201905014_PHISHING_SCAM_1

Greetings,

Compliment of the season to you and your family. I hope you are doing great. I personally made a special research on some Internet address books and I came across your information. I am presently writing this mail to you from U.S Military base Kabul, Afghanistan hoping that you can be of assistance. There is absolutely going to be a great doubt and distrust in your heart in respect to this mail coupled with the fact that so many miscreants and mischief-makers who have taken possession of the Internet to facilitate their nefarious deeds, thereby making it extremely difficult to believe that any quest for assistance through the Internet is real or genuine making it difficult for persons who need help to get attention, recognition and assistance. Please am sorry if I am disturbing you, but it will do you great good, if you can just invest some little trust in what you are reading now because this might serve as a life changing opportunity for you, so jot down today's date somewhere, because today is a day you will have live to remember for the rest of your life shalom.


My name is Sgt. Monica Lin Brown, originally from Lake Jackson Texas USA. I am 27yrs old, I presently work in the Medics and Support Unit of 4th Brigade Combat Team, 82nd Airborne Corps Afghanistan. Cutting to the chase, I and some other high ranking Officers made some oil deals in Iraq before my exit to Afghanistan. The deal was worth $230 Million United States Dollars and after we shared the money, I later realized $25,500,000.00 (Twenty five million, Five Hundred Thousand United States Dollars only) which is my personal share of the deal. But due to my status as a US Sergeant in the Medical Unit, I cannot be able to move this huge funds to my account in United States to avoid further interrogation or face any kind of probation by the U.S government so I packaged my own share in a briefcase and have sent it to the Red-Cross society, because there is no other way out to keep it with me here, so with the help of a German contact working with the UN here (his office enjoys some high level of diplomatic immunity) I was able to get the package out to a safe location entirely out of trouble spot. He does not know the real contents of the package, as I have deposited the consignment as a family treasure. Your acceptance to this would encourage me to send further information for us to proceed.


Furthermore, If my offer is of no appeal to you, delete this message and forget I ever contacted you. Do not destroy my career simply because you are not in support of my proposal. I believe that such opportunities only comes ones way once in a lifetime. I cannot let this chance pass me by. For once I find myself in total control of my destiny. This chance won't pass me by. I ask that you do not destroy my chance, if you will not work with me let me know and let me move on with my life but do not destroy me. If you give me positive signals, I will give you the relevant details and initiate this process towards a conclusion. I send you this mail not without a measure of fear as to what the consequences, but I know within me that nothing ventured is nothing gained and that success and riches never come easy or on a platter of gold. Do not betray my confidence.

If you wish to proceed with this, please get back to me.

Regards,
Sgt. Monica Lin Brown.





Received: from MBX05D-ORD1.mex08.mlsrvr.com (172.29.9.24) by
 MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
 id 15.0.1473.3 via Mailbox Transport; Fri, 3 May 2019 23:48:19 -0500
Received: from MBX06C-ORD1.mex08.mlsrvr.com (172.29.9.26) by
 MBX05D-ORD1.mex08.mlsrvr.com (172.29.9.24) with Microsoft SMTP Server (TLS)
 id 15.0.1473.3; Fri, 3 May 2019 23:48:18 -0500
Received: from gate.forward.smtp.iad3a.emailsrvr.com (204.232.172.40) by
 MBX06C-ORD1.mex08.mlsrvr.com (172.29.9.26) with Microsoft SMTP Server (TLS)
 id 15.0.1473.3 via Frontend Transport; Fri, 3 May 2019 23:48:18 -0500
Return-Path: <Felix.Mueller@adesso.de>
X-Spam-Threshold: 95
X-Spam-Score: 0
X-Spam-Flag: NO
Authentication-Results: smtp51.gate.iad3a.rsapps.net x-tls.subject="/C=DE/ST=Nordrhein-Westfalen/L=Dortmund/O=adesso AG/CN=*.adesso.de"; auth=pass (cipher=DHE-RSA-AES256-GCM-SHA384)
X-Virus-Scanned: OK
X-Orig-To:
X-Originating-Ip: [85.22.63.1]
Authentication-Results: smtp51.gate.iad3a.rsapps.net; iprev=pass policy.iprev="85.22.63.1"; spf=pass smtp.mailfrom="Felix.Mueller@adesso.de" smtp.helo="mx4.adesso.de"; dkim=none (message not signed) header.d=none; dmarc=none (p=nil; dis=none) header.from=adesso.de
X-Suspicious-Flag: NO
X-Classification-ID: d5c5ce6a-6e27-11e9-b70a-525400aaff7b-1-1
Received: from [85.22.63.1] ([85.22.63.1:50386] helo=mx4.adesso.de)
	by smtp51.gate.iad3a.rsapps.net (envelope-from <Felix.Mueller@adesso.de>)
	(ecelerity 4.2.38.62370 r(:)) with ESMTPS (cipher=DHE-RSA-AES256-GCM-SHA384
	subject="/C=DE/ST=Nordrhein-Westfalen/L=Dortmund/O=adesso AG/CN=*.adesso.de")
	id 1A/E0-01400-3991DCC5; Sat, 04 May 2019 00:48:19 -0400
Received: from ex2013-db03.adesso.local
    (ex2013-db03.adesso.local [10.100.2.23])
    (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits))
    (No client certificate requested) by mx4.adesso.de (MTA) with ESMTPS
    id 44wxMf0T9Bz1xVJ; Sat,  4 May 2019 06:48:14 +0200 (CEST)
Received: from EX2013-DB01.adesso.local (10.100.2.21) by
    ex2013-db03.adesso.local (10.100.2.23) with Microsoft SMTP Server
    (TLS) id 15.0.1367.3; Sat, 4 May 2019 06:48:07 +0200
Received: from EX2013-DB01.adesso.local ([fe80::311c:864e:3aad:aa46]) by
    EX2013-DB01.adesso.local ([fe80::311c:864e:3aad:aa46%17]) with mapi
    id 15.00.1367.000; Sat, 4 May 2019 06:48:07 +0200
From: =?iso-8859-1?Q?M=FCller=2C_Felix?= <Felix.Mueller@adesso.de>
To: "in@msn.com" <in@msn.com>
Subject: FW: READ ATTACH
Thread-Topic: READ ATTACH
Thread-Index: AdUCNJFPMNNWWLkWfUqDPFfZm0kSNg==
Date: Sat, 4 May 2019 04:48:07 +0000
Message-ID: <474981d35fc7423eb9f7cc14dec94970@EX2013-DB01.adesso.local>
Accept-Language: de-DE, en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
x-cr-hashedpuzzle: AWyl BX3E BkLd BmqV CD+9 C2BF DPVX EQCr FS+6 FnId GjNf
    Hw5T MAG+ Mk0A Ms1L M25T;1;aQBuAEAAbQBzAG4ALgBjAG8AbQA=;Sosha1_v1;7;
    {E839D877-DAFE-4B94-8DFA-A6AF9A6430A6};
    ZgBlAGwAaQB4AC4AbQB1AGUAbABsAGUAcgBAAGEAZABlAHMAcwBvAC4AZABlAA==;Sat,
    04 May 2019 04:48:00 GMT;RgBXADoAIABSAEUAQQBEACAAQQBUAFQAQQBDAEgA
x-cr-puzzleid: {E839D877-DAFE-4B94-8DFA-A6AF9A6430A6}
x-ms-exchange-transport-fromentityheader: Hosted
x-puremessage: [Scanned]
x-routedthroughadessoonpremises: Yes
MIME-Version: 1.0
x-msw-jemd-newsletter: false
X-MS-Exchange-Organization-Network-Message-Id: 186d18ad-1515-48bb-0063-08d6d04bba34
X-MS-Exchange-Organization-AVStamp-Mailbox: SMEXzs^g;1497500;0;This mail has
 been scanned by Trend Micro ScanMail for Microsoft Exchange;
X-MS-Exchange-Organization-SCL: 0
X-MS-Exchange-Organization-AuthSource: MBX06C-ORD1.mex08.mlsrvr.com
X-MS-Exchange-Organization-AuthAs: Anonymous
Content-type: multipart/mixed;
	boundary="B_3639803791_1608643324"

> This message is in MIME format. Since your mail reader does not understand
this format, some or all of this message may not be legible.

--B_3639803791_1608643324
Content-type: multipart/alternative;
	boundary="B_3639803791_1951285363"


--B_3639803791_1951285363
Content-type: text/plain;
	charset="UTF-8"
Content-transfer-encoding: quoted-printable