Google

World Wide Web anti-scam


Seitenindex umschalten Seiten: 1 Thema versenden
Normales Thema David <ulrichbarclayhamburg@accountant.com> <david.b.frazier@phila.gov> (Gelesen: 539 mal)
 
Almöhi
Themenstarter Themenstarter
General Counsel
***
Offline


I love Anti-Scam

Beiträge: 20887
Standort: Deutschland
Mitglied seit: 09. November 2009
David <ulrichbarclayhamburg@accountant.com> <david.b.frazier@phila.gov>
23. Oktober 2016 um 16:17
 
Hello,
I have been instructed to contact you with regards to a transaction proposal worth €
2.4 million to discuss with you.
Kindly contact Mr Ulrich on his private email : ulrichbarclayhamburg@accountant.com as soon as possible!

David
================================================
Hallo,
Ich wurde angewiesen, mit Ihnen über einen Transaktionsvorschlag im Wert von € in Verbindung zu treten
2,4 Millionen mit Ihnen zu diskutieren.
Bitte kontaktieren Sie Herrn Ulrich auf seiner privaten E-Mail: ulrichbarclayhamburg@accountant.com so schnell wie möglich!

David

Spoiler:
Return-Path: <David.B.Frazier@Phila.gov>
Received: from gcc01-CY1-obe.outbound.protection.outlook.com (mail-cy1gcc01hn0213.outbound.protection.outlook.com [23.103.200.213])
     (using TLSv1 with cipher AES256-SHA (256/256 bits))
     (No client certificate requested)
     by mtaiw-aal07.mx.aol.com (Internet Inbound) with ESMTPS id 74A307000008E;
     Sun, 23 Oct 2016 06:04:49 -0400 (EDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=Phila.onmicrosoft.com;
s=selector1-phila-gov;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version;
bh=W/aMryJ0OBur5l0MGxN0iX6ZB/3ICjrSqbRaXTrm1M4=;
bokEr+nwSKF1Q=
Received: from BN6PR09CA0068.namprd09.prod.outlook.com (10.173.158.30) by
DM2PR09MB0665.namprd09.prod.outlook.com (10.161.144.16) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id
15.1.679.12; Sun, 23 Oct 2016 10:03:43 +0000
Received: from BN1AFFO11FD056.protection.gbl (2a01:111:f400:7c10::121) by
BN6PR09CA0068.outlook.office365.com (2603:10b6:404:7a::30) with Microsoft
SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.679.12 via
Frontend Transport; Sun, 23 Oct 2016 10:03:43 +0000
Authentication-Results: spf=pass (sender IP is 170.115.248.93)
smtp.mailfrom=Phila.gov; aol.com; dkim=none (message not signed)
Quelltext.d=none;aol.com; dmarc=bestguesspass action=none Quelltext.from=Phila.gov;
Received-SPF: Pass (protection.outlook.com: domain of Phila.gov designates
170.115.248.93 as permitted sender) receiver=protection.outlook.com;
client-ip=170.115.248.93; helo=mymail.phila.gov;
Received: from mymail.phila.gov (170.115.248.93) by
BN1AFFO11FD056.mail.protection.outlook.com (10.58.53.71) with Microsoft SMTP
Server (version=TLS1_0, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA_P384) id
15.1.669.7 via Frontend Transport; Sun, 23 Oct 2016 10:03:42 +0000
Received: from COPPRODMBX05.city.phila.local ([fe80::4064:ce47:682a:c1c3]) by
COPPRODHUB02.city.phila.local ([fe80::c591:f3c6:10df:b163%14]) with mapi id
14.03.0301.000; Sun, 23 Oct 2016 06:03:41 -0400
From: "David B. Frazier" <David.B.Frazier@Phila.gov>
Subject: =?Windows-1252?Q?Kontaktieren_Sie_Herrn_Ulrich_zu:_ulrich_barclays_hambur?=
=?Windows-1252?Q?g@accountant.com_f=FCr_ein_Gesch=E4ft?=
Thread-Topic: =?Windows-1252?Q?Kontaktieren_Sie_Herrn_Ulrich_zu:_ulrich_barclays_hambur?=
=?Windows-1252?Q?g@accountant.com_f=FCr_ein_Gesch=E4ft?=
Thread-Index: AdItFLpmcAZN3LrURgGFIrJfaIjxrQ==
Date: Sun, 23 Oct 2016 10:03:40 +0000
Message-ID: <022B19F7E27DC64AAD3C866E04E02BFDAB38B5B6@COPPRODMBX05.city.phila.local>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [192.168.30.167]
Content-Type: multipart/alternative;
     boundary="_000_022B19F7E27DC64AAD3C866E04E02BFDAB38B5B6COPPRODMBX05cit_"
MIME-Version: 1.0
To: Undisclosed recipients:;
X-EOPAttributedMessage: 0
X-MS-Office365-Filtering-HT: Tenant
X-Forefront-Antispam-Report:
     .gov;FPR:;SPF:Pass;PTR:InfoDomainNonexistent;A:1;MX:1;LANG:de;
X-Microsoft-Exchange-Diagnostics: KrMFlk17dChV/I=
X-MS-Office365-Filtering-Correlation-Id: f32b3ba6-687a-4a2e-b9ad-08d3fb2bdef8
X-Microsoft-Exchange-Diagnostics:
     a0BRIXBadcEt5oaT8PR4S9JMQ3/W5
X-Microsoft-Antispam:
     UriScan:;BCL:0;PCL:0;RULEID:(8251501002);SRVR:DM2PR09MB0665;
X-Microsoft-Exchange-Diagnostics:
     /ZJ3OILsKCS/H8WLxv+1xSODIcHsqxPznw0
X-Microsoft-Antispam-PRVS:
     
X-Exchange-Antispam-Report-Test: UriScan:;
X-Exchange-Antispam-Report-CFA-Test:
     R:DM2PR09MB0665;
X-Microsoft-Exchange-Diagnostics:
     WKjjRKiQ==
X-Forefront-PRVS: 0104247462
X-Microsoft-Exchange-Diagnostics:
     =?us-ascii?Q?1;DM2PR09MB0665;23:v2FzknoExtCrEtGYqTD8k7ZJJafXWH6F2VykIXpX2?=
=?us-ascii?Q?6C9xoiI1Vu4JcvmcMN8rB4c18hDh7U9y0RuFnHk2LxdLHFbv9/6E8oWQSs8h?=
=?us-ascii?Q?sxqzOQtQSss6ellCirIlgGTkpa0EhY3zU2/n0BsWoj7Ci69Y8B/hfgMuY6be?=
=?us-ascii?Q?u/hkxLcuN9FpdqbYtVmrFpGKGYhw/8wSSnr/CDSYTC+Z254M6VDXqXNYJLcL?=
=?us-ascii?Q?xExD734Z8FzNvAsTB1xAFBMi7yrZWwg2F00ksWUSGUmc579XScgp6hjGW6Kr?=
=?us-ascii?Q?7taJMC4R6/SJInr6F7g8y4MD5HXYv726pWWQo1S8gD3mLJVyfkK9FDvUDBrJ?=
=?us-ascii?Q?bvdf2W2PYHb4JHS21lM8SUXHi2t9aDeSHS2ApMSSaDzS2Vwtzqq7JRA9SAj4?=
=?us-ascii?Q?VSyll79xh9q6GB2Nfu4Lv8H9uyjRwaDDhFhklZ4tZKW7QRcD60d0WribBIYr?=
=?us-ascii?Q?cg4GDQFf083DIIFZV5JDcYzysoMtjX8bbTl0wFF2eL5FmO8UzwnTJc8o0BNc?=
=?us-ascii?Q?+LF8Nq7UR/4aE1JunhRZU0jptXB45qTF3fYhjsIARdVdCtkkEkApKBpvkTrj?=
=?us-ascii?Q?ueODdtsmdbtB5YM4dOAvQ8di+N2gJ5cs4Ph91T2hKgzbH+NtRREQ1pL6/+BX?=
=?us-ascii?Q?3cceprqT/nNy6IbzCPjfjTFeZ0zwrC++sp5lBQRaWmmoRXlXE52Hp9avQ0Kn?=
=?us-ascii?Q?qPNTgffNqc0q5XBvca5dkCR+51AnjIIaUDvNrVHsrg/SR3Q2NkZYXl+kbm7F?=
=?us-ascii?Q?fgJ6b6oF0/7o5pIe3LiTgqIl+yfp4u7yP2AobEfFUQmiw5R86wBsL0t7SCeA?=
=?us-ascii?Q?l2L92cnY/tyJZpqqJhAJBYphv5IdxG/MXGVXuyjr2oerJb/8cqfFJ+SFhVv+?=
=?us-ascii?Q?IvMbxZXAafvekxVKJQenLi2h/Ae/RcDb3LQjJi7HvoBJ+lHwjxwhM3FyktPv?=
=?us-ascii?Q?aKDiSjkjLkST4xmKYux4dX97StqKoRMnG4gybm62xolsWJ1W6T8iQF07WdOG?=
=?us-ascii?Q?rwvCFsYDuXRmh6rJxMl7RvmM6VzZC/Uz88m0JVxXRdDrzcYfALIaR1flzo7R?=
=?us-ascii?Q?TrjD1eT1cBeXykGDZdKiHZ0mBd+G+Vjnj61m28A6TAyUhEm/6U+8WKb+Bblr?=
=?us-ascii?Q?qHv7EPtyRqr9pUYXY5TE7vdrjOtXHdlY0LfOPHjmk3/1O69jQlAWLyWZYY6p?=
=?us-ascii?Q?rA2CqAEZA1uAvmrMoHk/0KGZ26QvNdVRve3GdE9JAX9O2+4A3gg26Hgjxcw8?=
=?us-ascii?Q?+1pAafUVARVaMVqViSKsuuPSY6lgCUjvlmfFLr6cMqC4lLh3GGYhO1Eie9Kd?=
=?us-ascii?Q?QAdJBmVqWswq665BFsf7VSkPFe6M/BXGcj9YCQN4ef9lUk2XqbfBmT4jp0Rj?=
=?us-ascii?Q?sZowXhZ18Zyd6DpWY3Z/2t9w3jn2U83vlzF7eA3MDGzxUFDul7SBebklHYns?=
=?us-ascii?Q?EyWHWXMPu5e4QSxQ8rCgqp7XaGlX8Vq9QaYWnHbF2HOwSmDywNcqY01Xj+i0?=
=?us-ascii?Q?t/u0O3KGLVT98do8UEKQJPrshjLD3jUr8PCAFHTpyLOd+MdudIHBAG7uBZJE?=
=?us-ascii?Q?+7y9TpZuvE6qFTIwuaCDWCICrMPl1bkdqoxPJlBlH0DHXEMxri+KBNhStYry?=
=?us-ascii?Q?eCvy5MneTP43yq5lJZ/IQ=3D=3D?=
X-Microsoft-Exchange-Diagnostics:
     dUdC65Q==
SpamDiagnosticOutput: 1:22
X-Microsoft-Exchange-Diagnostics:
     PSl/Gk+l+80GLfVWiEnJ68nV3mfN+AB+SS3/YNtEC440WXBRcnIsH5EZ4JwvA=
X-OriginatorOrg: phila.gov
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 23 Oct 2016 10:03:42.2552
(UTC)
X-MS-Exchange-CrossTenant-Id: 2046864f-68ea-497d-af34-a6629a6cd700
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=2046864f-68ea-497d-af34-a6629a6cd700;Ip=[170.115.248.93];Helo=[mymail.phila.gov]
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM2PR09MB0665
x-aol-global-disposition: S
X-AOL-SCOLL-AUTHENTICATION: mtaiw-aal07.mx.aol.com ; domain : Phila.onmicrosoft.com DKIM : pass
Authentication-Results: mx.aol.com;
     spf=permerror (aol.com: while processing the SPF record for phila.gov we encountered a fatal error.) smtp.mailfrom=phila.gov;
     dkim=pass (aol.com: email passed verification from the domain Phila.onmicrosoft.com.) Quelltext.i=@Phila.onmicrosoft.com;
X-AOL-REROUTE: YES
x-aol-sid: 3039ac1b14c4580c8b4106c9
X-AOL-IP: 23.103.200.213
X-AOL-SPF: domain : phila.gov SPF : permerror

--_000_022B19F7E27DC64AAD3C866E04E02BFDAB38B5B6COPPRODMBX05cit_
Content-Type: text/plain; charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable
« Zuletzt geändert: 25. Oktober 2016 um 21:54 von Wesermann »  
Zum Seitenanfang
 
IP gespeichert
 
Indikation
Wesermann
Forum Administrator
*****
Offline


I love Anti-Scam

Beiträge: 34946
Standort: Russia
Mitglied seit: 08. Oktober 2008
Geschlecht: männlich
Re: David <ulrichbarclayhamburg@accountant.com> <david.b.frazier@phila.gov>
Antwort #1 - 23. Oktober 2016 um 16:53
 
Über USA

Code
Alles auswählen
IP:	170.115.248.93
Decimal:	2859726941
Hostname:	170.115.248.93
ASN:	11205
ISP:	City of Philadelphia
Organization:	City of Philadelphia
Services:	None detected
Type:	Corporate
Assignment:	Static IP
Continent:	North America
Country:	United States
State/Region:	Pennsylvania
City:	Philadelphia 



Zitat:
Date: Sun, 23 Oct 2016 10:03:40 +0000
« Zuletzt geändert: 25. Oktober 2016 um 21:54 von Wesermann »  
Zum Seitenanfang
 
IP gespeichert
 
Seitenindex umschalten Seiten: 1
Thema versenden
Link zu diesem Thema