218.36.71.193-citi_0001 - 2004-05-13 credit card phishing scam - 218.36.71.193/citi
Stupid spam


Home | Articles | Spams | 419 scams | Spambots | Deny list | Phone list | eMail list | FAQ | Forum
Remove requests | Decode 64 | Decode qp | Decode ip | Other sites | Spam SUCKS! | Formmail Scans
Logos | Phishing | Lottery Scams | Support TOASTEDspam.com | Network Testing Services | PushPinMap
(3178) View this spam as a pruned html file TOASTEDspam.com toasted spam dot com
218.36.71.193-citi_0001 - 2004-05-13 credit card phishing scam - 218.36.71.193/citi
Return-path: security@citibankonline.com Thu May 13 01:48:29 2004 [2004-05-13 01:48:29 27772]
Received: from 129.44.71.42 ([220.72.51.13])
   by mail.munged.ext (8.11.6/8.11.6) with SMTP id i4D1mQ907997
   for <chien@munged.ext>; Thu, 13 May 2004 01:48:27 GMT
Received: from 128.96.70.41 by 129.44.71.42; Thu, 13 May 2004 08:40:56 +0200
Message-ID: <ZZWFAXUAWLLFFMFHEHMUUR@yahoo.com>
From: "security@citibankonline.com" <security@citibankonline.com>
Reply-To: "security@citibankonline.com" <security@citibankonline.com>
To: chien@munged.ext
Subject: Security Update
Date: Thu, 13 May 2004 12:45:56 +0600
X-CS-IP: 192.66.47.56

<html>

<head>
<meta http-equiv=3D"Content-Language" content=3D"sv">
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dwindows-=
1252">
<title>=95 sign on   =95 help   =95 open acco</title>
</head>

<body>

<table border=3D"0" width=3D"487" id=3D"table1" height=3D"35" background=3D=
"http://218.36.71.193/citi/img/36wav.gif">
<tr>
<td> </td>
</tr>
</table>
<p>
<img border=3D"0" src=3D"http://www.citibank.com/domain/images/citi44a.gif=
" width=3D"61" height=3D"38"><img border=3D"0" src=3D"http://www.citibank.=
com/domain/images/1blue.gif" width=3D"431" height=3D"1"></p>
<table border=3D"0" width=3D"450" id=3D"table2">
<tr>
<td><font size=3D"2">Valued Citibank client</font></td>
</tr>
<tr>
<td> </td>
</tr>
<tr>
<td><font size=3D"2">In our bank we value our clients and money, thats w=
hy
we have to upgrade our database. The upgrade requires our costumers to
update their debit/credit card information to avoid problems in our ATM =

services. </font></td>
</tr>
<tr>
<td><font size=3D"2">The reson to this upgrade is that we want to be wel=
l
prepared for the smartcard upgrade on VISA creditcards. The smarcards
reads a different type of encryption from our databases wich is more
secure than the old type.</font><p><font size=3D"2">Please update your
debit/credit card information as soon as possible.</font></td>
</tr>
<tr>
<td><font size=3D"2">Click on this link to verify:
<a href=3D"http://218.36.71.193/citi/">http://www.securityupdate.citiban=
k.com/secure/</a></font></td>
</tr>
</table>

<p> </p>
<p> </p>

</body>

</html>

------------------------------------------------------------

http://218.36.71.193/citi/img/

Forbidden
You don't have permission to access /citi/img/ on this server.

Apache/1.3.27 Server at sk03.cultureclub.co.kr Port 80

------------------------------------------------------------

inetnum:      218.36.0.0 - 218.39.255.255
netname:      KRNIC-KR
descr:        KRNIC
descr:        Korea Network Information Center
country:      KR
admin-c:      HM127-AP
tech-c:       HM127-AP
remarks:      ******************************************
remarks:      KRNIC is the National Internet Registry
remarks:      in Korea under APNIC. If you would like to
remarks:      find assignment information in detail
remarks:      please refer to the KRNIC Whois DB
remarks:      http://whois.nic.or.kr/english/index.html
remarks:      ******************************************
mnt-by:       APNIC-HM
mnt-lower:    MNT-KRNIC-AP
changed:      hm-changed@apnic.net 20020722
status:       ALLOCATED PORTABLE
source:       APNIC

person:       Host Master
address:      11F, KTF B/D, 1321-11, Seocho2-Dong, Seocho-Gu,
address:      Seoul, Korea, 137-857
country:      KR
phone:        +82-2-2186-4500
fax-no:       +82-2-2186-4496
e-mail:       hostmaster@nic.or.kr
nic-hdl:      HM127-AP
mnt-by:       MNT-KRNIC-AP
changed:      hostmaster@nic.or.kr 20020507
source:       APNIC

inetnum:      218.36.71.192 - 218.36.71.255
netname:      KRLINE-LLINE-CULTURECLUB-KR
descr: 	      Cultureclub
descr: 	      457-11, Dogok 2(i)-dong , Gangnam-gu
descr: 	      SEOUL
descr: 	      135-855
country:      KR
admin-c:      CY378-KR
tech-c:       CY379-KR
remarks:      This IP address space has been allocated to KRNIC.
remarks:      For more information, using KRNIC Whois Database
remarks:      whois -h whois.nic.or.kr
mnt-by:       MNT-KRNIC-AP
remarks:      This information has been partially mirrored by APNIC from
remarks:      KRNIC. To obtain more specific information, please use the
remarks:      KRNIC whois server at whois.krnic.net.
changed:      hostmaster@nic.or.kr 20040426
source:       KRNIC

person:       Changhyun Youn
descr: 	      Cultureclub
descr: 	      457-11, Dogok 2(i)-dong , Gangnam-gu
descr: 	      SEOUL
descr: 	      135-855
country:      KR
phone: 	      +82-2-3463-2370
e-mail:       yeounch@cultureclub.co.kr
nic-hdl:      CY378-KR
mnt-by:       MNT-KRNIC-AP
remarks:      This information has been partially mirrored by APNIC from
remarks:      KRNIC. To obtain more specific information, please use the
remarks:      KRNIC whois server at whois.krnic.net.
changed:      hostmaster@nic.or.kr 20040426
source:       KRNIC

person:       Changhyun Youn
descr: 	      Cultureclub
descr: 	      457-11, Dogok 2(i)-dong , Gangnam-gu
descr: 	      SEOUL
descr: 	      135-855
country:      KR
phone: 	      +82-2-3463-2370
e-mail:       yeounch@cultureclub.co.kr
nic-hdl:      CY379-KR
mnt-by:       MNT-KRNIC-AP
remarks:      This information has been partially mirrored by APNIC from
remarks:      KRNIC. To obtain more specific information, please use the
remarks:      KRNIC whois server at whois.krnic.net.
changed:      hostmaster@nic.or.kr 20040426
source:       KRNIC


TOASTEDspam.com toasted spam dot com