Scam Tip Report #4958 - From: \"Santander\" ( security@santander.co.uk ) Subject: Unauthorized Access: from IP:82.77.37.9


No Name
Gosport, Hampshire, United Kingdom
2012-09-08 14:20:52
Identity Theft
From: "Santander" ( security@santander.co.uk ) Subject: Unauthorized Access: from IP:82.77.37.9 
 Scammer Information
Attempted scam sent by security@santander.co.uk with phishing link to http://217.219.20.51/Images/santander.htm

IP 82.77.37.9 (82.77.37.9.cablelink.rdsar.ro ; Organization: Romania Data Systems)in Arad, Romania is involved in constant fraudulent emails usually involving banking or financial institutions.

Link info:
site : 217.219.20.51
ISP: Information Technology Company (ITC)
Host Name: 217.219.20.51
Organization: Islamic AZAD Univeristy Yasooj
Location: Yasooj, 05 Kohkiluyeh va Buyer Ahmadi,Islamic Republic of Iran.


again linked to Islamic AZAD Univeristy Yasooj in Yasooj, 05 Kohkiluyeh va Buyer Ahmadi,Islamic Republic of Iran.

Received: from ser-piwet.piw-ciechanow.local ([79.188.227.142]) by BAY0-MC4-F19.Bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4900);
Fri, 7 Sep 2012 11:37:04 -0700
Received: from User ([82.77.37.9]) by ser-piwet.piw-ciechanow.local with Microsoft SMTPSVC(6.0.3790.4675);
Fri, 7 Sep 2012 20:36:53 +0200
From: \"Santander\"<security@santander.co.uk>
Subject: Unauthorized Access
Date: Fri, 7 Sep 2012 21:36:58 +0
******************
Return-Path: security@santander.co.uk
Message-ID: <SER-PIWETDQ3CsYx7Bd00000237@ser-piwet.piw-ciechanow.local>
X-OriginalArrivalTime: 07 Sep 2012 18:36:53.0522 (UTC) FILETIME=[C06CF720:01CD8D27]

<img border=\"0\" src=\"http://www.santander.co.uk/csgs/StaticBS?blobcol=urldata&blobheader=image%2Fgif&blobkey=id&blobtable=MungoBlobs&blobwhere=1223401013051&cachecontrol=immediate&ssbinary=true&maxage=3600\" width=\"192\" height=\"77\"><p>
&nbsp;</p>
<p>

We recently have determined that different computers have logged on to
your Online Banking account and multiple password failures were present
before logons.
<p>

We now need to re-confirm your account information with us.</font></p>
<p>

If this is not completed by September8, 2012</b>
we will be forced to suspend your account indefinitely, as
it may have been used for fraudulent purposes.</font></p>
We thank you for your cooperation in this matter.</font></p>

<b>Please

href=\"http://217.219.20.51/Images/santander.htm\">

click here</a>
immediately to verify your identity and automatically
reverse the change.</b><br>

>Please do not contact us
directly as this issue is mainly processed by our Online Banking

 Got more information on this Scam/Scammer? Add to Scam Report
 Problems with this Report? Let us know Report to Scamalot

Ad Blocker Detected
Our website is made possible by displaying online advertisements to our visitors.
Please consider supporting us by disabling your ad blocker.
Thanks!
Scamdex
PING