From: \"American Airlines\" <account@aa.com>; Subject: Your order #181437 has been completed - Scamalot

Seen a Scammer? Report Them!

Seen a scammer? Been caught out? Let the world know so they don't get burned. Add information if you see one that's already been logged - scammers move quickly and change details often to avoid detection. Details you log here will be in major search engines within an hour or two.

Please Like, Share, Tweet etc. to spread the word.
Scam Report Type: at  
Scam ReporterScam Tips Received
No Name
Southampton, Southampton, United Kingdom
2012-10-05 06:02:37
Business Venture Scam
From: "American Airlines" <account@aa.com>; Subject: Your order #181437 has been completed
 Scammer
  Information
Email Address:
   account@aa.com
Attempted distribution of possible malware- DO NOT OPEN ATTACHMENT

scam email with possible malicious attachment supposedly sent by American Airlines (account@aa.com)Return-Path: www@s223.loopia.se
Email originating from host s84.loopia.se ([194.9.94.43])
by s87.loopia.se (Postfix) with SMTP id D8EBF2220DFE


Received: from s87.loopia.se ([194.9.95.113]) by BAY0-MC3-F29.Bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4900);
Thu, 4 Oct 2012 09:52:32 -0700
Received: from s87.loopia.se (localhost [127.0.0.1])
by s87.loopia.se (Postfix) with ESMTP id 571412221102
for ********; Thu, 4 Oct 2012 18:52:04 +0200 (CEST)
X-Virus-Scanned: amavisd-new at outgoing-smtp.loopia.se
X-Spam-Flag: NO
X-Spam-Score: 4.506
X-Spam-Level: ****
X-Spam-Status: No, score=4.506 tagged_above=-999 required=15
tests=[FSL_HELO_NON_FQDN_1=2.361, HELO_NO_DOMAIN=0.938,
HTML_MESSAGE=0.001, HTML_MIME_NO_HTML_TAG=0.001, MIME_HTML_ONLY=2.199,
MISSING_MID=0.552, RP_MATCHES_RCVD=-1.546] autolearn=disabled
Received: from s87.loopia.se ([127.0.0.1])
by s87.loopia.se (s87.loopia.se [127.0.0.1]) (amavisd-new, port 10024)
with LMTP id itpqFVEzugZW for *********;
Thu, 4 Oct 2012 18:52:02 +0200 (CEST)
Received: from s84 (s84.loopia.se [194.9.94.43])
by s87.loopia.se (Postfix) with SMTP id D8EBF2220DFE
for ************; Thu, 4 Oct 2012 18:51:32 +0200 (CEST)
Date: Thu, 04 Oct 2012 18:42:37 +0200
Subject: Your order #181437 has been completed
To:**************
From: \"American Airlines\"
X-Mailer: SuperMail-2
Reply-To: \"American Airlines\"
Mime-Version: 1.0
Content-Type:multipart/mixed;boundary=\"----------1349368957506DBC7D047BD\"
Return-Path: www@s223.loopia.se
Message-ID:
X-OriginalArrivalTime: 04 Oct 2012 16:52:32.0904 (UTC) FILETIME=[A5F5B880:01CDA250]

------------1349368957506DBC7D047BD
Content-Type:text/html;
Content-Transfer-Encoding: quoted-printable

Dear Customer,



E-TICKET NUMBER / 2 143 1315245290 2

SEAT / 51A/ZONE 3

DATE / TIME 27 OCTOBER, 2012, 10:40 AM

ARRIVING / Plano

FORM OF PAYMENT / CC

TOTAL PRICE / 294.94 USD

REF / LE7658 ST / OK

BAG / 6PC



Your ticket is attached.

You can print your ticket.



Thank you for using our airline company services.

American Airlines.


------------1349368957506DBC7D047BD
Content-Type: application/octet-stream;name=\"AA_Ticket_Print_Document.zip\"
Content-Transfer-Encoding:base64
Content-Disposition:attachment;filename=\"AA_Ticket_Print_Document.zip\"
 Got more information on this Scam? Add to Report