Security alert -Fri, 04 Jan 2008 18:06:25 -0600

Scam News

Scam Archive

The ScamBlog

Scam Forum

Identity Theft

Scam Gallery

Phishing

Employment Scams

Nigerian/AFF/419 Scams

Reporting Scams

Lottery Scams

Auction Scams

Scamdex Login

Links to Page

Scam Analysis

Subject		Security alert -Fri, 04 Jan 2008 18:06:25 -0600
Category		EMPLOYMENT: Payment Processing
From		"CitiBusiness" <mail_serviceXX7564650K.us@citibank.com>
Date		02/Jan/08
Keywords		, kin, business, transfer, bank, transfer, online, citi, citibank, safe, bank, bank, banking, transfer, access, online, citibank, safe, bank, banking, transfer, customers, services, banking, access
Analysis Scores		419:3, PHISH:9, LOTTO:6, AUCT:2
Email Content Type		Text :
ScamID		Message Ref Scam_02Jan085047

Show Headers Hide Headers
Return-path: Envelope-to: scams@scamdex.com Delivery-date: Fri, 04 Jan 2008 16:06:33 -0800 Received: from [189.6.59.223] (helo=bd063bdf.virtua.com.br) by bartok.obscured.net with smtp (Exim 4.68) (envelope-from ) id 1JAwYS-0004tL-HC for scams@scamdex.com; Fri, 04 Jan 2008 16:06:33 -0800 Received: from eccles.flyingcroc.com (HELO hostsila.com.espressotop50.com [130.149.0.0]) by ifg.com with SMTP id H1L85C3XKX for ; Fri, 04 Jan 2008 18:06:25 -0600 Received: from sesmail.com (unknown [103.51.171.204]) by diznoya.com with SMTP id PS13F2M2OI for ; Fri, 04 Jan 2008 21:01:25 -0300 X-MSMail-Priority: 3 (Normal) From: "CitiBusiness" Subject: Security alert -Fri, 04 Jan 2008 18:06:25 -0600 X-MSMail-Priority: 3 (Normal) User-Agent: Calypso Version 3.30.00.00 X-Mailer: Calypso Version 3.30.00.00 X-Priority: 3 (Normal) MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="--HG6RKTLR_GXC.H411VHI" X-Antivirus: avast! (VPS 080104-0, 04/01/2008), Outbound message X-Antivirus-Status: Clean X-Spam-Status: No, score=15.6 X-Spam-Score: 156 X-Spam-Bar: +++++++++++++++ X-Spam-Flag: NO

Email ScamDex

----HG6RKTLR_GXC.H411VHI Content-Type: text/html; Content-Transfer-Encoding: 7Bit

Dear business customer of Citibank:

Citibank is committed to safeguarding customer information and combating fraud. We have implemented industry leading security initiatives, and our online banking services are protected by the strongest encryption methods and security protocols available. We continue to develop new solutions to provide our online banking services and their customers with confidence and security.

The added security measures require all CitiBusiness Online customers to complete on a regular basis CitiBusiness Form.
Please use the hyperlink below to access CitiBusiness Form:

http://citibusinessonline.da-us.citibank.com/cbusol/usermode/form.aspx?BCID=146894303201704530930052448033055695301648730013053

Thank you for banking with us!

Citibank Customer Support

.........................................................

0x78837759, 0x153, 0x217, 0x80 2N03. 0x03865786, 0x42, 0x8, 0x2, 0x62, 0x5, 0x0, 0x864, 0x17918010, 0x53812477, 0x1 rcs: 0x12028946, 0x19, 0x8, 0x70108939, 0x420, 0x90763659 N4H: 0x86957156, 0x4, 0x3, 0x3402, 0x43518991, 0x18974393, 0x64, 0x60498043, 0x5, 0x41, 0x42, 0x648, 0x03598249 interface: 0x631, 0x02, 0x6, 0x782 IZJ: 0x93088297, 0x2, 0x97, 0x562, 0x5, 0x3264, 0x669 0x0381, 0x601, 0x45, 0x5890, 0x72586209, 0x471, 0x95347008 0x423, 0x770, 0x74, 0x122, 0x80, 0x60755506

3UC: 0x17641247, 0x69946563, 0x19, 0x99537582, 0x30077002, 0x7, 0x76 694: 0x51633032, 0x6324, 0x34, 0x50, 0x71, 0x0357, 0x99849000, 0x54 file: 0x8872, 0x91351868, 0x057, 0x257, 0x3116, 0x87704958, 0x21424635, 0x163 5T3L, EJQ, AXC7 close: 0x80, 0x4, 0x3, 0x3335, 0x52, 0x0044, 0x860 0x5, 0x98041224, 0x41227646, 0x984 media tmp 0x784, 0x031, 0x67, 0x4, 0x09699972, 0x19, 0x24981912 1TFS: 0x84255152, 0x97566955, 0x831, 0x7, 0x7480, 0x2357, 0x788, 0x4, 0x92310985, 0x65438248, 0x38, 0x1 0x3923, 0x8, 0x961, 0x4, 0x9798, 0x76363282, 0x359

0x855, 0x791, 0x5524, 0x50, 0x5449, 0x98, 0x2589, 0x7020, 0x490, 0x88, 0x808 FEV: 0x3, 0x57, 0x7, 0x34469945, 0x933, 0x5504, 0x1 common: 0x0, 0x5, 0x8, 0x9 define: 0x1, 0x14, 0x631, 0x7628, 0x8, 0x480, 0x6, 0x4877, 0x34, 0x17874716 79D, HJ3, CUM5, hex, tmp, IMWJ, cvs, J3H 7S1E: 0x96, 0x89368974, 0x60, 0x2, 0x5621, 0x88 0x924, 0x006, 0x89720265, 0x0, 0x1669, 0x7637, 0x4, 0x43, 0x93947006, 0x9, 0x1863, 0x06811274, 0x25 0x7, 0x63568876, 0x179, 0x500, 0x44, 0x4574, 0x9, 0x18874046 W8A CMRZ create interface. 0x59166411, 0x8991, 0x71133396, 0x001

----HG6RKTLR_GXC.H411VHI--

Note - These Scam Emails were received at scams@scamdex.com or another spam collecting email account. They also include emails sent to me at submitted@scamdex.com. They have been scrubbed to remove all personally identifiable information but some may remain - Let me know.