Received: from wmr.webvis.net ([2404:4800:0:1a03:2d0:b7ff:feba:33ec])
by mx.google.com with ESMTPS id ot10si7855592pbb.277.2013.02.16.08.45.05
(version=TLSv1 cipher=RC4-SHA bits=128/128);
Sat, 16 Feb 2013 08:45:09 -0800 (PST)
Received-SPF: neutral (google.com: 2404:4800:0:1a03:2d0:b7ff:feba:33ec is neither permitted nor denied by best guess record for domain of sunday@ananthwin.webvis.net) client-ip=2404:4800:0:1a03:2d0:b7ff:feba:33ec;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 2404:4800:0:1a03:2d0:b7ff:feba:33ec is neither permitted nor denied by best guess record for domain of sunday@ananthwin.webvis.net) smtp.mail=sunday@ananthwin.webvis.net
Received: from ananthwin.webvis.net (ifrit.webvis.net [202.157.165.192])
by wmr.webvis.net (8.12.11.20060308/8.12.11) with ESMTP id r1GFguBx011054;
Sat, 16 Feb 2013 23:42:56 +0800
Received: from user ([70.154.6.6]) by ananthwin.webvis.net ; Sun, 17 Feb 2013 00:42:19 +0800 GMT
ipTRACKERonline.com wrote:Header Analysis Quick Report<br>Originating IP: 70.154.6.6<br>Originating ISP: Bellsouth.net<br> City: Leesburg<br>Country of Origin: United States<br>* For a complete report on this email header goto ipTRACKERonline
from:
SRQ Direct Trading Company <sunday@ananthwin.webvis.net>
reply-to:
sqtradingco@yahoo.cn
to:
date:
Sun, Feb 17, 2013 at 2:57 AM
subject:
New Order/Enquiries
Good Day,
We got your contact from one of your customers. We have interest in purchasing your products and we sincerely hope to establish a long-term business relationship with your esteemed company.
Please kindly check the attachment and find our PURCHASE ORDER, SAMPLE CATALOGUE/DESIGN and please do inform us if you make exactly the same with the right quality material.
Kindly inform us about the MOQ, Delivery time, and payment terms.
C l i c k here to login to see more requirement we might need from your company from our secured server
Your early reply is highly appreciated as We hope to have good business relationship with you
Regards
James O. Brien (Purchasing Manager)
SRQ Direct Trading Company
10000 West O'Hare, Chicago, IL 60666
Link leads here
![Image](http://s7.postimage.org/6w5p7e5xj/phishing_1.jpg)
replies to this scammer result in
Delivery to the following recipient failed permanently:
sqtradingco@yahoo.cn
Technical details of permanent failure:
Google tried to deliver your message, but it was rejected by the server for the recipient domain yahoo.cn by mx1.mail.cnh.yahoo.com. [203.209.250.146].
The error that the other server returned was:
554 Message not allowed - [PH01] Email not accepted for policy reasons. Please visit http:/ /postmaster.yahoo.com/errors/postmaster-27.html [120]
I wish people would not report scammer email addresses, 'better the devil you know than the devil you don't know'. It is so easy for them to open a new account and start again!