Scam Tip Report #5779 - Santander Banking Scam; Subject: Important Customer Notice; seemingly from securityalert@santander.co.uk


Scam ReporterScam Tips Received
No Name
Cricklewood, Brent, United Kingdom
2012-10-14 10:33:30
Identity Theft
Santander Banking Scam; Subject: Important Customer Notice; seemingly from securityalert@santander.co.uk 
 Scammer
  Information
Name:
esc3@hermes.hood.edu
Email Address:
esc3@hermes.hood.edu
Santander Identity Theft Scam from blacklisted IP located in Fareham, UK.

esc3@hermes.hood.edu , a HELO user of hermes.hood.edu sending phishing scam (with ESMTPA id 36711788) supposedly from securityalert@santander.co.uk with attached file link.
NB. DO NOT OPEN FILE ATACHMENT!

Originating IP: 88.212.147.234
ISP: Mailbox Networks
Host Name: 88-212-147-234.rdns.as8401.net
Organization: Mailbox Networks
Country: Fareham, Hampshire F2, United Kingdom.

Phish routed via IP 144.175.16.121 (ISP: Hood College; Host Name: hermes.hood.edu ; Organization: Hood College located in Frederick, Maryland, MD21701, United States.)
_ _ _ _ _ _ _ _

Received: from hermes.hood.edu ([144.175.16.121]) by BAY0-MC3-F36.Bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4900);
Sat, 13 Oct 2012 09:46:28 -0700
X-AttachExt: htm
Received: from [88.212.147.234] (account mailto:esc3@hermes.hood.edu HELO User)
by hermes.hood.edu (CommuniGate Pro SMTP 5.3.7)
with ESMTPA id 36711788; Sat, 13 Oct 2012 12:45:24 -0400
From: \"Santander Online Banking\"
Subject: Important Customer Notice
Date: Sat, 13 Oct 2012 17:42:16 +0100
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary=\"----=_NextPart_000_00BA_01C2A9A6.30BEB86C\"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID:
Bcc:
Return-Path: mailto:securityalert@santander.co.uk
X-OriginalArrivalTime: 13 Oct 2012 16:46:28.0749 (UTC) FILETIME=[4A9FD3D0:01CDA962]

This is a multi-part message in MIME format.

------=_NextPart_000_00BA_01C2A9A6.30BEB86C
Content-Type: text/plain;
charset=\"Windows-1251\"
Content-Transfer-Encoding: 7bit

Irregular activities has been detected on your Santander account

your access to your Santander account has been temporarily blocked

complete security verification required to remove all restriction placed on your
account

Open with Internet Browser and proceed now via attached file to restore access to your account

Regards

Customer Service Team

 Got more information on this Scam/Scammer?
 Problems with this Report? Let us know


Since you’re here …
we have a small favour to ask. More people are visting Scamdex and Scamalot than ever but advertising revenues are falling fast and we have no 'product' to sell. And unlike many informational websites, we haven’t put up a paywall or membership barrier – we want to keep our site as open as we can. So you can see why we need to ask for your help. Scamdex/Scamalot websites takes a lot of time, money and hard work to keep running. We do this because we hate to see our fellow humans getting scammed out of their hard-earned money by low-lives.
Consider switching off your AdBlocker (if you use one) or contributing directly by one of the links below. Thank you for reading!
Ad Blocker Detected
Our website is made possible by displaying online advertisements to our visitors.
Please consider supporting us by disabling your ad blocker.
Thanks!
Scamdex
PING