The Scamdex Scam Email Archive - Generic o

Subject:  (Chase Phishing #2)http://www.usersnotify.com/...../
From:  "Antihotmail.com Internet Incident Reponse Team (IIRT)" <iirt@antihotmail.com>
Date:  Mon, 17 Apr 2006 08:55:36 -0700

A Scam Email with the Subject "(Chase Phishing #2)http://www.usersnotify.com/...../" was received in one of Scamdex's honeypot email accounts on Mon, 17 Apr 2006 08:55:36 -0700 and has been classified as a Generic Scam. The sender was "Antihotmail.com Internet Incident Reponse Team (IIRT)" <iirt@antihotmail.com>, although it may have been spoofed.


"Take down" in progress !

canonical name usersnotify.com.
aliases
addresses 72.240.109.122
75.0.151.225
84.114.208.118
206.173.156.105<--------
Domain Name: USERSNOTIFY.COM
   Registrar: ONLINENIC, INC.
   Whois Server: whois.OnlineNIC.com
   Referral URL: http://www.OnlineNIC.com
   Name Server: NS1.SERIESEQU.COM
   Name Server: NS2.SERIESEQU.COM

canonical name 206.173.156.105.ptr.us.xo.net.
aliases
addresses 206.173.156.105

http://images.bfi0.com/creative/2005/chase/dec/b_transfer/images/chase_logo.gif
canonical name images.bfi0.com.
aliases
addresses 206.132.3.30
 Domain Name: BFI0.COM
   Registrar: NETWORK SOLUTIONS, LLC.
   Whois Server: whois.networksolutions.com
   Referral URL: http://www.networksolutions.com
   Name Server: NS1.BIGFOOTINTERACTIVE.COM
   Name Server: NS.BIGFOOTINTERACTIVE.COM
   Status: REGISTRAR-LOCK
   Updated Date: 24-oct-2004
   Creation Date: 11-may-2000
   Expiration Date: 11-may-2006


Return-Path: <astroboy912@hotmail.com>
Delivered-To: spamcop-net-antihotmail@spamcop.net
Received: (qmail 17862 invoked from network); 17 Apr 2006 13:57:27 -0000
X-Spam-Checker-Version: SpamAssassin 3.1.1 (2006-03-10) on blade1
X-Spam-Level: ****
X-Spam-Status: hits=4.8 tests=HTML_FONT_BIG,HTML_MESSAGE,
        HTML_MIME_NO_HTML_TAG,MIME_HTML_ONLY,NO_REAL_NAME,X_MESSAGE_INFO
        version=3.1.1
Received: from unknown (HELO c60.cesmail.net) (192.168.1.105)
  by blade1.cesmail.net with SMTP; 17 Apr 2006 13:57:27 -0000
Received: from mailgate.cesmail.net ([216.154.195.36])
  by c60.cesmail.net with SMTP; 17 Apr 2006 09:57:28 -0400
X-IronPort-AV: i="4.04,125,1144036800";
   d="scan'208"; a="343951760:sNHT43489114"
Received: (qmail 7364 invoked from network); 17 Apr 2006 13:57:27 -0000
Received: from unknown (HELO mailgate.cesmail.net) (192.168.1.101)
  by mailgate.cesmail.net with SMTP; 17 Apr 2006 13:57:27 -0000
X-Message-Status: n:0
X-SID-PRA: Chase@notify7807.chase.com
X-SID-Result: TempError
X-Message-Info: JGTYoYF78jEtrTKzQpY/A/QRa/RUrPh5aVHzxTICBPY=
Received: from popgate.cesmail.net [192.168.1.201]
        by mailgate.cesmail.net with POP3 (fetchmail-6.2.1)
        for antihotmail@spamcop.net (single-drop); Mon, 17 Apr 2006 09:57:27 -0400
(EDT)
Received: from adsl.hnpt.com.vn ([203.210.224.33]) by
bay0-mc5-f6.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.1830);
         Mon, 17 Apr 2006 06:43:42 -0700
Received: (qmail 5687 by uid 209); Mon, 17 Apr 2006 01:43:45 -1200
Date: Mon, 17 Apr 2006 01:43:45 -1200
Message-Id: <20060417-114345.5685.qmail@adsl.hnpt.com.vn>
From: <Chase@notify7807.chase.com>
Reply-To: <Chase.W3TH2508F50706D1A4016960BCB3E30@email.chase.com>
To: <sgtpepper_1967@hotmail.com>
Subject: Alert 91870013 IMPORTANT: Maintenance Notification.
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: 7bit
X-OriginalArrivalTime: 17 Apr 2006 13:43:43.0212 (UTC)
FILETIME=[F13A6AC0:01C66224]
X-SpamCop-Checked:
X-SpamCop-Disposition: Blocked SpamAssassin=4

<div>
<title>Chase</title>
<table width=600 cellspacing=0 cellpadding=0 border=0>
<tr><td>
<table width=600 cellspacing=0 cellpadding=0 border=0>
<tr><td width=153 height=45><img
src="http://images.bfi0.com/creative/2005/chase/dec/b_transfer/images/chase_logo.gif";
alt=CHASE width=153 height=45 border=0></td><td height=45><img
src="http://images.chase.com/creative/2005/chase/dec/b_transfer/images/Chase.jpg";
align=right border=0></td><td width=10 height=45><img
src="http://images.bfi0.com/creative/2005/chase/dec/b_transfer/images/spacer.gif";
alt="" width=10 height=45 border=0></td></tr></table>
<img
src="http://images.bfi0.com/creative/2005/chase/dec/b_transfer/images/bar.gif";
width=600 height=23 alt="" border=0>
<font face="arial,helvetica,sans-serif" size=2><br></font>
<p> <P><FONT face=Arial size=4>Dear
                                Member: JPMorgan Chase & Co.<BR><BR>The latest
issue of our
                                membership newsletter is available for your
                                review. You'll find that this issue contains
                                information about:</FONT></P>
                                <UL>
                                <LI><FONT face=Arial size=4>Login to your Chase
Internet Banking account
                                </FONT>
                                <LI><FONT face=Arial size=4>Update your
                                account </FONT>:
<p><a
href="http://www.usersnotify.com/...../";>https://chaseonline.chase.com/jpmorganchase/profile.cfm?SH_Confirm=A86217D6%2D073E%2D2072470759102C05CA0BBF2</a></p>
<p>If confirmation is unsuccessful, please copy and paste the entire URL into
your web browser's address box and click the &quot;Enter&quot; key.</p>
<p>If you have not registered with JPMorgan Chase &amp; Co., please ignore this
message and your contact information will be deleted within 7 days.</p>
<p>Thank You,</p>
<p> JPMorgan Chase &amp; Co.<br>
  270 Park Avenue<br>
  New York, NY 10017-2070 </p>
<font face="arial,helvetica,sans-serif" size=2><br>
<br>
</font>
<hr size=1 noshade>
<font face="verdana,arial,helvetica,sans-serif" color="#666666" size=1>
*This special rate APR is subject to the payment allocation and default terms
described in the Terms of Offer available online. Balance transfer amount(s)
may not exceed your available credit line. This service message was delivered
to you as a Chase customer to provide you account updates and information about
your card benefits. Chase values your privacy and your preferences.

<br><br>
ABOUT THIS MESSAGE<br><br>

Your personal information is protected by state-of-the-art technology. For more
detailed security information, view our <a
href="javascript:ol('http://email.chase.com/W3RH033CE3199D1A2623732BCB3E30');">Online
Privacy Policy</a>. To request in writing: Chase Privacy Operations, 451 Florida
Street, Fourth Floor, LA2-9376 Baton Rouge, LA 70801.
<br><br>
If you wish to unsubscribe from e-mail promotional messages from Chase, <a
href="javascript:ol('http://email.chase.com/W3RH033CE3298D1A2623732BCB3E30');">click
here</a>.
<br><br>
Please note that you will continue to receive service related e-mail messages
that directly concern your existing Chase products and services. Please allow
up to ten business days for us to process your request.
<br><br>
Please do not reply to this message as the &quot;reply&quot; function is not
equipped to handle customer service inquiries.
<br><br>
This email was sent to: sgtpepper_1967@hotmail.com
<br><br>

© 2006 JPMorgan Chase &amp; Co.
</font></td></tr>




--


--
Questions can be sent to: iirt@antihotmail.com
Domain  Dossier: http://www.centralops.net/
Antihotmail.com Whois: http://whois.antihotmail.com

[Zero Tolerance towards Unsolicited Email]
This email is sent in compliance with our strict anti-abuse
regulations.You have received this email because we are a active
Spam fighting organization.If you do not wish to receive any mail
from our service you may permanently block your email address by
sending a email to: stop.complaints@antihotmail.com .

All UCE/BCE is subject to a US$500.00 fee per item. If you send UCE
(SPAM) to Antihotmail.com , you are agreeing to this charge for
processing your "email" and also agree to pay any and all costs
incurred in collecting this fee.