Scam Tip Report #6666 - YBS Bank Fraud by ratanako@hl2.siamdata.co.th: IP 82.128.3.36 in lagos, Nigeria.


Scam ReporterScam Tips Received
No Name
Cricklewood, Brent, United Kingdom
2012-12-07 21:32:33
Identity Theft
YBS Bank Fraud by ratanako@hl2.siamdata.co.th: IP 82.128.3.36 in lagos, Nigeria. 
 Scammer
  Information
Name:
Ratanako
Email Address:
ratanako@hl2.siamdata.co.th
Scam Website:
YBS PHishing scam alert.
Email is actually from Nigeria.

NB: Do not click on any links below

Sender: mailto:ratanako@hl2.siamdata.co.th ( id 1Th1KG-0008AS-R4)
PHP-Script: http://www.ratanakorn.com/_vti_cnf/AnYiIfY.phpfor 82.128.3.36
IP: 82.128.3.36
located in Lagos, Lagos 05, Nigeria.
ISP & Organization: Multi-Links Telecommunications Limited
Host Name: ml82.128.3.36.multilinks.com
------------------------

scam sent via host: hl2.siamdata.co.th with ESMTPS id 8FD1713D8E
IP:103.22.180.37
ISP: Readydedicated
Host Name: hl2.siamdata.co.th
Organization: N/A
Country: Bangkok, 40 Krung Thep, Thailand
------------------------------------------

Received: from smtp01.siamdata.co.th ([103.22.180.16]) by SNT0-MC2-F19.Snt0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4900);
Fri, 7 Dec 2012 09:41:17 -0800
Received: from hl2.siamdata.co.th (hl2.siamdata.co.th [103.22.180.37])
by smtp01.siamdata.co.th (Postfix) with ESMTPS id 8FD1713D8E
for <************>; Sat, 8 Dec 2012 00:03:09 +0700 (ICT)
Received: from ratanako by hl2.siamdata.co.th with local (Exim 4.80)
(envelope-from ratanako@hl2.siamdata.co.th)
id 1Th1KG-0008AS-R4
for *******; Sat, 08 Dec 2012 00:03:00 +0700
To: ******
Subject: Account Status Notification
X-PHP-Script: http://www.ratanakorn.com/_vti_cnf/AnYiIfY.php for 82.128.3.36
From: YBS Bank
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: 8bit
Message-Id:
Date: Sat, 08 Dec 2012 00:03:00 +0700
Return-Path:ratanako@hl2.siamdata.co.th
X-OriginalArrivalTime: 07 Dec 2012 17:41:18.0032 (UTC) FILETIME=[0FE8D500:01CDD4A2]

Status Notification



We are contacting you to remind you that
our Account Review Team identified some unusual activity in
your account.
In accordance with YBS User Agreement and to ensure that your account has not been accessed from fraudulent locations, access to your account has been limited. Your account access will remain limited until this issue has
been resolved please log in your account by clicking on the link below:

href=\"http://www.iraq-obs.com/images/_vti_cnf/Ybs/login1.do.html\"
My Account Activity

Regards
Online Security Team
© YBS Bank plc 2012

 Got more information on this Scam/Scammer?
 Problems with this Report? Let us know


Since you’re here …
we have a small favour to ask. More people are visting Scamdex and Scamalot than ever but advertising revenues are falling fast and we have no 'product' to sell. And unlike many informational websites, we haven’t put up a paywall or membership barrier – we want to keep our site as open as we can. So you can see why we need to ask for your help. Scamdex/Scamalot websites takes a lot of time, money and hard work to keep running. We do this because we hate to see our fellow humans getting scammed out of their hard-earned money by low-lives.
Consider switching off your AdBlocker (if you use one) or contributing directly by one of the links below. Thank you for reading!
Ad Blocker Detected
Our website is made possible by displaying online advertisements to our visitors.
Please consider supporting us by disabling your ad blocker.
Thanks!
Scamdex
PING