by buried under 419s
Sat Feb 21, 2015 8:23 pm
Delivered-To:
Received: by 10.76.116.133 with SMTP id jw5csp396721oab;
Sat, 21 Feb 2015 14:08:24 -0800 (PST)
X-Received: by 10.42.33.66 with SMTP id h2mr4437868icd.7.1424556504624;
Sat, 21 Feb 2015 14:08:24 -0800 (PST)
Return-Path: <>
Received: from mail1.servidormail1.srv.br (mail1.servidormail1.srv.br. [199.101.100.152])
by mx.google.com with ESMTPS id dc8si4006231icb.87.2015.02.21.14.08.24
for <>
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Sat, 21 Feb 2015 14:08:24 -0800 (PST)
Received-SPF: softfail (google.com: domain of transitioning [email protected] does not designate 199.101.100.152 as permitted sender) client-ip=199.101.100.152;
Authentication-Results: mx.google.com;
spf=softfail (google.com: domain of transitioning [email protected] does not designate 199.101.100.152 as permitted sender) [email protected];
dmarc=fail (p=NONE dis=NONE) header.from=gmail.com
Received: from eua6.servidoreua6.srv.br ([170.75.153.42]:42234)
by mail1.servidormail1.srv.br with esmtps (TLSv1.2:DHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.84)
(envelope-from <[email protected]>)
id 1YPIDn-0004Qn-P9
for ; Sat, 21 Feb 2015 20:08:23 -0200
Received: from localhost ([127.0.0.1]:56872 helo=webmail.f1net.com.br)
by eua6.servidoreua6.srv.br with esmtpa (Exim 4.84)
(envelope-from <[email protected]>)
id 1YPIDl-000psk-CR; Sat, 21 Feb 2015 20:08:21 -0200
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII;
format=flowed
Content-Transfer-Encoding: 7bit
Date: Sat, 21 Feb 2015 20:08:21 -0200
From: "DR. STEWART" <[email protected]>
To: undisclosed-recipients:;
Subject: RESPOND VERY URGENTLY
Reply-To: [email protected]
Mail-Reply-To: [email protected]
Message-ID: <[email protected]>
X-Sender: [email protected]
User-Agent: Roundcube Webmail/1.0.3
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - eua6.servidoreua6.srv.br
X-AntiAbuse: Original Domain - mosquitonet.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - gmail.com
X-Get-Message-Sender-Via: eua6.servidoreua6.srv.br: authenticated_id: [email protected]
X-Source:
X-Source-Args:
X-Source-Dir:
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - mail1.servidormail1.srv.br
X-AntiAbuse: Original Domain -
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - gmail.com
X-Get-Message-Sender-Via: mail1.servidormail1.srv.br: mailgid via get_relayhosts_entry: [email protected]/in alwaysrelay with antirelayd disabled
X-Source:
X-Source-Args:
X-Source-Dir:
DEAR,
I AM DR.MRS VIVIAN STEWART FROM NEWCASTLE, ENGLAND. I AM SERVING IN
UNITED STATES OF AMERICA MILITARY HOSPITAL IN IRAQI. I AM COMPELLED TO
CONTACT YOU CONCERNING A BUSINESS DEAL WHICH WOULD BE BENEFICIAL TO US
AND WILL LEAD US INTO PARTNERSHIP INVESTMENT. I HAVE SOME FUND US
DOLLARS THAT IS SUCCESSFULLY MOVED OUT OF THE COUNTRY, IT IS AN OIL
BUSINESS MONEY WE DID WITH IRAQI CITIZENS.
REPLY SO THAT I WILL GIVE YOU FULL DETAILS.
REGARDS
DR.MRS VIVIAN STEWART
Received: by 10.76.116.133 with SMTP id jw5csp396721oab;
Sat, 21 Feb 2015 14:08:24 -0800 (PST)
X-Received: by 10.42.33.66 with SMTP id h2mr4437868icd.7.1424556504624;
Sat, 21 Feb 2015 14:08:24 -0800 (PST)
Return-Path: <>
Received: from mail1.servidormail1.srv.br (mail1.servidormail1.srv.br. [199.101.100.152])
by mx.google.com with ESMTPS id dc8si4006231icb.87.2015.02.21.14.08.24
for <>
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Sat, 21 Feb 2015 14:08:24 -0800 (PST)
Received-SPF: softfail (google.com: domain of transitioning [email protected] does not designate 199.101.100.152 as permitted sender) client-ip=199.101.100.152;
Authentication-Results: mx.google.com;
spf=softfail (google.com: domain of transitioning [email protected] does not designate 199.101.100.152 as permitted sender) [email protected];
dmarc=fail (p=NONE dis=NONE) header.from=gmail.com
Received: from eua6.servidoreua6.srv.br ([170.75.153.42]:42234)
by mail1.servidormail1.srv.br with esmtps (TLSv1.2:DHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.84)
(envelope-from <[email protected]>)
id 1YPIDn-0004Qn-P9
for ; Sat, 21 Feb 2015 20:08:23 -0200
Received: from localhost ([127.0.0.1]:56872 helo=webmail.f1net.com.br)
by eua6.servidoreua6.srv.br with esmtpa (Exim 4.84)
(envelope-from <[email protected]>)
id 1YPIDl-000psk-CR; Sat, 21 Feb 2015 20:08:21 -0200
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII;
format=flowed
Content-Transfer-Encoding: 7bit
Date: Sat, 21 Feb 2015 20:08:21 -0200
From: "DR. STEWART" <[email protected]>
To: undisclosed-recipients:;
Subject: RESPOND VERY URGENTLY
Reply-To: [email protected]
Mail-Reply-To: [email protected]
Message-ID: <[email protected]>
X-Sender: [email protected]
User-Agent: Roundcube Webmail/1.0.3
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - eua6.servidoreua6.srv.br
X-AntiAbuse: Original Domain - mosquitonet.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - gmail.com
X-Get-Message-Sender-Via: eua6.servidoreua6.srv.br: authenticated_id: [email protected]
X-Source:
X-Source-Args:
X-Source-Dir:
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - mail1.servidormail1.srv.br
X-AntiAbuse: Original Domain -
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - gmail.com
X-Get-Message-Sender-Via: mail1.servidormail1.srv.br: mailgid via get_relayhosts_entry: [email protected]/in alwaysrelay with antirelayd disabled
X-Source:
X-Source-Args:
X-Source-Dir:
DEAR,
I AM DR.MRS VIVIAN STEWART FROM NEWCASTLE, ENGLAND. I AM SERVING IN
UNITED STATES OF AMERICA MILITARY HOSPITAL IN IRAQI. I AM COMPELLED TO
CONTACT YOU CONCERNING A BUSINESS DEAL WHICH WOULD BE BENEFICIAL TO US
AND WILL LEAD US INTO PARTNERSHIP INVESTMENT. I HAVE SOME FUND US
DOLLARS THAT IS SUCCESSFULLY MOVED OUT OF THE COUNTRY, IT IS AN OIL
BUSINESS MONEY WE DID WITH IRAQI CITIZENS.
REPLY SO THAT I WILL GIVE YOU FULL DETAILS.
REGARDS
DR.MRS VIVIAN STEWART
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces