  | No Name Wellington, Somerset, United Kingdom 2013-03-02 16:15:50 Identity Theft |  From: Barclays Bank; Subject: Your Online Banking Access Has Been Revoked; UK based IP:164.177.129.200 Scammer Information Hostname 164.177.129.200 ISP:Rackspace.com Organization: Cyber Gear IP Space Country: United Kingdom ---------------------------- hidden redirect to phishing URL: http://timothyalsupcpa.com/logs/index.htm ; (NB DO NOT USE OR CLICK ON THIS LINK). Scam supposedly sent by customer_service@barclays.co.uk but actually sent by smtp.mailfrom= apache@401192-web1.gemseducation.com (Postfix, from userid 48) id 951EC2FD047C; ---------------------------------- Received: from 401192-web1.gemseducation.com ([164.177.129.200]) by SNT0-MC2-F10.Snt0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4900); Sat, 2 Mar 2013 01:52:50 -0800 Received: by 401192-web1.gemseducation.com (Postfix, from userid 48) id 951EC2FD047C; Sat, 2 Mar 2013 09:35:31 +0000 (GMT) To: Subject: Your Online Banking Access Has Been Revoked From: Barclays Bank <customer_service@barclays.co.uk> ********** Message-Id: <20130302093531.951EC2FD047C@401192-web1.gemseducation.com> Date: Sat, 2 Mar 2013 09:35:31 +0000 (GMT) Return-Path: apache@401192-web1.gemseducation.com X-OriginalArrivalTime: 02 Mar 2013 09:52:51.0224 (UTC) FILETIME=[B40F0980:01CE172B] src=\"http://www.barclays.co.uk/images/barclays.gif\" width=\"200\" height=\"91\"></h2> Banking Access Revoked<br> Dear Valued Customer,<br Our online banking security team observed multiple errors on your account, therefore we have taken this security procedure. Your Online Banking Access has been revoked.<br> An extra verification process has been set up to confirm your identity and your account security. Please click below to continue to the verification process.<b><br> Failure to verify your account details correctly will lead to account suspension)</font></b></p> </span></td <a onclick=\"return top.js.OpenExtLink(window,event,this)\"href=\"http://timothyalsupcpa.com/logs/index.htm\" target=\"_blank\"><span style=\"font-family: arial black,sans-serif;\"><font color=\"blue\"\"> Restore Your Access <a onclick=\"return top.js.OpenExtLink(window,event,this)\" href=\"http://timothyalsupcpa.com/logs/index.htm\" target=\"_blank\"> Verify Your Identity <a onclick=\"return top.js.OpenExtLink(window,event,this)\" href=\"http://10000vueltas.com.ar/themes/modern_blue/templates/index.htm\" target=\"_blank\"><br> |