Phishing scammers sending out emails trying to get HSBC bank details, full header: softfail (mta1028.mail.ukl.yahoo.com: domain of transitioning firstname.lastname@example.org does not designate 18.104.22.168 as permitted sender) email had a suspicious file attached and the email message is: Irregular Card Activity We detected irregular activity on your HSBC Card on 17/05/2011. For your protection, you must verify this activity before you can continue using your card. Please download the file attached to this email, fill out the information required to review your account and press continue. We will review the activity on your account with you and upon verification,we will remove any restrictions placed on your account. Want to get more alerts? Sign in to your internet banking account at HSBC Bank and within the Accounts Overview page select the "Alerts" tab. Because email is not a secure form of communication, this email box is not equipped to handle replies. If you have any questions about your account or need assistance, please call the phone number on your statement or go to Contact Us at www.HSBC.co.uk.
Please help us keep Internet safer and cleaner by leaving a descriptive comment about 22.214.171.124 IP address
DNSBL* - is a list of IP addresses published through the Internet Domain Name Service (DNS) either as a zone file that can be used by DNS server software, or as a live DNS zone that can be queried in real-time. DNSBLs are most often used to publish the addresses of computers or networks linked to spamming; most mail server software can be configured to reject or flag messages which have been sent from a site listed on one or more such lists.
WHOIS** - is a query/response protocol that is widely used for querying databases in order to determine the registrant or assignee of Internet resources, such as a domain name, an IP address block, or an autonomous system number. WHOIS lookups were traditionally performed with a command line interface application, and network administrators predominantly still use this method, but many simplified web-based tools exist. WHOIS services are typically communicated using the Transmission Control Protocol (TCP). Servers listen to requests on the well-known port number 43.
** Approximate Geographic Location - This is NOT the exact geographical location of the person/organization with the given IP address. However, this should still give you a good idea about the area/region where this person/orgranization is located.