20180609_PHISHING_SCAM_1

Received: from MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) by
 MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
 id 15.0.1367.3 via Mailbox Transport; Sat, 9 Jun 2018 08:07:46 -0500
Received: from MBX03D-ORD1.mex08.mlsrvr.com (172.29.9.18) by
 MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
 id 15.0.1367.3; Sat, 9 Jun 2018 08:07:46 -0500
Received: from gate.forward.smtp.ord1d.emailsrvr.com (161.47.34.7) by
 MBX03D-ORD1.mex08.mlsrvr.com (172.29.9.18) with Microsoft SMTP Server (TLS)
 id 15.0.1367.3 via Frontend Transport; Sat, 9 Jun 2018 08:07:46 -0500
Return-Path: <[email protected]>
X-Spam-Threshold: 95
X-Spam-Score: 100
Precedence: junk
X-Spam-Flag: YES
X-Virus-Scanned: OK
X-Orig-To: REMOVED
X-Originating-Ip: [37.205.11.228]
Authentication-Results: smtp5.gate.ord1d.rsapps.net; iprev=pass policy.iprev="37.205.11.228"; spf=pass smtp.mailfrom="[email protected]" smtp.helo="cpvps01.creative-point.eu"; dkim=fail (signature verification failed) header.d=creative-point.eu; dmarc=none (p=nil; dis=none) header.from=creative-point.eu
X-Suspicious-Flag: YES
X-Classification-ID: 197a1d54-6be6-11e8-9059-525400d73c44-1-1
Received: from [37.205.11.228] ([37.205.11.228:33626] helo=cpvps01.creative-point.eu)
	by smtp5.gate.ord1d.rsapps.net (envelope-from <[email protected]>)
	(ecelerity 4.2.1.56364 r(Core:4.2.1.14)) with ESMTPS (cipher=DHE-RSA-AES256-GCM-SHA384)
	id E7/3C-11503-121DB1B5; Sat, 09 Jun 2018 09:07:46 -0400
Received: from localhost (localhost.localdomain [127.0.0.1])
	by cpvps01.creative-point.eu (Postfix) with ESMTP id 69DF120F58;
	Sat,  9 Jun 2018 12:05:33 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=
	creative-point.eu; h=user-agent:message-id:reply-to:subject
	:subject:from:from:date:date:content-transfer-encoding
	:content-type:content-type:mime-version; s=cp0001crepo; t=
	1528545933; x=1530360334; bh=0tDQFiYtxYCqbZy+IJyghiqUl5z9AsdOdwk
	2MNT5pNw=; b=jbVkBR0A2rugCJYYerqUyhMPU+8VJ1vtQktEsOsUHHx8Tp/Rr1z
	RA0gG3f4uSuPXpu5GGhaBIWbsCyrLnabCAi9c0QNYVKzf+kv5D280G6rsD32r+mV
	gCwYCA2wd3yYkcscrXlGIDQSk+LkeEb7MVlnEFTfEDwN+51VMD+0TXSQ=
Received: from cpvps01.creative-point.eu ([127.0.0.1])
	by localhost (cpvps01.creative-point.eu [127.0.0.1]) (amavisd-new, port 10026)
	with ESMTP id h2fLWTOKneT7; Sat,  9 Jun 2018 12:05:33 +0000 (UTC)
Received: from creative-point.eu (localhost [IPv6:::1])
	by cpvps01.creative-point.eu (Postfix) with ESMTP id 1655E204DD;
	Sat,  9 Jun 2018 12:05:26 +0000 (UTC)
MIME-Version: 1.0
Date: Sat, 09 Jun 2018 14:05:26 +0200
From: Probate Genealogist <[email protected]>
To: undisclosed-recipients:;
Subject: Inquiry
Reply-To: [email protected]
Mail-Reply-To: [email protected]
Message-ID: <[email protected]>
X-Sender: [email protected]
User-Agent: Roundcube Webmail/1.2.3
X-MS-Exchange-Organization-Network-Message-Id: 19f4ed2f-6099-450d-ccd3-08d5ce09fe72
X-MS-Exchange-Organization-AVStamp-Mailbox: SMEXzs^g;1430300;0;This mail has
 been scanned by Trend Micro ScanMail for Microsoft Exchange;
X-MS-Exchange-Organization-SCL: 5
X-MS-Exchange-Organization-AuthSource: MBX03D-ORD1.mex08.mlsrvr.com
X-MS-Exchange-Organization-AuthAs: Anonymous
Content-type: text/plain;
	charset="UTF-8"
Content-transfer-encoding: 7bit

Good day

We are contracted probate researchers. This is an investigation about a
client with whom you share the same surname, your assistance will be
greatly appreciated. Are you aware of any investment made by such a
person at VTB Private Bank?

Thank you for your assistance.

Ms. S Parker
For Genealogy Firm