An
Email with the Subject "APRIL 2013 ACCOUNT MESSAGE ALERT." was
received in one of Scamdex's honeypot email accounts on Mon, 08 Apr 2013 12:13:24 -0700
and has been classified as a Generic Scam Email.
The sender shows as Lloyds TSB <security@advisor.webssl.com>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
assistance0800 096 9779boxlloydsbankexpresslogincontactsafeaccounttransactioninternetsecureonlinemaildeliverybank online bankshare tsb bank confidential will mailboxsecuritycooperationhttps://online.lloydstsb....http://www.lloydstsb.com/...
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] =>
[envelope-to:] => mxw@scamdex.com
[delivery-date:] => Mon, 08 Apr 2013 12:13:24 -0700
[received:] => Array
(
[0] => from davemarron.com ([69.164.148.82]:2735 helo=mail.nucompassconnect.com)by lester.newsblaze.com with esmtp (Exim 4.80)(envelope-from )id 1UPHVM-0008J7-7Kfor mxw@scamdex.com; Mon, 08 Apr 2013 12:13:24 -0700
[1] => from advisor.webssl.com (unknown [82.147.202.162])by mail.nucompassconnect.com (Postfix) with ESMTP id 6CB0C37C0FEfor ; Mon, 8 Apr 2013 12:10:28 -0700 (PDT)
)
[from:] => Lloyds TSB
[to:] => mxw@scamdex.com
[subject:] => APRIL 2013 ACCOUNT MESSAGE ALERT.
[date:] => 08 Apr 2013 22:06:30 +0300
[message-id:] => <20130408220630.D87E721A273D6768@advisor.webssl.com>
[mime-version:] => 1.0
[content-type:] => text/html;charset="iso-8859-1"
[content-transfer-encoding:] => quoted-printable
[x-spam-status:] => No, score=0.8
[x-spam-score:] => 8
[x-spam-bar:] => /
[x-ham-report:] => Spam detection software, running on the system "lester.newsblaze.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seethe administrator of that system for details.Content preview: Lloyds TSB Bank - Online Banking - Internet Banking Important message from Lloyds TSB Message Centre Lloyds TSB has introduced new functionality to give you greater internet banking flexibility and convenience. [...] Content analysis details: (0.8 points, 4.0 required) pts rule name description---- ---------------------- -------------------------------------------------- 1.6 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT [69.164.148.82 listed in bb.barracudacentral.org]-2.0 SUBJ_ALL_CAPS Subject is all capitals 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: lloydstsb.co.uk] 0.0 NORMAL_HTTP_TO_IP URI: Uses a dotted-decimal IP address in URL 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars
[x-spam-flag:] => NO
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
Lloyds TSB Bank - Online Banking - Internet Banking
Important message from Lloyds TSB Message Centre
Lloyds TSB has introduced new functionality to give you greater
internet banking flexibility and convenience.
Due to concerns, for the safety and integrity of the Internet Banking account we have issued this warning message.
Our attempts to deliver your alerts to you have been unsuccessful.
Either your e-mail address is not correct or the mailbox is full.
This will affect your statement delivery and your account
transactions too. If you did not authorize this change or if you need
assistance
with your personal account information.
As part of our
shared responsibility in protecting your confidential details, Please
click on the option below for update of your contact details.
https://online.lloydstsb.co.uk/personal/logon/login.jsp?WT.ac=hpIBlogon
We use the latest security measures to ensure that your internet banking
experience is safe and secure. The administration asks you to accept
our apologies for the inconveniences caused and expresses gratitude for
cooperation.
Please Note:
We expect to be in
a position to discontinue the old website within a few weeks. If you are
experiencing any problems with the new website please call the Lloyds TSB Contact
Centre on 0800 096 9779 to assist us in identifying and resolving the problem.
To be
re-directed to the Contact page, please click on:
http://www.lloydstsb.com/contact_us.asp