Scam Tip Report #5961 - \"Santander\"<service_8897@santander.co.uk> Subject: Account Suspension Notice


No Name
Cricklewood, Brent, United Kingdom
2012-10-23 14:57:14
Identity Theft
"Santander"<service_8897@santander.co.uk> Subject: Account Suspension Notice  Santander phishing email with redirect link to phishing Url at lark.kz ;

Attempted Identity theft scam supposedly from Santander\"<service_8897@santander.co.uk> but actually sent by spapapanos@oftech.gr (HELO User) using IP 82.80.153.129 (host located in Israel).
- - - - - - - - - - - - - -
IP: 82.80.153.129 (account spapapanos@oftech.gr HELO User) with ESMTPA id 10405
ISP: Bezeq International
Host Name: bzq-82-80-153-129.dcenter.bezeqint.net
Organization: Bezeq International-Ltd,
Country: Jerusalem, Yerushalayim 06, Israel.
- - - - - - - - - - - - - - - - - -
(NB: DO NOT CLICK ON LINK)

Received: from ns1.datahost.gr ([62.1.217.100]) by BAY0-MC4-F36.Bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4900);
Mon, 22 Oct 2012 23:48:04 -0700
Received: from [82.80.153.129] (account spapapanos@oftech.gr HELO User)
by ns1.datahost.gr (CommuniGate Pro SMTP 5.1.16)
with ESMTPA id 10405; Tue, 23 Oct 2012 09:47:58 +0300
From: \"Santander\"<service_8897@santander.co.uk>
Subject: Account Suspension Notice
Date: Tue, 23 Oct 2012 08:48:06 +0200
MIME-Version: 1.0
Content-Type: text/html;
charset=\"Windows-1251\"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: <auto-000000010405@ns1.datahost.gr>
Bcc:
Return-Path: service_8897@santander.co.uk
X-OriginalArrivalTime: 23 Oct 2012 06:48:04.0560 (UTC) FILETIME=[5A30DD00:01CDB0EA]

<!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1.0 Transitional//EN\" \"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd\">
<html xmlns=\"http://www.w3.org/1999/xhtml\">
<head>
<meta http-equiv=\"Content-Type\" content=\"text/html; charset=iso-8859-1\" />
<title>Untitled Document</title>
</head>

<body>
<p><img alt=\"https://business.santander.co.uk/Estatico/ALP_SBBI_Templates/Images/logo_santander.gif\" src=\"https://business.santander.co.uk/Estatico/ALP_SBBI_Templates/Images/logo_santander.gif\" /></p>
<p>Dear Valued Customer <br />
Your Santander Online Banking Access Has Been<br />
Temporarily Suspended. <br />
Due to Various Invalid attempt to login to Your<br />
Account. <br />
<br />
<a href=\"http://www.lark.kz/IFLA/iflasantander.php\">CLICK HERE TO RESTORE YOUR ACCESS.</a><br />
<br />
Fraud Prevention Unit Legal Advisor<br />
Santander Online Banking ?© 2012 </p>
</body>
</html>

 Got more information on this Scam/Scammer? Add to Scam Report
 Problems with this Report? Let us know Report to Scamalot

Ad Blocker Detected
Our website is made possible by displaying online advertisements to our visitors.
Please consider supporting us by disabling your ad blocker.
Thanks!
Scamdex
PING