Can I ask why you guys post these to the Declude JunkMail discussion list?  It doesn't seem to have anything to do with the subject matter of this list.
----- Original Message -----
Sent: Tuesday, October 05, 2004 6:56 AM
Subject: [Declude.JunkMail] Citibank - phishing- still live

Hi;
the following is another phishing attempt- the site still live.
 
 
Regards,
Kami
 
 
==== Email
Subject: [37~]Dear customer your details have been compromised
MIME-Version: 1.0 (produced by annunciatemarginalia 8.2)
Content-Type: multipart/alternative;
 boundary="--938071008627732911"
X-RBL-Warning: IPNOTINMX:
X-RBL-Warning: NOLEGITCONTENT: No content unique to legitimate E-mail detected.
X-RBL-Warning: CMDSPACE: Space found in RCPT TO: command.
X-RBL-Warning: NJABL-DYNA: "Dynamic/Residential IP range listed by NJABL dynablock - http://njabl.org/dynablock.html"
X-RBL-Warning: NJABL-DUL: This E-mail came from 12.107.246.11, a potential spam source listed in NJABL-DUL.
X-RBL-Warning: NOABUSE: "Not supporting [EMAIL PROTECTED]"
X-RBL-Warning: SORBS-DUL: "Dynamic IP Address See: http://www.dnsbl.sorbs.net/lookup.shtml?12.107.246.11"
X-RBL-Warning: IPLINKED: Message failed IPLINKED test (line 198, weight 13)
X-Declude-Sender: [EMAIL PROTECTED] [12.107.246.11]
X-Declude-Spoolname: D26691b0502409fba.SMD
X-Note: ==================================================================
X-Note: Spam Score: 37 [BLOCKED ON 20+ & DELETED ON 40+]
X-Note: Scan Time: 00:43:47 on 05 Oct 2004
X-Note: Spool File: D26691b0502409fba.SMD
X-Note: Server Name: dialup-12-107-246-11.dtccom.net
X-Note: SMTP Sender: [EMAIL PROTECTED]
X-Note: Reverse DNS & IP: dialup-12-107-246-11.dtccom.net [12.107.246.11]
X-Note: Country Chain: UNITED STATES->destination

----938071008627732911
Content-Type: text/plain;
 charset="iso-2059-6"
Content-Transfer-Encoding: quoted-printable
Content-Description: nicholson salmonberry biblical
 
Dear Customer:
 
Recently there have been a large number of cyber attacks pointing our data="">base servers. In order to safeguard your account, we require you to sign o=
n immediately.
 
This personal check is requested of you as a precautionary measure and to =
ensure yourselves that everything is normal with your balance and personal=
 information.
 
This process is mandatory, and if you did not sign on within the nearest t=
ime your account may be subject to temporary suspension.
 
Please make sure you have your Citibank(R) debit card number and your User=
 ID and Password at hand.
 
Please use our secure counter server to indicate that you have signed on, =
please click the link bellow:
 
 
!! Note that we have no particular indications that your details have been=
 compromised in any way.
 
Thank you for your prompt attention to this matter and thank you for using=
 Citibank(R)
 
Regards,
 
Citibank(R) Card Department
 
(C)2004 Citibank. Citibank, N.A., Citibank, F.S.B.,
Citibank (West), FSB. Member FDIC.Citibank and Arc
Design is a registered service mark of Citicorp.
 
----938071008627732911--

Reply via email to