An
Email with the Subject "Fw: Regarding Your Online Account" was
received in one of Scamdex's honeypot email accounts on Sat, 25 Oct 2008 01:13:32 -0700
and has been classified as a Generic Scam Email.
The sender shows as "David E. Ferro" <ferrodavide@yahoo.com>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
bankexpresssuspendmicrosoftcheckwinsafeaccountcustomerserviceinc.internetaccesscustominvestmentsecureonlinebank online banksincerelyferrodavide@yahoo.com will securityyahoo.comdearcooperationco-operation
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] =>
[envelope-to:] => submissions@scamdex.com
[delivery-date:] => Sat, 25 Oct 2008 01:13:32 -0700
[received:] => Array
(
[0] => from web110212.mail.gq1.yahoo.com ([67.195.8.188])by gogol.o7e.net with smtp (Exim 4.69)(envelope-from )id 1KteH5-0004Du-Ovfor submissions@scamdex.com; Sat, 25 Oct 2008 01:13:32 -0700
[1] => (qmail 86342 invoked by uid 60001); 25 Oct 2008 08:13:30 -0000
[2] => from [64.24.148.87] by web110212.mail.gq1.yahoo.com via HTTP; Sat, 25 Oct 2008 01:13:29 PDT
)
[domainkey-signature:] => a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:MIME-Version:Content-Type:Message-ID; b=xPws9PZOoBBlewqpDWg3LYVU8jAsmkISCxghaebsME8jFnlunSSzVtcNpWaPMtHQ1KzxTqSyRqKQKH4RlT71aYVjDAR+R7jZQKNmBc7h3HrNjXPE1HQQ0kxstosPM2WMHQuBS0PMA3xS55JAkhQAWwAylxIeXvlCrZ0aDgND0Ok=;
[x-ymail-osg:] => JLxTqEcVM1mPJ4yvqzzGNFheE5EFbVeln0M26zGdx6Yq8tLz7VU2GaHP4WXC2CP4odLq.gfuM3RpBpskN8U5kWqZqk0jg0ll.WUkRx9pYAPPqa173sN59FloAWA5z3I5hESLHHFt2fMkm4jhEaiH2km9.7LEy00tmBM7UMSWVEA4NGWOhzwUGiagyOws2g--
[x-mailer:] => Array
(
[0] => YahooMailWebService/0.7.247.3
[1] => <323418.86129.qm@web110212.mail.gq1.yahoo.com>
)
[date:] => Sat, 25 Oct 2008 01:13:29 -0700 (PDT)
[from:] => "David E. Ferro"
[subject:] => Fw: Regarding Your Online Account
[to:] => Email Scam Fraud & Phishing Resource Scamdex
[mime-version:] => 1.0
[content-type:] => multipart/alternative; boundary="0-2139286357-1224922409=:86129"
[x-spam-status:] => No, score=1.4
[x-spam-score:] => 14
[x-spam-bar:] => +
[x-spam-flag:] => NO
[message-id:] => REIDs3x1239839808.M682319P32690V-S3X
[x-scamdex-scores:] => S:43 P:50 A:52 L:37 E:46 G:36
[x-scamdex-classtype:] => A
[x-scamdex-classscore:] => 52
[x-scamdex-totscore:] => 264
[x-scamdex-kw:] => access,account,bank,check,customer,inc.,internet,online bank,safe,service,suspend
[x-scamdex-em:] => accounts@usbank.com
[x-scamdex-dir:] => B
[x-scamdex-id:] => B1239839808.M682319P32690V
[x-scamdex-copyright:] => This Email is Copyright Scamdex.com 2009, Reproduction Prohibited
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
A mysterious and suspicious message for you to check.
--- On Fri, 10/24/08, USbank Internet Banking <accounts@usbank.com> wrote:
A mysterious and suspicious message for you to check.
--- On Fri, 10/24/08, USbank Internet Banking <accounts@usbank.com> wrote: From: USbank Internet Banking <accounts@usbank.com> Subject: Regarding Your Online Account To: Date: Friday, October 24, 2008, 12:15 PM
<p><font face="Times New Roman" size="2"><strong>Dear Customer</strong>,</font><font face="Times New Roman"> </font></p> <p> <font face="Times New Roman" size="2">We are currently updating our online banking services, and due to this upgrade we sincerely <br> call your attention to follow below link and reconfirm your online account details. <br> Failure to confirm the online banking details will suspend you from accessing your account online.</font></p> <p><font face="Times New Roman" size="2">Due to this, you are requested to follow the provided steps and confirm your Online Banking <br> details for the safety of your
Accounts.<br> <br> </font><span > <font color="#000000" face="Times New Roman" size="2"><b> <span > <a href=""> Click Here </a></span></b></font></span><font face="Times New Roman" size="-1"> <br> <br> </font><font face="Times New Roman" size="2">We use the latest security SSL measures to ensure that your online banking </font><font size="2">experience is safe <br> and secure. The administration asks you to accept our</font><font face="Times New Roman" size="2"> apologies for the inconvenience caused <br> and expresses gratitude for cooperation.</font><font
face="Times New Roman"><br> </font></p> <p><font face="Times New Roman" size="-1">Thanks for your co-operation,</font><font color="#000000" face="Times New Roman" size="-1"><b><br> </b></font><b><font face="Times New Roman" size="-1">USbank Internet Banking.<br> <br> </font></b></p>
<p><i><font size="2" color="#C0C0C0">Investment Products and Services are available through U.S. Bancorp <br> Investments, Inc., an investment advisor and brokerage subsidiary of <br> U.S. Bancorp and an affiliate of U.S. Bank.</font></i></p> <p><i><font
size="2" color="#C0C0C0"><br> <br> </font></i></p>
