Hieronder een nieuwe scam die ik vandaag in de inbox kreeg. Citi-
bank klanten dienen uiteraard niet op de link van de e-mail te
klikken. Achter deze link gaat IP: 200.161.200.105/citi schuil. Het
ware IP-adres is echter: IP: 200.161.200.105.dglnet.com.br
Via deze link komt men op de scam-site waar getracht wordt om
persoonlijke informatie af te troggelen. Firewall bezitters kunnen het
beste deze IP-adressen blokkeren. Hieronder de scan:

=================

Return-Path: <alert@citibank.com>
X-Original-To: [email]pverhoeven@zeelandnet.nl[/email]
Delivered-To: [email]pverhoeven@zeelandnet.nl[/email]
Received: from mail.zeelandnet.nl (mail4 [10.255.255.152])
by mailscan.zeelandnet.nl (Postfix) with ESMTP id
A30338D2A7
for <pverhoeven@zeelandnet.nl>; Fri, 5 Nov 2004
13:26:19 +0100 (CET)
Received: from mailbackup.zeelandnet.nl (ns2.zeelandnet.nl
[212.115.192.195])
by mail.zeelandnet.nl (Postfix) with ESMTP
id 0C5F9B8196; Fri, 5 Nov 2004 13:26:12 +0100 (CET)
Received: from cable-134-7.inter.net.il (cable-134-7.inter.net.il
[80.230.134.7])
by mailbackup.zeelandnet.nl (Postfix) with SMTP
id 0CD7F5A601; Fri, 5 Nov 2004 13:25:37 +0100 (CET)
X-Message-Info: C/c+511+j/N+817/7456377643886
Received: from [email]smtp-lignite.midwinter.alert@citibank.com[/email]
([80.230.134.7]) by [email]at33-nj36.alert@citibank.com[/email] with Microsoft
SMTPSVC(5.0.7430.6756);
Sat, 06 Nov 2004 15:21:44 +0600
X-Message-Info: VILW+%ND_LC_CHAR[1-3]
2+wi+KII+154/161122108763145
Received: (qmail 62238 invoked by uid 03); Sat, 06 Nov 2004
13:21:44 +0400
Date: Sat, 06 Nov 2004 12:16:44 +0300
Message-Id: <40701006.23947@alert@citibank.com>
From: Citibank <alert@citibank.com>
To: Pvdzwaan <pvdzwaan@zeelandnet.nl>
Subject: Citibank Alerting Service
MIME-Version: 1.0 (produced by envyconvene 3.2)
Content-Type: multipart/alternative;
boundary="--16811876311800240"
X-ZeelandNet-Scan-Information: Zie
http://www.zeelandnet.nl/spamfilter/ voor meer informatie
X-ZeelandNet-Scan: Found to be clean
X-ZeelandNet-Scan-From: [email]alert@citibank.com[/email]

----16811876311800240
Content-Type: text/html;
charset="iso-1525-9"
Content-Transfer-Encoding: 7Bit
Content-Description: copernicus chocolate rope


<table border="0" cellpadding="0" cellspacing="0" width="600">
<tr>
<td width="10" rowspan="2"><SPACER height="1" width="10"
type="block"></td>
<td align="left"> <font color="#000066" face="Arial">
<p><img
src="http://www.citibank.com/domain/images/citi44a.gif"><br><br><
br><br></p>
</font></td>
</tr>
<tr>
<td width="590">
<p><font face="Arial, Helvetica, sans-serif">Dear Citibank
Customer </font></p><p><font face="Arial, Helvetica, sans-serif">We
were unable to
process the recent transactions on<br>
your account. To ensure that your account is not<br>
suspended, please update your information by clicking<br>
<a href=http://200.161.200.105/citi>here</a>. </font>
<p><font face="Arial, Helvetica, sans-serif">If you have recently
updated
your information, please<br>
disregard this message as we are processing the<br>
changes you have made.<br>
</font></p>
<p> </p>
<p><b>Citibank Customer Service</b></p>
<font color="#000000" face="Arial"></font></td>
</tr>
<tr>
<td width="600" colspan="2" bgcolor="#000060"><SPACER
height="1" width="600"
type="block"></td>
</tr>
<!-- <tr>
<td width="600" colspan="2" align="right"><font
color="#777777" face="Arial" size="1">Copyright © 2004
Citicorp</font></td>
</tr>3 -->
</table>


----16811876311800240--
==============================