20190506_PHISHING_SCAM_1

Hello,

I am Alabdulrahman from Saudi Arabia. I’m one of the closest friend's of late Khashoggi, the journalist who was murdered in the Saudi Arabian consulate in Istanbul, Turkey. Right now I’m being hunted by the crown prince because of my closeness and  relationship with late Khashoggi. All my investments here in Saudi Arabia has been seized,  my bank accounts frozen for no reason. I need a honest person who can be trusted to go to La Caixa Bank in Madrid Spain and claim / move the money I deposited to a safe account for investment before the crown prince will have a trace of that account of mine in La Caixa Bank, Madrid. All I need is to give you a secret code number with  authorization letter to meet my contact person in the bank to release the said deposited money to you as the beneficiary.

I am ready to give you 20% of the total money for assisting me achieve this and providing the account where the money will be lodged into. More-so, I wish to invest the money in any viable project or existing business entity with your assistance.

As soon as I have your response, I shall introduce you to the banker in La Caixa Bank, Madrid Spain who will guide you and assist you to move the said amount to a safe location of your choice.

Expecting your response urgently.

Regards
Alabdulrahman,





Received: from MBX05D-ORD1.mex08.mlsrvr.com (172.29.9.24) by
 MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
 id 15.0.1473.3 via Mailbox Transport; Mon, 6 May 2019 17:32:26 -0500
Received: from MBX02D-ORD1.mex08.mlsrvr.com (172.29.9.15) by
 MBX05D-ORD1.mex08.mlsrvr.com (172.29.9.24) with Microsoft SMTP Server (TLS)
 id 15.0.1473.3; Mon, 6 May 2019 17:32:25 -0500
Received: from gate.forward.smtp.iad3b.emailsrvr.com (146.20.86.8) by
 MBX02D-ORD1.mex08.mlsrvr.com (172.29.9.15) with Microsoft SMTP Server (TLS)
 id 15.0.1473.3 via Frontend Transport; Mon, 6 May 2019 17:32:25 -0500
Return-Path: <martin@easternserenity.com>
X-Spam-Threshold: 95
X-Spam-Score: 100
Precedence: junk
X-Spam-Flag: YES
X-Virus-Scanned: OK
X-Orig-To:
X-Originating-Ip: [23.235.207.142]
Authentication-Results: smtp26.gate.iad3b.rsapps.net; iprev=pass policy.iprev="23.235.207.142"; spf=pass smtp.mailfrom="martin@easternserenity.com" smtp.helo="server.easternserenity.com"; dkim=fail (signature verification failed) header.d=easternserenity.com; dmarc=none (p=nil; dis=none) header.from=easternserenity.com
X-Suspicious-Flag: YES
X-Classification-ID: d283901a-704e-11e9-b216-5254001088d3-1-1
Received: from [23.235.207.142] ([23.235.207.142:39896] helo=server.easternserenity.com)
	by smtp26.gate.iad3b.rsapps.net (envelope-from <martin@easternserenity.com>)
	(ecelerity 4.2.38.62370 r(:)) with ESMTPS (cipher=DHE-RSA-AES256-GCM-SHA384)
	id 21/9F-03413-9F5B0DC5; Mon, 06 May 2019 18:32:25 -0400
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
	d=easternserenity.com; s=default; h=Content-Transfer-Encoding:Content-Type:
	MIME-Version:Date:Subject:From:Reply-To:Sender:Message-ID:To:Cc:Content-ID:
	Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc
	:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:
	List-Subscribe:List-Post:List-Owner:List-Archive;
	bh=AICF/xlbqAU5+t1fHySsxnYro6PQrPEp8C4W0LHRzU8=; b=U1Bo9+N33e46Dgirf67DBnVvtH
	am0FNlQM54MrO5pA827mT/Vv0/O4B7BqqDeS6r65m9FXC/xiIWo7rx5rv0ZupTazPINEj3BLwt8mX
	hlAlpe4nGs6Ho6W8eVLCgpDH8lbPQDa7yX2xsjjO+N/2N9FKK3V22CjIyCyV9RdCxHkGEqwRdcDoL
	KTdVkWWE5FDh9ECft0nh4FzHUMnjlfu/Qba+2unurSafHR/gvBw1lDDtjJaefkOntiv8MrN9p+8wk
	EiEkK//XkthWit3roSkyAhj3DSskO+jZ67Mj6cU8zZblEBKclaYEPFIzOX2KSf4yrNgtOL9NKQaWr
	WW9DhgEw==;
Received: from [185.244.213.30] (port=54558 helo=User)
	by server.easternserenity.com with esmtpa (Exim 4.91)
	(envelope-from <martin@easternserenity.com>)
	id 1hNm7l-00057W-Jd; Mon, 06 May 2019 18:30:17 -0400
Message-ID: <21.9F.03413.9F5B0DC5@smtp26.gate.iad3b.rsapps.net>
Reply-To: <alabdulrahmanfaissalm@gmail.com>
From: "Alabdulrahman  Faissal M."<martin@easternserenity.com>
Subject: INFO
Date: Mon, 6 May 2019 15:30:18 -0700
MIME-Version: 1.0
	charset="Windows-1251"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server.easternserenity.com
X-AntiAbuse: Original Domain -
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - easternserenity.com
X-Get-Message-Sender-Via: server.easternserenity.com: authenticated_id: martin@easternserenity.com
X-Authenticated-Sender: server.easternserenity.com: martin@easternserenity.com
To: Undisclosed recipients:;
X-MS-Exchange-Organization-Network-Message-Id: a605c686-6ed0-4280-45d5-08d6d272b6d4
X-MS-Exchange-Organization-AVStamp-Mailbox: SMEXzs^g;1498100;0;This mail has
 been scanned by Trend Micro ScanMail for Microsoft Exchange;
X-MS-Exchange-Organization-SCL: 5
X-MS-Exchange-Organization-AuthSource: MBX02D-ORD1.mex08.mlsrvr.com
X-MS-Exchange-Organization-AuthAs: Anonymous
Content-type: text/plain;
	charset="UTF-8"
Content-transfer-encoding: quoted-printable