Untitled Identity Theft , ref:2104 - Scamalot

Seen a Scammer? Report Them!

Seen a scammer? Been caught out? Let the world know so they don't get burned. Add information if you see one that's already been logged - scammers move quickly and change details often to avoid detection. Details you log here will be in major search engines within an hour or two.

Please Like, Share, Tweet etc. to spread the word.
  Scam type at Advanced Search      
Scam ReporterScam Tips Received
No Name
Crowborough, East Sussex, United Kingdom
2012-04-05 10:42:13
Identity Theft
Untitled Identity Theft , ref:2104 
Email Address:
Scam Website:
Phishing Scam and attempted fraud: X-012-Sender:leonid_b012@012.net.il Blacklisted Australian IP is source of Halifax Bank phishing scam and link to dangerous phishing website:dorpa.com The source host name is \"kublaikhan.soho.on.net\" Email routed via various servers in Israel such as mtaout22.012.net.il ([] and mail.dvp.co.il ([]).

Email as follows:

Received: from mtaout22.012.net.il ([]) by BAY0-MC3-F21.Bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4900); Wed, 4 Apr 2012 20:21:58 -0700 Return-path: Received: from conversion-daemon.a-mtaout22.012.net.il by a-mtaout22.012.net.il (HyperSendmail v2007.08) id <0M1Z00600L9GPS00@a-mtaout22.012.net.il>; Thu, 05 Apr 2012 06:21:48 +0300 (IDT) Received: from mail.dvp.co.il ([]) by a-mtaout22.012.net.il (HyperSendmail v2007.08) with ESMTPA id <0M1Z006DKLCB4ZK0@a-mtaout22.012.net.il>; Thu, 05 Apr 2012 06:21:48 +0300 (IDT) Received: from User ([]) by mail.dvp.co.il with Microsoft SMTPSVC(6.0.3790.3959); Thu, 05 Apr 2012 05:43:26 +0300 Date: Thu, 05 Apr 2012 12:16:32 +0930 From: Halifax Plc Subject: Your Account Has Been Suspended. Bcc: Message-id: MIME-version: 1.0 X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2600.0000 X-Mailer: Microsoft Outlook Express 6.00.2600.0000 Content-type: text/html; charset=Windows-1251 Content-transfer-encoding: 7bit X-Priority: 3 X-MSMail-priority: Normal X-012-Sender: leonid_b012@012.net.il X-OriginalArrivalTime: 05 Apr 2012 02:43:26.0718 (UTC) FILETIME=[E07C29E0:01CD12D5] \"http://www.myloanquote.co.uk/img/mlq/halifax-logo.jpg\" Dear customer,

click on the link below to Activate Your Account :

You are required to Activate your account one-time only and will take 3-5 minutes
 Got more information on this Scam/Scammer?
Add to Report
 Problems with this Report? (Spam/Legal/Abuse etc) ?
Report to Scamalot
Curious what information about you is out there? You may be surprised! | Reverse Email Lookup | Reverse Phone Lookup

Increase ad revenue 50-250% with Ezoic