The Scamdex Scam Email Archive - Generic o

Subject:  Fraud Alert #51154 - Citizens National Bank of Texas Phishing Incident
From:  fraudwatch@fraudwatchinternational.com (FraudWatch International)
Date:  Fri, 30 Jun 2006 12:51:24 -0700

A Scam Email with the Subject "Fraud Alert #51154 - Citizens National Bank of Texas Phishing Incident" was received in one of Scamdex's honeypot email accounts on Fri, 30 Jun 2006 12:51:24 -0700 and has been classified as a Generic Scam. The sender was fraudwatch@fraudwatchinternational.com (FraudWatch International), although it may have been spoofed.

You are subscribed to FraudWatch International.
To discontinue your subscription use the link at the bottom of this
message.

This Fraud Alert can be viewed online:
http://www.fraudwatchinternational.com/phishing/individual_alert.php?fa_no=
51154&mode=alert

Citizens National Bank of Texas phishing email - "URGENT : RENEW YOUR
ONLINE SERVICES !"

Date Issued:  Friday 30th June 2006
Fraud Alert #  51154
Target Company: Citizens National Bank of Texas


Attached Message
Phishing Methods Used:
Email: Deceptive Subject Line 
 Forged Senders Address 
 Genuine Looking Content 
 Disguised Hyperlinks 
  
Web Site : Genuine Looking Content  
 Form - Collection of Information  
 Incorrect URL, not disguised 

Images of this Phisihng email and website can be found at:
http://www.fraudwatchinternational.com/phishing/individual_alert.php?fa_no=
=3D
51154&mode=3Dalert


To Unsubscribe, click on the link below:
Unsubscribe Link
http://www.fraudwatchinternational.com/uc/php/opt.php?action=3Dunsub&id=3Dp=
hish
ing@antihotmail.com&list=3D4 
Or Copy and Paste the following URL into your browser:
http://www.fraudwatchinternational.com/uc/php/opt.php?action=3Dunsub&id=3Dp=
hish
ing@antihotmail.com&list=3D4 


FraudWatch International Pty Ltd. GPO Box 3537 Melbourne Australia 3001
ABN: 56 097 296 056 




--3c1b588e47c6e7f14beb16ee269c05fa
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"
"http://www.w3.org/TR/html4/loose.dtd";>
<html><head><title>Untitled Document</title>
<meta http-equiv=3DContent-Type content=3D"text/html; charset=3Diso-8859-1"=
<link href=3D"http://www.fraudwatchinternational.com/css/all.css"; type=3Dt=
ext/css rel=3Dstylesheet><link media=3Dscreen href=3D"http://www.fraudwatch=
international.com/css/screen.css" type=3Dtext/css rel=3Dstylesheet><link me=
dia=3Dprint href=3D"http://www.fraudwatchinternational.com/css/print.css"; t=
ype=3Dtext/css rel=3Dstylesheet>
<style type=3Dtext/css>
<!--
.style1 {
        color: #006699;
        font-size: 4.5em;
        font-weight: bold;
}
.style5 {color: #FFFFFF; font-weight: bold; font-family: Verdana, Arial, He=
lvetica, sans-serif; }
.style7 {
        font-family: Verdana, Arial, Helvetica, sans-serif;
        color: #006699;
        font-size: 1.1em;
}
.style8 {font-size: 1em}
.style16 {color: #FFFFFF; font-weight: bold; font-family: Verdana, Arial, H=
elvetica, sans-serif; font-size: 1em; }
.style17 {
        font-family: Verdana, Arial, Helvetica, sans-serif;
        font-weight: bold;
        color: #006699;
}
.style18 {color: #006699}
.style19 {font-size: .09}
.style21 {color: #006699; font-weight: bold; font-family: Verdana, Arial, H=
elvetica, sans-serif; font-size: 1em; }
.style25 {font-size: 1.8em}
.style26 {font-size: x-small}
-->
        </style></head><body><p class=3D"style18 style26" align=3D"center">=
You are subscribed to FraudWatch International. <br />To discontinue your s=
ubscription use the link at the bottom of this message.<br />This Fraud Ale=
rt can be viewed online: <a href=3D"http://www.fraudwatchinternational.com/=
phishing/individual_alert.php?fa_no=3D51154&mode=3Dalert">http://www.fraudw=
atchinternational.com/phishing/individual_alert.php?fa_no=3D51154&amp;mode=
=3Dalert</a></p><table cellspacing=3D"0" cellpadding=3D"1" width=3D"660" al=
ign=3D"center" border=3D"0"><tbody><tr><td width=3D"245"><a href=3D"http://=
www.fraudwatchinternational.com/"><img height=3D"76" src=3D"http://www.frau=
dwatchinternational.com/images/logo.gif" width=3D"240" border=3D"0" /></a><=
/td><td width=3D"385" bgcolor=3D"#ffffff" rowspan=3D"2"><h1 class=3D"center=
align style1" align=3D"center">FRAUD ALERT </h1></td></tr><tr><td><div alig=
n=3D"center"><span class=3D"style7"><a class=3D"style7" href=3D"http://www.=
fraudwatchinternational.com/">www.fraudwatchinternational.com</a></span></d=
iv></td></tr></tbody></table><table bordercolor=3D"#006699" cellspacing=3D"=
0" cellpadding=3D"1" width=3D"660" align=3D"center" border=3D"1"><tbody><tr=
<td><div class=3D"style5" align=3D"center"><a href=3D"http://www.fraudwatc=
hinternational.com/">Home</a></div></td><td><div class=3D"style5 style8" al=
ign=3D"center"><a class=3D"style16" href=3D"http://www.fraudwatchinternatio=
nal.com/phishing/">Phishing Alerts</a> </div></td><td><div class=3D"style16=
" align=3D"center"><a class=3D"style16" href=3D"http://www.fraudwatchintern=
ational.com/consumer/consumer-home/">Consumer</a></div></td><td><div class=
=3D"style16" align=3D"center"><a class=3D"style16" href=3D"http://www.fraud=
watchinternational.com/business/business-home/">Business</a></div></td><td>=
<div class=3D"style16" align=3D"center"><a class=3D"style16" href=3D"http:/=
/www.fraudwatchinternational.com/report_fraud/report-fraud/">Report Fraud</=
a> </div></td><td><div class=3D"style16" align=3D"center"><a class=3D"style=
16" href=3D"http://www.fraudwatchinternational.com/ife/ife-home/";>Learn Mor=
e</a> </div></td><td><div class=3D"style16" align=3D"center"><a class=3D"st=
yle16" href=3D"http://www.fraudwatchinternational.com/fraud_shield/product-=
features/">FWI Fraud Shield</a> </div></td><td><div class=3D"style16" align=
=3D"center"><a class=3D"style16" href=3D"http://www.fraudwatchinternational=
.com/login.php">Members</a></div></td></tr></tbody></table><table bordercol=
or=3D"#006699" cellspacing=3D"0" cellpadding=3D"1" width=3D"660" align=3D"c=
enter" border=3D"1"><tbody><tr><td valign=3D"top" width=3D"200"><p>=A0</p><=
table width=3D"200"><tbody><tr><td><div class=3D"infobox" id=3D"alertstats"=
<h4>Phishing=A0Site Statistics</h4><table><tbody><tr class=3D"style18"><td=
Active Sites </td><td class=3D"right">694</td></tr><tr class=3D"style18"><=
td>Total=A0</td><td class=3D"right">50,916</td></tr><tr class=3D"style18"><=
td>Updated</td><td class=3D"right">30 Jun 2006</td></tr></tbody></table></d=
iv><!-- end #altertstats --><p />=A0</td></tr></tbody></table><p class=3D"S=
ideMenu" /><p>=A0</p><table width=3D"200"><tbody><tr><td><div class=3D"info=
box" id=3D"alertstats"><h4 align=3D"center">Report Email Fraud </h4><table>=
<tbody><tr><td class=3D"style18">Nigerian 419 Scam Letters, Lottery emails,=
 Phishing emails and other fraudulent emails should be forwarded to our Inv=
estigations Team at: </td></tr><tr><td class=3D"style18"><a href=3D"mailto:=
scams@fraudwatchinternational.com">scams@<br />fraudwatchinternational.com<=
/a></td></tr></tbody></table></div><!-- end #altertstats --><p />=A0</td></=
tr></tbody></table><p>=A0</p><table width=3D"200"><tbody><tr><td><div class=
=3D"infobox" id=3D"alertstats"><h4 align=3D"center">What's new at FWI?</h4>=
<table><tbody><tr><td><p class=3D"style21" align=3D"center">RSS Feeds <a hr=
ef=3D"http://www.fraudwatchinternational.com/resources/rss-info/";><img src=
=3D"http://www.fraudwatchinternational.com/images/rss.png"; border=3D"0" /><=
/a></p><p class=3D"style18">Our regularly updated Phishing Fraud Alerts del=
ivered to you as an RSS feed. <a href=3D"http://www.fraudwatchinternational=
.com/resources/rss-info/">Learn more . . .</a> </p><p class=3D"style21">=A0=
</p><p class=3D"style21" align=3D"center">Phishing URL Data Feed</p><p clas=
s=3D"style18">The FWI Phishing database provides a data feed of phishing UR=
L's to be used to protect consumers from visiting phishing sites. <a href=
=3D"http://www.fraudwatchinternational.com/business/phishing-url-database/"=
Learn more . . .</a> </p><p>=A0</p><p class=3D"style21" align=3D"center">W=
eekly Phishing Statistic Reports </p><p class=3D"style18">Weekly Phishing S=
tatistics Reports published on Mondays detailing=A0the previous weeks phish=
ing sites detected by FraudWatch International. <a href=3D"http://www.fraud=
watchinternational.com/consumer/fwi-membership/">Learn more . . . </a></p><=
p>=A0</p><p class=3D"style21" align=3D"center">Phishing Site Take Down</p><=
p class=3D"style18"><strong>Is your company currently targeted by a phishin=
g attack? </strong></p><p class=3D"style18">Our 24x7 Security Operations Ce=
nter will take the phishing site down within 24 hours, or a full refund!- N=
o Risk! <a href=3D"http://www.fraudwatchinternational.com/business/business=
-home/">Learn more . . . </a></p><p>=A0</p><p class=3D"style21" align=3D"ce=
nter">FWI Fraud Shield </p><p>Protect yourself from phishing sites when bro=
wsing the Internet with the FWI Fraud Shield </p><p align=3D"center"><a hre=
f=3D"http://www.fraudwatchinternational.com/fraud_shield/product-features/"=
Free Beta Version! </a></p><p align=3D"center"><a href=3D"http://www.fraud=
watchinternational.com/fraud_shield/product-features/"><img src=3D"http://w=
ww.fraudwatchinternational.com/image_display.php?path=3D918841011_fwifrauds=
hield_beta2.jpg" border=3D"0" /></a></p><p>=A0</p><p class=3D"style21">=A0<=
/p></td></tr></tbody></table></div><!-- end #altertstats --><p />=A0</td></=
tr></tbody></table></td><td valign=3D"top" width=3D"461"><div align=3D"cent=
er"></div><table width=3D"100%" border=3D"0"><tbody><tr><th scope=3D"col"><=
div align=3D"center"><p class=3D"style17">=A0</p><p class=3D"style17"><font=
 size=3D"4">Citizens National Bank of Texas phishing email - &quot;URGENT :=
 RENEW YOUR ONLINE SERVICES !&quot;</font></p></div></th></tr></tbody></tab=
le><p>=A0</p><table cellspacing=3D"2" cellpadding=3D"2" width=3D"94%" align=
=3D"center" border=3D"1"><tbody><tr><td width=3D"121"><div class=3D"style19=
 SideMenu2 style18" align=3D"left"><strong>Date Issued: </strong></div></td=
<td width=3D"292"><span class=3D"style18">Friday 30th June 2006 </span></t=
d></tr><tr><td><div class=3D"style19 SideMenu2 style18" align=3D"left"><str=
ong>Fraud Alert # </strong></div></td><td><span class=3D"style18">51154</sp=
an></td></tr><tr><td><div class=3D"style19 SideMenu2 style18" align=3D"left=
"><strong>Target Company:</strong></div></td><td class=3D"style18">Citizens=
 National Bank of Texas</td></tr><tr><td class=3D"SideMenu2"><div class=3D"=
style19 SideMenu2 style18" align=3D"left"><strong>From Address: </strong></=
div></td><td class=3D"style18">Citizens National Bank [do-not-reply@cnbwax.=
com]</td></tr><tr><td class=3D"SideMenu2"><div class=3D"style19 SideMenu2 s=
tyle18" align=3D"left"><strong>Subject Line: </strong></div></td><td class=
=3D"style18">URGENT : RENEW YOUR ONLINE SERVICES !</td></tr><tr><td class=
=3D"SideMenu2"><div class=3D"style19 SideMenu2 style18" align=3D"left"><str=
ong>Email Link URL: </strong></div></td><td><p><a class=3D"style18" href=3D=
"http://www.fraudwatchinternational.com/business/phishing-url-database/";>Av=
ailable to FWI Phishing Data Feed Clients</a></p></td></tr></tbody></table>=
<table cellspacing=3D"2" cellpadding=3D"2" width=3D"323" align=3D"center" b=
order=3D"0"><tbody><tr><td colspan=3D"2"><h2 class=3D"style17" align=3D"cen=
ter">Phishing Methods Used:</h2></td></tr><tr><td class=3D"SideMenu2" width=
=3D"75"><span class=3D"style19 SideMenu2"><strong>Email:</strong></span></t=
d><td class=3D"style18" width=3D"234"><a href=3D"http://www.fraudwatchinter=
national.com/phishing-fraud/phishing-email-methods/#subject" target=3D"_bla=
nk">Deceptive Subject Line</a></td></tr><tr><td class=3D"SideMenu2"></td><t=
d class=3D"style18"><a href=3D"http://www.fraudwatchinternational.com/phish=
ing-fraud/phishing-email-methods/#address" target=3D"_blank">Forged Senders=
 Address</a></td></tr><tr><td class=3D"SideMenu2"></td><td class=3D"style18=
"><a href=3D"http://www.fraudwatchinternational.com/phishing-fraud/phishing=
-email-methods/#content" target=3D"_blank">Genuine Looking Content</a></td>=
</tr><tr><td class=3D"SideMenu2"></td><td class=3D"style18"><a href=3D"http=
://www.fraudwatchinternational.com/phishing-fraud/phishing-email-methods/#h=
yperlinks" target=3D"_blank">Disguised Hyperlinks</a></td></tr><tr><td clas=
s=3D"SideMenu2"></td><td class=3D"style18"></td></tr><tr><td class=3D"SideM=
enu2"><span class=3D"style19 SideMenu2"><strong>Web Site :</strong></span><=
/td><td class=3D"style18" width=3D"234"><a href=3D"http://www.fraudwatchint=
ernational.com/phishing-fraud/phishing-web-site-methods/#content" target=3D=
"_blank">Genuine Looking Content </a></td></tr><tr><td class=3D"SideMenu2">=
</td><td class=3D"style18"><a href=3D"http://www.fraudwatchinternational.co=
m/phishing-fraud/phishing-web-site-methods/#form" target=3D"_blank">Form - =
Collection of Information </a></td></tr><tr><td class=3D"SideMenu2">=A0</td=
<td class=3D"style18"><p><a href=3D"http://www.fraudwatchinternational.com=
/phishing-fraud/phishing-web-site-methods/#incorrect" target=3D"_blank">Inc=
orrect URL, not disguised</a></p></td></tr></tbody></table><p class=3D"styl=
e18"><strong>A copy of the email is displayed below.</strong></p><p align=
=3D"center"><img height=3D"487" src=3D"http://www.fraudwatchinternational.c=
om/alerts/images/51154_email.jpg" width=3D"425" />=A0</p><p class=3D"style1=
8" align=3D"left"><strong>A copy of the fake web site is displayed below.</=
strong></p><p align=3D"center"><img height=3D"342" src=3D"http://www.fraudw=
atchinternational.com/alerts/images/51154_inc.jpg" width=3D"425" /></p></td=
</tr><tr bgcolor=3D"#d8ed9e"><td colspan=3D"2"><div align=3D"center"><p><s=
trong class=3D"style17 style25">Phishing Index</strong><br /><span class=3D=
"style18">Index of Phishing Attacks by company, last detected date and tota=
l number of attacks detected by FraudWatch International. </span></p><p cla=
ss=3D"style18">Please Visit our Site to see a complete Listing of Phishing =
Fraud Alerts By Company:</p><p class=3D"style18"><strong><a href=3D"http://=
www.fraudwatchinternational.com/phishing/company_index.php">http://www.frau=
dwatchinternational.com/phishing/company_index.php</a></strong></p></div></=
td></tr></tbody></table><p class=3D"style18" align=3D"center">To Unsubscrib=
e, click on the link below:<br /><a href=3D"http://www.fraudwatchinternatio=
nal.com/uc/php/opt.php?action=3Dunsub&id=3Dphishing@antihotmail.com&list=3D=
4">Unsubscribe Link</a> <br />Or Copy and Paste the following URL into your=
 browser:<br />http://www.fraudwatchinternational.com/uc/php/opt.php?action=
=3Dunsub&amp;id=3Dphishing@antihotmail.com&amp;list=3D4 </p><p class=3D"sty=
le18" align=3D"center">=A0</p><p class=3D"style18" align=3D"center">FraudWa=
tch International Pty Ltd. GPO Box 3537 Melbourne Australia 3001 ABN: 56 09=
7 296 056 </p></body></html><img src=3D"http://www.fraudwatchinternational.=
com/uc/php/track.php?campaign_type=3Dcmpgn_letter&letter_id=3D3&campaign=3D=
20&sub=3D31222" border=3D"0" width=3D"0" height=3D"0">

--3c1b588e47c6e7f14beb16ee269c05fa--