Select Page

Do not open and run the web form attached to this email.

I received the following email with an attachement named “form.html“. It pretends that it is from American Express however a review of the attached web form shows that it points back to http://www.76tbike.com/ipdata/online.americanexpress.com.php. Forget about the stuff on the end which tries to make this look like it came from American Express, the domain name showing is www.76tbike.com – definitely NOT American Express.


Dear American Express customer,

The access to your card has been limited.
We need your help resolving an issue with your American Express Card.

What’s the problem?
We need a little bit more information about you to help confirm your identity.

Case ID Number: PP-001-461-538-948

Please download the form attached to this email and open it in a web browser.
Once opened you will be provided with steps to restore your American Express Card.
We appreciate your understanding as we work to ensure your safety.

We thank you for your prompt attention to this matter.
Please understand that this is a security measure intended to help protect you and your American Express Card.
We apologize for any inconvenience.

American Express

© 2011 American Express. All rights reserved.

This is definitely spam and hopefully you found this post before clicking or completing any part of this email.