· 6 years ago · Dec 14, 2019, 08:48 PM
1The ministry of finance was forwarded this letter to my office this
2my office this morning again by two gentle men , one of them is a
3Canadian national and he is Mr.Gilbert M. Uson by name while the
4other person is Mr. Frank Haroldr , by his name a U.S.A national .
5This gentle man claimed to be the representative of your fund, and
6two gentle men stated that you are dead. They brought an account to
7replace your account information, to claime your fund Which is now
8lying Dormant and Unclaimed.
9
10Below is the new account they submitted to my office:
11
12Account Name Mr. Frank Harold
13Citibank Banamex USA
142029 Century Park East Los Angeles, CA 90067
15Routing Number: 122233645
16Account Number: 5944130210
17Be further informed that this two gentle men also stated that you have
18accident on the way going work,You are therefore given 24hrs to
19confirm the truth in this information if you are still alive.
20
21Be informed that any further delay from your side could be dangerous,
22as we would not be held responsible of wrong payment.
23Regard,
24Mr.Robert Wilson
25
26
27
28
29
30
31Received: from MBX05D-ORD1.mex08.mlsrvr.com (172.29.9.24) by
32 MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
33 id 15.0.1473.3 via Mailbox Transport; Sat, 14 Dec 2019 12:23:36 -0600
34Received: from MBX10D-ORD1.mex08.mlsrvr.com (172.29.9.40) by
35 MBX05D-ORD1.mex08.mlsrvr.com (172.29.9.24) with Microsoft SMTP Server (TLS)
36 id 15.0.1473.3; Sat, 14 Dec 2019 12:23:35 -0600
37Received: from gate.forward.smtp.iad3a.emailsrvr.com (204.232.172.40) by
38 MBX10D-ORD1.mex08.mlsrvr.com (172.29.9.40) with Microsoft SMTP Server (TLS)
39 id 15.0.1473.3 via Frontend Transport; Sat, 14 Dec 2019 12:23:35 -0600
40Return-Path: <cyrillec11@gmail.com>
41X-Spam-Threshold: 95
42X-Spam-Score: 0
43X-Spam-Flag: NO
44X-Virus-Scanned: OK
45X-Orig-To:
46X-Originating-Ip: [67.225.140.29]
47Authentication-Results: smtp35.gate.iad3a.rsapps.net; iprev=pass policy.iprev="67.225.140.29"; spf=softfail smtp.mailfrom="cyrillec11@gmail.com" smtp.helo="thirtysix.qservers.net"; dkim=none (message not signed) header.d=none; dmarc=fail (p=none; dis=none) header.from=gmail.com
48X-Suspicious-Flag: NO
49X-Classification-ID: d69888be-1e9e-11ea-871c-52540083445f-1-1
50Received: from [67.225.140.29] ([67.225.140.29:42530] helo=thirtysix.qservers.net)
51 by smtp35.gate.iad3a.rsapps.net (envelope-from <cyrillec11@gmail.com>)
52 (ecelerity 4.2.38.62370 r(:)) with ESMTPS (cipher=DHE-RSA-AES256-GCM-SHA384)
53 id 0C/69-24135-6A825FD5; Sat, 14 Dec 2019 13:23:35 -0500
54Received: from localhost ([127.0.0.1]:42916 helo=thirtysix.qservers.net)
55 by thirtysix.qservers.net with esmtp (Exim 4.92)
56 (envelope-from <cyrillec11@gmail.com>)
57 id 1igC4J-0002SD-FN; Sat, 14 Dec 2019 19:23:07 +0100
58Received: from thirtysix.qservers.net ([127.0.0.1] helo=thirtysix.qservers.net)
59 by thirtysix.qservers.net with ESMTP (ASSP 1.9.9); 14 Dec 2019
60 19:23:07 +0100
61Received: from [105.112.180.250] ([105.112.180.250]) by
62 thirtysix.qservers.net (Horde Framework) with HTTPS; Sat, 14 Dec 2019
63 19:23:07 +0100
64Date: Sat, 14 Dec 2019 19:23:07 +0100
65Message-ID: <20191214192307.Horde.yLVOq7P60EzIvhyDrdDSKia@thirtysix.qservers.net>
66From: Mr.Robert Wilson <cyrillec11@gmail.com>
67To:
68Subject: get back to me if you still alive
69Reply-To: <cyrillec11@gmail.com>
70User-Agent: Horde Application Framework 5
71MIME-Version: 1.0
72X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
73X-AntiAbuse: Primary Hostname - thirtysix.qservers.net
74X-AntiAbuse: Original Domain -
75X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
76X-AntiAbuse: Sender Address Domain - gmail.com
77X-Get-Message-Sender-Via: thirtysix.qservers.net: acl_c_authenticated_local_user: root
78X-Authenticated-Sender: thirtysix.qservers.net: root
79X-Source:
80X-Source-Args:
81X-Source-Dir:
82X-MS-Exchange-Organization-Network-Message-Id: 70e221cb-c584-48c1-7945-08d780c2bbb8
83X-MS-Exchange-Organization-AVStamp-Mailbox: SMEXzs^g;1555700;0;This mail has
84 been scanned by Trend Micro ScanMail for Microsoft Exchange;
85X-MS-Exchange-Organization-SCL: 0
86X-MS-Exchange-Organization-AuthSource: MBX10D-ORD1.mex08.mlsrvr.com
87X-MS-Exchange-Organization-AuthAs: Anonymous
88Content-type: text/plain;
89 charset="UTF-8"
90Content-transfer-encoding: 7bit