From identdep_op85@citibank.com Sun Oct 03 09:11:55 2004
Return-Path: <identdep_op85@citibank.com>
X-Flags: 1101
Delivered-To: GMX delivery to xxxx@xxx.xx
Received: from xxxxx.xx [82.149.228.140]
by localhost with POP3 (fetchmail-6.2.5)
for xxxx@xxx.xx (single-drop); Sun, 03 Oct 2004 11:11:55 +0200 (MEST)
Received: from p213.54.37.62.tisdip.tiscali.de (CHRISTIN-WKYYVS7303@p213.54.37.62.tisdip.tiscali.de [213.54.37.62])
by xxxx.xxx.xx (8.12.10/8.12.10) with SMTP id i9397KWK009768
for <xxxx@xxx.xx>; Sun, 3 Oct 2004 11:07:22 +0200
Message-Id: <200410030907.i9397KWK009768@xxxx.xxx.xx>
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
FCC: mailbox://identdep_op85@citibank.com/Sent
X-Identity-Key: id1
Date: Sun, 03 Oct 2004 07:02:54 -0300
From: CitiBank <identdep_op85@citibank.com>
X-Mozilla-Draft-Info: internal/draft; vcard=0; receipt=0; uuencode=0
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.4) Gecko/20030624 Netscape/7.1 (ax)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: xxxx@xxx.xx
Subject: CITIBANK ONLINE - DETAILS CONFIRMATION [Sun, 03 Oct 2004 12:57:54 +0300]
Content-Type: multipart/related;
boundary="------------050008090800080303020005"

Abgekippt über:
Nikoma MediaWorks GmbH - Germany -> abuse[at]b2b.tiscali.com
Phishing-Link:
http://24.76.89.64:32/cit/index.htm -> Shaw Communications Inc.
Site wurde anscheinend schon entfernt.