Scam Tip Report #4750 - Lloyds TSB phish;


No Name
Hythe, Kent, United Kingdom
2012-08-27 10:06:34
Defective Products/Services
Lloyds TSB phish; 
 Scammer Information
attempted lloyds-TSB phishing scam from IP 82.77.37.9 (Source Host82.77.37.9.cablelink.rdsar.ro)located in Arad, Romania.
Fraudulent email contains phishing link to http://www.ilam-telecom.ir/public/css/hlloyds.html . (DO NOT CLICK ON LINK!)

IP: 82.77.37.9
ISP: Romania Data Systems
Host Name: 82.77.37.9.cablelink.rdsar.ro
Organization: Romania Data Systems
Location: Arad, Arad 02, Romania

Received: from pokrzywno.pl ([77.253.206.51]) by BAY0-MC2-F11.Bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4900);
Sun, 26 Aug 2012 14:17:25 -0700
Received: from [82.77.37.9] (helo=User)
by pokrzywno.pl with esmtpa (Exim 4.69)
(envelope-from <security@lloydstsb.co.uk>)
id 1T5lIK-0002oo-Na; Mon, 27 Aug 2012 00:27:00 +0200
From: \"Lloyds TSB\"<security@lloydstsb.co.uk>
Subject: Unauthorized Access
Date: Mon, 27 Aug 2012 00:17:02 +0300
MIME-Version: 1.0
Content-Type: text/html;
charset=\"Windows-1251\"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <E1T5lIK-0002oo-Na@pokrzywno.pl>
Bcc:
Return-Path: security@lloydstsb.co.uk
X-OriginalArrivalTime: 26 Aug 2012 21:17:26.0301 (UTC) FILETIME=[310D64D0:01CD83D0]


<img border=\"0\" src=\"https://online.lloydstsb.co.uk/wps/wcm/connect/da3db40041b907e9bbe5ff9f3821e7af/logo-18-1329646262.png?MOD=AJPERES&CACHEID=da3db40041b907e9bbe5ff9f3821e7af\" width=\"247\" height=\"45\"><p>

We recently have determined that different computers have logged on to your Online Banking account and multiple password failures were present before logons.

We now need to re-confirm your account information with us.

If this is not completed by August 27, 2012 we will be forced to suspend your account indefinitely, as it may have been used for fraudulent purposes.</font></p>

We thank you for your cooperation in this matter.<br>

<b>Please\"

target=\"_blank\" href=\"http://www.ilam-telecom.ir/public/css/hlloyds.html\">

click here immediately to verify your identity and automatically reverse the change.

Please do not contact us directly as this issue is mainly processed by our Online Banking System.

 Got more information on this Scam/Scammer? Add to Scam Report
 Problems with this Report? Let us know Report to Scamalot

Ad Blocker Detected
Our website is made possible by displaying online advertisements to our visitors.
Please consider supporting us by disabling your ad blocker.
Thanks!
Scamdex
PING