Lloyds TSB phish; - Scamalot

Seen a Scammer? Report Them!

Seen a scammer? Been caught out? Let the world know so they don't get burned. Add information if you see one that's already been logged - scammers move quickly and change details often to avoid detection. Details you log here will be in major search engines within an hour or two.

Please Like, Share, Tweet etc. to spread the word.
  Scam type at Advanced Search      
Scam ReporterScam Tips Received
No Name
Melton Mowbray, Leicestershire, United Kingdom
2012-08-27 06:06:34
Defective Products/Services
Lloyds TSB phish; 
Name Unknown
Email Address:
Scam Website:
attempted lloyds-TSB phishing scam from IP (Source Host82.77.37.9.cablelink.rdsar.ro)located in Arad, Romania.
Fraudulent email contains phishing link to http://www.ilam-telecom.ir/public/css/hlloyds.html . (DO NOT CLICK ON LINK!)

ISP: Romania Data Systems
Host Name:
Organization: Romania Data Systems
Location: Arad, Arad 02, Romania

Received: from pokrzywno.pl ([]) by BAY0-MC2-F11.Bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4900);
Sun, 26 Aug 2012 14:17:25 -0700
Received: from [] (helo=User)
by pokrzywno.pl with esmtpa (Exim 4.69)
(envelope-from )
id 1T5lIK-0002oo-Na; Mon, 27 Aug 2012 00:27:00 +0200
From: \"Lloyds TSB\"
Subject: Unauthorized Access
Date: Mon, 27 Aug 2012 00:17:02 +0300
MIME-Version: 1.0
Content-Type: text/html;
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Return-Path: security@lloydstsb.co.uk
X-OriginalArrivalTime: 26 Aug 2012 21:17:26.0301 (UTC) FILETIME=[310D64D0:01CD83D0]

We recently have determined that different computers have logged on to your Online Banking account and multiple password failures were present before logons.

We now need to re-confirm your account information with us.

If this is not completed by August 27, 2012 we will be forced to suspend your account indefinitely, as it may have been used for fraudulent purposes.

We thank you for your cooperation in this matter.


target=\"_blank\" href=\"http://www.ilam-telecom.ir/public/css/hlloyds.html\">

click here immediately to verify your identity and automatically reverse the change.

Please do not contact us directly as this issue is mainly processed by our Online Banking System.
 Got more information on this Scam/Scammer?
Add to Report
 Problems with this Report? (Spam/Legal/Abuse etc) ?
Report to Scamalot
Curious what information about you is out there? You may be surprised! | Reverse Email Lookup | Reverse Phone Lookup

Increase ad revenue 50-250% with Ezoic
    [CONTEXT_DOCUMENT_ROOT] => /home2/scamalot/public_html
    [DOCUMENT_ROOT] => /home2/scamalot/public_html
    [HTTPS] => on
    [HTTP_ACCEPT] => text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
    [HTTP_ACCEPT_ENCODING] => x-gzip, gzip, deflate
    [HTTP_HOST] => www.scamalot.com
    [HTTP_USER_AGENT] => CCBot/2.0 (http://commoncrawl.org/faq/)
    [HTTP_X_HTTPS] => 1
    [PATH] => /bin:/usr/bin
    [PATH_INFO] => /4750
    [PATH_TRANSLATED] => /home2/scamalot/public_html/ScamTipReports
    [QUERY_STRING] => 
    [REDIRECT_STATUS] => 200
    [REMOTE_ADDR] =>
    [REMOTE_PORT] => 33074
    [REQUEST_SCHEME] => https
    [REQUEST_URI] => /ScamTipReports/4750
    [SCRIPT_FILENAME] => /home2/scamalot/public_html/ScamTipReports
    [SCRIPT_NAME] => /ScamTipReports
    [SCRIPT_URI] => https://www.scamalot.com/ScamTipReports/4750
    [SCRIPT_URL] => /ScamTipReports/4750
    [SERVER_ADDR] =>
    [SERVER_ADMIN] => webmaster@scamalot.com
    [SERVER_NAME] => www.scamalot.com
    [SERVER_PORT] => 443
    [SERVER_SOFTWARE] => Apache
    [SSL_TLS_SNI] => www.scamalot.com
    [TZ] => America/Sacramento
    [PHP_SELF] => /ScamTipReports/4750
    [REQUEST_TIME_FLOAT] => 1508744861.01
    [REQUEST_TIME] => 1508744861
    [argv] => Array

    [argc] => 0