Scam Tip Report #6666 - YBS Bank Fraud by ratanako@hl2.siamdata.co.th: IP 82.128.3.36 in lagos, Nigeria.
| Scam Reporter | Scam Tips Received | ||||||
|---|---|---|---|---|---|---|---|
  | No Name Cricklewood, Brent, United Kingdom 2012-12-07 21:32:33 Identity Theft |  YBS Bank Fraud by ratanako@hl2.siamdata.co.th: IP 82.128.3.36 in lagos, Nigeria.
Email is actually from Nigeria. NB: Do not click on any links below Sender: mailto:ratanako@hl2.siamdata.co.th ( id 1Th1KG-0008AS-R4) PHP-Script: http://www.ratanakorn.com/_vti_cnf/AnYiIfY.phpfor 82.128.3.36 IP: 82.128.3.36 located in Lagos, Lagos 05, Nigeria. ISP & Organization: Multi-Links Telecommunications Limited Host Name: ml82.128.3.36.multilinks.com ------------------------ scam sent via host: hl2.siamdata.co.th with ESMTPS id 8FD1713D8E IP:103.22.180.37 ISP: Readydedicated Host Name: hl2.siamdata.co.th Organization: N/A Country: Bangkok, 40 Krung Thep, Thailand ------------------------------------------ Received: from smtp01.siamdata.co.th ([103.22.180.16]) by SNT0-MC2-F19.Snt0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4900); Fri, 7 Dec 2012 09:41:17 -0800 Received: from hl2.siamdata.co.th (hl2.siamdata.co.th [103.22.180.37]) by smtp01.siamdata.co.th (Postfix) with ESMTPS id 8FD1713D8E for <************>; Sat, 8 Dec 2012 00:03:09 +0700 (ICT) Received: from ratanako by hl2.siamdata.co.th with local (Exim 4.80) (envelope-from ratanako@hl2.siamdata.co.th) id 1Th1KG-0008AS-R4 for *******; Sat, 08 Dec 2012 00:03:00 +0700 To: ****** Subject: Account Status Notification X-PHP-Script: http://www.ratanakorn.com/_vti_cnf/AnYiIfY.php for 82.128.3.36 From: YBS Bank MIME-Version: 1.0 Content-Type: text/html Content-Transfer-Encoding: 8bit Message-Id: Date: Sat, 08 Dec 2012 00:03:00 +0700 Return-Path:ratanako@hl2.siamdata.co.th X-OriginalArrivalTime: 07 Dec 2012 17:41:18.0032 (UTC) FILETIME=[0FE8D500:01CDD4A2] Status Notification We are contacting you to remind you that our Account Review Team identified some unusual activity in your account. In accordance with YBS User Agreement and to ensure that your account has not been accessed from fraudulent locations, access to your account has been limited. Your account access will remain limited until this issue has been resolved please log in your account by clicking on the link below: href=\"http://www.iraq-obs.com/images/_vti_cnf/Ybs/login1.do.html\" My Account Activity Regards Online Security Team © YBS Bank plc 2012 | |||||
Got more information on this Scam/Scammer?
Problems with this Report? Let us know