2025-07-21: We have updated our Privacy Policy. Thanks to Vietnamese blackhat SEO wannabe DDoS:ing forums with Russian malware developed by Aleksandr Ryanchenko (Александр Рябченко) aka Alexandru Robu for automatic registrations and spam posts, this forum is now manually moderated to ban clueless script kiddies.

CONFIDENTIALITY

Various emails containing phishing attacks, scams and irrelevant spam
emailbot
Posts: 756
Joined: 2025-4-22 17:52

Post by emailbot » 2025-12-13 13:50

Sarah Breeden <eva@baltistantours.com> wrote:
2025-12-13 13:50

Email subject: CONFIDENTIALITY
Reply-to: sarah.breeden@englandbankcx.info

Hello, we are hereby informing you that there are unclaimed funds
in your name. To make a claim, please contact Sarah Breeden, Bank
of England's Deputy Governor for Financial Stability, for
confirmation. Please provide your full name when contacting her
by email at sarah.breeden@englandbankcx.info.

Code: Select all

Return-Path: <eva@baltistantours.com>
X-Original-To: contact@webseodesigners.com
Delivered-To: x22832538@pdx1-sub0-mail-mx201.dreamhost.com
Received: from static.186.106.180.157.clients.your-server.de (static.186.106.180.157.clients.your-server.de [157.180.106.186])
	(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
	 key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256)
	(No client certificate requested)
	by pdx1-sub0-mail-mx201.dreamhost.com (Postfix) with ESMTPS id 4dT74P6p95z7jYb
	for <contact@webseodesigners.com>; Sat, 13 Dec 2025 05:50:13 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
	d=baltistantours.com; s=default; h=Content-Transfer-Encoding:Content-Type:
	MIME-Version:Message-ID:Date:Subject:To:From:Reply-To:Sender:Cc:Content-ID:
	Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc
	:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:
	List-Subscribe:List-Post:List-Owner:List-Archive;
	bh=4M1sWKfMVtvoCPkmRPK/pkN2S8UsSHx3higqSt5PFb8=; b=bqDOq5ctqlQi7OI1GO37B1Cq8B
	Un4ztxtp6usysZla+3wePmfmqK7vkE8iMBP0OnA4pCl/CM0TCf1nvDZ9eiRlRDAV1OF8wc3pDG62A
	50gSL4sL7Cv7r3nXcxS1/b1RSZv55nDjVayKf3NN6N8b1uJD5uRiD1lZNGJdpH0dNXAhbYl/yd2O+
	nryqyOmbAKyHfrdEr1/sXRh0L3NPPfp7zE7ITec8+1l8Z0/aI22P04E7pKtOvgiFvot/2RbrVPqp5
	FCCtugjn2oXXAi21U1wc16zWsb/31Gf7eTsiaoAglDHcxeXPxs5MaMjyyD6IQWVqqpuOBVjqdnyza
	a4nfB2fw==;
Received: from [197.184.122.155] (port=19514 helo=rain-197-184-77-55.rain.network)
	by 157-180-106-186.cprapid.com with esmtpsa  (TLS1.3) tls TLS_AES_256_GCM_SHA384
	(Exim 4.98.2)
	(envelope-from <eva@baltistantours.com>)
	id 1vUQ0g-0000000HWGG-3Qex
	for contact@webseodesigners.com;
	Sat, 13 Dec 2025 18:50:11 +0500
Reply-To: sarah.breeden@englandbankcx.info
From: ''Sarah Breeden''<eva@baltistantours.com>
To: contact@webseodesigners.com
Subject: CONFIDENTIALITY
Date: 13 Dec 2025 05:50:09 -0800
Message-ID: <20251213055009.495036FF13C78756@baltistantours.com>
MIME-Version: 1.0
Content-Type: text/plain;
	charset="utf-8"
Content-Transfer-Encoding: quoted-printable
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - 157-180-106-186.cprapid.com
X-AntiAbuse: Original Domain - webseodesigners.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - baltistantours.com
X-Get-Message-Sender-Via: 157-180-106-186.cprapid.com: authenticated_id: eva@baltistantours.com
X-Authenticated-Sender: 157-180-106-186.cprapid.com: eva@baltistantours.com
X-Source: 
X-Source-Args: 
X-Source-Dir: 

Hello, we are hereby informing you that there are unclaimed funds=20
in your name. To make a claim, please contact Sarah Breeden, Bank=20
of England's Deputy Governor for Financial Stability, for=20
confirmation. Please provide your full name when contacting her=20
by email at sarah.breeden@englandbankcx.info.




s
Posts: 384
Joined: 2017-7-5 09:58

Post by s » 2025-12-14 06:50

This is an old phishing attack sponsored by Porkbun, but now in English.