Natwest - Reactivate your Online Access
[Previous Example] [Share This Page] [Back To The Main SHPAMEE Index] [Next Example]
VERY IMPORTANT INFORMATION, READ THIS FIRST: The example and associated information published on this page are subject to the SHPAMEE Terms Of Use. Please familiarise yourself with these terms before viewing or using any information on this page.
Header:
From - Sat May 1 13:41:01 2010
X-Account-Key: account8
X-UIDL: x
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
X-Apparently-To: x
X-YahooFilteredBulk: 24.154.1.26
X-YMailISG:
88LbzMQWLDtsS1gRRItVvImGU8pf153vAHA1RAJcYtrOI7FS3RMWXer8Zi1tiH3Ymnqr4O.lSB4LcZIaq8LdQFyth...
fAuN1O99U3I2jvu6mD08GtBKnte0qd.QDD1s6jCwB2HFbsQi6jIeUwKoJfabS634K1BnpSyB.pnWMrqCbvHCpNh.g...
jgH6XQBVFDh1BT.ZZ2FVvSrXHrxZv5FIvnyjWY909rYD04DI1uz6wx4qJ27mK5GhhnYSvainU4iwbcOBxTA_XmWoK...
ivobSiFusizqYnsjeLLho81w2BtoEpeZ2gJRmJKZ.k0sVN_o72V_6HOrVvpTMRmsb8p6cL_34SJcrEhGM_PnSa69D...
g53XavhdRaBhOCaNxvuYhwdoLznJyVJK4JbCrY2UCldIS0xASgfBvz8H8Yj3nbZtIErDw_LLcXU8.VIGyLT.2Xp0v...
.6ktGtaYWljCTyIaXz.VXKmzypmVazy8bW4xxgGE23WppaWFVuejyDn7mWH9o6DaBKJMPwJAGM1c3MLN1xIo9eAeW...
cOEhlszgvq8WwifzZ5BrNpVTTo0jriJQ9u0v7t5njD2xLW039fj_nAxyQBTI6qqlRuZ3KMvlDSAzwbi4zeAvplHLo...
IhnGsn5Se85_FWgZZp8EEAbnYnxwjEj2prNsqVZHk8l66FPZGk2z64Sa1BG7sb9AKv2X2ko.xralFyPWMeXma0S9P...
X-Originating-IP: [24.154.1.26]
Authentication-Results: mta1042.mail.ird.yahoo.com from=natwest.com; domainkeys=neutral (no sig); from=natwest.com;
dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO cm-1.zoominternet.net) (24.154.1.26)
by mta1042.mail.ird.yahoo.com with SMTP; Wed, 28 Apr 2010 10:26:46 +0000
X-SpamGroup: 2000
X-CM-Cat: Undefined:Undefined
X-CNFS-Analysis: v=1.0 c=1 p=MQbKY6ldgEBfLPUyOvoCJg==:17 a=Dyoqhi_TatcA:10 a=VphdPIyG4kEA:10 a=Cfj4BQAnxiAA:10
a=i1H_nXBDAAAA:8 a=BvQatdWwAAAA:8 a=plJdqvJOIyoe7FI7OQMA:9 a=758Qe34V4o1FcnYa5n0A:7 a=rS8mVVuugYXtLuojpnrE3i1dBKUA:4
a=Ft8UYL4EG9YA:10 a=j3gQhbK4DXcA:10 a=k0sj3RVbvM0A:10
X-CM-Score: 100
X-Scanned-by: Cloudmark Authority Engine
Received: from [24.154.1.45] ([24.154.1.45:44126] helo=pop-2.zoominternet.net)
by mx-7.zoominternet.net (envelope-from <account.review@natwest.com>)
(ecelerity 2.2.2.40 r(29895/29896)) with ESMTP
id 0A/DF-13004-95D08DB4; Wed, 28 Apr 2010 06:26:34 -0400
Received: (qmail 28848 invoked from network); 28 Apr 2010 10:26:41 -0000
Message-ID: <x@cm-1.zoominternet.net>
Received: from unknown (HELO User) (turbokitten@[222.51.38.138])
(envelope-sender <account.review@natwest.com>)
by pop-2.zoominternet.net (qmail-ldap-1.03) with SMTP
for <janewilshire@hotmail.com>; 28 Apr 2010 10:26:41 -0000
From: "NatWest OnLine Banking"<account.review@natwest.com>
Subject: Reactivate your Online Access
Date: Wed, 28 Apr 2010 11:26:38 +0100
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Account-Key: account8
X-UIDL: x
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
X-Apparently-To: x
X-YahooFilteredBulk: 24.154.1.26
X-YMailISG:
88LbzMQWLDtsS1gRRItVvImGU8pf153vAHA1RAJcYtrOI7FS3RMWXer8Zi1tiH3Ymnqr4O.lSB4LcZIaq8LdQFyth...
fAuN1O99U3I2jvu6mD08GtBKnte0qd.QDD1s6jCwB2HFbsQi6jIeUwKoJfabS634K1BnpSyB.pnWMrqCbvHCpNh.g...
jgH6XQBVFDh1BT.ZZ2FVvSrXHrxZv5FIvnyjWY909rYD04DI1uz6wx4qJ27mK5GhhnYSvainU4iwbcOBxTA_XmWoK...
ivobSiFusizqYnsjeLLho81w2BtoEpeZ2gJRmJKZ.k0sVN_o72V_6HOrVvpTMRmsb8p6cL_34SJcrEhGM_PnSa69D...
g53XavhdRaBhOCaNxvuYhwdoLznJyVJK4JbCrY2UCldIS0xASgfBvz8H8Yj3nbZtIErDw_LLcXU8.VIGyLT.2Xp0v...
.6ktGtaYWljCTyIaXz.VXKmzypmVazy8bW4xxgGE23WppaWFVuejyDn7mWH9o6DaBKJMPwJAGM1c3MLN1xIo9eAeW...
cOEhlszgvq8WwifzZ5BrNpVTTo0jriJQ9u0v7t5njD2xLW039fj_nAxyQBTI6qqlRuZ3KMvlDSAzwbi4zeAvplHLo...
IhnGsn5Se85_FWgZZp8EEAbnYnxwjEj2prNsqVZHk8l66FPZGk2z64Sa1BG7sb9AKv2X2ko.xralFyPWMeXma0S9P...
X-Originating-IP: [24.154.1.26]
Authentication-Results: mta1042.mail.ird.yahoo.com from=natwest.com; domainkeys=neutral (no sig); from=natwest.com;
dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO cm-1.zoominternet.net) (24.154.1.26)
by mta1042.mail.ird.yahoo.com with SMTP; Wed, 28 Apr 2010 10:26:46 +0000
X-SpamGroup: 2000
X-CM-Cat: Undefined:Undefined
X-CNFS-Analysis: v=1.0 c=1 p=MQbKY6ldgEBfLPUyOvoCJg==:17 a=Dyoqhi_TatcA:10 a=VphdPIyG4kEA:10 a=Cfj4BQAnxiAA:10
a=i1H_nXBDAAAA:8 a=BvQatdWwAAAA:8 a=plJdqvJOIyoe7FI7OQMA:9 a=758Qe34V4o1FcnYa5n0A:7 a=rS8mVVuugYXtLuojpnrE3i1dBKUA:4
a=Ft8UYL4EG9YA:10 a=j3gQhbK4DXcA:10 a=k0sj3RVbvM0A:10
X-CM-Score: 100
X-Scanned-by: Cloudmark Authority Engine
Received: from [24.154.1.45] ([24.154.1.45:44126] helo=pop-2.zoominternet.net)
by mx-7.zoominternet.net (envelope-from <account.review@natwest.com>)
(ecelerity 2.2.2.40 r(29895/29896)) with ESMTP
id 0A/DF-13004-95D08DB4; Wed, 28 Apr 2010 06:26:34 -0400
Received: (qmail 28848 invoked from network); 28 Apr 2010 10:26:41 -0000
Message-ID: <x@cm-1.zoominternet.net>
Received: from unknown (HELO User) (turbokitten@[222.51.38.138])
(envelope-sender <account.review@natwest.com>)
by pop-2.zoominternet.net (qmail-ldap-1.03) with SMTP
for <janewilshire@hotmail.com>; 28 Apr 2010 10:26:41 -0000
From: "NatWest OnLine Banking"<account.review@natwest.com>
Subject: Reactivate your Online Access
Date: Wed, 28 Apr 2010 11:26:38 +0100
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Body:
Dear NatWest Bank Customer:
For your protection, access to your accounts
has been blocked due to a system error.
error code : 0e414p096
Please click the "Resolve" link below.
Thank you for banking with NatWest.
Sincerely,
Customer Service
NatWest OnLine Banking
Comments:
Related Cyber Criminal Profiles:
No related profiles found.Similar Spam Examples:
Banking Phishing Scam - Cahoot Customer Service MessageBanking Phishing Scam - Cahoot Secure Customer Service Messages
NatWest Bank Phishing Scam - urgent notification!
NatWest Credit Card Services Banking Phishing Scam
Banking Phishing Scam - Barclays New Notification - Update immediately
Related Malware Samples:
No related malware samples found.[Previous Example] [Share This Page] [Back To The Main SHPAMEE Index] [Next Example]
error code : 0e414p096
Please click the "Resolve" link below.
Resolve
Isn't this the work of the technical staff at NatWest? Why will a bank ask a client to resolve a system error? If the bank already know what the error is, why don't they resolve it on their own?
These are the questions you should be asking when you receive ridiculous e-mails like these. It has PHISHING SCAM written all over it.
The banner that reads: "Good morning and welcome to NatWest" was linked to the real NatWest website, so kudos to the phishing scammer for guiding the NatWest customers to the correct website. How thoughtful of him/her.