BARCLAYS BANK PHISHING SCAM - hidden redirect to phishing URL, http://timothyalsupcpa.com/logs/index.htm ;(NB DO NOT USE OR CLICK ON THIS LINK). Scam supposedly sent by customer_service@barclays.co.uk but actually sent by smtp.mailfrom= apache@401192-web1.gemseducation.com (Postfix, from userid 48) id 951EC2FD047C; ---------------------------------- Received: from 401192-web1.gemseducation.com ([164.177.129.200]) by SNT0-MC2-F10.Snt0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4900); Sat, 2 Mar 2013 01:52:50 -0800 Received: by 401192-web1.gemseducation.com (Postfix, from userid 48) id 951EC2FD047C; Sat, 2 Mar 2013 09:35:31 +0000 (GMT) To: Subject: Your Online Banking Access Has Been Revoked From: Barclays Bank <customer_service@barclays.co.uk> ********** Message-Id: <20130302093531.951EC2FD047C@401192-web1.gemseducation.com> Date: Sat, 2 Mar 2013 09:35:31 +0000 (GMT) Return-Path: apache@401192-web1.gemseducation.com X-OriginalArrivalTime: 02 Mar 2013 09:52:51.0224 (UTC) FILETIME=[B40F0980:01CE172B] src="http://www.barclays.co.uk/images/barclays.gif" width="200" height="91"></h2> Banking Access Revoked<br> Dear Valued Customer,<br Our online banking security team observed multiple errors on your account, therefore we have taken this security procedure. Your Online Banking Access has been revoked.<br> An extra verification process has been set up to confirm your identity and your account security. Please click below to continue to the verification process.<b><br> Failure to verify your account details correctly will lead to account suspension)</font></b></p> </span></td <a onclick="return top.js.OpenExtLink(window,event,this)"href="http://timothyalsupcpa.com/logs/index.htm" target="_blank"><span style="font-family: arial black,sans-serif;"><font color="blue""> Restore Your Access <a onclick="return top.js.OpenExtLink(window,event,this)" href="http://timothyalsupcpa.com/logs/index.htm" target="_blank"> Verify Your Identity <a onclick="return top.js.OpenExtLink(window,event,this)" href="http://10000vueltas.com.ar/themes/modern_blue/templates/index.htm" target="_blank"><br>
Please help us keep Internet safer and cleaner by leaving a descriptive comment about 164.177.129.200 IP address
- Hacked Gmail accounts
- WordPress Hacking Attempts
- SSH Hacking Attempts
- Why Can't I See The Exact Address?
DNSBL* - is a list of IP addresses published through the Internet Domain Name Service (DNS) either as a zone file that can be used by DNS server software, or as a live DNS zone that can be queried in real-time. DNSBLs are most often used to publish the addresses of computers or networks linked to spamming; most mail server software can be configured to reject or flag messages which have been sent from a site listed on one or more such lists.
WHOIS** - is a query/response protocol that is widely used for querying databases in order to determine the registrant or assignee of Internet resources, such as a domain name, an IP address block, or an autonomous system number. WHOIS lookups were traditionally performed with a command line interface application, and network administrators predominantly still use this method, but many simplified web-based tools exist. WHOIS services are typically communicated using the Transmission Control Protocol (TCP). Servers listen to requests on the well-known port number 43.
** Approximate Geographic Location - This is NOT the exact geographical location of the person/organization with the given IP address. However, this should still give you a good idea about the area/region where this person/orgranization is located.