[Declude.JunkMail] New variation of PayPal Account retrieval

[Kami Razvan]

Title: Message

Hi;

 

A new variation of the PayPal fraud is going on.. I just got this email in our spam filter... it is asking for Citibank checking account...

 

I just thought it would be good for all to see this... in case you don't catch it..

 

Regards,

Kami

 

 

 

Here is the header:

=============================================

Received: from cgocable.net [24.150.152.123] by foroosh.com
  (SMTPD32-8.02) id AC6E4C0136; Sat, 16 Aug 2003 12:31:42 -0400
Received: from d150-152-123.home.cgocable.net (d150-152-123.home.cgocable.net [24.150.152.123])
        by cgocable.net (8.12.8p1/8.12.8) with ESMTP id aoelr258507
        for <deleted>; Sun, 17 Aug 2003 01:34:12 -0400 (EST)
Date: Sun, 17 Aug 2003 01:34:10 -0400 (EST)
From: Citibank <[EMAIL PROTECTED]>
X-Mailer: The Bat! (v1.61) Personal
Reply-To: [EMAIL PROTECTED]
X-Priority: 3 (Normal)
Message-ID: <[EMAIL PROTECTED]>
To: deleted
Subject: [58~]Your Checking Account at Citibank.
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------3309750874624"
X-IMAIL-SPAM-VALFROM: (4981046)
X-RBL-Warning: NOABUSE: Not supporting [EMAIL PROTECTED]
X-RBL-Warning: IPNOTINMX:
X-RBL-Warning: NOLEGITCONTENT: No content unique to legitimate E-mail detected.
X-RBL-Warning: BASE64: A binary encoded text or HTML section was found in this E-mail.
X-RBL-Warning: FILTER-HEADER-XMAIL: Message failed FILTER-HEADER-XMAIL test (59)
X-RBL-Warning: SPAMDOMAINS: Spamdomain 'juno.com' found: Address of [EMAIL PROTECTED] sent from invalid d150-152-123.home.cgocable.net.
X-RBL-Warning: COUNTRY: Message failed COUNTRY test (36)
X-RBL-Warning: FREEEMAILS:
X-Declude-Sender: [EMAIL PROTECTED] [24.150.152.123]
X-Declude-Spoolname: D5c6e004c01364150.SMD
X-Note: This E-mail was scanned & filtered by Declude [1.75i2] for SPAM & virus.
X-Spam-Tests-Failed: NOABUSE, IPNOTINMX, NOLEGITCONTENT, BASE64, FILTER-HEADER-XMAIL, SPAMDOMAINS, COUNTRY, WEIGHT20s, WEIGHT20r, FREEEMAILS
X-Weight: 58
X-Mailfrom: Fwpreg_Warden.juno.com
X-Note: Sent from: [EMAIL PROTECTED]
X-Note: Sent from Reverse DNS:  d150-152-123.home.cgocable.net ([24.150.152.123]).
X-Hello: cgocable.net
X-Note: Recipient(s):  deleted
X-Country-Chain: CANADA->destination
X-RCPT-TO: <deleted>
Status: U
X-UIDL: 331466365

================================================================

			Dear Citibank customer, We are letting you know, that you, as a Citibank checking account holder, must become acquainted with our new Terms & Conditions and agree to it. Please, carefully read all the parts of our new Terms & Conditions and post your consent. Otherwise, we will have to suspend your Citibank checking account. This measure is to prevent misunderstanding between us and our valued customers. We are sorry for any inconvinience it may cause. Click here to access our Terms & Conditions page and not allow your Citibank checking account suspension.

	й 2003 Citibank. Citibank (West), FSB. Member FDIC. Citibank with Arc Design is a registered service mark of Citicorp. Citi.com Citigroup Privacy Promise Terms & Conditions Copyright й 2003 Citicorp

ECRM_CBNA_NEW_ACTIVE

---

 

 

?BTData=4021A727966776F585D4553B8B2A3A6AB8D978B81F6E1E6F828DC832&MsgID=F1314DF3C2BA4CCCBA474CEA6A8F6248
Description: Binary data

--- Begin Message ---

Dear Citibank customer, We are letting you know, that you, as a Citibank checking account holder, must become acquainted with our new Terms & Conditions and agree to it. Please, carefully read all the parts of our new Terms & Conditions and post your consent. Otherwise, we will have to suspend your Citibank checking account. This measure is to prevent misunderstanding between us and our valued customers. We are sorry for any inconvinience it may cause. Click here to access our Terms & Conditions page and not allow your Citibank checking account suspension. й 2003 Citibank. Citibank (West), FSB. Member FDIC. Citibank with Arc Design is a registered service mark of Citicorp. Citi.com Citigroup Privacy Promise Terms & Conditions Copyright й 2003 Citicorp ECRM_CBNA_NEW_ACTIVE

--- End Message ---