Scam Tip Report #4422 - Halifax Bank phishing; Attempted Fraud by User of IP 86.124.17.178


No Name
Eastbourne, East Sussex, United Kingdom
2012-08-09 11:28:15
Identity Theft
Halifax Bank phishing; Attempted Fraud by User of IP 86.124.17.178 
 Scammer Information
Origin of attempted fraud appears to be Romanian -

Subject: Unauthorized Access

IP: 86.124.17.178
ISP: Romania Data Systems
Source Host Name: 86-124-17-178.bacau.rdsnet.ro
Organization: Romania Data Systems
Location: Bacau, Bacau 04, Romania.

NB:Do Not Click on Fraudulent link in email.

Received: from bodsbs.BodycoteHIP.local ([91.183.112.26]) by BAY0-MC1-F14.Bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4900);
Wed, 8 Aug 2012 11:30:46 -0700
Received: from User ([86.124.17.178]) by bodsbs.BodycoteHIP.local with Microsoft SMTPSVC(6.0.3790.4675);
Wed, 8 Aug 2012 20:30:44 +0200
From: \"Halifax\"<security@halifax.co.uk>
Subject: Unauthorized Access
Date: Wed, 8 Aug 2012 21:30:46 +0300
MIME-Version: 1.0
Content-Type: text/html;
charset=\"Windows-1251\"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Bcc:
Return-Path: security@halifax.co.uk
Message-ID: <BODSBSdZUZzZPOY2ou900000a9e@bodsbs.BodycoteHIP.local>
X-OriginalArrivalTime: 08 Aug 2012 18:30:44.0528 (UTC) FILETIME=[EC187300:01CD7593]

<img border=\"0\" src=\"http://www.which.co.uk/media/images/in-content2/halifax-logo-200-x-133-275642.jpg\" width=\"150\" height=\"115\"><p>&nbsp;</p>
<p><font color=\"#333333\" face=\"Verdana, Arial, Helvetica, sans-serif\" size=\"2\">
We recently have determined that different computers have logged on to your
Online Banking account and multiple password failures were present before
logons.</font></p>
<p><font color=\"#333333\" face=\"Verdana, Arial, Helvetica, sans-serif\" size=\"2\">
We now need to re-confirm your account information with us.</font></p>
<p><font color=\"#333333\" face=\"Verdana, Arial, Helvetica, sans-serif\" size=\"2\">
If this is not completed by </font>
<font face=\"Verdana, Arial, Helvetica, sans-serif\" size=\"2\"><b>August 9, 2012</b>
we will be forced to suspend your account indefinitely, as it may have been used
for fraudulent purposes.</font></p>
<p><font face=\"Verdana, Arial, Helvetica, sans-serif\" size=\"2\">We thank you for
your cooperation in this matter.</font></p>
<p><font color=\"#333333\" face=\"Arial\" size=\"2\"><br>
<b>Please
<a rel=\"target=&quot;_blank&quot;\" target=\"_blank\" href=\"http://79.175.185.72:8080/index.html\">
click here</a> immediately to verify your identity and automatically reverse the
change.</b><br>
&nbsp;</font></p>
<p><font color=\"#333333\" face=\"Arial\" size=\"2\">Please do not contact us directly
as this issue is mainly processed by our Online Banking System.<br>
&nbsp;</font></p>

 Got more information on this Scam/Scammer? Add to Scam Report
 Problems with this Report? Let us know Report to Scamalot

Ad Blocker Detected
Our website is made possible by displaying online advertisements to our visitors.
Please consider supporting us by disabling your ad blocker.
Thanks!
Scamdex
PING