[Dshield] A very Funny Scam: Citibank

Mrcorp mrcorp at yahoo.com
Wed Jan 28 11:17:07 GMT 2004

on a side note.  THis is the worst attempt I have had yet to attempt to get information from me. 
I like this email because of the aweful spelling, and the link.  


Dear_ Citibank Cardholder,

Thiss _email_ was _sent_ by-the Citicard server to
veerify your e-mail adderss.
You mmust coeptlme this porescs by clicking on_the_link
beloww and enteering in the smmall window your _Citibank
Atm/Debit full Card number and _PIN_ that you use on _ATM_.
This_is _done_ for_your ptorcetion -r- becourse some_of_our
_members_ no lnegor have accses to their email adesesdrs
and we must verify it.

To veerify your e_mail _address_ and acces _your _citibank_
account, clic on_the_link _bellow_.



Full Header:
X-Apparently-To: mrcorp at yahoo.com via; Tue, 27 Jan 2004 20:00:11 -0800 
Return-Path: <joey at miho-nakayama.com> 
Received: from (HELO madhuri.com) ( by mta192.mail.scd.yahoo.com with
SMTP; Tue, 27 Jan 2004 20:00:09 -0800 
Received: from miho-nakayama.com (miho-nakayama-com.mr.outblaze.com []) by
madhuri.com (Postfix) with ESMTP id E81D6C53BC for <mrcorp at yahoo.com>; Tue, 27 Jan 2004 22:56:46
From: "Citibank-Online" <joey at miho-nakayama.com>  Add to Address Book 
To: "Mrcorp" <mrcorp at yahoo.com> 
Subject: CITI-ONLINE EMAIL Veerification - mrcorp at yahoo.com 
Date: Tue, 27 Jan 2004 22:56:46 -0500 
Message-ID: <011001c3e552$7df7ec9d$1eaff989 at miho-nakayama.com> 
MIME-Version: 1.0 
Content-Type: text/plain 
Content-Transfer-Encoding: 7bit 
X-Priority: 3 (Normal) 
X-MSMail-Priority: Normal 
X-Mailer: Microsoft Outlook, Build 10.0.2616 
Importance: Normal 
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2479.0006 
X-RAV-Antivirus: This e-mail has been scanned for viruses on host: madhuri.com 
Content-Length: 657 

Do you Yahoo!?
Yahoo! SiteBuilder - Free web site building tool. Try it!

More information about the list mailing list