Andrew.Ferguson@Hilton.com ~ garykenedy@outlook.com

Email header analysis report
All valid IP Addresses found in the header.
Ip Address 3rd Party Info Provider City Flag Country
* 169.254.3.29 Check 169.254.3.29 at Senderbase.org Check 169.254.3.29 at Reputationauthority.org n/a n/a
169.254.2.29 Check 169.254.2.29 at Senderbase.org Check 169.254.2.29 at Reputationauthority.org n/a n/a
167.187.100.2 Check 167.187.100.2 at Senderbase.org Check 167.187.100.2 at Reputationauthority.org Red Lion Hotels & Inns Beverly Hills United States
68.232.140.118 Check 68.232.140.118 at Senderbase.org Check 68.232.140.118 at Reputationauthority.org Cisco Systems Ironport Division San Bruno United States

*Probable originating IP address

_______________________

scamalertDelivered-To: scamfraudalert@gmail.com
Received: by 10.205.102.194 with SMTP id df2csp79006bkc;
Sat, 24 Aug 2013 10:11:20 -0700 (PDT)
X-Received: by 10.236.228.137 with SMTP id f9mr5774561yhq.44.1377364279248;
Sat, 24 Aug 2013 10:11:19 -0700 (PDT)
Return-Path: <prvs=9418cc540=Andrew.Ferguson@hilton.com> Received: from esa5.hilton.iphmx.com (esa5.hilton.iphmx.com. [68.232.140.118])
by mx.google.com with ESMTPS id f5si2629081yhd.241.1969.12.31.16.00.00
(version=TLSv1 cipher=RC4-SHA bits=128/128);
Sat, 24 Aug 2013 10:11:19 -0700 (PDT)
Received-SPF: pass (google.com: domain of prvs=9418cc540=Andrew.Ferguson@hilton.com designates 68.232.140.118 as permitted sender) client-ip=68.232.140.118;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of prvs=9418cc540=Andrew.Ferguson@hilton.com designates 68.232.140.118 as permitted sender) smtp.mail=prvs=9418cc540=Andrew.Ferguson@hilton.com
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: Ap8AAAjoGFKnu2QCmWdsb2JhbABagkOBSoMnqwSRZh58Fg4BAQEBAQ
YNCwcUKIIbAQoFBBwzOAEGBQEJFVYmAQoBDAiFboILiQKMS450CJIHgSe
PIIMeECZ9A54/ji48gW4
X-IPAS-Result: Ap8AAAjoGFKnu2QCmWdsb2JhbABagkOBSoMnqwSRZh58Fg4BAQEBAQYNCwc
UKIIbAQoFBBwzOAEGBQEJFVYmAQoBDAiFboILiQKMS450CJIHgSePIIMeECZ9A54/
ji48gW4
X-IronPort-AV: E=Sophos;i=”4.89,947,1367989200″;
d=”scan’208,217″;a=”34322933″
Received: from unknown (HELO mail.hilton.com) ([167.187.100.2])
by esa5.hilton.iphmx.com with ESMTP/TLS/AES128-SHA; 24 Aug 2013 12:11:00 -0500
Received: from HFWMXMSG05PH.hotels.ad.hilton.com (10.80.40.25) by
HFWMRMSG02PH.hotels.ad.hilton.com (10.80.200.52) with Microsoft SMTP Server
(TLS) id 14.2.342.3; Sat, 24 Aug 2013 13:10:56 -0400
Received: from HFWMXMSG03PH.hotels.ad.hilton.com ([169.254.2.29]) by
HFWMXMSG05PH.hotels.ad.hilton.com ([169.254.3.29]) with mapi id
14.02.0342.004; Sat, 24 Aug 2013 13:10:57 -0400
From: Andrew Ferguson <Andrew.Ferguson@Hilton.com>
Subject: RE
Thread-Topic: RE
Thread-Index: Ac6g7OWpg6LodkHkS525FS6TJ4rcDA==
Date: Sat, 24 Aug 2013 17:10:56 +0000
Message-ID: <DAF30024411FD3488FFA317D89C3085D1445E561

@HFWMXMSG03PH.hotels.ad.hilton.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [10.80.202.30]
Content-Type: text/html; charset=”koi8-r”
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
To: Undisclosed recipients:;
Return-Path: <Andrew.Ferguson@Hilton.com>

This transmission is not a digital or electronic signature and cannot be used to form, document, or authenticate a contract. Hilton and its affiliates accept no liability arising in connection with this transmission.Copyright 2013 Hilton Worldwide Proprietary and Confidential

________________________________________________

Din e-mail-id er blevet udvalgt til kontanter 1.000.000,00 fra selskabet Jumbo som den heldige vinder. Send Navne …… Nationalitet ….. telefon …. til denne e-mail: garykenedy@outlook.com
___________________________________________

One thought on “Andrew.Ferguson@Hilton.com ~ garykenedy@outlook.com

  1. SFA Reporter says:

    Whois information for domain: 169.254.3.29

    169.254.3.29
    IP address: 169.254.3.29
    Registrar: American Registry for Internet Numbers (ARIN)

    Domain whois record

    Queried whois.arin.net with 169.254.3.29

    #
    # ARIN WHOIS data and services are subject to the Terms of Use
    # available at:

    https://www.arin.net/whois_tou.html
    #

    #
    # Query terms are ambiguous. The query is assumed to

    be:
    # “n 169.254.3.29”
    #
    # Use “?” to get help.
    #

    #
    # The following results may also be

    obtained via:
    #

    http://whois.arin.net/rest/nets;q=169.254.3.29?showDetails=true&showARIN=false&ext=netref2
    #

    NetRange:

    169.254.0.0 – 169.254.255.255
    CIDR: 169.254.0.0/16
    OriginAS:
    NetName:

    LINKLOCAL-RFC3927-IANA-RESERVED
    NetHandle: NET-169-254-0-0-1
    Parent:

    NET-169-0-0-0-0
    NetType: IANA Special Use
    Comment: This is the “link local” block. It

    was set
    Comment: aside for this special use in the Standards
    Comment: Track document,

    RFC 3927 and was further
    Comment: documented in the Best Current Practice
    Comment: RFC

    5735, which can be found at:
    Comment: http://www.rfc-editor.org/rfc/rfc3927.txt
    Comment:

    http://www.rfc-editor.org/rfc/rfc5735.txt
    Comment: It is allocated for communication

    between hosts
    Comment: on a single link. Hosts obtain these addresses
    Comment: by

    auto-configuration, such as when a DHCP
    Comment: server cannot be found.
    Comment: A

    router MUST NOT forward a packet with an IPv4
    Comment: Link-Local source or destination

    address,
    Comment: irrespective of the router’s default route configuration
    Comment:

    or routes obtained from dynamic routing protocols.
    Comment: A router which receives a packet

    with an IPv4
    Comment: Link-Local source or destination address MUST NOT
    Comment:

    forward the packet. This prevents forwarding of
    Comment: packets back onto the network

    segment from which
    Comment: they originated, or to any other segment.
    RegDate:

    1998-01-27
    Updated: 2010-03-15
    Ref:

    http://whois.arin.net/rest/net/NET-169-254-0-0-1

    OrgName: Internet Assigned Numbers

    Authority
    OrgId: IANA
    Address: 12025 Waterfront Drive
    Address: Suite

    300
    City: Los Angeles
    StateProv: CA
    PostalCode: 90292
    Country:

    US
    RegDate:
    Updated: 2012-08-31
    Ref:

    http://whois.arin.net/rest/org/IANA

    OrgTechHandle: IANA-IP-ARIN
    OrgTechName: Internet Corporation

    for Assigned Names and Number
    OrgTechPhone: +1-310-301-5820
    OrgTechEmail:

    abuse@iana.org
    OrgTechRef: http://whois.arin.net/rest/poc/IANA-IP-ARIN

    OrgAbuseHandle:

    IANA-IP-ARIN
    OrgAbuseName: Internet Corporation for Assigned Names and Number
    OrgAbusePhone:

    +1-310-301-5820
    OrgAbuseEmail: abuse@iana.org
    OrgAbuseRef:

    http://whois.arin.net/rest/poc/IANA-IP-ARIN

    #
    # ARIN WHOIS data and services are subject to the

    Terms of Use
    # available at: https://www.arin.net/whois_tou.html
    #

    Network whois record

    Queried whois.arin.net 169.254.3.29

    #
    # ARIN WHOIS data and services are subject to the Terms of Use
    # available at:

    https://www.arin.net/whois_tou.html
    #

    #
    # Query terms are ambiguous. The query is assumed to

    be:
    # “n 169.254.3.29”
    #
    # Use “?” to get help.
    #

    #
    # The following results may also be

    obtained via:
    #

    http://whois.arin.net/rest/nets;q=169.254.3.29?showDetails=true&showARIN=false&ext=netref2
    #

    NetRange:

    169.254.0.0 – 169.254.255.255
    CIDR: 169.254.0.0/16
    OriginAS:
    NetName:

    LINKLOCAL-RFC3927-IANA-RESERVED
    NetHandle: NET-169-254-0-0-1
    Parent:

    NET-169-0-0-0-0
    NetType: IANA Special Use
    Comment: This is the “link local” block. It

    was set
    Comment: aside for this special use in the Standards
    Comment: Track document,

    RFC 3927 and was further
    Comment: documented in the Best Current Practice
    Comment: RFC

    5735, which can be found at:
    Comment: http://www.rfc-editor.org/rfc/rfc3927.txt
    Comment:

    http://www.rfc-editor.org/rfc/rfc5735.txt
    Comment: It is allocated for communication

    between hosts
    Comment: on a single link. Hosts obtain these addresses
    Comment: by

    auto-configuration, such as when a DHCP
    Comment: server cannot be found.
    Comment: A

    router MUST NOT forward a packet with an IPv4
    Comment: Link-Local source or destination

    address,
    Comment: irrespective of the router’s default route configuration
    Comment:

    or routes obtained from dynamic routing protocols.
    Comment: A router which receives a packet

    with an IPv4
    Comment: Link-Local source or destination address MUST NOT
    Comment:

    forward the packet. This prevents forwarding of
    Comment: packets back onto the network

    segment from which
    Comment: they originated, or to any other segment.
    RegDate:

    1998-01-27
    Updated: 2010-03-15
    Ref:

    http://whois.arin.net/rest/net/NET-169-254-0-0-1

    OrgName: Internet Assigned Numbers

    Authority
    OrgId: IANA
    Address: 12025 Waterfront Drive
    Address: Suite

    300
    City: Los Angeles
    StateProv: CA
    PostalCode: 90292
    Country:

    US
    RegDate:
    Updated: 2012-08-31
    Ref:

    http://whois.arin.net/rest/org/IANA

    OrgTechHandle: IANA-IP-ARIN
    OrgTechName: Internet Corporation

    for Assigned Names and Number
    OrgTechPhone: +1-310-301-5820
    OrgTechEmail:

    abuse@iana.org
    OrgTechRef: http://whois.arin.net/rest/poc/IANA-IP-ARIN

    OrgAbuseHandle:

    IANA-IP-ARIN
    OrgAbuseName: Internet Corporation for Assigned Names and Number
    OrgAbusePhone:

    +1-310-301-5820
    OrgAbuseEmail: abuse@iana.org
    OrgAbuseRef:

    http://whois.arin.net/rest/poc/IANA-IP-ARIN

    #
    # ARIN WHOIS data and services are subject to the

    Terms of Use
    # available at: https://www.arin.net/whois_tou.html
    #

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s