• We’re currently investigating an issue related to the forum theme and styling that is impacting page layout and visual formatting. The problem has been identified, and we are actively working on a resolution. There is no impact to user data or functionality, this is strictly a front-end display issue. We’ll post an update once the fix has been deployed. Thanks for your patience while we get this sorted.

LMAO Worst Scam attempt yet!

DrPizza

Administrator Elite Member Goat Whisperer
I *almost* fell for this 😛 if not for the typos 😉

Dear Citi-bank Cardholder,

This email was sent by the Citicards serevr to veerify your email
adress. You must clmeptoe this posrces by clicking on the link
below and enteering in the little window your Citi-Bank Debit
card nummber and pin that you use on Atm Machine.
This is done for your prtocetion -I- becaurse some of our membres no
lnoger have acsces to their email addrseess and we must verify it.

To veerify your e-mail adderss and akcess your OnlineCitibank account, klick on
the link beloow. If nothing hapneps when you klick on the link -z copy
and pastte the link into the addres bar of your web broswer.

http://www.citibank.com/?RzQiXvbmRTfjVTXxxWiAZf1epb38tpXaZOuXjFkdzAxviu3Qqm

---------------------------------------------
Thank you for using Online-Citibank!
---------------------------------------------

edit: the actual link goes to: http://www.citi.com:ac-xWx6Kc3qnDQomTQq2tCB@yl120dskq.da.ru/?NZK33WpfaaNT6lN
 
Originally posted by: CheapArse
please tell me thats not a copy & paste of the email. lmao, thats pathetic.

it's pathetic that I copy and pasted it? Or the email itself is pathetic? Because, that's the email, cut and pasted...
I normally delete scam attempts instantly, but couldn't resist passing this one on...
 
Originally posted by: DrPizza
Originally posted by: CheapArse
please tell me thats not a copy & paste of the email. lmao, thats pathetic.

it's pathetic that I copy and pasted it? Or the email itself is pathetic? Because, that's the email, cut and pasted...
I normally delete scam attempts instantly, but couldn't resist passing this one on...

lol, why would I call you pathetic for copy and paste? I would call you crazy for retyping it. 😉😛

The email is pathetic...you'd think they would at least run it through an English spell checker.
 
Here's the complete header:
Return-Path: <isi@citibank.com>
Received: from f01v-34-171.d0.club-internet.fr ([212.195.245.171])
by mta7.adelphia.net
(InterMail vM.5.01.06.05 201-253-122-130-105-20030824) with SMTP
id <20040110122156.PCPX9027.mta7.adelphia.net@f01v-34-171.d0.club-internet.fr>
for <(my email)>; Sat, 10 Jan 2004 07:21:56 -0500
Received: from citibank.com (mail4.citigroup.com [199.67.139.129])
by f01v-34-171.d0.club-internet.fr (Postfix) with ESMTP id CF31D2CD26
for <(my email)>; Sat, 10 Jan 2004 07:19:39 -0500
Message-ID: <6.0.0.22.1.20040110071939.4eea1efc@citibank.com>
X-Sender: constrictors@mail4.citigroup.com
X-Mailer: QUALCOMM Windows Eudora Version 6.0.0.22
Reply-To: CITIBANK <sidney@citicards.com>
Date: Sat, 10 Jan 2004 07:19:39 -0500
To: (my email)
From: CITIBANK <isi@citibank.com>
Subject: CITI EMAIL Veerification - (my email)
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: 7bit
X-Virus-Scanned: by AMaViS perl-11 mion
 
Originally posted by: DrPizza
I *almost* fell for this 😛 if not for the typos 😉

Dear Citi-bank Cardholder,

This email was sent by the Citicards serevr to veerify your email
adress. You must clmeptoe this posrces by clicking on the link
below and enteering in the little window your Citi-Bank Debit
card nummber and pin that you use on Atm Machine.
This is done for your prtocetion -I- becaurse some of our membres no
lnoger have acsces to their email addrseess and we must verify it.

To veerify your e-mail adderss and akcess your OnlineCitibank account, klick on
the link beloow. If nothing hapneps when you klick on the link -z copy
and pastte the link into the addres bar of your web broswer.

http://www.citibank.com/?RzQiXvbmRTfjVTXxxWiAZf1epb38tpXaZOuXjFkdzAxviu3Qqm

---------------------------------------------
Thank you for using Online-Citibank!
---------------------------------------------

edit: the actual link goes to: http://www.citi.com:ac-xWx6Kc3qnDQomTQq2tCB@yl120dskq.da.ru/?NZK33WpfaaNT6lN

Send a complaint about this to policy@da.ru
 
I'd like to give the person the benefit of the doubt and say he/she is from a non-english speaking country, so of course he/she doesn't know how to spell... but geeze, lol.
 
Originally posted by: Jeff7181
I'd like to give the person the benefit of the doubt and say he/she is from a non-english speaking country, so of course he/she doesn't know how to spell... but geeze, lol.

If they actually would have spent a little more time on the spelling and grammer, they might have gotten quite a few hits from this. The scheme is well crafted, they load the real site inside their fake site by using a frameset, and then run a popup that takes the information. They also generate the real site address in the address bar which I'm sure would throw even more people off.
 
Back
Top