Hi;
The site is live..
& a definite phishing attempt.
Regards,
Kami
===========================
Received: from
82-33-98-143.cable.ubr10.azte.blueyonder.co.uk [82.33.98.143] by
foroosh.com
(SMTPD32-8.11) id A0842A350272; Tue, 08 Jun 2004 14:08:04 -0400
Received: from 50.106.132.64 by 82.33.98.143; Tue, 08 Jun 2004 13:00:46 -0600
Message-ID: <[EMAIL PROTECTED]>
From: "[EMAIL PROTECTED]" <[EMAIL PROTECTED]>
Reply-To: "[EMAIL PROTECTED]" <[EMAIL PROTECTED]>
To: *********************
Subject: [35~]Activate Bill Pay
Date: Tue, 08 Jun 2004 20:05:46 +0100
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="--23927787921753605107"
X-Originating-IP: 12.5.20.80
X-RBL-Warning: IPNOTINMX:
X-RBL-Warning: NOLEGITCONTENT: No content unique to legitimate E-mail detected.
X-RBL-Warning: CMDSPACE: Space found in RCPT TO: command.
X-RBL-Warning: FIVETEN-SPAM: 143.98.33.82.blackholes.five-ten-sg.com.
X-RBL-Warning: NOABUSE: "Not supporting [EMAIL PROTECTED]"
X-RBL-Warning: BROADBAND: Message failed BROADBAND test (line 236, weight 9)
X-RBL-Warning: COUNTRY: Message failed COUNTRY test (line 221, weight 1)
X-RBL-Warning: IPLINKED: Message failed IPLINKED test (line 187, weight 13)
X-Declude-Sender: [EMAIL PROTECTED] [82.33.98.143]
X-Declude-Spoolname: D00832a350272ffb3.SMD
X-Note: ==================================================================
X-Note: Spam Score: 35 [BLOCKED ON 20+ & DELETED ON 60+]
X-Note: Scan Time: 14:08:11 on 06/08/2004
X-Note: Spool File: D00832a350272ffb3.SMD
X-Note: Server Name: 82-33-98-143.cable.ubr10.azte.blueyonder.co.uk
X-Note: SMTP Sender: [EMAIL PROTECTED]
X-Note: Reverse DNS & IP: 82-33-98-143.cable.ubr10.azte.blueyonder.co.uk [82.33.98.143]
X-Note: Recipient(s): *********************
X-Note: Country Chain: [IANA Reserved]->UNITED KINGDOM->destination
X-Note: ==================================================================
X-Note: This E-mail was scanned & filtered by Declude [1.79i8] for SPAM & virus.
X-Note: Spam and virus blocking services provided by ClickandPledge.com
X-Note: ==================================================================
X-RCPT-TO: ***************
Status: U
X-UIDL: 331480131
(SMTPD32-8.11) id A0842A350272; Tue, 08 Jun 2004 14:08:04 -0400
Received: from 50.106.132.64 by 82.33.98.143; Tue, 08 Jun 2004 13:00:46 -0600
Message-ID: <[EMAIL PROTECTED]>
From: "[EMAIL PROTECTED]" <[EMAIL PROTECTED]>
Reply-To: "[EMAIL PROTECTED]" <[EMAIL PROTECTED]>
To: *********************
Subject: [35~]Activate Bill Pay
Date: Tue, 08 Jun 2004 20:05:46 +0100
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="--23927787921753605107"
X-Originating-IP: 12.5.20.80
X-RBL-Warning: IPNOTINMX:
X-RBL-Warning: NOLEGITCONTENT: No content unique to legitimate E-mail detected.
X-RBL-Warning: CMDSPACE: Space found in RCPT TO: command.
X-RBL-Warning: FIVETEN-SPAM: 143.98.33.82.blackholes.five-ten-sg.com.
X-RBL-Warning: NOABUSE: "Not supporting [EMAIL PROTECTED]"
X-RBL-Warning: BROADBAND: Message failed BROADBAND test (line 236, weight 9)
X-RBL-Warning: COUNTRY: Message failed COUNTRY test (line 221, weight 1)
X-RBL-Warning: IPLINKED: Message failed IPLINKED test (line 187, weight 13)
X-Declude-Sender: [EMAIL PROTECTED] [82.33.98.143]
X-Declude-Spoolname: D00832a350272ffb3.SMD
X-Note: ==================================================================
X-Note: Spam Score: 35 [BLOCKED ON 20+ & DELETED ON 60+]
X-Note: Scan Time: 14:08:11 on 06/08/2004
X-Note: Spool File: D00832a350272ffb3.SMD
X-Note: Server Name: 82-33-98-143.cable.ubr10.azte.blueyonder.co.uk
X-Note: SMTP Sender: [EMAIL PROTECTED]
X-Note: Reverse DNS & IP: 82-33-98-143.cable.ubr10.azte.blueyonder.co.uk [82.33.98.143]
X-Note: Recipient(s): *********************
X-Note: Country Chain: [IANA Reserved]->UNITED KINGDOM->destination
X-Note: ==================================================================
X-Note: This E-mail was scanned & filtered by Declude [1.79i8] for SPAM & virus.
X-Note: Spam and virus blocking services provided by ClickandPledge.com
X-Note: ==================================================================
X-RCPT-TO: ***************
Status: U
X-UIDL: 331480131
----23927787921753605107
Content-Type: text/html;
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html;
Content-Transfer-Encoding: quoted-printable
</font><font size=3D"2"><br><br><td
class=3D"smalltext">
Dear Citibank customer,<br>
We've upgraded our service so you can schedule fund transfers. And with ou=
r improved<br>Bill Pay, you can now pay bills on one screen. We will requi=
re all Citibank customers to
signup for this, please<br>fill in your card information now to avoid extr=
a upgrade fees
being withdrawn from your account later on.
<br><br>
<font color=3D"red">* ALL CITIBANK CUSTOMERS ARE REQIRED TO ACTIVATE =
BILL PAY *</font>
<br><br>
<b>Click on the link below to active Bill Pay:</b><br>
<a href="" href='http://200.97.91.210/citi/">Activate'>http://200.97.91.210/citi/">Activate Bill Pay</a>
</font>
Dear Citibank customer,<br>
We've upgraded our service so you can schedule fund transfers. And with ou=
r improved<br>Bill Pay, you can now pay bills on one screen. We will requi=
re all Citibank customers to
signup for this, please<br>fill in your card information now to avoid extr=
a upgrade fees
being withdrawn from your account later on.
<br><br>
<font color=3D"red">* ALL CITIBANK CUSTOMERS ARE REQIRED TO ACTIVATE =
BILL PAY *</font>
<br><br>
<b>Click on the link below to active Bill Pay:</b><br>
<a href="" href='http://200.97.91.210/citi/">Activate'>http://200.97.91.210/citi/">Activate Bill Pay</a>
</font>
----23927787921753605107--
