Help | Site Map
| Text size: - +
SomaCat
SpamCop v 640 Copyright (C) 1998-2006, IronPort Systems, Inc. All rights reserved.
Here is your TRACKING URL - it may be saved for future reference:
http://www.spamcop.net/sc?id=z1508410078zf61289a4af7346ee4c3dc3300582b141z
Skip to Reports
X-Persona: <SNL>
Return-Path: <SRS0=9NMS=P4=serviceemail.citibank.com=Citibank.Service@bounce.secureserver.net>
X-Spam-Checker-Version: SpamAssassin 3.2.2 (2007-07-23) on e.spam.sonic.net
X-Spam-Level: *
X-Spam-Status: No, score=1.4 required=5.0 tests=DCC_CHECK,DKIM_POLICY_SIGNSOME,
	HTML_IMAGE_RATIO_08,HTML_MESSAGE autolearn=disabled version=3.2.2
Received: from c.mx.sonic.net (c.mx.sonic.net [64.142.100.46])
	by eth0.a.lds.sonic.net (8.13.8.Beta0-Sonic/8.13.7) with ESMTP id lA32A0Vj019377
	for <x>; Fri, 2 Nov 2007 19:10:00 -0700
Received: from smtp02-02.prod.mesa1.secureserver.net (smtp02-02.prod.mesa1.secureserver.net [64.202.189.6])
	by c.mx.sonic.net (8.13.8.Beta0-Sonic/8.13.7) with ESMTP id lA329wTC028909
	for <x>; Fri, 2 Nov 2007 19:10:00 -0700
Received: (qmail 20582 invoked by uid 1000); 3 Nov 2007 02:09:58 -0000
Delivered-To: x
Received: (qmail 20580 invoked from network); 3 Nov 2007 02:09:58 -0000
Received: from unknown (HELO p3presmtp01-08.prod.phx3.secureserver.net) ([208.109.80.157])
          (envelope-sender <Citibank.Service@serviceemail.citibank.com>)
          by smtp02-02.prod.mesa1.secureserver.net (qmail-1.03) with SMTP
          for <x>; 3 Nov 2007 02:09:58 -0000
Received: (qmail 11678 invoked from network); 3 Nov 2007 02:09:56 -0000
Received: from relay.bridgetrack.com ([216.250.51.63])
          (envelope-sender <Citibank.Service@serviceemail.citibank.com>)
          by p3presmtp01-08.prod.phx3.secureserver.net (qmail-ldap-1.03) with SMTP
          for <x>; 3 Nov 2007 02:09:53 -0000
Received: from mail.bridgetrack.com (relay2.bridgetrack.com [216.250.59.4])
	by relay.bridgetrack.com (Postfix) with SMTP id 6227F299DA9
	for <x>; Fri,  2 Nov 2007 23:10:53 -0400 (EDT)
From: "Citibank - Service" <Citibank.Service@serviceemail.citibank.com>
To: "x" <x>
Subject: Get FREE Paperless Statements from Citibank.
Date: Fri, 02 Nov 2007 22:09:53 -0400
Message-ID: <2007_____________-c68@mail.bridgetrack.com>
BT_MsgID: <8D41D26261034234B289F1CFC0784B53>
BT_MailingID: <1820>
MIME-Version: 1.0
X-Content-Type: multipart/alternative;
	boundary="--=697D49AB3894444CB085_C01D_69C7_96F1"
X-Sonic-SB-IP-RBLs: IP RBLs .
X-Antivirus: AVG for E-mail 7.5.503 [269.15.19/1106]
Content-Type: text/plain
X-SpamCop-note: Converted to text/plain by SpamCop (outlook/eudora hack)
View entire message
Parsing header:
0: Received: from c.mx.sonic.net (c.mx.sonic.net [64.142.100.46]) by eth0.a.lds.sonic.net (8.13.8.Beta0-Sonic/8.13.7) with ESMTP id lA32A0Vj019377 for <x>; Fri, 2 Nov 2007 19:10:00 -0700
Hostname verified: c.mx.sonic.net
sonic.net received mail from sonic.net ( 64.142.100.46 )

1: Received: from smtp02-02.prod.mesa1.secureserver.net (smtp02-02.prod.mesa1.secureserver.net [64.202.189.6]) by c.mx.sonic.net (8.13.8.Beta0-Sonic/8.13.7) with ESMTP id lA329wTC028909 for <x>; Fri, 2 Nov 2007 19:10:00 -0700
Hostname verified: smtp02-02.prod.mesa1.secureserver.net
sonic.net received mail from secureserver.net ( 64.202.189.6 )

2: Received: from unknown (HELO p3presmtp01-08.prod.phx3.secureserver.net) ([208.109.80.157]) (envelope-sender <Citibank.Service@serviceemail.citibank.com>) by smtp02-02.prod.mesa1.secureserver.net (qmail-1.03) with SMTP for <x>; 3 Nov 2007 02:09:58 -0000
Hostname verified: p3presmtp01-08.prod.phx3.secureserver.net
secureserver.net received mail from secureserver.net ( 208.109.80.157 )

3: Received: from relay.bridgetrack.com ([216.250.51.63]) (envelope-sender <Citibank.Service@serviceemail.citibank.com>) by p3presmtp01-08.prod.phx3.secureserver.net (qmail-ldap-1.03) with SMTP for <x>; 3 Nov 2007 02:09:53 -0000
Hostname verified: relay.bridgetrack.com
secureserver.net received mail from sending system 216.250.51.63

4: Received: from mail.bridgetrack.com (relay2.bridgetrack.com [216.250.59.4]) by relay.bridgetrack.com (Postfix) with SMTP id 6227F299DA9 for <x>; Fri, 2 Nov 2007 23:10:53 -0400 (EDT)
Hostname verified: relay2.bridgetrack.com
Possible forgery. Supposed receiving system not associated with any of your mailhosts
Will not trust anything beyond this header
Tracking message source: 216.250.51.63:
Routing details for 216.250.51.63
[refresh/show] Cached whois for 216.250.51.63 : domains@spidergate.net
Using abuse net on domains@spidergate.net
No abuse net record for spidergate.net
Using default postmaster contacts postmaster@spidergate.net
Message is 18 hours old
216.250.51.63 not listed in dnsbl.njabl.org
216.250.51.63 not listed in dnsbl.njabl.org
216.250.51.63 not listed in cbl.abuseat.org
216.250.51.63 not listed in dnsbl.sorbs.net
216.250.51.63 not listed in accredit.habeas.com
216.250.51.63 not listed in plus.bondedsender.org
216.250.51.63 not listed in iadb.isipp.com
Finding links in message body
Parsing text part
Resolving link obfuscation
   http://citibank.com
   Host citibank.com (checking ip) = 192.193.226.190
   host 192.193.226.190 (getting name) = citibank.com.
   Host citibank.com (checking ip) = 192.193.226.190
   host 192.193.226.190 = citibank.com (cached)
   http://citibankonline.com
   Host citibankonline.com (checking ip) = 192.193.187.60
   host 192.193.187.60 (getting name) = accounts.da-us.citibank.com.
   Host citibankonline.com (checking ip) = 192.193.187.60
   host 192.193.187.60 = accounts.da-us.citibank.com (cached)
Tracking link: http://citibankonline.com/
No recent reports, no history available
Resolves to 192.193.187.60
Routing details for 192.193.187.60
Report routing for 192.193.187.60: pwong@mail.citicorp.com
pwong@mail.citicorp.com redirects to emailspoof@citigroup.com
emailspoof@citigroup.com bounces (6 sent : 6 bounces)
Tracking link: http://citibank.com/
No recent reports, no history available
Resolves to 192.193.226.190
Routing details for 192.193.226.190
Report routing for 192.193.226.190: pwong@mail.citicorp.com
pwong@mail.citicorp.com redirects to emailspoof@citigroup.com
emailspoof@citigroup.com bounces (6 sent : 6 bounces)

Please make sure this email IS spam:
From: "Citibank - Service" <Citibank.Service@serviceemail.citibank.com> (Get FREE Paperless Statements from Citibank.)
 Having trouble viewing this
  e-mail? Click here
View full message

Report Spam to:

Re: 216.250.51.63 (Administrator of network where email originates)
To: postmaster@spidergate.net (Notes)

Re: Forwarded Spam (User defined recipient)
To: SpamReport@CustomerFromHell.com (Notes)

Re: User Notification (Notes)
To:

Additional notes (optional - max 2000 characters):

ATTENTION: Report only those e-mail addresses and web sites that you think your spammer has used. Avoid checking any boxes left empty unless you know that your spammer has used the addresses or sites thus identified. Each false report that you submit means wasted time for a network administrator, so take care. The last thing SpamCop wants are network administrators so accustomed to false claims that they no longer take these spam reports seriously.








Comments for:postmaster@spidergate.net (216.250.51.63)

Return to report

Comments for:SpamReport@CustomerFromHell.com (Forwarded Spam)

Return to report

Comments for:User Notification ()

Return to report