3DheaderDetails>from 24.71.223.10 (EHLO idcmail-mo1so.shaw.ca) (2=
4.71.223.10) by mta165.mail.re2.yahoo.com with SMTP; Mon, 01 Jun 2009 16:35=
:31 -0700</TD></TR>
<TR>
<TD class=3Dlabel vAlign=3Dtop noWrap><NOBR>Message-Id:</NOBR> </TD>
<TD style=3D"PADDING-RIGHT: 5px; PADDING-LEFT: 5px; PADDING-BOTTOM: 5px; PA=
DDING-TOP: 5px"></TD>
<TD class=3DheaderDetails>&lt;7rj1mp$3s0iop@pd3mo1so-svcs.prod.shaw.ca&gt;<=
/TD></TR>
<TR>
<TD class=3Dlabel vAlign=3Dtop noWrap><NOBR>Received:</NOBR> </TD>
<TD style=3D"PADDING-RIGHT: 5px; PADDING-LEFT: 5px; PADDING-BOTTOM: 5px; PA=
DDING-TOP: 5px"></TD>
<TD class=3DheaderDetails>from pd4ml2so-ssvc.prod.shaw.ca ([10.0.141.136]) =
by pd3mo1so-svcs.prod.shaw.ca with ESMTP; 01 Jun 2009 17:35:25 -0600</TD></=
TR>
<TR>
<TD class=3Dlabel vAlign=3Dtop noWrap><NOBR>Received:</NOBR> </TD>
<TD style=3D"PADDING-RIGHT: 5px; PADDING-LEFT: 5px; PADDING-BOTTOM: 5px; PA=
DDING-TOP: 5px"></TD>
<TD class=3DheaderDetails>from unknown (HELO User) ([70.71.7.90]) by pd4ml2=
so-dmz.prod.shaw.ca with SMTP; 01 Jun 2009 17:35:16 -0600</TD></TR>
<TR>
<TD class=3Dlabel vAlign=3Dtop noWrap><NOBR>Reply-To:</NOBR> </TD>
<TD style=3D"PADDING-RIGHT: 5px; PADDING-LEFT: 5px; PADDING-BOTTOM: 5px; PA=
DDING-TOP: 5px"></TD>
<TD class=3DheaderDetails>ucbeus@yahoo.com</TD></TR>
<TR>
<TD class=3Dlabel vAlign=3Dtop noWrap><NOBR>From:</NOBR> </TD>
<TD style=3D"PADDING-RIGHT: 5px; PADDING-LEFT: 5px; PADDING-BOTTOM: 5px; PA=
DDING-TOP: 5px"></TD>
<TD class=3DheaderDetails>
<DIV class=3Dabook>Commonwealth Bank of Australia&lt;ucbeus@yahoo.com&gt;&n=
bsp;&nbsp;</DIV><A class=3D"pim addtoab" id=3Dmessage_view_ab title=3D"Add =
sender to Contacts" href=3D"http://us.lrd.yahoo.com/_ylc=3DX3oDMTBsdTZpcnZp=
BF9TAzM5ODMwMTAyNwRhYwNhZGRBQg--/SIG=3D1fge9or51/**http%3A//address.mail.ya=
hoo.com/yab%3Fv=3DYM%26A=3Dm%26simp=3D1%26e=3Ducbeus%2540yahoo.com%26fn=3DC=
ommonwealth%26ln=3DBank%26.done=3Dhttp%253A%252F%252Fus.mc834.mail.yahoo.co=
m%252Fmc%252FshowMessage%253Fmid%253D1_142051_ADZAk0UAAUhISiRlxAkAhl1RZ4Q%2=
526fid%253DInbox%2526sort%253Ddate%2526order%253Ddown%2526startMid%253D0%25=
26filterBy%253D%2526.rand%253D491011687%2526hash%253D67a0baffe77ad8e2c65728=
704104f3fe%2526needG%253D%2526mcrumb%253DhpRAUdazLSh%2526enc%253Dauto%2526h=
ead%253Df%2526.jsrand%253D4409296"><SPAN class=3Doffscreen>Add sender to Co=
ntacts</SPAN></A></TD></TR>
<TR>
<TD class=3Dlabel vAlign=3Dtop noWrap><NOBR>Subject:</NOBR> </TD>
<TD style=3D"PADDING-RIGHT: 5px; PADDING-LEFT: 5px; PADDING-BOTTOM: 5px; PA=
DDING-TOP: 5px"></TD>
<TD class=3DheaderDetails>Your NetBank access has been LOCKED</TD></TR>
<TR>
<TD class=3Dlabel vAlign=3Dtop noWrap><NOBR>Date:</NOBR> </TD>
<TD style=3D"PADDING-RIGHT: 5px; PADDING-LEFT: 5px; PADDING-BOTTOM: 5px; PA=
DDING-TOP: 5px"></TD>
<TD class=3DheaderDetails>Mon, 1 Jun 2009 19:35:24 -0400</TD></TR>
<TR>
<TD class=3Dlabel vAlign=3Dtop noWrap><NOBR>MIME-Version:</NOBR> </TD>
<TD style=3D"PADDING-RIGHT: 5px; PADDING-LEFT: 5px; PADDING-BOTTOM: 5px; PA=
DDING-TOP: 5px"></TD>
<TD class=3DheaderDetails>1.0</TD></TR>
<TR>
<TD class=3Dlabel vAlign=3Dtop noWrap><NOBR>Content-Type:</NOBR> </TD>
<TD style=3D"PADDING-RIGHT: 5px; PADDING-LEFT: 5px; PADDING-BOTTOM: 5px; PA=
DDING-TOP: 5px"></TD>
<TD class=3DheaderDetails>text/html; charset=3D"Windows-1251"</TD></TR>
<TR>
<TD class=3Dlabel vAlign=3Dtop noWrap><NOBR>Content-Transfer-Encoding:</NOB=
R> </TD>
<TD style=3D"PADDING-RIGHT: 5px; PADDING-LEFT: 5px; PADDING-BOTTOM: 5px; PA=
DDING-TOP: 5px"></TD>
<TD class=3DheaderDetails>7bit</TD></TR>
<TR>
<TD class=3Dlabel vAlign=3Dtop noWrap><NOBR>Content-Length:</NOBR> </TD>
<TD style=3D"PADDING-RIGHT: 5px; PADDING-LEFT: 5px; PADDING-BOTTOM: 5px; PA=
DDING-TOP: 5px"></TD>
<TD class=3DheaderDetails>1146</TD></TR></TBODY></TABLE></DIV></DIV>
<DIV class=3Dpagination_right style=3D"TEXT-ALIGN: right"><A id=3Dmessage_v=
iew_compact_header href=3D"http://us.mc834.mail.yahoo.com/mc/showMessage?mi=
d=3D1_142051_ADZAk0UAAUhISiRlxAkAhl1RZ4Q&amp;fid=3DInbox&amp;sort=3Ddate&am=
p;order=3Ddown&amp;startMid=3D0&amp;filterBy=3D&amp;.rand=3D491011687&amp;h=
ash=3D67a0baffe77ad8e2c65728704104f3fe&amp;needG=3D&amp;mcrumb=3DhpRAUdazLS=
h&amp;enc=3Dauto&amp;.jsrand=3D4409296">Compact Headers</A></DIV>
<DIV class=3D"undoreset clearfix" id=3Dmessage1818555944 role=3D"main">
<DIV id=3Dyiv2078399864><SPAN class=3Dyshortcuts id=3Dlw_1243904245_0>Dear =
Commonwealth Bank Customer</SPAN>,<BR><BR>You have received this email beca=
use you or someone had used your account from different locations. For secu=
rity purpose, we are required to open an investigation into this matter.<BR=
<BR>In order to safeguard your account, we require that you confirm your b=
anking details.<BR><BR>The help speed up to this process, please access the=
 following link so we can complete the verification of your Commonwealth On=
line Branch Account registration information.<BR><BR><A href=3D"http://cosm=
ic.sc.mahidol.ac.th/manual/ssl/office.html" target=3D_blank rel=3Dnofollow>=
<SPAN class=3Dyshortcuts id=3Dlw_1243904245_1>http://www.netbank.com.au</SP=
AN></A><BR><BR>If we do no receive the appropriate account verification wit=
hin 24 hours, then we will assume this <SPAN class=3Dyshortcuts id=3Dlw_124=
3904245_2>Commonwealth Bank account</SPAN> is fraudulent and will be
 suspended.<BR><BR>The purpose of this verification is to ensure that your =
bank account has not been fraudulently used and to combat the fraud from ou=
r community.<BR><BR>We appreciate your support and understanding and thank =
you for your prompt attention to this matter.<BR><BR><FONT size=3D1>=A9 Cop=
yright 2009 <SPAN class=3Dyshortcuts id=3Dlw_1243904245_3 style=3D"BACKGROU=
ND: none transparent scroll repeat 0% 0%; CURSOR: hand; BORDER-BOTTOM: #006=
6cc 1px dashed">Commonwealth Bank of Australia</SPAN>, All right reserved</=
FONT><BR><BR><A href=3D"http://lilypie.com/"; target=3D_blank rel=3Dnofollow=
</A><BR></DIV></DIV></DIV></td></tr></table><br>=0A=0A      
--0-71575553-1243904367=:88398--