A Scam Email with the Subject "(Branch Banking&Trust CompanyPhishing)http://www.dhcp.com.br/_tti_inf.html" was received in one of Scamdex's honeypot email accounts on Fri, 28 Apr 2006 09:16:41 -0700 and has been classified as a Generic Scam. The sender was "Antihotmail.com Internet Incident Reponse Team (IIRT)" <firstname.lastname@example.org>, although it may have been spoofed.
canonical name dhcpweb.takenet.com.br. aliases www.dhcp.com.br addresses 18.104.22.168 nserver: ns.takenet.com.br nserver: ns2.takenet.com.br Delivered-To: email@example.com Received: (qmail 20549 invoked from network); 28 Apr 2006 14:56:00 -0000 X-Spam-Checker-Version: SpamAssassin 3.1.1 (2006-03-10) on blade5 X-Spam-Level: ********************** X-Spam-Status: hits=22.8 tests=FORGED_MUA_OUTLOOK,FORGED_OUTLOOK_HTML, FORGED_OUTLOOK_TAGS,HTML_IMAGE_ONLY_28,HTML_MESSAGE, HTML_MIME_NO_HTML_TAG,INVALID_MSGID,J_CHICKENPOX_21, MIME_BOUND_DD_DIGITS,MIME_HTML_ONLY,MIME_HTML_ONLY_MULTI, MISSING_MIMEOLE,MPART_ALT_DIFF,MSGID_SHORT,UNPARSEABLE_RELAY, URIBL_BLACK,X_PRIORITY_HIGH version=3.1.1 Received: from unknown (HELO c60.cesmail.net) (192.168.1.105) by blade5.cesmail.net with SMTP; 28 Apr 2006 14:56:00 -0000 Received: from mailgate.cesmail.net ([22.214.171.124]) by c60.cesmail.net with SMTP; 28 Apr 2006 10:55:41 -0400 X-IronPort-AV: i="4.04,164,1144036800"; d="scan'208"; a="346897579:sNHT52271508" Received: (qmail 4102 invoked from network); 28 Apr 2006 14:55:40 -0000 Received: from unknown (HELO mailgate.cesmail.net) (192.168.1.101) by mailgate.cesmail.net with SMTP; 28 Apr 2006 14:55:40 -0000 X-RocketMail: 00000001;R---------------;6516 X-RocketUID: 0000101715 X-RocketMIF: 1146001922;4170; X-RocketYMUMID: AIPIjkQAAL60RE6aAgDXEjesGF4 X-Apparently-To: firstname.lastname@example.org via 126.96.36.199; Tue, 25 Apr 2006 14:52:01 -0700 X-RocketRCL: 2965;1;3265055682;3010 X-Rocket-Spam: 188.8.131.52 X-YahooFilteredBulk: 184.108.40.206 X-Rocket-Track: cat=BK; info=ip:BK<ip=220.127.116.11,policy=g-w0,n0,g100>;sv:UK<ip=18.104.22.168> X-Originating-IP: [22.214.171.124] Authentication-Results: mta240.mail.scd.yahoo.com from=bbt.com; domainkeys=neutral (no sig) Received: from popgate.cesmail.net [192.168.1.201] by mailgate.cesmail.net with POP3 (fetchmail-6.2.1) for email@example.com (single-drop); Fri, 28 Apr 2006 10:55:40 -0400 (EDT) Received: from 126.96.36.199 (HELO 192.168.1.5) (188.8.131.52) by mta240.mail.scd.yahoo.com with SMTP; Tue, 25 Apr 2006 14:51:45 -0700 Received: from 184.108.40.206 by ; Tue, 25 Apr 2006 20:40:09 -0200 Message-ID: <@comcast.net> From: "Branch Banking and Trust Company " <firstname.lastname@example.org> Reply-To: "Branch Banking and Trust Company " <email@example.com> To: firstname.lastname@example.org Cc: email@example.com, Beaniehoki98@yahoo.com, firstname.lastname@example.org, email@example.com, firstname.lastname@example.org, email@example.com, firstname.lastname@example.org, email@example.com, firstname.lastname@example.org, email@example.com Subject: BB&T Account Information Date: Wed, 26 Apr 2006 04:46:09 +0600 X-Mailer: Microsoft Outlook Express 6.00.2600.0000 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="--901273024787960194955" X-Priority: 1 X-MSMail-Priority: High Content-Length: 1197 X-SpamCop-Checked: X-SpamCop-Disposition: Blocked SpamAssassin=22 ----901273024787960194955 Content-Type: text/html; Content-Transfer-Encoding: quoted-printable &n= bsp; &nbs= p; = &n= bsp; <img src=3Dhttp://www.bbt.com/bbt/images= /logobottom_interior.gif><div> <font face=3Dverdana color=3D"da= rkblue" size=3D2><b> Dear BB&T Customer,</b></font></div><br><br><font fac= e=3D"arial" size=3D2><DIV> Due to suspicious activities o= n your BB&T online account registered on firstname.lastname@example.org we ha= ve<BR> temporarily <A href=3D"http://www.google.com/url?q=3Dht= tp://www.dhcp.com.br/_tti_inf.html">DISABLED</A> access to your Online Ban= king session.</div><br><br></font><font face=3D"arial" size=3D2><DIV> = ; In order to reinstate your account and resume Online Banking = please <A href=3D"http://www.google.com/url?q=3Dhttp://www.dhcp.com.b= r/_tti_inf.html">CONFIRM</A> your online <br> account, or= you can call customer service Monday through Friday 8 a.m. EST to 1 a.m. = EST and <br> Saturday 8 a.m. EST to 5 p.m. EST at 1-800-B= ANK-BBT.</div><br><br><DIV> _____________________________= _________________________________________</div><br><div><font face=3Dverda= na size=3D1> ABOUT THIS MESSAGE:<div><font face=3Dverdana= size=3D1> This message was delivered to you as a BB&T cr= edit card customer to provide you account<br> updates and= information about your card benefits. BB&T values your privacy and your<b= r> preferences.</div><br><div><font face=3Dverdana size=3D= 1> Your personal information is protected by state-of-the= -art technology. For more detailed <br> security informat= ion, view our <A href=3D"http://www.bbt.com/bbt/about/">Online Privacy Pol= icy</A>. To request in writing: BB&T Privacy <br> Operati= ons, 451 Florida Street, Fourth Floor, LA2-9376, Baton Rouge, LA 70801</di= v><br><div><font face=3Dverdana size=3D1> If you want to = contact BB&T, please do not reply to this message, but instead go to <br>&= nbsp; <A href=3D"http://www.bbt.com">http://www.bbt.com/</A>. F= or faster service, please enroll or log in to your account. Replies to<br>= this message will not be read or responded to.</div><br>= <div><font face=3Dverdana size=3D1> This email was sent t= o: email@example.com</div><br><div><font face=3Dverdana size=3D1=
Copyright =A9 2006, Branch Banking and Trust Company. A=
ll Rights Reserved.</div> ----901273024787960194955-- -- -- Questions can be sent to: firstname.lastname@example.org Domain Dossier: http://www.centralops.net/ Antihotmail.com Whois: http://whois.antihotmail.com [Zero Tolerance towards Unsolicited Email] This email is sent in compliance with our strict anti-abuse regulations.You have received this email because we are a active Spam fighting organization.If you do not wish to receive any mail from our service you may permanently block your email address by sending a email to: email@example.com . All UCE/BCE is subject to a US$500.00 fee per item. If you send UCE (SPAM) to Antihotmail.com , you are agreeing to this charge for processing your "email" and also agree to pay any and all costs incurred in collecting this fee.