I like the postings too and on the Declude JM vs. Imail list. We filter and his alerts help us keep up with same. Filtering these IMO is more serious than the typical best Mortgage Rate and Viagra spams.
 
-Don
 
----- Original Message -----
Sent: Tuesday, October 05, 2004 8:41 AM
Subject: RE: [Declude.JunkMail] Citibank - phishing- still live

Kami's postings are more usefull then many others on this list.
 
Markus
 
 


From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dan Geiser
Sent: Tuesday, October 05, 2004 2:26 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Citibank - phishing- still live

Hi, Kami,
Well, my users never see them because I have "citibank.com" on my "spam domains" list.  I agree that it might be important to disseminate currently active phishing URLs but I just don't know that the DJM mailing list is the place.
 
Just An Idea,
 
Thanks!
Dan
----- Original Message -----
Sent: Tuesday, October 05, 2004 7:47 AM
Subject: RE: [Declude.JunkMail] Citibank - phishing- still live

Hi Dan:
 
I post it just in case you want to filter a phishing attempt.
 
Historically people have posted this to stop the attempts - this way your users will not receive this.
 
Don't you think it applies?
 
Kami


From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dan Geiser
Sent: Tuesday, October 05, 2004 7:23 AM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Citibank - phishing- still live

Can I ask why you guys post these to the Declude JunkMail discussion list?  It doesn't seem to have anything to do with the subject matter of this list.
----- Original Message -----
Sent: Tuesday, October 05, 2004 6:56 AM
Subject: [Declude.JunkMail] Citibank - phishing- still live

Hi;
the following is another phishing attempt- the site still live.
 
 
Regards,
Kami
 
 
==== Email
Subject: [37~]Dear customer your details have been compromised
MIME-Version: 1.0 (produced by annunciatemarginalia 8.2)
Content-Type: multipart/alternative;
 boundary="--938071008627732911"
X-RBL-Warning: IPNOTINMX:
X-RBL-Warning: NOLEGITCONTENT: No content unique to legitimate E-mail detected.
X-RBL-Warning: CMDSPACE: Space found in RCPT TO: command.
X-RBL-Warning: NJABL-DYNA: "Dynamic/Residential IP range listed by NJABL dynablock - http://njabl.org/dynablock.html"
X-RBL-Warning: NJABL-DUL: This E-mail came from 12.107.246.11, a potential spam source listed in NJABL-DUL.
X-RBL-Warning: NOABUSE: "Not supporting [EMAIL PROTECTED]"
X-RBL-Warning: SORBS-DUL: "Dynamic IP Address See: http://www.dnsbl.sorbs.net/lookup.shtml?12.107.246.11"
X-RBL-Warning: IPLINKED: Message failed IPLINKED test (line 198, weight 13)
X-Declude-Sender: [EMAIL PROTECTED] [12.107.246.11]
X-Declude-Spoolname: D26691b0502409fba.SMD
X-Note: ==================================================================
X-Note: Spam Score: 37 [BLOCKED ON 20+ & DELETED ON 40+]
X-Note: Scan Time: 00:43:47 on 05 Oct 2004
X-Note: Spool File: D26691b0502409fba.SMD
X-Note: Server Name: dialup-12-107-246-11.dtccom.net
X-Note: SMTP Sender: [EMAIL PROTECTED]
X-Note: Reverse DNS & IP: dialup-12-107-246-11.dtccom.net [12.107.246.11]
X-Note: Country Chain: UNITED STATES->destination

----938071008627732911
Content-Type: text/plain;
 charset="iso-2059-6"
Content-Transfer-Encoding: quoted-printable
Content-Description: nicholson salmonberry biblical
 
Dear Customer:
 
Recently there have been a large number of cyber attacks pointing our data="">base servers. In order to safeguard your account, we require you to sign o=
n immediately.
 
This personal check is requested of you as a precautionary measure and to =
ensure yourselves that everything is normal with your balance and personal=
 information.
 
This process is mandatory, and if you did not sign on within the nearest t=
ime your account may be subject to temporary suspension.
 
Please make sure you have your Citibank(R) debit card number and your User=
 ID and Password at hand.
 
Please use our secure counter server to indicate that you have signed on, =
please click the link bellow:
 
 
!! Note that we have no particular indications that your details have been=
 compromised in any way.
 
Thank you for your prompt attention to this matter and thank you for using=
 Citibank(R)
 
Regards,
 
Citibank(R) Card Department
 
(C)2004 Citibank. Citibank, N.A., Citibank, F.S.B.,
Citibank (West), FSB. Member FDIC.Citibank and Arc
Design is a registered service mark of Citicorp.
 
----938071008627732911--

Reply via email to