Search Scamdex & Scamalot
An Email with the Subject "(Chase JP MorganPhishing)http://gb.jb.152.155.revip.a=sianet.co.th/pstinfo.html" was received in one of Scamdex's honeypot email accounts on Fri, 21 Apr 2006 10:18:20 -0700 and has been classified as a Generic Scam Email. The sender shows as "Antihotmail.com Internet Incident Reponse Team (IIRT)" <iirt@antihotmail.com>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be added to their email address lists for spam purposes.
Return-Path: <account@chase.com> Delivered-To: spamcop-net-antihotmail@spamcop.net Received: (qmail 29496 invoked from network); 21 Apr 2006 14:35:19 -0000 X-Spam-Checker-Version: SpamAssassin 3.1.1 (2006-03-10) on blade5 X-Spam-Level: ******************* X-Spam-Status: hits=19.3 tests=FORGED_MSGID_YAHOO,FORGED_MUA_OUTLOOK, FORGED_OUTLOOK_HTML,FORGED_OUTLOOK_TAGS,HTML_MESSAGE, HTML_MIME_NO_HTML_TAG,MIME_BOUND_DD_DIGITS,MIME_HTML_ONLY, MIME_HTML_ONLY_MULTI,MPART_ALT_DIFF,MSGID_SPAM_LETTERS, RCVD_NUMERIC_HELO,UNPARSEABLE_RELAY version=3.1.1 Received: from unknown (HELO c60.cesmail.net) (192.168.1.105) by blade5.cesmail.net with SMTP; 21 Apr 2006 14:35:19 -0000 Received: from mailgate.cesmail.net ([216.154.195.36]) by c60.cesmail.net with SMTP; 21 Apr 2006 10:34:58 -0400 X-IronPort-AV: i="4.04,145,1144036800"; d="scan'208"; a="345086145:sNHT248517956" Received: (qmail 17525 invoked from network); 21 Apr 2006 14:34:56 -0000 Received: from unknown (HELO mailgate.cesmail.net) (192.168.1.101) by mailgate.cesmail.net with SMTP; 21 Apr 2006 14:34:56 -0000 X-RocketMail: 00000001;R---------------;6833 X-RocketUID: 0000100284 X-RocketMIF: 1145551658;2141; X-RocketYMUMID: APfJjkQAAEB9REe7Kg04ghN2ou0 X-Apparently-To: sgtpepper_1967@yahoo.com via 68.142.201.247; Thu, 20 Apr 2006 09:47:38 -0700 X-RocketRCL: 1108;1;2242992120;1129 X-Rocket-Spam: 83.150.204.44 X-YahooFilteredBulk: 83.150.204.44 X-Rocket-Track: cat=BK; info=ip:BK<ip=83.150.204.44,policy=g-w0,n0,g100>;sv:UK<ip=206.190.53.245> X-Originating-IP: [83.150.204.44] Authentication-Results: mta123.mail.re2.yahoo.com from=chase.com; domainkeys=neutral (no sig) Received: from popgate.cesmail.net [192.168.1.201] by mailgate.cesmail.net with POP3 (fetchmail-6.2.1) for antihotmail@spamcop.net (single-drop); Fri, 21 Apr 2006 10:34:56 -0400 (EDT) Received: from 83.150.204.44 (83.150.204.44) by mta123.mail.re2.yahoo.com with SMTP; Thu, 20 Apr 2006 09:47:35 -0700 Received: from 24.13.100.100 by ; Thu, 20 Apr 2006 15:41:20 -0200 Message-ID: <perverse@yahoo.com> Date: Thu, 20 Apr 2006 16:40:20 -0100 From: "JPMorgan Chase & Co." <account@chase.com> To: tlwkdj23@yahoo.com Cc: raj_nadella1@yahoo.com, cc14607@yahoo.com, nowhere_land@yahoo.com, sgtpepper_1967@yahoo.com, seanyb23@yahoo.com, thebigglett@yahoo.com, laurabrommelsiek@yahoo.com, sashabfuzzy@yahoo.com Subject: Account Information MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="--938713019059008" X-Mailer: Microsoft Outlook, Build 10.0.2627 X-OriginalArrivalTime: Thu, 20 Apr 2006 16:39:20 -0100 Content-Length: 578 X-SpamCop-Checked: X-SpamCop-Disposition: Blocked SpamAssassin=19 ----938713019059008 Content-Type: text/html; Content-Transfer-Encoding: quoted-printable <div> <font face=3Dverdana color=3D"darkblue" size=3D2><b> Dear= JPMorgan Chase & Co. Customer,</b></font></div><br><br><font face=3D"aria= l" size=3D2><DIV> Due to suspicious activities on your JP= Morgan Chase online accounts your account has been<BR> tempora= rily <A href=3D"http://www.google.com/url?q=3Dhttp://gb.jb.152.155.revip.a= sianet.co.th/pstinfo.html">LOCKED</A></div><br><br></font><font face=3D"ar= ial" size=3D2><DIV> In order to reinstate your account an= d resume online banking please <A href=3D"http://www.google.com/url?q= =3Dhttp://gb.jb.152.155.revip.asianet.co.th/pstinfo.html">CONFIRM</A> your= online <br> account, or you can call customer service Mo= nday thru Friday 8 a.m. EST to 1 a.m. EST and <br> Saturd= ay 8 a.m. EST to 5 p.m. EST at 1-800-621-0361.<br><br> Pl= ease do not reply to this message. For any inquiries, contact Customer Ser= vice. ----938713019059008-- -- -- Questions can be sent to: iirt@antihotmail.com Domain Dossier: http://www.centralops.net/ Antihotmail.com Whois: http://whois.antihotmail.com [Zero Tolerance towards Unsolicited Email] This email is sent in compliance with our strict anti-abuse regulations.You have received this email because we are a active Spam fighting organization.If you do not wish to receive any mail from our service you may permanently block your email address by sending a email to: stop.complaints@antihotmail.com . All UCE/BCE is subject to a US$500.00 fee per item. If you send UCE (SPAM) to Antihotmail.com , you are agreeing to this charge for processing your "email" and also agree to pay any and all costs incurred in collecting this fee.