Kmart [email protected]

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

Posted: Sat Jul 12, 2014 10:03 pm

Appears to be another ENOM account:
http://floumio.com/admin/index.php
Goes to an unsecured Login Page.

Quote:

Kmart<[email protected]> Wed, Jul 9, 2014 at 2:06 AM
Reply-To: [email protected]
To: <CLIPPED>
Reply | Reply to all | Forward | Print | Delete | Show original
Hello CLIPPED
Complete a Kmart Survey & Receive a $100.00 Gift Card! Are you ready for the extra deals and savings at Kmart? Will you be buying online or in- store? Share your opinions and experiences by completing the survey and claim a $100.00 Kmart gift card! All you need to do is
Click Here
and complete the quick survey to claim a gift card! *Participation Required

Thanks again!
RewardsFlow, LLC
P.O. Box 3292, New York, NY 10163

HEADER:

Quote:

Delivered-To: CLIPPED
Received: by 10.220.144.209 with SMTP id a17csp77064vcv;
Fri, 11 Jul 2014 20:37:27 -0700 (PDT)
X-Received: by 10.236.3.10 with SMTP id 10mr4862958yhg.126.1405136247338;
Fri, 11 Jul 2014 20:37:27 -0700 (PDT)
Return-Path: <[email protected]>
Received: from floumio.com (vs202.floumio.com. [184.82.134.202])
by mx.google.com with ESMTP id r41si8272955yhf.56.2014.07.11.20.37.26
for <CLIPPED>;
Fri, 11 Jul 2014 20:37:26 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 184.82.134.202 as permitted sender) client-ip=184.82.134.202;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 184.82.134.202 as permitted sender) [email protected];
dkim=neutral (body hash did not verify) header.i=@
Received: by floumio.com (Postfix, from userid 0)
id 230C13F0658; Sat, 12 Jul 2014 03:37:31 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=floumio.com;
s=default; t=1405136251;
bh=L8VHT8djzen6vhFQMo+fInawxL50GMPc3KEehDkB1ZM=;
h=To:Subject:Message-ID:Date:From:Reply-To:MIME-Version:
Content-Type:Content-Transfer-Encoding;
b=E0c+l9UTlEA+Y2FBtRPDJd+6ZOsMed38ZMqwzLkAtI3ZPtqxvsgHlw3sSRZ9g9vRq
BMeEwUKEHIfB0ApPIur1OGpwdMBrbkQSR+FVQ99bC22y75NImH2as5zInfuvKpKKTA
vei7fE8BMIJGT5+Xdh/n1utlGBlO5rrPpxQWlVs0=
To: <CLIPPED>
Subject: Hi CLIPPED
X-PHP-Originating-Script: 48:email.php
Message-ID: <[email protected]>
Date: Wed, 09 Jul 2014 06:06:18 +0000
From: "Kmart" <[email protected]>
Reply-To: [email protected]
MIME-Version: 1.0
X-Mailer-LID: 24
X-Mailer-RecptId: 2659456
X-Mailer-SID: 25
X-Mailer-Sent-By: 1
Content-Type: multipart/alternative; charset="UTF-8"; boundary="b1_e856734f8f1c42453dca797bdfcd6123"
Content-Transfer-Encoding: 8bit

DOMAIN DOSSIER REPORT:

Quote:

[email protected] is an email address.
You can investigate this address with the Email Dossier
Domain Dossier will continue with floumio.com.
Address lookup
canonical name floumio.com.
aliases
addresses 184.22.130.125

Domain Whois record
Queried whois.internic.net with "dom floumio.com"...

Domain Name: FLOUMIO.COM
Registrar: ENOM, INC.
Whois Server: whois.enom.com
Referral URL: http://www.enom.com
Name Server: DNS1.REGISTRAR-SERVERS.COM
Name Server: DNS2.REGISTRAR-SERVERS.COM
Name Server: DNS3.REGISTRAR-SERVERS.COM
Name Server: DNS4.REGISTRAR-SERVERS.COM
Name Server: DNS5.REGISTRAR-SERVERS.COM
Status: clientTransferProhibited
Updated Date: 17-mar-2014
Creation Date: 17-mar-2014
Expiration Date: 17-mar-2015

>>> Last update of whois database: Sat, 12 Jul 2014 21:55:12 UTC <<<

Queried whois.enom.com with "floumio.com"...

Domain Name: FLOUMIO.COM
Registry Domain ID: 1850780220_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.enom.com
Registrar URL: www.enom.com
Updated Date: 2014-03-17 02:06:03Z
Creation Date: 2014-03-17 09:06:00Z
Registrar Registration Expiration Date: 2015-03-17 09:06:00Z
Registrar: ENOM, INC.
Registrar IANA ID: 48
Registrar Abuse Contact Email: [email protected]
Registrar Abuse Contact Phone: +1.4252744500
Reseller: NAMECHEAP.COM
Domain Status: clientTransferProhibited
Registry Registrant ID:
Registrant Name: WHOISGUARD PROTECTED
Registrant Organization: WHOISGUARD, INC.
Registrant Street: P.O. BOX 0823-03411
Registrant City: PANAMA
Registrant State/Province: PANAMA
Registrant Postal Code: 00000
Registrant Country: PA
Registrant Phone: +507.8365503
Registrant Phone Ext:
Registrant Fax: +51.17057182
Registrant Fax Ext:
Registrant Email: [email protected]
Registry Admin ID:
Admin Name: WHOISGUARD PROTECTED
Admin Organization: WHOISGUARD, INC.
Admin Street: P.O. BOX 0823-03411
Admin City: PANAMA
Admin State/Province: PANAMA
Admin Postal Code: 00000
Admin Country: PA
Admin Phone: +507.8365503
Admin Phone Ext:
Admin Fax: +51.17057182
Admin Fax Ext:
Admin Email: [email protected]
Registry Tech ID:
Tech Name: WHOISGUARD PROTECTED
Tech Organization: WHOISGUARD, INC.
Tech Street: P.O. BOX 0823-03411
Tech City: PANAMA
Tech State/Province: PANAMA
Tech Postal Code: 00000
Tech Country: PA
Tech Phone: +507.8365503
Tech Phone Ext:
Tech Fax: +51.17057182
Tech Fax Ext:
Tech Email: [email protected]
Name Server: DNS1.REGISTRAR-SERVERS.COM
Name Server: DNS2.REGISTRAR-SERVERS.COM
Name Server: DNS3.REGISTRAR-SERVERS.COM
Name Server: DNS4.REGISTRAR-SERVERS.COM
Name Server: DNS5.REGISTRAR-SERVERS.COM
DNSSEC: unSigned
URL of the ICANN WHOIS Data Problem Reporting System: http://wdprs.internic.net/
Last update of WHOIS database: 2014-03-17 02:06:03Z

Network Whois record
Whois query for 184.22.130.125 failed: CouldNotResolveServerName

Queried whois.arin.net with "n 184.22.130.125"...

NetRange: 184.22.0.0 - 184.22.255.255
CIDR: 184.22.0.0/16
OriginAS: AS21788
NetName: HOSTNOC-9BLK
NetHandle: NET-184-22-0-0-1
Parent: NET-184-0-0-0-0
NetType: Direct Allocation
RegDate: 2010-12-22
Updated: 2014-06-12
Ref: http://whois.arin.net/rest/net/NET-184-22-0-0-1

OrgName: Network Operations Center Inc.
OrgId: NOC
Address: PO Box 591
City: Scranton
StateProv: PA
PostalCode: 18501-0591
Country: US
RegDate: 2001-04-04
Updated: 2014-07-08
Comment: Abuse Dept: [email protected]
Ref: http://whois.arin.net/rest/org/NOC

ReferralServer: rwhois://rwhois.hostnoc.net:4321

OrgTechHandle: IPADM700-ARIN
OrgTechName: IPADMIN
OrgTechPhone: +1-844-311-2571
OrgTechEmail: [email protected]
OrgTechRef: http://whois.arin.net/rest/poc/IPADM700-ARIN

OrgNOCHandle: IPADM700-ARIN
OrgNOCName: IPADMIN
OrgNOCPhone: +1-844-311-2571
OrgNOCEmail: [email protected]
OrgNOCRef: http://whois.arin.net/rest/poc/IPADM700-ARIN

OrgAbuseHandle: IPADM700-ARIN
OrgAbuseName: IPADMIN
OrgAbusePhone: +1-844-311-2571
OrgAbuseEmail: [email protected]
OrgAbuseRef: http://whois.arin.net/rest/poc/IPADM700-ARIN

-- end --
URL for this output | return to CentralOps.net, a service of Hexillion

CallSend SMSAdd to SkypeYou'll need Skype Credit
Free via Skype

Willing to kill if/when the time comes. just show me the way.

Thank You

Posted: Sat Jul 12, 2014 11:30 pm

The email came from somewhere close to the domain's mailserver, but it doesn't look like AFF to me.

Posted: Sun Jul 13, 2014 1:19 am

I believe this is spam with an affiliate to harvest email addresses. The $100 gift card is bait to get you to fill out an online form and if you read the fine print you are give the spammers permission to email you special offers. Afterwards your email account will be flooded with spam.

I asked BA to forward the email to me so that I can check and make sure.

Posted: Sun Jul 13, 2014 11:39 am

You've got mail....... Cool

Posted: Sun Jul 13, 2014 1:00 pm

^^ Got it.

As suspected this is spam used to harvest email addresses so you can get more spam. Since this is not AFF this thread will be marked n/a and can be moved offline.

Posted: Sun Jul 13, 2014 1:24 pm

Ok, thanks for checking it out.

Posted: Sun Jul 13, 2014 6:31 pm

Moving to Misc Scams