Scam Reporter | Scam Tips Received | ||||||
---|---|---|---|---|---|---|---|
No Name Hythe, Kent, United Kingdom 2012-05-17 18:49:12 Identity Theft | Halifax Online Banking Scam. From: <halifax@helpdesk.co.uk> link to thoocan.com/blog
Source of phishing scam is User of IP 208.98.22.106 located in Missoula,MT, USA. Link in email actually takes you to thoocan.com/blog/personal/logon (DO NOT CLICK ON THIS LINK) Received: from p02c11o142.mxlogic.net ([208.65.144.75]) by SNT0-MC1-F24.Snt0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4900); Thu, 17 May 2012 06:05:15 -0700 Received: from unknown [184.82.171.110] (EHLO eithanhahn.com) by p02c11o142.mxlogic.net(mxl_mta-6.14.0-1) over TLS secured channel with ESMTP id c77f4bf4.0.58164.00-388.115437.p02c11o142.mxlogic.net (envelope-from Thu, 17 May 2012 07:05:15 -0600 (MDT) X-MXL-Hash: 4fb4f78b277d497b-0a9126787fc9ad0278d645496cbc7c4938358bef Received: from User ([208.98.22.106]) by soceus.com with MailEnable ESMTP; Thu, 17 May 2012 09:01:53 -0400 From: halifax@helpdesk.co.uk Subject: Security Message Alert \" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2600.0000 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000 X-Processed-By: Rebuild v2.0-0 X-Spam: [F=0.9999960000; CM=0.999; S=0.200(2010122901)] X-MAIL-FROM: X-SOURCE-IP: [184.82.171.110] X-AnalysisOut: [v=2.0 cv=I7PSsqcg c=0 sm=0 p=u2wvIDluA3Ajn8uFlOEA:9 a=+2ls] X-AnalysisOut: [4AjjyJfyKHzkDes40g==:17 a=Dyoqhi_TatcA:10 a=SfqWl3ZwUToA:1] X-AnalysisOut: [0 a=BLceEmwcHowA:10 a=8EU9Q7FnrCoA:10 a=YxAPlRXLm78A:10 a=] X-AnalysisOut: [Cfj4BQAnxiAA:10 a=nnHhNJugO28A:10 a=EWwX94aoAAAA:8] Bcc: Return-Path: halifax@helpdesk.co.uk Message-ID: X-OriginalArrivalTime: 17 May 2012 13:05:15.0980 (UTC) FILETIME=[B3E340C0:01CD342D] Dear Account Holder, We understand that your Online Banking Account may have been temporarily limited due to questions or concerns by our Account Review Team. Follow the link below to activate your Online Banking Account: NOTE: Please respond within five days. After 5 days, this link will expire. target=\"_blank\" href=\"http://www.thoocan.com/blog/personal/logon\">Confirm< Halifax Online Account Review Team |