Untitled Identity Theft , ref:2104 - Scamalot
Seen a Scammer? Report Them!
Seen a scammer? Been caught out? Let the world know so they don't get burned.
Add information if you see one that's already been logged - scammers move quickly and change details often to
avoid detection. Details you log here will be in major search engines within an hour or two.
Please Like, Share, Tweet etc. to spread the word.
|Scam Reporter||Scam Tips Received|
Crowborough, East Sussex, United Kingdom
| Untitled Identity Theft , ref:2104Phishing Scam and attempted fraud: X-012-Sender:firstname.lastname@example.org Blacklisted Australian IP 18.104.22.168 is source of Halifax Bank phishing scam and link to dangerous phishing website:dorpa.com The source host name is \"kublaikhan.soho.on.net\" Email routed via various servers in Israel such as mtaout22.012.net.il ([22.214.171.124] and mail.dvp.co.il ([126.96.36.199]).|
Email as follows:
Received: from mtaout22.012.net.il ([188.8.131.52]) by BAY0-MC3-F21.Bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4900); Wed, 4 Apr 2012 20:21:58 -0700 Return-path: Received: from conversion-daemon.a-mtaout22.012.net.il by a-mtaout22.012.net.il (HyperSendmail v2007.08) id <0M1Z00600L9GPS00@a-mtaout22.012.net.il>; Thu, 05 Apr 2012 06:21:48 +0300 (IDT) Received: from mail.dvp.co.il ([184.108.40.206]) by a-mtaout22.012.net.il (HyperSendmail v2007.08) with ESMTPA id <0M1Z006DKLCB4ZK0@a-mtaout22.012.net.il>; Thu, 05 Apr 2012 06:21:48 +0300 (IDT) Received: from User ([220.127.116.11]) by mail.dvp.co.il with Microsoft SMTPSVC(6.0.3790.3959); Thu, 05 Apr 2012 05:43:26 +0300 Date: Thu, 05 Apr 2012 12:16:32 +0930 From: Halifax Plc Subject: Your Account Has Been Suspended. Bcc: Message-id: MIME-version: 1.0 X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2600.0000 X-Mailer: Microsoft Outlook Express 6.00.2600.0000 Content-type: text/html; charset=Windows-1251 Content-transfer-encoding: 7bit X-Priority: 3 X-MSMail-priority: Normal X-012-Sender: email@example.com X-OriginalArrivalTime: 05 Apr 2012 02:43:26.0718 (UTC) FILETIME=[E07C29E0:01CD12D5] Dear customer,
click on the link below to Activate Your Account :
You are required to Activate your account one-time only and will take 3-5 minutes
Got more information on this Scam?