| No Name
Cricklewood, Brent, United Kingdom
2012-04-05 14:42:13
Identity Theft
|  Untitled Identity Theft , ref:2104 Phishing Scam and attempted fraud: X-012-Sender:leonid_b012@012.net.il Blacklisted Australian IP 203.122.229.73 is source of Halifax Bank phishing scam and link to dangerous phishing website:dorpa.com The source host name is \"kublaikhan.soho.on.net\" Email routed via various servers in Israel such as mtaout22.012.net.il ([80.179.55.172] and mail.dvp.co.il ([192.114.86.95]).
Email as follows:
Received: from mtaout22.012.net.il ([80.179.55.172]) by BAY0-MC3-F21.Bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4900); Wed, 4 Apr 2012 20:21:58 -0700 Return-path: Received: from conversion-daemon.a-mtaout22.012.net.il by a-mtaout22.012.net.il (HyperSendmail v2007.08) id <0M1Z00600L9GPS00@a-mtaout22.012.net.il>; Thu, 05 Apr 2012 06:21:48 +0300 (IDT) Received: from mail.dvp.co.il ([192.114.86.95]) by a-mtaout22.012.net.il (HyperSendmail v2007.08) with ESMTPA id <0M1Z006DKLCB4ZK0@a-mtaout22.012.net.il>; Thu, 05 Apr 2012 06:21:48 +0300 (IDT) Received: from User ([203.122.229.73]) by mail.dvp.co.il with Microsoft SMTPSVC(6.0.3790.3959); Thu, 05 Apr 2012 05:43:26 +0300 Date: Thu, 05 Apr 2012 12:16:32 +0930 From: Halifax Plc Subject: Your Account Has Been Suspended. Bcc: Message-id: MIME-version: 1.0 X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2600.0000 X-Mailer: Microsoft Outlook Express 6.00.2600.0000 Content-type: text/html; charset=Windows-1251 Content-transfer-encoding: 7bit X-Priority: 3 X-MSMail-priority: Normal X-012-Sender: leonid_b012@012.net.il X-OriginalArrivalTime: 05 Apr 2012 02:43:26.0718 (UTC) FILETIME=[E07C29E0:01CD12D5] ![\"http://www.myloanquote.co.uk/img/mlq/halifax-logo.jpg\"](\"http://www.myloanquote.co.uk/img/mlq/halifax-logo.jpg\") Dear customer,
click on the link below to Activate Your Account :
You are required to Activate your account one-time only and will take 3-5 minutes
|
