20180610_PHISHING_SCAM_1

Received: from MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) by
 MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
 id 15.0.1367.3 via Mailbox Transport; Sun, 10 Jun 2018 04:49:06 -0500
Received: from MBX04C-ORD1.mex08.mlsrvr.com (172.29.9.20) by
 MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
 id 15.0.1367.3; Sun, 10 Jun 2018 04:49:06 -0500
Received: from gate.forward.smtp.iad3b.emailsrvr.com (146.20.86.8) by
 MBX04C-ORD1.mex08.mlsrvr.com (172.29.9.20) with Microsoft SMTP Server (TLS)
 id 15.0.1367.3 via Frontend Transport; Sun, 10 Jun 2018 04:49:06 -0500
Return-Path: <prvs=16999a66d5=abuse@tt-info.ru>
X-Spam-Threshold: 95
X-Spam-Score: 0
X-Spam-Flag: NO
X-Virus-Scanned: OK
X-Orig-To: REMOVED
X-Originating-Ip: [176.197.84.130]
Authentication-Results: smtp19.gate.iad3b.rsapps.net; iprev=pass policy.iprev="176.197.84.130"; spf=pass smtp.mailfrom="prvs=16999a66d5=abuse@tt-info.ru" smtp.helo="mx.tt-info.ru"; dkim=pass header.d=tt-info.ru; dmarc=none (p=nil; dis=none) header.from=tt-info.ru
X-Suspicious-Flag: NO
X-Classification-ID: 82119894-6c93-11e8-bd89-525400cbaf6c-1-1
Received: from [176.197.84.130] ([176.197.84.130:63632] helo=mx.tt-info.ru)
	by smtp19.gate.iad3b.rsapps.net (envelope-from <prvs=16999a66d5=abuse@tt-info.ru>)
	(ecelerity 4.2.1.56364 r(Core:4.2.1.14)) with ESMTPS (cipher=AES256-SHA)
	id DC/B1-22378-014FC1B5; Sun, 10 Jun 2018 05:49:05 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=simple; d=tt-info.ru;
	s=MDaemon; t=1528624100; x=1529228900; q=dns/txt; h=DomainKey-Signature:
	Received:Content-Type:MIME-Version:Content-Transfer-Encoding:
	Content-Description:Subject:To:From:Date:Reply-To; bh=+8Ea5VoVeo
	Rfd4Jh6I5j+Pswhn05D4gYGPSNsJwA9Pw=; b=T9J/bCNR2pu919UwPbOh8mhHei
	xk3I+OUieIY9BYHpPx0nedAWBbGBgKrxYQlprcSof9+7VpYjspG5yO2q3bWkPOt0
	bGLy2VN7QqtHTkhRk9ohrpcdxTM/aHksrLD/vyjEpw96MahhxWXMHcExmoiiShGm
	A5MajW9t3TdfLccUw=
DomainKey-Signature: a=rsa-sha1; s=MDaemon; d=tt-info.ru;
	c=simple; q=dns; h=from;
	b=U7gQj7dk4cEOBFUyFB+LOsEWnhfWvPTlYubkUOEttosfSd71RsnMMGK8QM/i
	SxD7WpUqUXvS8fm6EQz/L7spXXzB1ZYyfnD11JWVGjbcMeF/hvnl1R4wq
	RXPfU8TaVOzCTBAaV5LXlD4KJuD/wkjMt3WqgG8r/70xD00P3oQriE=;
X-MDAV-Result: clean
X-MDAV-Processed: mx.tt-info.ru, Sun, 10 Jun 2018 16:48:20 +0700
Received: from [10.186.22.15] by mx.tt-info.ru (Cipher TLSv1:-SHA:256) (MDaemon PRO v13.0.0)
	with ESMTP id md50000046564.msg
	for REMOVED; Sun, 10 Jun 2018 16:48:14 +0700
Message-ID: <DC.B1.22378.014FC1B5@smtp19.gate.iad3b.rsapps.net>
X-Spam-Processed: mx.tt-info.ru, Sun, 10 Jun 2018 16:48:14 +0700
	(not processed: message from trusted or authenticated source)
X-Authenticated-Sender: slava@tt-info.ru
X-MDRemoteIP: 197.211.63.154
X-Return-Path: prvs=16999a66d5=abuse@tt-info.ru
X-MDaemon-Deliver-To: REMOVED
MIME-Version: 1.0
Content-Description: Mail message body
Subject: Benefit Proposal
To: Recipients <abuse@tt-info.ru>
From: "Lan Xianjun" <abuse@tt-info.ru>
Date: Sun, 10 Jun 2018 11:19:17 +0200
Reply-To: lanxianjun@mail2hongkong.com
X-MS-Exchange-Organization-Network-Message-Id: 66688b53-c2c8-4218-9a54-08d5ceb767e7
X-MS-Exchange-Organization-AVStamp-Mailbox: SMEXzs^g;1430500;0;This mail has
 been scanned by Trend Micro ScanMail for Microsoft Exchange;
X-MS-Exchange-Organization-SCL: 0
X-MS-Exchange-Organization-AuthSource: MBX04C-ORD1.mex08.mlsrvr.com
X-MS-Exchange-Organization-AuthAs: Anonymous
Content-type: text/plain;
	charset="UTF-8"
Content-transfer-encoding: 7bit

I am Lan Xianjun a staff of Bank of China, here in Hong Kong. I have a business proposal for you that will be of mutual benefit for our both families. Please revert back to me with interest, to enable me share the details with you. My private Email : lanxianjun440@yahoo.com.hk
Regards,
Lan Xianjun