Another malicious spam run, although I don't have a sample of the actual spam this time.. however, the payload is at [donotclick]online-gaminatore.ru:8080/forum/showthread.php?page=5fa58bce769e5c2c (report here), hosted on the following IPs:
These fake "Federal Tax Transfer" spams lead to malware on retweetadministrator.org:Date: Thu, 26 Jul 2012 20:56:10 +0530
From: "Internal Revenue Service" [alerts@irs.gov]
Subject: Federal Tax transfer returned
Your federal Tax payment (ID: 632004160993), recently from your checking account was rejected by the your financial institution.
Canceled Tax transfer
Tax Transaction ID: 632004160993
Rejection Reason See details in the report below
Tax Transaction Report tax_report_632004160993.doc (Microsoft Word Document)
Internal Revenue Service, Metro Plex 1, 8401 Corporate Drive, Suite 300, Landover, MD 20785
==========
Date: Thu, 26 Jul 2012 20:55:41 +0530
From: "Internal Revenue Service" [support@irs.gov]
Subject: Rejected Federal Tax transaction
Your Tax payment (ID: 766644379032), recently initiated from your checking account was rejected by the your financial institution.
Rejected Tax transfer
Tax Transaction ID: 766644379032
Reason of rejection See details in the report below
FederalTax Transaction Report tax_report_766644379032.doc (Microsoft Word Document)
Internal Revenue Service, Metro Plex 1, 8401 Corporate Drive, Suite 300, Landover, MD 20785
==========
Date: Thu, 26 Jul 2012 12:00:54 -0300
From: "Internal Revenue Service" [support@irs.gov]
Subject: Rejected Federal Tax transfer
Your federal Tax payment (ID: 776394251906), recently from your checking account was returned by the your financial institution.
Canceled Tax transfer
Tax Transaction ID: 776394251906
Reason of rejection See details in the report below
FederalTax Transaction Report tax_report_776394251906.doc (Microsoft Word Document)
Internal Revenue Service, Metro Plex 1, 8401 Corporate Drive, Suite 300, Landover, MD 20785
This "Adobe CS4 License" spam leads to malware on online-gaminatore.ru:Date: Thu, 26 Jul 2012 09:24:01 +0900
From: FentonpJsGh9LIsiah@aol.com
Subject: Order N81149
Dear Sirs,
You can download your Adobe CS4 License here -
We encourage you to explore its new and enhanced capabilities with these helpful tips, tutorials, and eSeminars.
Thank you for buying Adobe InDesign CS4 software.
Adobe Systems Incorporated
This fake "Wire Transfer" spam (or is it UPS?) leads to malware on furnitura-forums.ru:Date: Wed, 25 Jul 2012 09:12:43 -0500
From: "Express MyUps" [upsservices@ups.com]
Subject: Fwd: Re: Wire Transfer
Attachments: Wire_ID88283.htm
Dear Operator,
WIRE FID: NO-004394626739460
STATUS: CANCELLED
You can find details in the attached file.
Date: Wed, 25 Jul 2012 09:46:57 -0500
From: "US Airways - Reservations" [support@myusairways.com]
Subject: Confirm your US airways online reservation.
You should check in from 24 hours and up to 60 minutes before your flight (2 hours if you're flying abroad). After that, all you have to do is print your boarding pass and go to the gate.
Confirmation code: 210916
Check-in online: Online reservation details
Flight
4817
Departure city and time
Washington, DC (DCA) 10:00PM
Depart date: 7/26/2012
We are committed to protecting your privacy. Your information is kept private and confidential. For information about our privacy policy visit usairways.com.
US Airways, 111 W. Rio Salado Pkwy, Tempe, AZ 85281 , Copyright US Airways , All rights reserved.
These fake PayPal spams lead to malware on teloexpressions.org:Date: Tue, 24 Jul 2012 18:06:49 +0330
From: "Allan Marquez" <notify@paypal.com>
Subject: Paypal has sent you a bank transfer.
<tr =="" valign="top">
<table =="" border="0" cellpadding="0" cellspacing="0" width="100%">
We are moving funds from Your Paypal account to your bank account.
Total amount transferred $ 131.54
Bank account BANK OF AMERICA
Transaction ID 59566237893344612
<div style="text-align: center;" class="footerLinks" 5px="" 0;="" padding:="">Help Center Resolution Center Security Center
Please don't reply to this email. It'll just confuse the computer that sent it and you won't get a response.
Copyright 2012 PayPal, Inc. All rights reserved. PayPal is located at 2211 N. First St., San Jose, CA 95131.
==========
Date: Tue, 24 Jul 2012 11:33:00 -0300
From: "Jody Wade" <notify@paypal.com>
Subject: Paypal transfer to your bank account initiated.
<tr =="" valign="top">
<table =="" border="0" cellpadding="0" cellspacing="0" width="100%">
We are transferring funds from Your Paypal account to your bank account.
Total amount transferred $ 944.68
Bank account BANK OF NORTH CAROLINA
Transaction ID 67081555155766933
<div style="text-align: center;" class="footerLinks" 5px="" 0;="" padding:="">Help Center Resolution Center Security Center
Please don't reply to this email. It'll just confuse the computer that sent it and you won't get a response.
Copyright 2012 PayPal, Inc. All rights reserved. PayPal is located at 2211 N. First St., San Jose, CA 95131.
==========
Date: Tue, 24 Jul 2012 11:10:58 -0300
From: "Evan Battle" <notify@paypal.com>
Subject: We have sent you a bank transfer.
<tr =="" valign="top">
<table =="" border="0" cellpadding="0" cellspacing="0" width="100%">
We are sending funds from Paypal to your bank account.
Total amount transferred $ 123.59
Bank account CITYBANK
Transaction ID 55273357044211327
<div style="text-align: center;" class="footerLinks" 5px="" 0;="" padding:="">Help Center Resolution Center Security Center
Please don't reply to this email. It'll just confuse the computer that sent it and you won't get a response.
Copyright 2012 PayPal, Inc. All rights reserved. PayPal is located at 2211 N. First St., San Jose, CA 95131.
==========
Date: Tue, 24 Jul 2012 19:15:46 +0530
From: "service@paypal.com" <service@paypal.com>
Subject: Paypal transfer to your bank account initiated.
<tr =="" valign="top">
<table =="" border="0" cellpadding="0" cellspacing="0" width="100%">
We are moving funds from Paypal to your bank account.
Total amount transferred $ 425.21
Bank account BANK OF NORTH CAROLINA
Transaction ID 17744199446279262
<div style="text-align: center;" class="footerLinks" 5px="" 0;="" padding:="">Help Center Resolution Center Security Center
Please don't reply to this email. It'll just confuse the computer that sent it and you won't get a response.
Copyright 2012 PayPal, Inc. All rights reserved. PayPal is located at 2211 N. First St., San Jose, CA 95131.
==========
Date: Tue, 24 Jul 2012 09:45:45 -0400
From: "service@paypal.com" <service@paypal.com>
Subject: Paypal has sent you a bank transfer.
<tr =="" valign="top">
<table =="" border="0" cellpadding="0" cellspacing="0" width="100%">
We are moving funds from Your Paypal account to your bank account.
Total amount transferred $ 191.22
Bank account CITYBANK
Transaction ID 64722827521858421
<div style="text-align: center;" class="footerLinks" 5px="" 0;="" padding:="">Help Center Resolution Center Security Center
Please don't reply to this email. It'll just confuse the computer that sent it and you won't get a response.
Copyright 2012 PayPal, Inc. All rights reserved. PayPal is located at 2211 N. First St., San Jose, CA 95131.
Obviously they think nothing of the sort and are just randomly spamming, even to mobile phone numbers registered with TPS. Given that their pitch is based on a lie, it's likely that the whole outfit it some sort of scam in any case.Hi, we think you may be entitled to compensation of up to £3500 from missold PPI on a credit card or loan.
Reply PPI for more info
Reply STOP to opt out
This fake wire transfer spam leads to malware on porschedesignrussia.ru:Date: Fri, 20 Jul 2012 04:10:52 +0100
Subject: RE: Your Wire Transfer N02526593
Good morning,
Wire debit transfer was canceled by the other financial institution.
Canceled transfer:
FED REFERENCE NUMBER: ISL9653367088ODP06829K
Transfer Report: View
Federal Reserve Wire Network
Date: Thu, 19 Jul 2012 17:03:06 +0300
From: "Lakisha Rush" [support@aicpa.org]
Subject: Termination of your accountant license.
You're receiving this notification as a Certified Public Accountant and a member of AICPA.
Having trouble reading this email? View it in your browser.
Cancellation of Accountant status due to income tax fraud allegations
Dear AICPA member,
We have received a complaint about your possible participation in income tax refund fraudulent activity for one of your clients. According to AICPA Bylaw Paragraph 730 your Certified Public Accountant license can be withdrawn in case of the fact of filing of a misguided or fraudulent tax return for your client or employer.
Please be informed of the complaint below and respond to it within 7 days. The failure to respond within this term will result in cancellation of your CPA license.
Complaint.pdf
The American Institute of Certified Public Accountants.
Email: service@aicpa.org
Tel. 888.777.7077
Fax. 800.362.5066
==========
Date: Thu, 19 Jul 2012 14:02:48 +0000
From: "Jonathan Gallagher" [support@aicpa.org]
Subject: Fraudulent tax return assistance accusations.
You're receiving this email as a Certified Public Accountant and a member of AICPA.
Having trouble reading this email? View it in your browser.
Cancellation of Accountant status due to income tax fraud allegations
Dear accountant officer,
We have been notified of your possible involvement in tax return fraudulent activity for one of your employees. According to AICPA Bylaw Paragraph 730 your Certified Public Accountant license can be cancelled in case of the occurrence of presenting of a misguided or fraudulent income tax return on the member's or a client's behalf.
Please familiarize yourself with the notification below and respond to it within 14 days. The failure to provide the clarifications within this time-frame will result in termination of your Accountant status.
Complaint.pdf
The American Institute of Certified Public Accountants.
Email: service@aicpa.org
Tel. 888.777.7077
Fax. 800.362.5066
This fake wire transfer spam leads to malware at forumanarhist.ru:This spam contains an attachment leading to malware on phpforkiddies.ru:Date: Wed, 18 Jul 2012 01:23:20 +0300The attachment in this case is called Wire_NFED_Rejected.htm and contains a script that attempts to load malware from [donotclick]phpforkiddies.ru:8080/forum/showthread.php?page=5fa58bce769e5c2c (report here) which is multihomed on the following IPs:
From: "EUNA Wood" [AdamWnukowski@himsa.com.mx]
Subject: Fwd: Wire Transfer (75073UQ608)
Attachments: Wire_NFED_Rejected.htm
Dear Operator,
WIRE N: FED-9058663000926019
STATUS: REJECTED
You can find details in the attached file.
Date: Tue, 17 Jul 2012 09:01:11 -0500
From: "craigslist - automated message, do not reply" [robot@craigslist.org]
Subject: Your Craiglist.org posting URL.
Posting ID # 27643127:
"Double Stainless Steel Sink" (household items - by owner)
Should now be accessible at the following URL:
http://craigslist.org/hsh/262383.html
Index pages and search results are updated every 15 minutes.
To edit or delete, please log in to your member area.
If you are having trouble finding your posting in the listings:
http://www.craigslist.org/about/help/how_to_fi= nd_your_post_in_the_listings
For other questions or help:
http://w= ww.craigslist.org/about/help/
Safety tips and avoiding scams:
http://= www.craigslist.org/about/safety
http://www.craigslist.o= rg/about/scams
Thanks for using craigslist!
==========
Date: Tue, 17 Jul 2012 06:00:52 -0800
From: "craigslist - automated message, do not reply" [robot@craigslist.org]
Subject: Your Craiglist posting is successful.
Posting ID # 14717917:
"Turbo 400 Tranny" (household items - by owner)
Should now be accessible at the following URL:
http://craigslist.org/hsh/888725.html
New postings are updated every 15 minutes.
To edit or delete, please log in to your member area.
If you are having trouble finding your item in the listings:
http://www.craigslist.org/about/help/how_to_fi= nd_your_post_in_the_listings
For other questions or help:
http://w= ww.craigslist.org/about/help/
Safety tips and avoiding scams:
http://= www.craigslist.org/about/safety
http://www.craigslist.o= rg/about/scams
Thanks for using craigslist!
==========
Date: Tue, 17 Jul 2012 15:13:26 +0200
From: "craigslist - automated message, do not reply" [robot@craigslist.org]
Subject: Your Craiglist posting is successful.
Posting ID # 49685217:
"Generator" (household items - by owner)
Should now be viewable at the following URL:
http://craigslist.org/hsh/887563.html
New postings are updated every 15 minutes.
To edit or delete, please log in to your account.
If you are experiencing problems finding your posting in the listings:
http://www.craigslist.org/about/help/how_to_fi= nd_your_post_in_the_listings
For other questions or help:
http://w= ww.craigslist.org/about/help/
Safety tips and avoiding scams:
http://= www.craigslist.org/about/safety
http://www.craigslist.o= rg/about/scams
Thanks for using craigslist!
==========
Date: Tue, 17 Jul 2012 10:09:15 -0300
From: "craigslist - automated message, do not reply" [robot@craigslist.org]
Subject: You can access your Craiglist listing by the new location.
Posting ID # 35649793:
"Screwdrivers kit" (household items - by owner)
Can now be viewable at the following location:
http://craigslist.org/hsh/284761.html
Index pages and search results are updated every 15 minutes.
To edit or delete, please log in to your account.
If you are having trouble finding your item in the listings:
http://www.craigslist.org/about/help/how_to_fi= nd_your_post_in_the_listings
For other questions or help:
http://w= ww.craigslist.org/about/help/
Safety tips and avoiding scams:
http://= www.craigslist.org/about/safety
http://www.craigslist.o= rg/about/scams
Thanks for using craigslist!
Date: Mon, 16 Jul 2012 18:10:26 +0000
From: "Intuit PaymentNetwork" [support@intuit.com]
Subject: You have received a new payment through the Intuit network.
Payment received: You received $280.00 from Henderson LLC for invoice 91816
You can access the payment details here.
Funds will be deposited in your bank account.
You now have the possibility to get paid by Credit Card on your invoices. To find put more please sign in to your IPN account and click on the 'Profile' tab on the left.
From: LinkedIn Communication [mailto:support@intuit.com]
Sent: 16 July 2012 15:12
Subject: We have received your payroll processing request.
Direct Deposit Service Communication
Status update
Dear victim
We received your payroll on July 16, 2012 at 1:16 AM Pacific Time.
• Funds will be withdrawn from the bank account number ending in: XXXX on July 17, 2012.
• Amount to be withdrawn: $2,476.11
• Paychecks will be deposited to your employees' accounts on: July 17, 2012
• Please download your payroll here.
Funds are as a rule processed before normal banking hours so please make sure you have sufficient funds available by 12 a.m. on the date funds are to be withdrawn.
Intuit must receive your payroll by 5 p.m. Pacific time, two banking days before your payment date or your employees will fail to be paid on time. QuickBooks does not process payrolls on weekends or federal banking holidays. A list of federal banking holidays can be downloaded at the Federal Reserve website.
Thank you for your business.
Sincerely,
Intuit Payroll Services
IMPORTANT NOTICE: This notification is being sent to inform you of a critical matter concerning your current service or software. Please note that if you previously opted out of receiving marketing materials from Intuit, you may continue to receive notifications similar to this communication that affect your service or software.
If you have any questions or comments about this email, please DO NOT REPLY to this email. If you need additional information please contact us.
If you receive an email message that appears to come from Intuit but that you suspect is a phishing email, please forward it to immediately to spoof@intuit.com.
Copyright 2008 Intuit Inc. QuickBooks and Intuit are registered trademarks of and/or registered service marks of Intuit Inc. in the United States and other countries. This notification is not intended to supplement, modify, or extend the Intuit software license agreement between you and Intuit for any Intuit product or service.
Intuit Inc. Customer Communications
2800 E. Commerce Center Place, Tucson, AZ 85706
====================
From: LinkedIn Communication [support@intuit.com]
Sent: Mon 16/07/2012 15:12
Subject: Your payroll processing is initiated by Intuit.
Direct Deposit Service Communication
Status update
Dear victim
We obtained your payroll on July 16, 2012 at 7:36 AM Pacific Time.
• Funds will be withdrawn from the bank account number ending in: XXXX on July 17, 2012.
• Amount to be withdrawn: $5,582.11
• Paychecks will be deposited to your employees' accounts on: July 17, 2012
• Please download your payroll here.
Funds are typically withdrawn before normal banking hours so please make sure you have sufficient funds available by 12 a.m. on the date funds are to be withdrawn.
Intuit must receive your payroll by 5 p.m. Pacific time, two banking days before your payment date or your employees will fail to be paid on time. QuickBooks does not process payrolls on weekends or federal banking holidays. A list of federal banking holidays can be downloaded at the Federal Reserve website.
Thank you for your business.
Sincerely,
Intuit Payroll Services
IMPORTANT NOTICE: This notification is being sent to inform you of a critical matter concerning your current service or software. Please note that if you previously opted out of receiving marketing materials from Intuit, you may continue to receive notifications similar to this communication that affect your service or software.
If you have any questions or comments about this email, please DO NOT REPLY to this email. If you need additional information please contact us.
If you receive an email message that appears to come from Intuit but that you suspect is a phishing email, please forward it to immediately to spoof@intuit.com.
Copyright 2008 Intuit Inc. QuickBooks and Intuit are registered trademarks of and/or registered service marks of Intuit Inc. in the United States and other countries. This notification is not intended to supplement, modify, or extend the Intuit software license agreement between you and Intuit for any Intuit product or service.
Intuit Inc. Customer Communications
2800 E. Commerce Center Place, Tucson, AZ 85706
This fake UPS spam leads to malware on peace-computer.com:Date: Wed, 11 Jul 2012 09:51:41 -0500
From: "Margret Bellamy" [USPS_Shipping_Services@usps.com]
Subject: Download your UPS invoices.
This is an automatically generated email Please do not reply to this email address.
Dear UPS Customer,
New invoice(invoices) are available for viewing in UPS billing center. Please note that your UPS invoices should be paid within 14 days to avoid any additional charges.
Please visit the UPS Billing Center to view and pay your invoice.
Find out more about UPS:
Visit ups.com
Explore UPS Freight Services
Learn About UPS Companies
Sign Up For Additional Email From UPS
Read our official journal
(c) 2012 United Parcel Service of America, Inc. UPS, the UPS brandmark, and the color brown are trademarks of United Parcel Service of America, Inc. All rights reserved.
For more information on UPS's privacy practices, refer to the UPS Privacy Policy.
Please do not reply directly to this e-mail. UPS will not receive any reply message.
For questions or comments, visit Contact UPS.
This communication contains proprietary information and may be confidential. If you are not the intended recipient, the reading, copying, disclosure or other use of the contents of this e-mail is strictly prohibited and you are instructed to please delete this e-mail immediately.
Privacy Policy
Contact UPS
This fake Amazon spam leads to malware on savidae.net: Sent: 11 July 2012 15:12
Subject: Your Amazon.com order of "GoPro HD Helmet HERO Camcorder - Silver" has shipped!
Hello,
Shipping Confirmation
Order # 111-8744380-4899254
Your estimated delivery date is:
Friday, July 13 2012
Track your package Thank you for shopping with us. We thought you'd like to know that we shipped this portion of your order separately to give you quicker service. You won't be charged any extra shipping fees, and the remainder of your order will follow as soon as those items become available. If you need to return an item from this shipment or manage other orders, please visit Your Orders on Amazon.com.
Shipment Details
GoPro HD Helmet HERO Camcorder - Silver $149.95
Item Subtotal: $149.95
Shipping & Handling: $0.00
Total Before Tax: $149.95
Shipment Total: $149.95
Paid by Visa: $149.95
You have only been charged for the items sent in this shipment. Per our policy, you only pay for items when we ship them to you.
Returns are easy. Visit our .
If you need further assistance with your order, please visit Customer Service.
We hope to see you again soon!
Amazon.com
Date: Tue, 10 Jul 2012 13:49:59 -0300
From: "LinkedIn Communication" [USPS_Shipping_Services@usps.com]
Subject: New Payment through the Intuit network.
Incoming payment received: You received $840.00 from Parks LLC for invoice 53389
You can access the payment details here.
Funds will be transferred in your bank account.
You now have the opportunity to get paid by Credit Card on your invoices. To learn more please sign in to your IPN account and click on the 'Profile' tab on the left.
This UPS spam leads to malware on proamd-inc.com:Date: Tue, 10 Jul 2012 20:34:41 +0200The malicious payload is at [donotclick]proamd-inc.com/main.php?page=8cb1f95c85bce71b (report here) hosted on 164.15.250.148 (Universite Libre de Bruxelles, Belgium).
From: "Vernon Wade" [USPS_Shipping_Services@usps.com]
Subject: Your UPS invoices are ready for download.
This is an automatically generated email Please do not reply to this email address.
Dear UPS Customer,
New invoice(invoices) are available for download in UPS billing center. Do not forget that your UPS invoices should be paid within 28 days so as not to incur any additional charges.
Please surf to the UPS Billing Center to view and pay your invoice.
Find out more about UPS:
Visit ups.com
Explore UPS Freight Services
Learn About UPS Companies
Sign Up For Additional Email From UPS
Read our official blog
(c) 2012 United Parcel Service of America, Inc. UPS, the UPS brandmark, and the color brown are trademarks of United Parcel Service of America, Inc. All rights reserved.
For more information on UPS's privacy practices, refer to the UPS Privacy Policy.
Please do not reply directly to this e-mail. UPS will not receive any reply message.
For questions or comments, visit Contact UPS.
This communication contains proprietary information and may be confidential. If you are not the intended recipient, the reading, copying, disclosure or other use of the contents of this e-mail is strictly prohibited and you are instructed to please delete this e-mail immediately.
Privacy Policy
Contact UPS
==========
Date: Tue, 10 Jul 2012 19:20:05 +0330
From: "Don Reyes" [USPS_Shipping_Services@usps.com]
Subject: Please download and pay your UPS delivery charges.
This is an automatically generated email Please do not reply to this email address.
Dear UPS Customer,
New invoice(invoices) are available for viewing in UPS billing center. Do not forget that your UPS invoices should be paid within 28 days to avoid any additional charges.
Please visit the UPS Billing Center to view and pay your invoice.
Find out more about UPS:
Visit ups.com
Explore UPS Freight Services
Learn About UPS Companies
Sign Up For Additional Email From UPS
Read our official blog
(c) 2012 United Parcel Service of America, Inc. UPS, the UPS brandmark, and the color brown are trademarks of United Parcel Service of America, Inc. All rights reserved.
For more information on UPS's privacy practices, refer to the UPS Privacy Policy.
Please do not reply directly to this e-mail. UPS will not receive any reply message.
For questions or comments, visit Contact UPS.
This communication contains proprietary information and may be confidential. If you are not the intended recipient, the reading, copying, disclosure or other use of the contents of this e-mail is strictly prohibited and you are instructed to please delete this e-mail immediately.
Privacy Policy
Contact UPS
==========
From: Miguel Segura [mailto:USPS_Shipping_Services@usps.com]
Sent: 10 July 2012 16:47
Subject: You have outstanding UPS invoices.
This is an automatically generated email Please do not reply to this email address.
Valued UPS Customer,
New invoice(invoices) are available for download in UPS billing center. Please note that your UPS invoices should be paid within 21 days so as not to incur any additional charges.
Please visit the UPS Billing Center to view and pay your invoice.
________________________________________
Find out more about UPS:
Visit ups.com
Explore UPS Freight Services
Learn About UPS Companies
Sign Up For Additional Email From UPS
Read Compass Online
________________________________________
(c) 2012 United Parcel Service of America, Inc. UPS, the UPS brandmark, and the color brown are trademarks of United Parcel Service of America, Inc. All rights reserved.
For more information on UPS's privacy practices, refer to the UPS Privacy Policy.
Please do not reply directly to this e-mail. UPS will not receive any reply message.
For questions or comments, visit Contact UPS.
This communication contains proprietary information and may be confidential. If you are not the intended recipient, the reading, copying, disclosure or other use of the contents of this e-mail is strictly prohibited and you are instructed to please delete this e-mail immediately.
Privacy Policy
Contact UPS
This spam leads to malware on ellomb.net:From: Johnny Mooney [mailto:kxijgvpu@asistencia.org]The malicious payload is on [donotclick]ellomb.net/main.php?page=d502255d1a941be3 (not resolving when I tried to analyse it) hosted on 83.69.226.143 (Awax Telecom, Russia). Incidentally, 83.69.226.0/24 all looks pretty bad and is worth blocking.
Sent: 06 July 2012 13:56
Subject: Your Receipt and Itinerary
Thank you for choosing Delta. We encourage you to review this information before your trip. If you need to contact Delta or check on your flight information, go to delta.com, call 800-221-1212 or call the number on the back of your SkyMiles© card.
Now, managing your travel plans just got easier. You can exchange, reissue and refund electronic tickets at delta.com. Take control and make changes to your itineraries at delta.com/itineraries.
Speed through the airport. Check-in online for your flight.
Flight Information
DELTA CONFIRMATION #: C1N270
TICKET #: 31894208655700
Day Date Flight Status Bkng
Class City Time Meals/
Other Seat/
Cabin
--- ----- --------------- ------ ----- ---------------- ------ ------ -------
Sun 8 JUL DELTA 116 OK U LV NYC-KENNEDY
AR SAN FRANCISCO 515P
916P F 45A
COACH
Mon 9 JUL DELTA 1837 OK K LV SAN FRANCISCO
AR NYC-KENNEDY 1230P
702A# V 32A
COACH
Baggage and check-in requirements vary by airport and airline, so please check with the operating carrier on your ticket.
Please review Delta's check-in Requirements and baggage guidelines for details.
You must be checked in and at the gate at least 15 minutes before your scheduled departure time for travel inside the United States.
You must be checked in and at the gate at least 45 minutes before your scheduled departure time for international travel.
For tips on flying safely with laptops, cell phones, and other battery-powered devices, please visit http://SafeTravel.dot.gov.
Do you have comments about our service? Please email us to share them with us.
-----------------------------------------------------------------------------
Conditions of Carriage
Air transportation on Delta and the Delta Connection carriers is subject to Delta's conditions of carriage. They include terms governing, for example:
Limits on our liability for personal injury or death of passengers, and for loss, damage or delay of goods and baggage.
Claim restrictions, including time periods within which you must file a claim or bring an action against us
Our right to change terms of the contract
Check-in requirements and other rules establishing when we may refuse carriage
Our rights and limits of our liability for delay or failure to perform service, including schedule changes, substitution of alternative air carriers or aircraft, and rerouting
Our policy on overbooking flights, and your rights if we deny you boarding due to an oversold flight
These terms are incorporated by reference into our contract with you. You may view these conditions of carriage on delta.com, or by requesting a copy from Delta.
