Scam Tip Report #2697 - Halifax Online Banking Scam. From: <halifax@helpdesk.co.uk> link to thoocan.com/blog


No Name
Hythe, Kent, United Kingdom
2012-05-17 18:49:12
Identity Theft
Halifax Online Banking Scam. From: <halifax@helpdesk.co.uk> link to thoocan.com/blog 
 Scammer Information
thoocan.com link in phishing email (See below) for Halifax Online Banking Scam.

Source of phishing scam is User of IP 208.98.22.106 located in Missoula,MT, USA.
Link in email actually takes you to thoocan.com/blog/personal/logon (DO NOT CLICK ON THIS LINK)

Received: from p02c11o142.mxlogic.net ([208.65.144.75]) by SNT0-MC1-F24.Snt0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4900); Thu, 17 May 2012 06:05:15 -0700
Received: from unknown [184.82.171.110] (EHLO eithanhahn.com) by p02c11o142.mxlogic.net(mxl_mta-6.14.0-1) over TLS secured channel with ESMTP id c77f4bf4.0.58164.00-388.115437.p02c11o142.mxlogic.net (envelope-from <halifax@helpdesk.co.uk>);
Thu, 17 May 2012 07:05:15 -0600 (MDT)
X-MXL-Hash: 4fb4f78b277d497b-0a9126787fc9ad0278d645496cbc7c4938358bef
Received: from User ([208.98.22.106]) by soceus.com with MailEnable ESMTP; Thu, 17 May 2012 09:01:53 -0400
From: halifax@helpdesk.co.uk
Subject: Security Message Alert \"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Processed-By: Rebuild v2.0-0
X-Spam: [F=0.9999960000; CM=0.999; S=0.200(2010122901)]
X-MAIL-FROM: <halifax@helpdesk.co.uk>
X-SOURCE-IP: [184.82.171.110]
X-AnalysisOut: [v=2.0 cv=I7PSsqcg c=0 sm=0 p=u2wvIDluA3Ajn8uFlOEA:9 a=+2ls]
X-AnalysisOut: [4AjjyJfyKHzkDes40g==:17 a=Dyoqhi_TatcA:10 a=SfqWl3ZwUToA:1]
X-AnalysisOut: [0 a=BLceEmwcHowA:10 a=8EU9Q7FnrCoA:10 a=YxAPlRXLm78A:10 a=]
X-AnalysisOut: [Cfj4BQAnxiAA:10 a=nnHhNJugO28A:10 a=EWwX94aoAAAA:8]
Bcc:
Return-Path: halifax@helpdesk.co.uk
Message-ID: <SNT0-MC1-F24tQEVFwm007b0889@SNT0-MC1-F24.Snt0.hotmail.com>
X-OriginalArrivalTime: 17 May 2012 13:05:15.0980 (UTC) FILETIME=[B3E340C0:01CD342D]

Dear Account Holder,<br><br>
We understand that your Online Banking Account may have been
temporarily limited due to questions or concerns by our Account Review
Team.

Follow the link below to activate your Online Banking Account:<br>

NOTE: Please respond within five days. After 5 days, this link will
expire.
target=\"_blank\" href=\"http://www.thoocan.com/blog/personal/logon\">Confirm<
Halifax Online Account Review Team

 Got more information on this Scam/Scammer? Add to Scam Report
 Problems with this Report? Let us know Report to Scamalot

Ad Blocker Detected
Our website is made possible by displaying online advertisements to our visitors.
Please consider supporting us by disabling your ad blocker.
Thanks!
Scamdex
PING