An
Email with the Subject "FW: Abbey account Security Update needed (June 19, 2008)" was
received in one of Scamdex's honeypot email accounts on Thu, 19 Jun 2008 12:03:45 -0700
and has been classified as a Generic Scam Email.
The sender shows as "Holzhauer, John" <John.Holzhauer@gdc4s.com>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
0bankmicrosoftebayaccountcustomerserviceinternetcustomsentmailbank abbey bank userabbeyspamsecurity(june 19, 2008)([10.230.4.11])(6.0.3790.3959)([10.230.6.25]) by gdc4s....(trend imss smtp service 7.0)[127.0.0.1]) by gide...(edt)([127.0.0.1])(gideon.gdc4s.com [127.0....(espion-interceptor, port...(30-58-118-87.mtulink.net...(postfix)(edt)received: (qmail 290...(utc) filetime=[685c8a60:...[mailto:cust.service@abbe...dearfinancial services
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] =>
[envelope-to:] => scams@scamdex.com
[delivery-date:] => Thu, 19 Jun 2008 12:03:45 -0700
[received:] => Array
(
[0] => from ndhmc4sege02.gdc4s.com ([192.206.187.68])by gogol.o7e.net with esmtps (TLSv1:AES256-SHA:256)(Exim 4.69)(envelope-from )id 1K9PQ2-00018M-Swfor scams@scamdex.com; Thu, 19 Jun 2008 12:03:45 -0700
[1] => from ndhmc4segi01.gdc4s.com ([10.230.4.10]) by gdc4s.com ([10.230.100.68]) with ESMTP (TREND IMSS SMTP Service 7.0) id 15bb01d200005200 for ; Thu, 19 Jun 2008 15:03:37 -0500
[2] => from NDHMC4SXCH.gdc4s.com ([10.230.6.25]) by gdc4s.com ([10.230.4.10]) with ESMTP (TREND IMSS SMTP Service 7.0) id 161a1b380001975a for ; Thu, 19 Jun 2008 15:03:36 -0500
)
[x-tm-imss-message-id:] => Array
(
[0] => <15bb01d200005200@gdc4s.com>
[1] => <161a1b380001975a@gdc4s.com>
)
[x-mimeole:] => Produced By Microsoft Exchange V6.5
[content-class:] => urn:content-classes:message
[return-receipt-to:] => "Holzhauer, John"
[mime-version:] => 1.0
[content-type:] => multipart/alternative;boundary="----_=_NextPart_001_01C8D23F.2D454E11"
[disposition-notification-to:] => "Holzhauer, John"
[subject:] => FW: Abbey account Security Update needed (June 19, 2008)
[date:] => Thu, 19 Jun 2008 15:03:34 -0400
[x-ms-has-attach:] =>
[x-ms-tnef-correlator:] =>
[thread-topic:] => Abbey account Security Update needed (June 19, 2008)
[thread-index:] => AcjR/2hqR5TzhwivSG6CH/C32ykTCAAO1C/Q
[from:] => "Holzhauer, John"
[to:] => ,,,,,
[cc:] => ,,
[x-spam-status:] => No, score=-2.9
[x-spam-score:] => -28
[x-spam-bar:] => --
[x-spam-flag:] => NO
[message-id:] => REIDs3x1239839793.M202747P32690V-S3X
[x-scamdex-scores:] => S:44 P:42 A:59 L:38 E:48 G:36
[x-scamdex-classtype:] => A
[x-scamdex-classscore:] => 59
[x-scamdex-totscore:] => 267
[x-scamdex-kw:] => account,bank,customer,ebay,internet,notification,plc,resident,sent,service
[x-scamdex-em:] => 147809a500015c53@gdc4s.com,anonymous@com30.osei.no,anonymous@com30.osei.noX,holzhauer@gdc4s.com,qmail@com30.osei.no,service@abbey.co.uk
[x-scamdex-dir:] => C
[x-scamdex-id:] => C1239839793.M202747P32690V
[x-scamdex-copyright:] => This Email is Copyright Scamdex.com 2009, Reproduction Prohibited
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
Microsoft Mail
Internet Headers Version 2.0 Received: from ndhmc4segi02.gdc4s.com
([10.230.4.11]) by NDHMC4SXCH.gdc4s.com with Microsoft
SMTPSVC(6.0.3790.3959); Thu, 19 Jun 2008 07:27:07
-0400 X-TM-IMSS-Message-ID:<147809a500015c53@gdc4s.com> Received:
from gideon.gdc4s.com ([10.230.6.25]) by gdc4s.com ([10.230.4.11]) with SMTP
(TREND IMSS SMTP Service 7.0) id 147809a500015c53 for <anonymous@com30.osei.no>; Thu, 19
Jun 2008 07:27:07 -0500 Received: from localhost (localhost
[127.0.0.1]) by gideon.gdc4s.com (Postfix) with ESMTP id
BD93E27FEB0 for <john.holzhauer@gdc4s.com>; Thu, 19
Jun 2008 07:22:07 -0400 (EDT) Received: from gideon.gdc4s.com
([127.0.0.1]) by localhost (gideon.gdc4s.com [127.0.0.1])
(Espion-Interceptor, port port 10024) with ESMTP id 54461-08 for <john.holzhauer@gdc4s.com>; Thu,
19 Jun 2008 07:22:01 -0400 (EDT) Received: from com30.osei.no
(30-58-118-87.mtulink.net [87.118.58.30]) by gideon.gdc4s.com (Postfix)
with ESMTP id A69DB27FFAF for <john.holzhauer@gdc4s.com>; Thu, 19
Jun 2008 07:22:00 -0400 (EDT) Received: (qmail 29042 invoked by uid 2525); 19
Jun 2008 08:36:35 +0200 Date: 19 Jun 2008 08:36:35 +0200 Message-ID:
<20080619063635.29040.qmail@com30.osei.no> To:
john.holzhauer@gdc4s.com Subject:
Abbey account Security Update needed (June 19, 2008) From: <cust.service@abbey.co.uk> Reply-To:
cust.service@abbey.co.uk MIME-Version:
1.0 Content-Type: text/html X-Spam-Status: No, hits=4.821 tagged_above=1
required=5.0 tests=[DATE_IN_PAST_03_06=0.478, FORGED_RCVD_HELO=0.135,
HTML_30_40=0.374, HTML_MESSAGE=0.001, HTML_MIME_NO_HTML_TAG=1.082,
MIME_HTML_ONLY=0.001, NO_REAL_NAME=0.961 EBAYES_60] X-Spam-Level:
**** Content-Transfer-Encoding: quoted-printable Return-Path: anonymous@com30.osei.no X-OriginalArrivalTime:
19 Jun 2008 11:27:07.0782 (UTC) FILETIME=[685C8A60:01C8D1FF]
From: cust.service@abbey.co.uk
[mailto:cust.service@abbey.co.uk] Sent: Thursday, June 19, 2008 2:37
AM To: Holzhauer, John Subject: Abbey account Security
Update needed (June 19, 2008)
Dear Abbey Customer,
As a part of our efforts to meet the requirements
of the Financial Services Authority we now ask all Abbey Bank users to update
their account information. It's a smart and simple way to add an additional
layer of protection to your account.
Microsoft Mail
Internet Headers Version 2.0 Received: from ndhmc4segi02.gdc4s.com
([10.230.4.11]) by NDHMC4SXCH.gdc4s.com with Microsoft
SMTPSVC(6.0.3790.3959); Thu, 19 Jun 2008 07:27:07
-0400 X-TM-IMSS-Message-ID:<147809a500015c53@gdc4s.com> Received:
from gideon.gdc4s.com ([10.230.6.25]) by gdc4s.com ([10.230.4.11]) with SMTP
(TREND IMSS SMTP Service 7.0) id 147809a500015c53 for <anonymous@com30.osei.no>; Thu, 19
Jun 2008 07:27:07 -0500 Received: from localhost (localhost
[127.0.0.1]) by gideon.gdc4s.com (Postfix) with ESMTP id
BD93E27FEB0 for <john.holzhauer@gdc4s.com>; Thu, 19
Jun 2008 07:22:07 -0400 (EDT) Received: from gideon.gdc4s.com
([127.0.0.1]) by localhost (gideon.gdc4s.com [127.0.0.1])
(Espion-Interceptor, port port 10024) with ESMTP id 54461-08 for <john.holzhauer@gdc4s.com>; Thu,
19 Jun 2008 07:22:01 -0400 (EDT) Received: from com30.osei.no
(30-58-118-87.mtulink.net [87.118.58.30]) by gideon.gdc4s.com (Postfix)
with ESMTP id A69DB27FFAF for <john.holzhauer@gdc4s.com>; Thu, 19
Jun 2008 07:22:00 -0400 (EDT) Received: (qmail 29042 invoked by uid 2525); 19
Jun 2008 08:36:35 +0200 Date: 19 Jun 2008 08:36:35 +0200 Message-ID:
<20080619063635.29040.qmail@com30.osei.no> To:
john.holzhauer@gdc4s.com Subject:
Abbey account Security Update needed (June 19, 2008) From: <cust.service@abbey.co.uk> Reply-To:
cust.service@abbey.co.uk MIME-Version:
1.0 Content-Type: text/html X-Spam-Status: No, hits=4.821 tagged_above=1
required=5.0 tests=[DATE_IN_PAST_03_06=0.478, FORGED_RCVD_HELO=0.135,
HTML_30_40=0.374, HTML_MESSAGE=0.001, HTML_MIME_NO_HTML_TAG=1.082,
MIME_HTML_ONLY=0.001, NO_REAL_NAME=0.961 EBAYES_60] X-Spam-Level:
**** Content-Transfer-Encoding: quoted-printable Return-Path: anonymous@com30.osei.no X-OriginalArrivalTime:
19 Jun 2008 11:27:07.0782 (UTC) FILETIME=[685C8A60:01C8D1FF]
From: cust.service@abbey.co.uk
[mailto:cust.service@abbey.co.uk] Sent: Thursday, June 19, 2008 2:37
AM To: Holzhauer, John Subject: Abbey account Security
Update needed (June 19, 2008)
Dear Abbey Customer,
As a part of our efforts to meet the requirements
of the Financial Services Authority we now ask all Abbey Bank users to update
their account information. It's a smart and simple way to add an additional
layer of protection to your account.