MRS.INNA KHODORKOVSKY GREETINGS

DR. WEST PRIVATE MEDICAL
CENTER PETROVERIGSKY PER.10
101990 MOSCOW RUSSIAN FEDERATION

Dear

I AM MRS.INNA KHODORKOVSKY WIFE TO LATE MR. MIKHAIL BORIS KHODORKOVSKY OF BLESSED MEMORY WHO IS AN OIL EXPLORER IN SINGAPORE AND KUWAIT FOR TWENTY FIVE YEARS AND FOUR MONTHS. BEFORE HE DIED IN THE YEAR 2010.WE WERE MARRIED FOR TWELVE YEARS WITHOUT A CHILD. HE DIED AFTER A BRIEF ILLNESS THAT LASTED FOR ONLY FOUR DAYS AFTER HIS DEATH I TOO HAVE BEEN BATTLING WITH BOTH CANCER AND FIBROID PROBLEMS.WHEN MY HUSBAND WAS ALIVE HE DEPOSITED THE SUM OF $38,000,000 (THIRTY EIGHT MILLION UNITED STATE DOLLARS) SOME WERE IN OVERSEAS. RECENTLY MY DOCTOR TOLD ME THAT I HAVE ONLY SIX MONTHS TO LIVE DUE TO CANCER PROBLEM, THOUGH WHAT DISTURBS ME MOST IS MY CANCER SICKNESS AND HAVING KNOWN MY CONDITION I DECIDED TO DONATE THIS FUND TO EITHER A CHRISTIAN OR MUSLIM ORGANIZATION OR A DEVOTED CHRISTIAN OR MUSLIM INDIVIDUAL WHO WILL UTILIZE THIS MONEY THE WAY I AM GOING TO INSTRUCT HEREIN. I WANT THIS CHRISTIAN OR MUSLIM ORGANIZATION OR INDIVIDUAL TO USE THIS MONEY IN ALL SINCERITY TO FUND MOSQUE OR CHURCHES, ORPHANAGE, WIDOWS AND GENERALLY PEOPLE IN NEED. I TOOK THIS DECISION BECAUSE I DON'T HAVE ANY CHILD THAT WILL INHERIT THIS MONEY AND MY HUSBANDS RELATIVES ARE SO SELFISH AND HAVE LOATHED THE REST OF MY LATE HUSBANDS PROPERTIES. SO I DON'T WANT A SITUATION WHERE BY THIS MONEY WILL BE USED IN WASTEFUL MANNER, HENCE THE REASONS FOR THIS BOLD DECISION. I DON'T NEED ANY TELEPHONE COMMUNICATION IN THIS REGARD BECAUSE OF MY HEALTH, AND ALSO BECAUSE OF THE PRESENCE OF MY HUSBAND'S RELATIVES AROUND ME ALWAYS. I DON' T WANT THEM TO KNOW ABOUT THIS DEVELOPMENT, AS SOON AS I RECEIVE YOUR REPLY, I SHALL GIVE YOU THE CONTACT INFORMATION AND THE COUNTRY IN OVERSEAS WHERE THE MONEY WAS DEPOSITED.I WILL ALSO ISSUE A LETTER OF AUTHORIZATION TO YOU AUTHORIZING THEM TO RELEASE MY FUND TO YOU.I WANT YOU AND THE CHRISTIAN OR MUSLIM COMMUNITY WHERE YOU RESIDE TO ALWAYS PRAY FOR ME. ANY DELAY IN YOUR REPLY WILL GIVE ROOM IN SEARCHING FOR ANOTHER CHRISTIAN OR MUSLIM ORGANIZATION OR A DEVOTED MAN OF GOD FOR SAME PURPOSE. THIS MONEY WILL BE USED TO OPEN A CHARITY ORGANIZATION IN MY NAME WHICH WILL BE CALLED (INNA HOME) IN YOUR COUNTRY BUT WILL BE MANAGED BY YOU.SECONDLY YOU WILL HELP TRANSFER ME TO A BETTER HOSPITAL IN YOUR COUNTRY THAT IS STANDARD AND WELL EQUIPPED BECAUSE WERE I AM PRESENTLY DON’T HAVE STANDARD EQUIPMENTS TO TREAT ME. YOU WILL DO THIS WHEN YOU RECEIVE MY MONEY SO THAT I CAN SEE IF I WILL LIVE MORE DAYS. DUE I WILL TELL YOU HOW MUCH YOU WILL TAKE FROM THIS MONEY FOR YOUR OWN PERSONAL USE AND THE REST WILL BE USED AS I HAVE INSTRUCTED. TILL I HEAR FROM YOU, MY DREAMS WILL REST SQUARELY ON YOUR SHOULDERS. I WILL SEND YOU MY PICTURE IN THE HOSPITAL, AND MY CERTIFICATE OF DEPOSIT AS AT THE TIME OF DEPOSIT. PLEASE MY DEAR, AM SORRY TO TELL YOU THIS, THERE WILL BE A LITTLE EXPENSES TO BE MADE BY BOTH OF US, SINCE MY LATE HUSBAND DEPOSITED THIS $38 MILLION IN A SECURITY COMPANY IN THE YEAR 2010 AND IT HAS ACCUMULATED A DEMURRAGE FEE.

IF ALL I HAVE WRITTEN IS OK WITH YOU, SEND ACROSS TO ME THE FOLLOWING

(1) YOUR FULL NAMES
(2) YOUR TELEPHONE NUMBER
(3) AGE AND OCCUPATION
(4) MARITAL STATUS AND ADDRESS

FOR FURTHER PROCESSING TO RECEIVE MY FUND ON YOUR NAME. AS I READ FROM YOU I WILL FEED YOU WITH MORE DETAILS PLEASE
REGARDS.

MRS. INNA KHODORKOVSKY

Email analysis :

NOTE : mnnakhodorkosky@gmail.com
NOTE : mnnakhodorkosky@mail.com.ru
NOTE : 46.36.217.65 ()

bill 73726332

See you in court !!!

Subpoena for

Matthew Riley

Link analysis :

CLICK : Subpoena for
OPEN : http://techsmart.vn/backup/get.php?id=d2VibWFzdGVyQHJiY2FmZS5jb20=
RESULT : 404 Error...

Email analysis :

NOTE : matthew@trattnerlaw.com
NOTE : Received : from unknown (HELO trattnerlaw.com) (190.108.92.109)

,

Cash Grant

Hello.

I'm Raymond Scott Bells, My wife and I won $50-million Lotto Max cheque,in Edmonton,we have decided to donate to the less privileged and charity projects all over the world, and make at least 5 people millionaires.

To verify, please see our interview by visiting the web page below.

http://www.ctvnews.ca/canada/after-life-of-struggle-alberta-truck-driver-wife-win-50m-lotto-prize-1.2526163

Get back to me with your name,address,Gender,Country and phone number for more details on how you can receive

your Cash Grant.

Here is my personal email raymondsbells@yandex.com contact me as soon as possible.

Stay Bless

Mr Raymond Scott Bells

Email analysis :

NOTE : raymondsbells@yandex.com
NOTE : maggib@btnet.is
NOTE : client-ip=5.23.79.39;

Maerskline Shipping BL (Phishing + Virus)

FYI

Please see attached shipping documents.

1 attachment(s)
Download | View

Best Regards

MAERSK LINE
One Commercial Place, 20th Floor
Norfolk, VA 23510
Phone: 757-857-4800
Fax: 757-852-3232
© Maersk Group.

Virus :

CLICK : DOWNLOAD
OPEN : http://original-documents.alkhalifa.pw/document/FAX_001.zip
RESULT : UNRESPONSIVE

Phishing analysis :

CLICK : View
OPEN : http://eretailday.org/img/shippingdoc/index.html
SCREENSHOT :

VALIDATE : FORM
REDIRECT : https://my.maerskline.com/?_nfpb=true&_pageLabel=page_tracking3_trackSimple

Email analysis :

NOTE : logistics@maerskline.com
NOTE : Received : from unknown (HELO ?192.168.2.254?)
NOTE : (198.72.31.234)

XMAS LOAN OFFER

2% LOAN OFFER APPLY NOW *

You lose sleep at night care how to get a loan?
* Are you looking for a loan to pay the debt?
* Are you looking for a loan to start your own business?
* Are you looking for loans to large projects perform?

CONTACT US TODAY...FAST LOAN INVESTMENT.......forward your reply here :
firstonlineloaninvesment@gmail.com

Fill out the for m to your loan application:

Name:
Country:
Amount Of Loan Needed:
Occupation:
Monthly Income:
Phone:
Length oF The Loan (years):

Note: All mail must be sent to: firstonlineloaninvesment@gmail.com

I hope to live your financial expectations.

Thank You.
2016 FIRST LOAN Co-operation

Email analysis :

NOTE : firstonlineloaninvesment@gmail.com
NOTE : plan_follow@scmt.gov.iq
NOTE : Received : from [41.113.85.128] (port=48514 helo=[172.20.10.5])

NOTE : by alsco.cloudscis.com with esmtpa (Exim 4.87)
NOTE : (envelope-from < plan_follow@scmt.gov.iq >)
NOTE : alsco.cloudscis.com : authenticated_id: plan_follow@scmt.gov.iq

Your LogMein.com subscription has expired! (Virus)

Dear client,

You are receiving this message because your subscription for LogMeIn Central has expired.
We were not able to charge you with the due amount because your credit card was declined.

You can download the bill directly from the LogMeIn website:
https://accounts.logme.in/billing.aspx?clusterid=0724&view_bill_id=3716 4647&file_type=doc

Please use another credit card or payment method in order to avoid complete service interruption.

Event type: Credit Card Declined
Account email: *.*
At: 21/11/2016

If you need more help, visit LogMeIn Support at:
http://solutions.logmein. com/SalesContactUs

Important Security Notice:
LogMeIn will never for your password or other sensitive information by email.

(Please don't reply to this email, as it's sent from an address that's not monitored.)

© LogMeIn Inc

Virus analysis :

CLICK : https://accounts.logme.in/billing.aspx?clusterid=0724&view_bill_id=3716 4647&file_type=doc
OPEN : https://reg.vn/en/view_bill.php?id=d2VibWFzdGVyQHJiY2FmZS5jb20=
DOWNLOAD : lgm_bill89831.doc
lgm_bill89831.doc : VIRUS

lgm_bill89831.doc analysis :

SHA256 : fc1f1845e47d4494a02407c524eb0e94b6484045adb783e90406367ae20a83ac
FILE : lgm_bill89831.doc
ALYac : Trojan.Downloader.W97M.Gen
Ad-Aware : W97M.Downloader.ESE
AegisLab : Troj.Downloader.Msword.Agent!c
Arcabit : W97M.Downloader.ESE
BitDefender : W97M.Downloader.ESE
Cyren : W97M/Nastjencro
ESET-NOD32 : VBA/Kryptik.T
Emsisoft : W97M.Downloader.ESE (B)
F-Prot : New or modified W97M/Nastjencro
F-Secure : Trojan:W97M/Nastjencro.A
GData : W97M.Downloader.ESE
Ikarus : Trojan-Downloader.VBA.Agent 20161121
Kaspersky : Trojan-Downloader.MSWord.Agent.auz
McAfee : W97M/Dropper.cu
McAfee-GW-Edition : W97M/Dropper.cu
eScan : W97M.Downloader.ESE
Microsoft : TrojanDownloader:O97M/Donoff!map
Sophos : Troj/DocDl-FQK
Symantec : W97M.Downloader
Tencent : Win32.Trojan.Inject.Auto
TrendMicro : W2KM_HANCITOR.AUSTT
TrendMicro-HouseCall : W2KM_HANCITOR.AUSTT

Email analysis :

NOTE : billing@secure-lgm.com
NOTE : Received : from wsip-70-165-74-172.hr.hr.cox.net
NOTE : (HELO secure-lgm.com) (70.165.74.172)

IN GOD I TRUST....212

Federal Ministry of Agriculture and Natural Resources
Address FCDA Secretariat, Garki
City Abuja
Phone +234 9 314 1931
Fax +234 9 314 2532
http://www.fmard.gov.ng/
P.M.B. 135, Garki, Abuja, FCT

Dear Friend

It is with trust and confidence that i write to make this urgent business proposal to you.i was assigned by two of my colleague to seek for a foreign partner who will assist us in providing a convenient foreign account in any designated bank abroad for the transfer of us$35,500,000.00 pending on our arrival in your country for utilization and disbursement with the owner of the account.

this amount results from a deliberate inflation of the value of a contract awarded by our ministry - the federal ministry of agriculture (F.M.A)to an expatriate company.the contract has been executed and payment made to the original contractor,remaining the over-invoiced amount of us$35.5 million,which we want to transfer the funds out the country in our favor for disbursement among ourselves.the transfer of this money can only be possible with the help of a foreigner who will be presented as the beneficiary of the fund.

as government officials, we are not allowed to operate foreign accounts,and this is the reason why we decided to contact you. we have agreed that if you/your company can act as the beneficiary of this fund (us$35,500,000.00 million)25% of the total sum will be for you for providing the account while 5% will be set aside for the expenses incurred during the cost of transfer of the fund into your account while 70% will be reserved for us.

we hereby solicit for your assistance in providing a convenient account number in a designated bank abroad where this fund would be transferred.we intend coming over there on the completion of this transfer to secure our own share of the money.

please note that we have been careful and have made all arrangements towards the success and smooth transfer of the fund to your account before you. for security reasons and confidentiality of this transaction, we demand that you should not expose this proposal and the entire transaction to anybody.

we are putting so much trust in you with the hope that you would not betray us. or sit on this money when it is finally transferred into your account.be rest assured that this transaction is 100% risk free. if this proposal is acceptable to you,indicate your interest by sending a email to us including your bank name & address,account number,telephone and fax numbers.

note:our former president Dr.Good luck Ebele Jonathan collaborated with the former chairman of the Economic Financial Crime Commission,Mrs Farida Mzamber Waziri to stop the junior ranks officers from transferring funds out of the country. he sent different publication to many countries in the world as propaganda to discourage all government officials from transferring funds into an overseas account to avoid and save guides the countries economy.

apparently, so that other government officials will not benefits from these( oil windfalls venture) where he has been a culprit alone with his aides.more details about this transaction will be given to you as soon as we receive your positive respond.

note that the particular nature of your company's business is irrelevant to this transaction. if this transaction interests you, your urgent response will be appreciated.

yours faithfully,

Dr.Evans Egobia

Email analysis :

NOTE : drevanegobia2@yahoo.com
NOTE : accdeptfedminagric1@naij.com
NOTE : mail.kapakli.bel.tr
NOTE : Received : from User (197.255.171.250)

NOTE : by MAIL.KAPAKLI.BEL.TR (192.168.34.251)
NOTE : Remote : 212.156.146.234 (mail.kapakli.bel.tr)

DHL DELIVERY COURIER COMPANY

DHL DELIVERY COURIER COMPANY
Rue no. 23 Patte D'oie 03 BP 2147 Cotonuo
Headquarter Cotonuo Benin
E-mail: shipping.unit@web.co.zw
Office Telephone: +229-66673 695

Hello my dear,

Good day and how are you today? Having reviewed all the obstacles and problems surrounding your over due inheritance funds valued $2.5Million USD (Two Million Five Hundred Thousand United States Dollars) payment and your inability to meet up with the charges required due to unnecessary protocols involved. It is my great pleasure to inform you that we have successfully arranged with UBA Bank Director, Dr. Ifeatu Onejeme to covert your above mentioned fund which was originally in a Consignment box into ATM Visa Card and ready for delivery to your door step. I am happy when UBA Bank Director, Dr. Ifeatu Onejeme called me that all the necessary arrangement has been completed that he has converted the total amount into ATM Card in your name, after which I went to DHL Courier Company and have it registered for onward delivery to your address. Kindly study bellow information for your deposit details:

Description: UBA BANK (ATM CARD)
Depositor: Linda Conti
Deposit Number: DHL-101-PL45
Deposit Certificate N0.E405576
Sort/Clearance Code: DHL/101-45/P50

According to Mrs Linda Conti, you can able to withdraw $2,500.00 per each withdrawal at daily limit of $10,000.00 until you withdraw your total $2.5Million from the ATM CARD. So all you need is to write application letter to bellow DHL Courier Company contact information or call their foreign operation department Dr Andrew Leek for immediate delivery schedule of your ATM CARD to any address of your choice.

Contact Person: Dr. Maxwell Kobo (Foreign Operation Department)
DHL Courier Company Cotonuo Benin,
Plot No. 23 Patte D'Oie 03 BP 2147 Cotonuo
Telephone Number: 00 229-666 73 695
Email: shipping.unit@web.co.zw

Don't forget to reconfirm your current data as Dr. Maxwell Kobo requested to enable their delivery agent succeed. Herein is what they need from you

1. Your Full Names:_____________
2. Postal Address:________________
3. Direct Cell Numbers:_______
4. E-mail Address:__________________
5. Sex:_____________________
6.Age:______________________
7. Occupation:__________________
8.Nationality:________________
9.Country Name________________
10.Copy of Your Passport/ Drivers Licenses________________

Please hurry up now as your package might attract more charges if it stays more than 3days with DHL and do keep me posted for record updated.

Thanks and remain blessed

Best Regards,
Mr. Johnson Williams
IMF Head Quarter Dept Reconciliation Committee
Benin Republic

Email analysis :

NOTE : zinou1959@gmail.com
NOTE : imffund65@gmail.com

pin code Number BMW:2551256003/23.

BMW LOTTERY DEPARTMENT
5070 WILSHIRE BLVD
LOS ANGELES. CA 90036
UNITED STATES OF AMERICA.

NOTE: If you received this message in your SPAM/BULK folder, that is because of the restrictions implemented by your Internet Service Provider, we (BMW) urge you to treat it genuinely.

Dear BMW Enthusiast,

This is to inform you that you have been selected for a prize of a brand new 2016 Model BMW 7 Series Car and a Check of $500,000.00usd from international programs held this Final quarter of 2016 in NC, UNITED STATES OF AMERICA. The selection process was carried through a random computerized selection process in our email selection system(ESS), from a database totalling over 250,000 email addresses drawn from all the continents. The BMW Lottery is approved by the British Gaming Board and also Licensed by the International Association of Gaming Regulators (IAGR). To begin the processing of your prize you are to contact our BMW fiduciary claims department for more information as regards procedures to claim your prize.

Verification Agent: Mr. Derek Weir
Contact E-mail: der_weir@mail.com

Contact him by identifying your claim with the pin code Number BMW:2551256003/23. You are also advised to provide him with the under listed information:

1. Name in full.
2. Address.
3. Nationality.
4. Age.
5. Phone/Fax.
6. Present Country.
7. Email address.
8. pin code Number BMW:2551256003/23.

BMW CEO Harald
THE DIRECTOR PROMOTIONS

BMW SALES LOTTERY DEPARTMENT

UNITED STATES OF AMERICA

Email analysis :

NOTE : der_weir@mail.com
NOTE : eric@topperblue.com
NOTE : X-Mdremoteip : 191.55.3.165
NOTE : 114.112.79.15 (smtp14.smtp.yun-idc.com)