The Scamdex Scam Email Archive X

Subject:  (Chase Phishing#2)http://gb.jb.152.155.revip.asianet.co.th/postinf.html
From:  "Antihotmail.com Internet Incident Reponse Team (IIRT)" <iirt@antihotmail.com>
Date:  Fri, 21 Apr 2006 09:00:05 -0700
Category:  Generic
Date Added:  2016-07-20 20:10:41

An Email with the Subject "(Chase Phishing#2)http://gb.jb.152.155.revip.asianet.co.th/postinf.html" was received in one of Scamdex's honeypot email accounts on Fri, 21 Apr 2006 09:00:05 -0700 and has been classified as a Generic Scam Email. The sender shows as "Antihotmail.com Internet Incident Reponse Team (IIRT)" <iirt@antihotmail.com>.

The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be added to their email address lists for spam purposes.


Return-Path: <account@chase.com>
Delivered-To: spamcop-net-antihotmail@spamcop.net
Received: (qmail 20840 invoked from network); 21 Apr 2006 14:20:03 -0000
X-Spam-Checker-Version: SpamAssassin 3.1.1 (2006-03-10) on blade4
X-Spam-Level: *************
X-Spam-Status: hits=13.6 tests=FORGED_AOL_TAGS,FORGED_MSGID_AOL,
        FORGED_MUA_AOL_FROM,HTML_IMAGE_ONLY_24,HTML_MESSAGE,
        HTML_MIME_NO_HTML_TAG,INVALID_MSGID,MIME_BOUND_DD_DIGITS,
        MIME_HTML_ONLY,MIME_HTML_ONLY_MULTI,MISSING_MIMEOLE,MPART_ALT_DIFF,
        MSGID_SHORT,REPTO_QUOTE_AOL,UNPARSEABLE_RELAY,X_PRIORITY_HIGH
        version=3.1.1
Received: from unknown (HELO c60.cesmail.net) (192.168.1.105)
  by blade4.cesmail.net with SMTP; 21 Apr 2006 14:20:03 -0000
Received: from mailgate.cesmail.net ([216.154.195.36])
  by c60.cesmail.net with SMTP; 21 Apr 2006 10:19:48 -0400
X-IronPort-AV: i="4.04,145,1144036800";
   d="scan'208"; a="345083219:sNHT51455490"
Received: (qmail 15956 invoked from network); 21 Apr 2006 14:19:48 -0000
Received: from unknown (HELO mailgate.cesmail.net) (192.168.1.101)
  by mailgate.cesmail.net with SMTP; 21 Apr 2006 14:19:48 -0000
X-RocketMail: 00000001;R---------------;6641
X-RocketUID: 0000100246
X-RocketMIF: 1145542949;3677;
X-RocketYMUMID: AIHIjkQAAVK/REeZJQZe9kAD01s
X-Apparently-To: sgtpepper_1967@yahoo.com via 68.142.200.129; Thu, 20 Apr 2006
07:22:29 -0700
X-RocketRCL: 2583;1;4106724154;2623
X-Rocket-Spam: 70.21.250.135
X-YahooFilteredBulk: 70.21.250.135
X-Rocket-Track: cat=BK;
info=ip:BK<ip=70.21.250.135,policy=g-w0,n0,g100>;sv:UK<ip=216.39.53.190>
X-Originating-IP: [70.21.250.135]
Authentication-Results: mta289.mail.re4.yahoo.com
  from=chase.com; domainkeys=neutral (no sig)
Received: from popgate.cesmail.net [192.168.1.201]
        by mailgate.cesmail.net with POP3 (fetchmail-6.2.1)
        for antihotmail@spamcop.net (single-drop); Fri, 21 Apr 2006 10:19:48 -0400
(EDT)
Received: from 70.21.250.135  (HELO 192.168.1.5) (70.21.250.135)
  by mta289.mail.re4.yahoo.com with SMTP; Thu, 20 Apr 2006 07:22:28 -0700
Received: from 57.147.104.84 by ; Thu, 20 Apr 2006 08:16:52 -0700
Message-ID: <@aol.com>
From: "CHASE bank" <account@chase.com>
Reply-To: "CHASE bank" <account@chase.com>
To: nowhere_land@yahoo.com
Cc: sgtpepper_1967@yahoo.com, yourdj69@yahoo.com, melody_layne@yahoo.com,
mlmoore85@yahoo.com, mncplaya04@yahoo.com, octapurple@yahoo.com,
nwaguy@yahoo.com, shopaholic2242@yahoo.com, jasoncv20@yahoo.com
Subject: Locked Account
Date: Thu, 20 Apr 2006 13:08:52 -0200
X-Mailer: AOL 7.0 for Windows US sub 118
MIME-Version: 1.0
Content-Type: multipart/alternative;
        boundary="--272490626133664048794"
X-Priority: 1
X-MSMail-Priority: High
Content-Length: 1123
X-SpamCop-Checked:
X-SpamCop-Disposition: Blocked SpamAssassin=13

----272490626133664048794
Content-Type: text/html;
Content-Transfer-Encoding: quoted-printable

<IMG src=3D"http://www.chasefrauddetector.com/images/header.jpg&quot;><br><br><=
br><div>&nbsp;&nbsp;<font face=3Dverdana color=3D"darkblue" size=3D2><b> D=
ear JPMorgan Chase & Co. Customer,</b></font></div><br><br><font face=3D"a=
rial" size=3D2><DIV>&nbsp;&nbsp;&nbsp;Due to suspicious activities on your=
 JPMorgan Chase online accounts your account has been<BR>&nbsp;&nbsp; temp=
orarily <A href=3D"http://www.google.com/url?q=3Dhttp://gb.jb.152.155.revi=
p.asianet.co.th/postinf.html">LOCKED</A></div><br><br></font><font face=3D=
"arial" size=3D2><DIV>&nbsp;&nbsp;&nbsp;In order to reinstate your account=
 and resume online banking please&nbsp;<A href=3D"http://www.google.com/ur=
l?q=3Dhttp://gb.jb.152.155.revip.asianet.co.th/postinf.html&quot;>CONFIRM</A> y=
our online <br>&nbsp;&nbsp;&nbsp;account, or you can call customer service=
 Monday thru Friday 8 a.m. EST to 1 a.m. EST and <br>&nbsp;&nbsp;&nbsp;Sat=
urday 8 a.m. EST to 5 p.m. EST at 1-800-621-0361.</div><br><br><DIV>&nbsp;=
&nbsp;&nbsp;______________________________________________________________=
________</div><br><div><font face=3Dverdana size=3D1>&nbsp;&nbsp;&nbsp;ABO=
UT THIS MESSAGE:<div><font face=3Dverdana size=3D1>&nbsp;&nbsp;&nbsp;This =
message was delivered to you as a Chase credit card customer to provide yo=
u account<br>&nbsp;&nbsp;&nbsp;updates and information about your card ben=
efits. Chase values your privacy and your<br>&nbsp;&nbsp;&nbsp;preferences=
.</div><br><div><font face=3Dverdana size=3D1>&nbsp;&nbsp;&nbsp;Your perso=
nal information is protected by state-of-the-art technology. For more deta=
iled <br>&nbsp;&nbsp;&nbsp;security information, view our <A href=3D"http:=
//www.chase.com/privacy">Online Privacy Policy</A>. To request in writing:=
 Chase Privacy <br>&nbsp;&nbsp;&nbsp;Operations, 451 Florida Street, Fourt=
h Floor, LA2-9376, Baton Rouge, LA 70801</div><br><div><font face=3Dverdan=
a size=3D1>&nbsp;&nbsp;&nbsp;If you want to contact Chase, please do not r=
eply to this message, but instead go to <br>&nbsp;&nbsp;&nbsp;<A href=3D"h=
ttp://www.chase.com">http://www.chase.com/</A>. For faster service, please=
 enroll or log in to your account. Replies to<br>&nbsp;&nbsp;&nbsp;this me=
ssage will not be read or responded to.</div><br><div><font face=3Dverdana=
 size=3D1>&nbsp;&nbsp;&nbsp;This email was sent to: nowhere_land@yahoo.com=
</div><br><div><font face=3Dverdana size=3D1>&nbsp;&nbsp;&nbsp;=A9 2006 JP=
Morgan Chase & Co.</div>

----272490626133664048794--



--


--
Questions can be sent to: iirt@antihotmail.com
Domain  Dossier: http://www.centralops.net/
Antihotmail.com Whois: http://whois.antihotmail.com

[Zero Tolerance towards Unsolicited Email]
This email is sent in compliance with our strict anti-abuse
regulations.You have received this email because we are a active
Spam fighting organization.If you do not wish to receive any mail
from our service you may permanently block your email address by
sending a email to: stop.complaints@antihotmail.com .

All UCE/BCE is subject to a US$500.00 fee per item. If you send UCE
(SPAM) to Antihotmail.com , you are agreeing to this charge for
processing your "email" and also agree to pay any and all costs
incurred in collecting this fee.


Return-Path: <account@chase.com> Delivered-To: spamcop-net-antihotmail@spamcop.net Received: (qmail 20840 invoked from network); 21 Apr 2006 14:20:03 -0000 X-Spam-Checker-Version: SpamAssassin 3.1.1 (2006-03-10) on blade4 X-Spam-Level: ************* X-Spam-Status: hits=13.6 tests=FORGED_AOL_TAGS,FORGED_MSGID_AOL, FORGED_MUA_AOL_FROM,HTML_IMAGE_ONLY_24,HTML_MESSAGE, HTML_MIME_NO_HTML_TAG,INVALID_MSGID,MIME_BOUND_DD_DIGITS, MIME_HTML_ONLY,MIME_HTML_ONLY_MULTI,MISSING_MIMEOLE,MPART_ALT_DIFF, MSGID_SHORT,REPTO_QUOTE_AOL,UNPARSEABLE_RELAY,X_PRIORITY_HIGH version=3.1.1 Received: from unknown (HELO c60.cesmail.net) (192.168.1.105) by blade4.cesmail.net with SMTP; 21 Apr 2006 14:20:03 -0000 Received: from mailgate.cesmail.net ([216.154.195.36]) by c60.cesmail.net with SMTP; 21 Apr 2006 10:19:48 -0400 X-IronPort-AV: i="4.04,145,1144036800"; d="scan'208"; a="345083219:sNHT51455490" Received: (qmail 15956 invoked from network); 21 Apr 2006 14:19:48 -0000 Received: from unknown (HELO mailgate.cesmail.net) (192.168.1.101) by mailgate.cesmail.net with SMTP; 21 Apr 2006 14:19:48 -0000 X-RocketMail: 00000001;R---------------;6641 X-RocketUID: 0000100246 X-RocketMIF: 1145542949;3677; X-RocketYMUMID: AIHIjkQAAVK/REeZJQZe9kAD01s X-Apparently-To: sgtpepper_1967@yahoo.com via 68.142.200.129; Thu, 20 Apr 2006 07:22:29 -0700 X-RocketRCL: 2583;1;4106724154;2623 X-Rocket-Spam: 70.21.250.135 X-YahooFilteredBulk: 70.21.250.135 X-Rocket-Track: cat=BK; info=ip:BK<ip=70.21.250.135,policy=g-w0,n0,g100>;sv:UK<ip=216.39.53.190> X-Originating-IP: [70.21.250.135] Authentication-Results: mta289.mail.re4.yahoo.com from=chase.com; domainkeys=neutral (no sig) Received: from popgate.cesmail.net [192.168.1.201] by mailgate.cesmail.net with POP3 (fetchmail-6.2.1) for antihotmail@spamcop.net (single-drop); Fri, 21 Apr 2006 10:19:48 -0400 (EDT) Received: from 70.21.250.135 (HELO 192.168.1.5) (70.21.250.135) by mta289.mail.re4.yahoo.com with SMTP; Thu, 20 Apr 2006 07:22:28 -0700 Received: from 57.147.104.84 by ; Thu, 20 Apr 2006 08:16:52 -0700 Message-ID: <@aol.com> From: "CHASE bank" <account@chase.com> Reply-To: "CHASE bank" <account@chase.com> To: nowhere_land@yahoo.com Cc: sgtpepper_1967@yahoo.com, yourdj69@yahoo.com, melody_layne@yahoo.com, mlmoore85@yahoo.com, mncplaya04@yahoo.com, octapurple@yahoo.com, nwaguy@yahoo.com, shopaholic2242@yahoo.com, jasoncv20@yahoo.com Subject: Locked Account Date: Thu, 20 Apr 2006 13:08:52 -0200 X-Mailer: AOL 7.0 for Windows US sub 118 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="--272490626133664048794" X-Priority: 1 X-MSMail-Priority: High Content-Length: 1123 X-SpamCop-Checked: X-SpamCop-Disposition: Blocked SpamAssassin=13 ----272490626133664048794 Content-Type: text/html; Content-Transfer-Encoding: quoted-printable <IMG src=3D"http://www.chasefrauddetector.com/images/header.jpg"><br><br><= br><div>&nbsp;&nbsp;<font face=3Dverdana color=3D"darkblue" size=3D2><b> D= ear JPMorgan Chase & Co. Customer,</b></font></div><br><br><font face=3D"a= rial" size=3D2><DIV>&nbsp;&nbsp;&nbsp;Due to suspicious activities on your= JPMorgan Chase online accounts your account has been<BR>&nbsp;&nbsp; temp= orarily <A href=3D"http://www.google.com/url?q=3Dhttp://gb.jb.152.155.revi= p.asianet.co.th/postinf.html">LOCKED</A></div><br><br></font><font face=3D= "arial" size=3D2><DIV>&nbsp;&nbsp;&nbsp;In order to reinstate your account= and resume online banking please&nbsp;<A href=3D"http://www.google.com/ur= l?q=3Dhttp://gb.jb.152.155.revip.asianet.co.th/postinf.html">CONFIRM</A> y= our online <br>&nbsp;&nbsp;&nbsp;account, or you can call customer service= Monday thru Friday 8 a.m. EST to 1 a.m. EST and <br>&nbsp;&nbsp;&nbsp;Sat= urday 8 a.m. EST to 5 p.m. EST at 1-800-621-0361.</div><br><br><DIV>&nbsp;= &nbsp;&nbsp;______________________________________________________________= ________</div><br><div><font face=3Dverdana size=3D1>&nbsp;&nbsp;&nbsp;ABO= UT THIS MESSAGE:<div><font face=3Dverdana size=3D1>&nbsp;&nbsp;&nbsp;This = message was delivered to you as a Chase credit card customer to provide yo= u account<br>&nbsp;&nbsp;&nbsp;updates and information about your card ben= efits. Chase values your privacy and your<br>&nbsp;&nbsp;&nbsp;preferences= .</div><br><div><font face=3Dverdana size=3D1>&nbsp;&nbsp;&nbsp;Your perso= nal information is protected by state-of-the-art technology. For more deta= iled <br>&nbsp;&nbsp;&nbsp;security information, view our <A href=3D"http:= //www.chase.com/privacy">Online Privacy Policy</A>. To request in writing:= Chase Privacy <br>&nbsp;&nbsp;&nbsp;Operations, 451 Florida Street, Fourt= h Floor, LA2-9376, Baton Rouge, LA 70801</div><br><div><font face=3Dverdan= a size=3D1>&nbsp;&nbsp;&nbsp;If you want to contact Chase, please do not r= eply to this message, but instead go to <br>&nbsp;&nbsp;&nbsp;<A href=3D"h= ttp://www.chase.com">http://www.chase.com/</A>. For faster service, please= enroll or log in to your account. Replies to<br>&nbsp;&nbsp;&nbsp;this me= ssage will not be read or responded to.</div><br><div><font face=3Dverdana= size=3D1>&nbsp;&nbsp;&nbsp;This email was sent to: nowhere_land@yahoo.com= </div><br><div><font face=3Dverdana size=3D1>&nbsp;&nbsp;&nbsp;=A9 2006 JP= Morgan Chase & Co.</div> ----272490626133664048794-- -- -- Questions can be sent to: iirt@antihotmail.com Domain Dossier: http://www.centralops.net/ Antihotmail.com Whois: http://whois.antihotmail.com [Zero Tolerance towards Unsolicited Email] This email is sent in compliance with our strict anti-abuse regulations.You have received this email because we are a active Spam fighting organization.If you do not wish to receive any mail from our service you may permanently block your email address by sending a email to: stop.complaints@antihotmail.com . All UCE/BCE is subject to a US$500.00 fee per item. If you send UCE (SPAM) to Antihotmail.com , you are agreeing to this charge for processing your "email" and also agree to pay any and all costs incurred in collecting this fee.