Hi;
the following is
another phishing attempt- the site still live.
http://211.158.34.250/citifi/
Regards,
Kami
Email
Subject: [37~]Dear customer your details have been
compromisedMIME-Version: 1.0 (produced by annunciatemarginalia
8.2)Content-Type:
: Tuesday, October 05, 2004 7:23 AMTo:
[EMAIL PROTECTED]Subject: Re: [Declude.JunkMail] Citibank
- phishing- still live
Can I ask why you guys post these to the Declude
JunkMail discussion list? It doesn't seem to have anything to do with the
subject matter of this list.
- Original Message
an
- Original Message -
From:
Kami Razvan
To: [EMAIL PROTECTED]
Sent: Tuesday, October 05, 2004 7:47
AM
Subject: RE: [Declude.JunkMail] Citibank
- phishing- still live
Hi Dan:
I post it just in case you want to filter a phishing
attempt.
Historicall
Kami's postings are more usefull then many others on this
list.
Markus
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Dan
GeiserSent: Tuesday, October 05, 2004 2:26 PMTo:
[EMAIL PROTECTED]Subject: Re: [Declude.JunkMail]
Citibank - phishing- still live
since none of these messages every originate from the
proper domains.
Dan
- Original Message -
From: Bill Landry [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, October 05, 2004 10:58 AM
Subject: Re: [Declude.JunkMail] Citibank - phishing- still live
Where else would you suggest
for ClamAV
support phishing e-mail detection.
Bill
- Original Message -
From: Dan Geiser [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, October 05, 2004 4:22 AM
Subject: Re: [Declude.JunkMail] Citibank - phishing- still live
Can I ask why you guys post these to the Declude
- Original Message -
From: Scott Fisher [EMAIL PROTECTED]
I've never caught any phish with my Viruscan.
Do you have any special configuration settings that you use?
Depends on your virus scanner. With uvscan on my Postfix gateways, I get
notifications like:
=
A virus was found:
be seeing these blocked, as well.
Bill
- Original Message -
From: Bill Landry [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, October 05, 2004 9:23 AM
Subject: Re: [Declude.JunkMail] Citibank - phishing- still live
- Original Message -
From: Scott Fisher [EMAIL
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Chuck Schick
Sent: Tuesday, October 05, 2004 6:07 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Citibank - phishing- still live
Unfortunately spamdomains is a test that has a lot of false
on 10/5/04 12:21 PM, Dan Horne wrote:
I agree. While a body filter may not be the most EFFICIENT way, it is
definitely the most EFFECTIVE way. Like Chuck, I can't weight SpamDomains
high enough to hold, and even if I could, what if the message gets negative
points from something else like
I have my spamdomains posted at:
http://it.farmprogress.com/declude/declude.htm
- Original Message -
From: Markus Gufler [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, October 05, 2004 11:41 AM
Subject: RE: [Declude.JunkMail] Citibank - phishing- still live
Chuck, and others
Hmm as I can see there are a lot of differences between the phishing list
posted by Dan...
@ameritrade.com.ameritrade.com
@citi.com.citibank.com
@citibank.com.citibank.com
@ebay.com.ebay.com
@fleet.com.fleet.com
.gs.com
@paypal.com .paypal.com
@suntrust.com
-
From: Markus Gufler [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, October 05, 2004 12:59 PM
Subject: RE: [Declude.JunkMail] Citibank - phishing- still live
Hmm as I can see there are a lot of differences between the phishing list
posted by Dan...
@ameritrade.com.ameritrade.com
Markus,
For the record I have about 5 different spam domains tests.
Dan
- Original Message -
From: Markus Gufler [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, October 05, 2004 12:41 PM
Subject: RE: [Declude.JunkMail] Citibank - phishing- still live
Chuck, and others,
Maybe
, October 05, 2004 7:59 AM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Citibank - phishing- still live
Where else would you suggest they be posted, after all, phishing e-mail are
spam in my book. However, with that said, more and more virus vendors are
starting to add phishing e-mail
PROTECTED]
Subject: Re: [Declude.JunkMail] Citibank - phishing- still live
Chuck,
If you are getting lots of false positives with SpamDomains then I don't
think you are using it right. My hold weight is 100. My delete weight is
200. I have multiple SpamDomains tests with some weighing 100 points
]
To: [EMAIL PROTECTED]
Sent: Tuesday, October 05, 2004 3:51 PM
Subject: RE: [Declude.JunkMail] Citibank - phishing- still live
Dan:
I certainly know how to run the spamdomains test but I would like to point
out some of the basic problems with the spam domains test. As I said there
is no central list
PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, October 05, 2004 3:51 PM
Subject: RE: [Declude.JunkMail] Citibank - phishing- still live
Dan:
I certainly know how to run the spamdomains test but I would like to point
out some of the basic problems with the spam domains test. As I said
18 matches
Mail list logo
