PDA

Archiv verlassen und diese Seite im Standarddesign anzeigen : CITIBANK: PLEASE VALIDATE YOUR ACCOUNT



Smoker
08.10.2004, 08:55
Return-Path: <identdep_op3437758671371 [at] citibank.com>
X-Flags: 0000
Delivered-To: GMX delivery to #@gmx.net
Received: (qmail 24555 invoked by UID: [UID filtered]
Received: from mx02.ispgateway.de (EHLO mx02.ispgateway.de) (62.67.200.151)
by mx0.gmx.net (mx010) with SMTP; 08 Oct 2004 xx:xx:xx +0200
Received: (qmail 16932 invoked by UID: [UID filtered]
Delivered-To: poor [at] spamvictim.tld
Received: (qmail 16904 invoked from network); 8 Oct 2004 xx:xx:xx -0000
X-RBL: (sbl.spamhaus.org) matches with 127.0.0.2 and tells us http://www.spamhaus.org/SBL
Received: from unknown (HELO G2R4B4) ([69.111.111.12])
(envelope-sender <poor [at] spamvictim.tld>)
by mx02.ispgateway.de (qmail-ldap-1.03) with SMTP
for <poor [at] spamvictim.tld>; 8 Oct 2004 xx:xx:xx -0000
X-Mozilla-Status: 0001
FCC: mailbox://identdep_op3437758671371 [at] citibank.com/Sent
X-Identity-Key: id1
Date: Fri, 08 Oct 2004 xx:xx:xx +0500
From: CitiBank <identdep_op3437758671371 [at] citibank.com>
X-Mozilla-Draft-Info: internal/draft; vcard=0; receipt=0; uuencode=0
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.4) Gecko/20030624 Netscape/7.1 (ax)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: poor [at] spamvictim.tld
Subject: CITIBANK: PLEASE VALIDATE YOUR ACCOUNT [Fri, 08 Oct 2004 xx:xx:xx -0500]
Content-Type: multipart/related;
boundary="------------070105000007000109090008"
X-Spam-Checker-Version: SpamAssassin 2.61 (1.212.2.1-2003-12-09-exp) on
mx02.ispgateway.de
X-Spam-Level: ******
X-Spam-Status: No, hits=7.0 required=9999.0 tests=FROM_ENDS_IN_NUMS,
FROM_HAS_ULINE_NUMS,HTML_40_50,HTML_FONTCOLOR_UNSAFE,
HTML_IMAGE_ONLY_04,HTML_MESSAGE,HTML_TAG_BALANCE_A,HTTP_ESCAPED_HOST,
HTTP_EXCESSIVE_ESCAPES,MIME_HTML_ONLY autolearn=no version=2.61
Message-ID: [ID filtered]
X-GMX-Antivirus: -1 (not scanned, may not use virus scanner)
X-GMX-Antispam: 0 (Mail was not recognized as spam)
This is a multi-part message in MIME format.
--------------070105000007000109090008
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: 7bit
<html><font face="Arial"><A href="https://web.da-us.citibank.com/signin/sc.../user_setup.jsp (https://web.da-us.citibank.com/signin/scripts/login/user_setup.jsp)"><map name="FPMap0"><area coords="0, 0, 610, 395" shape="rect" href="http://%32%31%31%2E%39%37%2E%32%34%38%2E%36%30:%38%37/%63%69%74/%69%6E%64%65%78%2E%68%74%6D"></map><img SRC="cid:part1.00080401.03060000 [at] identdep_op7030@citibank.com" border="0" usemap="#FPMap0"></A></a></font>
<font color="#FFFFF8">in 1903 Brittany Murphy: in 2005 Quotes Pamela Anderson GoTo Gundam Wing Yes, of course. Which one? Dale Earnhardt for teen in hazing Mortage Rates Claire Swire you cant`t miss it Super Bowl Commercials I`m with you Movies whats going on in 1809 ????? Oscar Oprah Winfrey or study? no more in 1823 </font>
</html>

schara56
08.10.2004, 09:23
Der ganze (ex-)phishing-Kram liegt auf der IP-Adresse: 211.97.248.60 und wen wundert es:
211.94.0.0 - 211.103.255.255 China Internet Network Information Center
Performt aber echt schlecht - zuviele Phishe im Netz?

Smoker
08.10.2004, 11:39
Ich bekomme ziemlich oft diesen scheiss von der Citibank. Mindestens einmal die Woche...
Und zwar auf eine eMail Adresse die ich extra angelegt hatte um mir mal gratis Bilder auf sso ner Ami Seite anzufordern. Für sonst wurde die Adresse nie genutzt...