Aus Italien im Namen der CITIBANK

Ich glaube, ich muss meine Blogkontaktadresse mal wieder wechseln, denn die Spams an diese Adresse häufen sich langsam. An dieser Spam hängt das File "payment confirmation.zip" ...


We have received the following transfer request on March 12, 2015:

*********************************************
Item #: 135643884
Amount: $4,746.47
Service: International
*********************************************

Please find attached the payment confirmation attached for your
information
and confirmation.

Sincerely,

Alberto

Transfer MG.

www.CITIBANK.com[www.CITIBANK.com]



Return-Path: Alberto.J.Verm@citi.com
Received: from fnet1.formatnet.it ([94.23.68.213]) by mx-ha.gmx.net (mxgmx111) with ESMTPS (Nemesis) id 0M1AyC-1ZPHo43W5g-00tCDm for [contact@succun.su]; Fri, 13 Mar 2015 11:26:45 +0100
Received: by fnet1.formatnet.it (Postfix, from userid 33) id 3BFC4401938; Fri, 13 Mar 2015 11:26:20 +0100 (CET)
To: [transfers@citi.com]
Subject: FUND TRANSFER.
X-PHP-Originating-Script: 0:main.inc
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="=_a7429a1b7bb5d0197b3cf84fbfdc7a7e"
Date: Fri, 13 Mar 2015 11:26:19 +0100
From: Alberto [Alberto.J.Verm@citi.com]
Message-ID: [58d4e2cb4569cbc2730a59c5a33a4c54@hitherm.it]
X-Sender: Alberto.J.Verm@citi.com
User-Agent: Roundcube Webmail/0.7.2
Envelope-To: [contact@succun.su]
X-GMX-Antispam: 6 (nemesis text pattern profiler); Detail=V3;
X-GMX-Antivirus: 0 (no virus found)
X-UI-Filterresults: junk:10;V01:K0:cTyGX62U1Y4=:hLtH83M9K+aKC2DrzCpAkERWR4oM /uFviKdIDOE3j4gnp3+u1x4NtgR4wyOKkutHhoYHeL0057rlzdgI6DP8iQif/cGTuuw2cFMLl rkKUVRBp3dCp1g1d4iVkO/PGlVu/gEdtmhKdJwoE988a/c0lA5S0EDD4CRowcLFfdwHPXawx4 e5MY+TksNCgQ/2lMRa4RI/6bz42E1XV5x4nQfgzAh0SqmIBIZJAjNAwaqMo7GoAxeq+pA1wZe UCXVZ8q2whjR0k/rQ8BZfanuS5FIjcL63nLvCQxqWMhoh4DUd3ZUO+6DWo7+bPXnXs+Jwuo+H +0qmF1BlGy5eFqXiQE8IDFnfu3orM2IFUjTsIYWhhNNTCffWduIC5Oy5UwwZDCDrIBW0LNRF1 XxRMzrvP5IWEbWVvUdP54VaYWv9xV45Gv2WYCDcsoi8yB9Vbk/EiM5RvFUu1B9DfaWmGV1CHb G4WN2E2Uc/sILTHy7MfdVBt2nB3aF5TMCY82vYygByJrjq7gdpsW7MZr8KZ+/wqedVhOvpNDp smjqgZ4jvsseUtQ4S4nr6ClGmx3bCqQAPiXu9JXLSz+S0IXQ/i7fWQvotc+i6W0XUjHOTlAmM LjdCVHN3A0+gxhn91uRuBA1bC8HYmKE7OJAoAdtetho++1d9ckajG7SosR1JDc3zWXg4L0cwJ z1Drt1NM/lt1KmhNIWGK8VhrcBFDy4nyw4fcL3sed16YrKdDvaAKGbahFUdXcFP8E1AEfelD4 pVorD0sY6ftliX9i5H9I+kZY7S/4j2PVFztVIYCIuecQD8zwP5KmKhgs0AzCBvnqBHctbyoPQ /n+p89IfqjPo1aQatIv9Lqb6ugat6WM4cUGQagS0JnzNNQs0BgSnpkRiYJ2Pq7APIr7HnsJ0L qcy4uviXdnwMe/epgIdX6tNWO55YIfMcPQydpL5NnfbCleX06pV8Qq8orTGjKGfgYhQUzzuLB ZKPVEDyHbA0AceZIyK/axNx90unDHuUduVhhnEILfJBYAVAcRJI4NleQsfZQFzUoT7mgZhVFk WE5cyhEvEhq8Wd22uIyKyELmp3uBDCjVu1mzMkI+5662eesWoTFDjgNCoCqyFysUMefArVPfe WPZ2hnQtWmFh/24BslIpJXYPySKvo++UN8kxJj3NeAJ0NXohN4GTsb5S8fbNS8ZiROQev/Z91 +Kb1Z3scG6kFrdrKXassp9a7alqM00cbBCKD7G7m+DM8jT8jv1BxlbSw7iIJVow7kKTvYZJpN 6gcndPQqgcwhC3NeDgFn4Pgmdk3Gh6zbQ==