By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here. - Internet Anti-Fraud Center - now open!

View next topic
View previous topic
Post new topicReply to topic
Author Message
Nigel Tuffnel
Baiting Guru

Joined: 17 Mar 2009
Posts: 5820
Location: On a homestand

PostPosted: Wed Mar 17, 2010 4:02 pm Reply with quoteBack to top

or perhaps this should be the post: . This address displays when the cursor is placed over the email's legitimate American Airlines link.

The email states that bonuses will be applied to the recipients VISA or Mastercard. I do not know if this would be considered phishing and therefore not posted/killed here.

Delivered-To: [email protected]
Received: by with SMTP id l56cs380561wel;
Wed, 17 Mar 2010 05:12:49 -0700 (PDT)
Received: by with SMTP id 33mr22930waf.228.1268827968229;
Wed, 17 Mar 2010 05:12:48 -0700 (PDT)
Return-Path: <[email protected]>
Received: from ( [])
by with ESMTP id 15si8590778iwn.108.2010.;
Wed, 17 Mar 2010 05:12:48 -0700 (PDT)
Received-SPF: neutral ( is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=;
Authentication-Results:; spf=neutral ( is neither permitted nor denied by best guess record for domain of [email protected]) [email protected]
Message-Id: <[email protected]>
Received: (qmail 30577 invoked from network); 17 Mar 2010 20:14:09 +0800
Received: from (HELO User) (
by with SMTP; 17 Mar 2010 20:14:00 +0800
X-Nat-Received: from []:13168 [ident-empty]
by with TPROXY id 1268830600.10374
Reply-To: <[email protected]>
From: "American Airlines"<[email protected]>
Subject: News 2010: AAdvantage News And Information
Date: Wed, 17 Mar 2010 12:12:39 -0000
MIME-Version: 1.0
Content-Type: multipart/mixed;
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

This is Jason R. from the AAdvantage(R) Operations Department at American Airlines

There's so much happening at the American Airlines AAdvantage(R) Program. See what we are doing as an organization and how it affects you. Learn about our organization-from the day-to-day operations that touch your household to our strategic direction and plans for moving forward.

As American Airlines consumer, please help us with your opinion about our services, in a survey. This survey, takes you only 5-10 minutes and give a gift worth $ 50.00 reward and earn 25.000 bonus miles, please fill out a survey to tell us your opinion about our service online.
Please submit the survey request and allow us 24h in order to process it.
A survey can be delayed for a variety of reason. For exemple (invalid records or applying after the deadline). The good news is that American Airlines AAdvantage(R) Program will make this reward directly to your visa and/or mastercard.
Your $ 50.00 and 25.000 miles bonus code is: AA-1028917109
To access the form for your survey, please continue to our secure server form at:

Thank you very much for your help and your patient and hope you will enjoy the American Airlines reward program in the future.

Jason R.
AAdvantage(R) - American Airlines Specialist

One year registration, March 17th.

Address lookup
canonical name

Domain Whois record
Queried with "dom"...
Whois Server:
Referral URL:
Name Server: YNS1.YAHOO.COM
Name Server: YNS2.YAHOO.COM
Status: clientTransferProhibited
Updated Date: 17-mar-2010
Creation Date: 17-mar-2010
Expiration Date: 17-mar-2011

>>> Last update of whois database: Wed, 17 Mar 2010 12:37:38 UTC <<<
Queried with ""...
Domain Name..........
Creation Date........ 2010-03-17
Registration Date.... 2010-03-17
Expiry Date.......... 2011-03-17
Organisation Name.... Tien Pham
Organisation Address. PO Box 61359
Organisation Address.
Organisation Address. Sunnyvale
Organisation Address. 94088
Organisation Address. CA
Organisation Address. US

Admin Name........... Admin PrivateRegContact
Admin Address........ PO Box 61359
Admin Address........
Admin Address........ Sunnyvale
Admin Address........ 94088
Admin Address........ CA
Admin Address........ US
Admin Email.......... [email protected]
Admin Phone.......... +1.5105952002
Admin Fax............

Tech Name............ TECH PrivateRegContact
Tech Address......... PO Box 61359
Tech Address.........
Tech Address......... Sunnyvale
Tech Address......... 94088
Tech Address......... CA
Tech Address......... US
Tech Email........... [email protected]
Tech Phone........... +1.5105952002
Tech Fax.............
Name Server..........
Name Server..........
Network Whois record
Queried with ""...
OrgName: Yahoo! Inc.
Address: 701 First Ave
City: Sunnyvale
StateProv: CA
PostalCode: 94089
Country: US

NetRange: -
NetName: A-YAHOO-US9
NetHandle: NET-98-136-0-0-1
Parent: NET-98-0-0-0-0
NetType: Direct Allocation
NameServer: NS1.YAHOO.COM
NameServer: NS2.YAHOO.COM
NameServer: NS3.YAHOO.COM
NameServer: NS4.YAHOO.COM
NameServer: NS5.YAHOO.COM
RegDate: 2007-12-07
Updated: 2009-05-18

RTechHandle: NA258-ARIN
RTechName: Netblock Admin
RTechPhone: +1-408-349-3300
RTechEmail: [email protected]

RAbuseHandle: NETWO857-ARIN
RAbuseName: Network Abuse
RAbusePhone: +1-408-349-3300
RAbuseEmail: [email protected]

OrgAbuseHandle: NETWO857-ARIN
OrgAbuseName: Network Abuse
OrgAbusePhone: +1-408-349-3300
OrgAbuseEmail: [email protected]

OrgTechHandle: NA258-ARIN
OrgTechName: Netblock Admin
OrgTechPhone: +1-408-349-3300
OrgTechEmail: [email protected]

# ARIN WHOIS database, last updated 2010-03-16 20:00


Closed lad accounts x 44 United Arab Emirates x2 Burkina Faso x5 Togo x69 United Kingdom x562 Benin x49 United States x113 Senegal x31 United Nations x8 South Africa x10 Ivory Coast x2 Malaysia x94 Canada x6 x2 Ghana x129 cameroon x2 Cambodia Flag x4 Spain x10 x71 Switzerland x15 Nigeria x68 Thailand x3 Italy x4 Netherlands x8 Russia x3 China x4 Malta x 3 Filipino flag x3 Panama Germany x4 Taiwan Iraq Flag Ireland x6 Hong Kong x2 Cayman Islands x4 Isle Of Man x2 Japan Belgium Comorian islands Guinea Bissau Ukraine Indonesia x2 Luxembourg x2 Saudi Arabia Mugu Reseller x2 Easter 2015 Whip Jack Boot
View user's profileSend private message
Baiting Guru

Joined: 13 May 2009
Posts: 4774
Location: Growing old

PostPosted: Wed Mar 17, 2010 4:42 pm Reply with quoteBack to top

I think I've seen that one before here on eater. Don't know what ever happened to it.

United KingdomUnited StatesMalaysiaNetherlandsNigeriaIvory CoastBeninFranceChinaTogoSwitzerlandCanadacameroonFlag MonacoSouth AfricaRussiaUnited Nations x 600+ (gave up counting long time ago)
Mugu Reseller x3
Cellphone Closed lad accounts Mortar Nurse Nastys Audi TT Goat Easter Egg Purple Flower Mc Fry
Going Gold?
Post scripts at scamwarners!
Kill a fake site today!
View user's profileSend private messageSkype Name
Baiting Guru

Joined: 19 Feb 2006
Posts: 31268
Location: Lower Elements

PostPosted: Wed Mar 17, 2010 5:29 pm Reply with quoteBack to top

It does look like a phishing site (and I also recall seeing something similar)

It can be reported here

Total kills 21667 + Mugu Reseller x 5 Mortar x10
Star Purple Flower Easter Egg Easter 2015
View user's profileSend private message
Ima Baeder
Baiting Guru

Joined: 03 May 2007
Posts: 18314

PostPosted: Mon Mar 29, 2010 4:27 am Reply with quoteBack to top

phishing, moved here.

348 Fake Sites killed United StatesUnited KingdomUnited NationsMaltaNigeriaGhanaBeninGermanySouth AfricaRussiaTogoMalaysiaEuropean UnionJapanIvory CoastSpainFranceSwitzerlandChinaCanadaItalyThailand

Star Mugu Reseller Mortar Closed lad accounts x 100 Sand Timer 2 Years Pretty Rose Mc Fry Mc Fry Nurse Nastys Audi TT Goat Flying Monkey Easter Egg 2011
View user's profileSend private message
Display posts from previous:      
Post new topicReply to topic

 Jump to:   

View next topic
View previous topic
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum

E-Mail Header Analysis

All Content © 2003 -
Powered by phpBB © 2001, 2002 phpBB Group :S5: FI Theme :: All times are GMT