YBS Bank Fraud by ratanako@hl2.siamdata.co.th: IP 82.128.3.36 in lagos, Nigeria. - Scamalot

Seen a Scammer? Report Them!

Seen a scammer? Been caught out? Let the world know so they don't get burned. Add information if you see one that's already been logged - scammers move quickly and change details often to avoid detection. Details you log here will be in major search engines within an hour or two.

Please Like, Share, Tweet etc. to spread the word.
Scam Report Type: at  
Scam ReporterScam Tips Received
No Name
Hastings, East Sussex, United Kingdom
2012-12-07 16:32:33
Identity Theft
YBS Bank Fraud by ratanako@hl2.siamdata.co.th: IP 82.128.3.36 in lagos, Nigeria.
 Scammer
  Information
Name:
   Ratanako
Email Address:
   ratanako@hl2.siamdata.co.th
YBS PHishing scam alert.
Email is actually from Nigeria.

NB: Do not click on any links below

Sender: mailto:ratanako@hl2.siamdata.co.th ( id 1Th1KG-0008AS-R4)
PHP-Script: http://www.ratanakorn.com/_vti_cnf/AnYiIfY.phpfor 82.128.3.36
IP: 82.128.3.36
located in Lagos, Lagos 05, Nigeria.
ISP & Organization: Multi-Links Telecommunications Limited
Host Name: ml82.128.3.36.multilinks.com
------------------------

scam sent via host: hl2.siamdata.co.th with ESMTPS id 8FD1713D8E
IP:103.22.180.37
ISP: Readydedicated
Host Name: hl2.siamdata.co.th
Organization: N/A
Country: Bangkok, 40 Krung Thep, Thailand
------------------------------------------

Received: from smtp01.siamdata.co.th ([103.22.180.16]) by SNT0-MC2-F19.Snt0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4900);
Fri, 7 Dec 2012 09:41:17 -0800
Received: from hl2.siamdata.co.th (hl2.siamdata.co.th [103.22.180.37])
by smtp01.siamdata.co.th (Postfix) with ESMTPS id 8FD1713D8E
for <************>; Sat, 8 Dec 2012 00:03:09 +0700 (ICT)
Received: from ratanako by hl2.siamdata.co.th with local (Exim 4.80)
(envelope-from ratanako@hl2.siamdata.co.th)
id 1Th1KG-0008AS-R4
for *******; Sat, 08 Dec 2012 00:03:00 +0700
To: ******
Subject: Account Status Notification
X-PHP-Script: http://www.ratanakorn.com/_vti_cnf/AnYiIfY.php for 82.128.3.36
From: YBS Bank
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: 8bit
Message-Id:
Date: Sat, 08 Dec 2012 00:03:00 +0700
Return-Path:ratanako@hl2.siamdata.co.th
X-OriginalArrivalTime: 07 Dec 2012 17:41:18.0032 (UTC) FILETIME=[0FE8D500:01CDD4A2]

Status Notification



We are contacting you to remind you that
our Account Review Team identified some unusual activity in
your account.
In accordance with YBS User Agreement and to ensure that your account has not been accessed from fraudulent locations, access to your account has been limited. Your account access will remain limited until this issue has
been resolved please log in your account by clicking on the link below:

href=\"http://www.iraq-obs.com/images/_vti_cnf/Ybs/login1.do.html\"
My Account Activity

Regards
Online Security Team
© YBS Bank plc 2012
 Got more information on this Scam? Add to Report