From: \"Santander\" ( security@santander.co.uk ) Subject: Unauthorized Access: from IP:82.77.37.9

Scam Tip Report #4958 - From: \"Santander\" ( security@santander.co.uk ) Subject: Unauthorized Access: from IP:82.77.37.9

Scam Reporter

Scam Tips Received

No Name
Gosport, Hampshire, United Kingdom
2012-09-08 14:20:52
Identity Theft

From: "Santander" ( security@santander.co.uk ) Subject: Unauthorized Access: from IP:82.77.37.9

Scammer Information	Name: Name Unknown	Email Address: security@santander.co.uk	Scam Website: http://217.219.20.51/Images/santander.htm

Attempted scam sent by security@santander.co.uk with phishing link to http://217.219.20.51/Images/santander.htm

IP 82.77.37.9 (82.77.37.9.cablelink.rdsar.ro ; Organization: Romania Data Systems)in Arad, Romania is involved in constant fraudulent emails usually involving banking or financial institutions.

Link info:
site : 217.219.20.51
ISP: Information Technology Company (ITC)
Host Name: 217.219.20.51
Organization: Islamic AZAD Univeristy Yasooj
Location: Yasooj, 05 Kohkiluyeh va Buyer Ahmadi,Islamic Republic of Iran.

again linked to Islamic AZAD Univeristy Yasooj in Yasooj, 05 Kohkiluyeh va Buyer Ahmadi,Islamic Republic of Iran.

Received: from ser-piwet.piw-ciechanow.local ([79.188.227.142]) by BAY0-MC4-F19.Bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4900);
Fri, 7 Sep 2012 11:37:04 -0700
Received: from User ([82.77.37.9]) by ser-piwet.piw-ciechanow.local with Microsoft SMTPSVC(6.0.3790.4675);
Fri, 7 Sep 2012 20:36:53 +0200
From: \"Santander\"
Subject: Unauthorized Access
Date: Fri, 7 Sep 2012 21:36:58 +0
******************
Return-Path: security@santander.co.uk
Message-ID:
X-OriginalArrivalTime: 07 Sep 2012 18:36:53.0522 (UTC) FILETIME=[C06CF720:01CD8D27]

We recently have determined that different computers have logged on to
your Online Banking account and multiple password failures were present
before logons.

We now need to re-confirm your account information with us.

If this is not completed by September8, 2012
we will be forced to suspend your account indefinitely, as
it may have been used for fraudulent purposes.

We thank you for your cooperation in this matter.

Please

href=\"http://217.219.20.51/Images/santander.htm\">

click here
immediately to verify your identity and automatically
reverse the change.

>Please do not contact us
directly as this issue is mainly processed by our Online Banking

Scam Tip Report #4958 - From: \"Santander\" ( security@santander.co.uk ) Subject: Unauthorized Access: from IP:82.77.37.9

scamalot Scam Resources and Archive