An
Email with the Subject "ACTION REQUIED: Notice for your account" was
received in one of Scamdex's honeypot email accounts on Wed, 08 May 2013 02:32:29 -0700
and has been classified as a Generic Scam Email.
The sender shows as "Scotty Brandon" <groped2@gmail.com>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
boxpresidentmobilbankendedsafeaccountresidenttransactioncustomerserviceaccesscustomsentonlinemailonline banksincerelygroped2@gmail.com will securityachdear
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] =>
[envelope-to:] => mc_mxw@o7e.net
[delivery-date:] => Wed, 08 May 2013 02:32:29 -0700
[received:] => Array
(
[0] => from c2mds.mailcentro.com ([208.67.179.143]:59531)by lester.newsblaze.com with esmtp (Exim 4.80)(envelope-from )id 1Ua0jc-0002Hq-FAfor mc_mxw@o7e.net; Wed, 08 May 2013 02:32:29 -0700
[1] => from host-253.82.136.141.ucom.am (host-253.82.136.141.ucom.am [141.136.82.253] (may be forged))by c2mds.mailcentro.com (8.13.8(MC-AXH/MJD-001)/8.13.8.axh-mjd) with ESMTP id r489WGq1013672for ; Wed, 8 May 2013 02:32:18 -0700
[2] => from qecfaaeesttfsuufh (192.168.1.171) by qecfaaeesttfsuufh.eoriginal.com (141.136.82.253) with Microsoft SMTP Server id 8.0.685.24; Wed, 8 May 2013 13:32:25 +0400
)
[x-mc-sender:] => deprogramingt78@gmail.com
[x-mc-ipaddr:] => host-253.82.136.141.ucom.am [141.136.82.253] (may be forged)
[message-id:] => <518B5DF2.601020@gmail.com>
[date:] => Wed, 8 May 2013 13:32:25 +0400
[from:] => "Scotty Brandon"
[user-agent:] => Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.24) Gecko/20100328 Thunderbird/2.0.0.24
[mime-version:] => 1.0
[to:] =>
[subject:] => ACTION REQUIED: Notice for your account
[content-type:] => multipart/alternative;boundary="------------03030700601060401030307"
[x-mc-filter:] => 7.6.9
[x-mc-filter-antivirus:] => Scanned for virus - Status 0
[x-mc-deliveryid:] => 130
[x-mc-filterskip:] => 0
[x-mc-spamscore:] => 0 T 49
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
Note: This is a service message with information related to your
Chase account(s). It may include specific details about
transactions, products or online services.
Dear Valued Customer:
We will be making enhancements to chase(SM) and our mobile platforms that will help us meet our objective of continually improving these services.
As a result of these enhancements, some services on chase(SM) and Chase Mobile will be temporarily unavailable until you complete a simple update on your account information.
Read details below.
We are upgrading to a further advanced technology. Due to the increase of cyber threat.
Due to this, we have sent you an attached document.
Download and Save it to Desktop
Go to Desktop to open the document
Get Started by Filling your Information
Please understand that this is a security procedure intended to safeguard our valued customers and thier account(s) information
We appreciate your patience during this time. We are working hard to deliver the best customer experience through chase(SM) and Chase Mobile Banking.
Sincerely,
William S. Sheley
Senior Vice President
Chase Online Banking
Note: If you are concerned about clicking links in this e-mail, the Chase services mentioned above can be accessed by typing www.chase.com directly into your browser.
Your personal information is protected by advanced technology. For more detailed security information, view our Online Privacy Notice. To request in writing: Chase Privacy Operations, P.O. Box 659752, San Antonio, TX 78265-9752.
JPMorgan Chase Bank, N.A. Member FDIC
)2012 JPMorgan Chase & Co.