An
Email with the Subject "Important: We noticed unusual activity in your account" was
received in one of Scamdex's honeypot email accounts on Sat, 24 Oct 2015 03:55:43 -0700
and has been classified as a Generic Scam Email.
The sender shows as "Lloyds Bank"<Internetbanking@onlinelloydsbank.com>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] =>
[envelope-to:] => scamdex@scamdex.com
[delivery-date:] => Sat, 24 Oct 2015 03:55:43 -0700
[received:] => Array
(
[0] => from mx1.ean.edu.co ([200.0.187.11]:59914)by bigcat.newsblaze.com with esmtps (TLSv1.2:DHE-RSA-AES256-GCM-SHA384:256)(Exim 4.86)(envelope-from )id 1ZpwUA-0008Ts-SJfor scamdex@scamdex.com; Sat, 24 Oct 2015 03:55:43 -0700
[1] => (qmail 13695 invoked by uid 89); 24 Oct 2015 01:04:06 -0000
[2] => by simscan 1.4.0 ppid: 12958, pid: 13689, t: 0.5448s scanners: attach: 1.4.0 clamav: 0.98.4/m:55/d:21002
[3] => from unknown (HELO User) (portal@mx1.ean.edu.co@50.246.132.41) by mx1.ean.edu.co with ESMTPA; 24 Oct 2015 01:04:05 -0000
)
[dkim-signature:] => v=1; a=rsa-sha256; c=simple; d=mx1.ean.edu.co; h=from:subject:date:mime-version:content-type:content-transfer-encoding; s=mx1; bh=Ut0yauTvRrpmwmMZWgMaVCF0XwOKmLZ2Ij0bLiwX4eA=; b=Ko8y4KJv9BdEH6w3Jg0j0bpzn+5mH+Hvv2Tzdr7G9R6YbOud3OKhfg09BfWMjw9MzJ8kgFBEdR9EHZBx7f7B42Tc28344EVGiLwasZRkxrt5eJ17PUMtCDGH5V9TnZBIJqZb4WBmTWhLDSuQJIIsZA+ShgHLzoyZ//oc0JCeUlk=
[from:] => "Lloyds Bank"
[subject:] => Important: We noticed unusual activity in your account
[date:] => Fri, 23 Oct 2015 20:03:31 -0500
[mime-version:] => 1.0
[content-type:] => text/html;charset="Windows-1251"
[content-transfer-encoding:] => 7bit
[x-priority:] => 1
[x-msmail-priority:] => High
[x-mailer:] => Microsoft Outlook Express 6.00.2600.0000
[x-mimeole:] => Produced By Microsoft MimeOLE V6.00.2600.0000
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
Internet Banking – We're making a few security
updates.
Verification of Recent Account Activity.
As part of our ongoing effort to protect your account and our relationship, we monitor your account for possible fraudulent activity.
We need to confirm that you or someone authorized to use your account made the following activity(s) on your account
1)
A recent logon from a computer we do not recognize.
What do I have to do?
click
"Continue" to complete the verification process.
Your satisfaction is important to
us, and we appreciate your prompt
attention to this matter otherwise access to this account would be restricted.
