Author |
Message |
Nigel Tuffnel
Baiting Guru
Joined: 17 Mar 2009
Posts: 5821
Location: On a homestand
|
Posted:
Wed Mar 17, 2010 4:02 pm |
|
http://www.aa.aadvtange-reward.com
or perhaps this should be the post:
http://www.aa.aadvtange-reward.com/login.php?www.aa.com/aa/login/loginAccess.do?anchorEvent=false&uri=loginAccess.do&previousPage=/index_us.jhtml&previousPage=/index_us.jhtml&anchorEvent=false&uri=/login/loginAccess.do . This address displays when the cursor is placed over the email's legitimate American Airlines link.
The email states that bonuses will be applied to the recipients VISA or Mastercard. I do not know if this would be considered phishing and therefore not posted/killed here.
Quote: |
Delivered-To: [email protected]
Received: by 10.216.18.206 with SMTP id l56cs380561wel;
Wed, 17 Mar 2010 05:12:49 -0700 (PDT)
Received: by 10.114.6.33 with SMTP id 33mr22930waf.228.1268827968229;
Wed, 17 Mar 2010 05:12:48 -0700 (PDT)
Return-Path: <[email protected]>
Received: from sp249.f1.com.tw (sp29.goodon.com.tw [61.66.228.29])
by mx.google.com with ESMTP id 15si8590778iwn.108.2010.03.17.05.12.46;
Wed, 17 Mar 2010 05:12:48 -0700 (PDT)
Received-SPF: neutral (google.com: 61.66.228.29 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=61.66.228.29;
Authentication-Results: mx.google.com; spf=neutral (google.com: 61.66.228.29 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected]
Message-Id: <[email protected]>
Received: (qmail 30577 invoked from network); 17 Mar 2010 20:14:09 +0800
Received: from sp34.goodon.com.tw (HELO User) (61.66.228.34)
by sp249.f1.com.tw with SMTP; 17 Mar 2010 20:14:00 +0800
X-Nat-Received: from [213.123.250.25]:13168 [ident-empty]
by sp34.goodon.com.tw with TPROXY id 1268830600.10374
Reply-To: <[email protected]>
From: "American Airlines"<[email protected]>
Subject: News 2010: AAdvantage News And Information
Date: Wed, 17 Mar 2010 12:12:39 -0000
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_00CF_01C2A9A6.6A7DA248"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
This is Jason R. from the AAdvantage(R) Operations Department at American Airlines
There's so much happening at the American Airlines AAdvantage(R) Program. See what we are doing as an organization and how it affects you. Learn about our organization-from the day-to-day operations that touch your household to our strategic direction and plans for moving forward.
As American Airlines consumer, please help us with your opinion about our services, in a survey. This survey, takes you only 5-10 minutes and give a gift worth $ 50.00 reward and earn 25.000 bonus miles, please fill out a survey to tell us your opinion about our service online.
Please submit the survey request and allow us 24h in order to process it.
A survey can be delayed for a variety of reason. For exemple (invalid records or applying after the deadline). The good news is that American Airlines AAdvantage(R) Program will make this reward directly to your visa and/or mastercard.
Your $ 50.00 and 25.000 miles bonus code is: AA-1028917109
To access the form for your survey, please continue to our secure server form at: https://www.aa.com/aadvantage-program/survey
Thank you very much for your help and your patient and hope you will enjoy the American Airlines reward program in the future.
Regards,
Jason R.
AAdvantage(R) - American Airlines Specialist
|
One year registration, March 17th.
Quote: |
Address lookup
canonical name sbs-p11p.asbs.yahoodns.net.
aliases www.aa.aadvtange-reward.com
p11-pprr.geo.premiumservices.yahoo.com
addresses 98.136.50.138
69.147.83.187
69.147.83.188
Domain Whois record
Queried whois.internic.net with "dom aadvtange-reward.com"...
Domain Name: AADVTANGE-REWARD.COM
Registrar: MELBOURNE IT, LTD. D/B/A INTERNET NAMES WORLDWIDE
Whois Server: whois.melbourneit.com
Referral URL: http://www.melbourneit.com
Name Server: YNS1.YAHOO.COM
Name Server: YNS2.YAHOO.COM
Status: clientTransferProhibited
Updated Date: 17-mar-2010
Creation Date: 17-mar-2010
Expiration Date: 17-mar-2011
>>> Last update of whois database: Wed, 17 Mar 2010 12:37:38 UTC <<<
Queried whois.melbourneit.com with "aadvtange-reward.com"...
Domain Name.......... aadvtange-reward.com
Creation Date........ 2010-03-17
Registration Date.... 2010-03-17
Expiry Date.......... 2011-03-17
Organisation Name.... Tien Pham
Organisation Address. PO Box 61359
Organisation Address.
Organisation Address. Sunnyvale
Organisation Address. 94088
Organisation Address. CA
Organisation Address. US
Admin Name........... Admin PrivateRegContact
Admin Address........ PO Box 61359
Admin Address........
Admin Address........ Sunnyvale
Admin Address........ 94088
Admin Address........ CA
Admin Address........ US
Admin Email.......... [email protected]
Admin Phone.......... +1.5105952002
Admin Fax............
Tech Name............ TECH PrivateRegContact
Tech Address......... PO Box 61359
Tech Address.........
Tech Address......... Sunnyvale
Tech Address......... 94088
Tech Address......... CA
Tech Address......... US
Tech Email........... [email protected]
Tech Phone........... +1.5105952002
Tech Fax.............
Name Server.......... yns1.yahoo.com
Name Server.......... yns2.yahoo.com
Network Whois record
Queried whois.arin.net with "98.136.50.138"...
OrgName: Yahoo! Inc.
OrgID: YHOO
Address: 701 First Ave
City: Sunnyvale
StateProv: CA
PostalCode: 94089
Country: US
NetRange: 98.136.0.0 - 98.139.255.255
CIDR: 98.136.0.0/14
NetName: A-YAHOO-US9
NetHandle: NET-98-136-0-0-1
Parent: NET-98-0-0-0-0
NetType: Direct Allocation
NameServer: NS1.YAHOO.COM
NameServer: NS2.YAHOO.COM
NameServer: NS3.YAHOO.COM
NameServer: NS4.YAHOO.COM
NameServer: NS5.YAHOO.COM
Comment:
RegDate: 2007-12-07
Updated: 2009-05-18
RTechHandle: NA258-ARIN
RTechName: Netblock Admin
RTechPhone: +1-408-349-3300
RTechEmail: [email protected]
RAbuseHandle: NETWO857-ARIN
RAbuseName: Network Abuse
RAbusePhone: +1-408-349-3300
RAbuseEmail: [email protected]
OrgAbuseHandle: NETWO857-ARIN
OrgAbuseName: Network Abuse
OrgAbusePhone: +1-408-349-3300
OrgAbuseEmail: [email protected]
OrgTechHandle: NA258-ARIN
OrgTechName: Netblock Admin
OrgTechPhone: +1-408-349-3300
OrgTechEmail: [email protected]
# ARIN WHOIS database, last updated 2010-03-16 20:00
|
|
_________________ x3 - SINCE YOU POSTED THIS BULLSHIT (To Scamwarners!) HAVE YOU EVER SEEN ANYONE THAT COMPLAIN ABOUT LOSING MONEY?
x 44 x2 x5 x69 x562 x49 x113 x31 x8 x10 x2 x94 x6 x2 x129 x2 x4 x10 x71 x15 x68 x3 x4 x8 x3 x4 x 3 x3 x4 x6 x2 x4 x2 x2 x2 x2 |
|
|
|
Caligula
Baiting Guru
Joined: 13 May 2009
Posts: 4774
Location: Growing old
|
Posted:
Wed Mar 17, 2010 4:42 pm |
|
|
|
|
Artemis
Baiting Guru
Joined: 19 Feb 2006
Posts: 31267
Location: Lower Elements
|
Posted:
Wed Mar 17, 2010 5:29 pm |
|
It does look like a phishing site (and I also recall seeing something similar)
It can be reported here http://www.antiphishing.org |
_________________ Total kills 21667 + x 5 x10
|
|
|
|
Ima Baeder
Baiting Guru
Joined: 03 May 2007
Posts: 18313
|
Posted:
Mon Mar 29, 2010 4:27 am |
|
phishing, moved here. |
_________________ 348 Fake Sites killed
x 100 2 Years |
|
|
|
|
|
View next topic
View previous topic
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
|