An
Email with the Subject "ABN AMRO Alert - Uw Internet Bankieren op slotâ€â€â€â€" was
received in one of Scamdex's honeypot email accounts on Fri, 14 Jun 2013 21:34:05 -0700
and has been classified as a Generic Scam Email.
The sender shows as ABN AMRO <info@abn.nl>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
bankcontactaccountinternetaccesslegalonlineach
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] =>
[envelope-to:] => gixfh@scamdex.com
[delivery-date:] => Fri, 14 Jun 2013 21:34:05 -0700
[received:] => Array
(
[0] => from mail.bystrica.sk ([188.123.106.126]:54618)by lester.newsblaze.com with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)(Exim 4.80)(envelope-from )id 1UniBf-0006aH-8wfor gixfh@scamdex.com; Fri, 14 Jun 2013 21:34:05 -0700
[1] => (qmail 5283 invoked by uid 1011); 14 Jun 2013 07:51:42 +0200
[2] => from localhost by mail.bystrica.sk (envelope-from , uid 1009) with qmail-scanner-2.02 (clamdscan: 0.96/4902. spamassassin: 3.2.3. Clear:RC:1(127.0.0.1):. Processed in 0.020413 secs); 14 Jun 2013 05:51:42 -0000
[3] => from localhost (HELO mail.bystrica.sk) (127.0.0.1) by mail.bystrica.sk with SMTP; 14 Jun 2013 07:51:42 +0200
)
[mime-version:] => 1.0
[date:] => Fri, 14 Jun 2013 07:51:42 +0200
[from:] => ABN AMRO
[to:] => undisclosed-recipients:;
[subject:] => ABN AMRO Alert - Uw Internet Bankieren op =?UTF-8?Q?slot=E2=80=8F?==?UTF-8?Q?=E2=80=8F=E2=80=8F=E2=80=8F?=
[message-id:] => <701578eb704a76ee1554c969a31532c4@localhost>
[x-sender:] => info@abn.nl
[user-agent:] => RoundCube Webmail/0.3.1
[content-type:] => multipart/alternative;boundary="=_0e71403db77f1fe0df8bac709c3e1f44"
[x-spam-status:] => No, score=0.7
[x-spam-score:] => 7
[x-spam-bar:] => /
[x-ham-report:] => Spam detection software, running on the system "lester.newsblaze.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seeroot\@localhost for details.Content preview: GEACHTE KLANT, Uit onze gegevens blijkt dat er recentelijk een derde partij/illegale binnenkomst op uw Online ABN-AMRO is vast gesteld. De beveiliging van uw account is onze primaire zorg, daarom hebben we besloten om de actieve toegang tot je account te beperken. Om actieve toegang tot uw Online ABN-AMRO te kunnen handhaven, meldt u zich zo snel mogelijk via de link hieronder om toegang tot uw rekening te behouden. Klik ABN-AMRO Online Access: Zodra uw gegevens zijn gecontroleerd en bevestigd, en er noodzaak is voor verdere activering, kunt u gecontacteerd worden door een van onze medewerkers om volledige toegang tot uw Online ABN-AMRO herstellen. HOOGACHTEND, ABN-AMRO ONLINE COPYRIGHT 2013, ABN AMRO NETHERLANDS. ALL RIGHTS RESERVED. [...] Content analysis details: (0.7 points, 4.0 required) pts rule name description---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: live.com] 0.7 SPF_NEUTRAL SPF: sender does not match SPF record (neutral) 0.0 HTML_IMAGE_ONLY_32 BODY: HTML: images with 2800-3200 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 0.0 T_KHOP_FOREIGN_CLICK T_KHOP_FOREIGN_CLICK 0.0 T_REMOTE_IMAGE Message contains an external image
[x-spam-flag:] => NO
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
Uit onze gegevens blijkt dat er recentelijk een derde partij/illegale binnenkomst op uw Online ABN-AMRO is vast gesteld.
De beveiliging van uw account is onze primaire zorg, daarom hebben we besloten om de actieve toegang tot je account te beperken.
Om actieve toegang tot uw Online ABN-AMRO te kunnen handhaven, meldt u zich zo snel mogelijk via de link hieronder om toegang tot uw rekening te behouden.
Zodra uw gegevens zijn gecontroleerd en bevestigd, en er noodzaak is voor verdere activering, kunt u gecontacteerd worden door een
van onze medewerkers om volledige toegang tot uw Online ABN-AMRO herstellen.
Hoogachtend,
ABN-AMRO ONLINE
Copyright 2013, ABN AMRO NETHERLANDS. All rights reserved.
Geachte klant,
Uit onze gegevens blijkt dat er recentelijk een derde partij/illegale binnenkomst op uw Online ABN-AMRO is vast gesteld.
De beveiliging van uw account is onze primaire zorg, daarom hebben we besloten om de actieve toegang tot je account te beperken.
Om actieve toegang tot uw Online ABN-AMRO te kunnen handhaven, meldt u zich zo snel mogelijk via de link hieronder om toegang tot uw rekening te behouden.
Klik ABN-AMRO Online Access: klik hier
Zodra uw gegevens zijn gecontroleerd en bevestigd, en er noodzaak is voor verdere activering, kunt u gecontacteerd worden door een
van onze medewerkers om volledige toegang tot uw Online ABN-AMRO herstellen.
Hoogachtend,
ABN-AMRO ONLINE
Copyright 2013, ABN AMRO NETHERLANDS. All rights reserved.