Email from BT billing

game4it70

LOL i aint a customer or never have been so its either a major mess up on there part or a scam.
I just thought i'd let you guys know.

Sponge Bob

do you have an iol email address ?

Hank Scorpio

looks really well put together, surely a scam of course tho

Sponge Bob

could be a PHISH too ...of course !

if a PHISH then BT should get staff in and counter phish.

do you have mail headers OP ??

jhegarty

Well the email comes from bt.com , and the message says it should come from btcomms.com... need I say more...

samhail

careful about clicking on the link, but does it link to a bt website, or some ip addie or something else dodgy

Sponge Bob

either of these IP addresses ??

btcomms.com
213.219.11.66

bt.net
193.113.211.125

Sponge Bob

This domain is hosted by BT but the BTCOMMS collateral is within Telecity in London . Very ****ing odd

http://www.robtex.com/dns/btcomms.com.html

btcomms.com is a domain controlled by three nameservers at bt.net. All of them are on the same IP network. Incoming mail for btcomms.com is handled by one mailserver at btcomms.com themselves. btcomms.com has one IP record. www.btcomms.com and mail.btcomms.com point to the same IP. btvision.bt.com use this as a mailserver. bt.net, rfu.com, cbil.com, voca.com, bccbl.com and at least 100 other hosts share nameservers with this domain. btvision.bt.com share mailservers with this domain. www.btcomms.com, mail.btcomms.com, callapp.btcomms.com, uberelf.btcomms.com, conwayhelp.btcomms.com and at least two other hosts are subdomains to this hostname.

game4it70

Sponge Bob wrote: »

do you have an iol email address ?

Its a yahoo email.

The link does go to the what looks like the bt website.

This is where it sends me.
http://diafaniaptol.gr/webscr/Login/true&siteArea/Btinternet=user/

Sponge Bob

Thats a Phish, best ask the admins to sticky over the weekend

game4it70

Yeah i'll send Bt a mail tomorrow just in case the info is of some use to them.

Sponge Bob

I mailed abuse@hetzner.de , they seem to host the phishing site

Shane O' Malley

game4it70 wrote: »

Its a yahoo email.

The link does go to the what looks like the bt website.

This is where it sends me.
http://diafaniaptol.gr/webscr/Login/true&siteArea/Btinternet=user/

Firefox is blocking that site as a Web Forgery so good to see it works.

Solair

Also, BT Ireland do not market as BT Total Broadband...

Blindpew

I'd say that BT have lost so many customers due to their throttling practice that they are just randomly e-mailing people in the hope that someone would send them some money.

Shane O' Malley

Blindpew wrote: »

I'd say that BT have lost so many customers due to their throttling practice that they are just randomly e-mailing people in the hope that someone would send them some money.

It has already been worked out that it is a phishing mail. Give BT a break.

mugenextreme

Being a Bt Customer i have recieved a few emails similar to this for billing but they all quote your name on the emails not dear customer as seen on the Image. My thoughts are you should email Bt and then delete.

Sponge Bob

BT don't respond to emails in a timely manner so I mailed the hosting company instead ...on their behalf like

Give over on the throttling blindpew, it really only affects a couple of hogs here and there.

Their business DSL packages are ALL unlimited bar their new 1mbit package , fair play .

Elessar

I just received my latest "bill" from BT despite having cancelled my account a month ago.

Knowing their incompetence, I knew this was coming. This should be interesting.