Friday, November 25, 2016

Dear in Christ.

Donation From Mrs Jessica Sebastian
BP [38 Rue Des Martyrs Cocody)
Abidjan, Cote d'Ivoire,

Dear in Christ.

I am Mrs Jessica Sebastian an ageing widow suffering from long time illness. I am currently admitted in a private hospital in Abidjan Cote d‘Ivoire,I have some funds I inherited from my late loving husband Mr Raymond Sebastian, the sum of £ 5.200.000 ( Five Million Two Hundred Thousand Euro ) which he deposited in bank here and I need a very honest and God fearing Christian that can use these funds for God's work and 15% out of the total funds will be for your compensation for doing this work of God.I found your email address from the internet and decided to contact you

Please if you would be able to use these funds for the Lord's work kindly reply me.

Send me the following information's as per below.

Your full names........................
Address .......................
Age ...............................
Occupation ....................................
photo................................

Your Sister in the Lord.
Mrs. Jessica Sebastian

Email analysis :

NOTE : sabastian_jessica@yahoo.com
NOTE : jessica.sabastian13@gmail.com
NOTE : X-Rocketymmf : gojo_t
NOTE : X-Mailer : YahooMailWebService/0.8.111_70
NOTE : Received : from [178.162.216.35]

Toyota Job Recruitment Offer

Attention;

Toyota Motor Corporation is glad to inform you that you have been shortlisted to work with our company in the UK. For more details, see attached letter and confirm your acceptance by email as soon as possible.

Sincerely,
David Crouch,
General Recruitment Manager, PR

Email analysis :

NOTE : toyota.recruitments@gmail.com
NOTE : admin@noreply.com
NOTE : 94.182.146.33 ()

MRS.INNA KHODORKOVSKY GREETINGS

DR. WEST PRIVATE MEDICAL
CENTER PETROVERIGSKY PER.10
101990 MOSCOW RUSSIAN FEDERATION

Dear

I AM MRS.INNA KHODORKOVSKY WIFE TO LATE MR. MIKHAIL BORIS KHODORKOVSKY OF BLESSED MEMORY WHO IS AN OIL EXPLORER IN SINGAPORE AND KUWAIT FOR TWENTY FIVE YEARS AND FOUR MONTHS. BEFORE HE DIED IN THE YEAR 2010.WE WERE MARRIED FOR TWELVE YEARS WITHOUT A CHILD. HE DIED AFTER A BRIEF ILLNESS THAT LASTED FOR ONLY FOUR DAYS AFTER HIS DEATH I TOO HAVE BEEN BATTLING WITH BOTH CANCER AND FIBROID PROBLEMS.WHEN MY HUSBAND WAS ALIVE HE DEPOSITED THE SUM OF $38,000,000 (THIRTY EIGHT MILLION UNITED STATE DOLLARS) SOME WERE IN OVERSEAS. RECENTLY MY DOCTOR TOLD ME THAT I HAVE ONLY SIX MONTHS TO LIVE DUE TO CANCER PROBLEM, THOUGH WHAT DISTURBS ME MOST IS MY CANCER SICKNESS AND HAVING KNOWN MY CONDITION I DECIDED TO DONATE THIS FUND TO EITHER A CHRISTIAN OR MUSLIM ORGANIZATION OR A DEVOTED CHRISTIAN OR MUSLIM INDIVIDUAL WHO WILL UTILIZE THIS MONEY THE WAY I AM GOING TO INSTRUCT HEREIN. I WANT THIS CHRISTIAN OR MUSLIM ORGANIZATION OR INDIVIDUAL TO USE THIS MONEY IN ALL SINCERITY TO FUND MOSQUE OR CHURCHES, ORPHANAGE, WIDOWS AND GENERALLY PEOPLE IN NEED. I TOOK THIS DECISION BECAUSE I DON'T HAVE ANY CHILD THAT WILL INHERIT THIS MONEY AND MY HUSBANDS RELATIVES ARE SO SELFISH AND HAVE LOATHED THE REST OF MY LATE HUSBANDS PROPERTIES. SO I DON'T WANT A SITUATION WHERE BY THIS MONEY WILL BE USED IN WASTEFUL MANNER, HENCE THE REASONS FOR THIS BOLD DECISION. I DON'T NEED ANY TELEPHONE COMMUNICATION IN THIS REGARD BECAUSE OF MY HEALTH, AND ALSO BECAUSE OF THE PRESENCE OF MY HUSBAND'S RELATIVES AROUND ME ALWAYS. I DON' T WANT THEM TO KNOW ABOUT THIS DEVELOPMENT, AS SOON AS I RECEIVE YOUR REPLY, I SHALL GIVE YOU THE CONTACT INFORMATION AND THE COUNTRY IN OVERSEAS WHERE THE MONEY WAS DEPOSITED.I WILL ALSO ISSUE A LETTER OF AUTHORIZATION TO YOU AUTHORIZING THEM TO RELEASE MY FUND TO YOU.I WANT YOU AND THE CHRISTIAN OR MUSLIM COMMUNITY WHERE YOU RESIDE TO ALWAYS PRAY FOR ME. ANY DELAY IN YOUR REPLY WILL GIVE ROOM IN SEARCHING FOR ANOTHER CHRISTIAN OR MUSLIM ORGANIZATION OR A DEVOTED MAN OF GOD FOR SAME PURPOSE. THIS MONEY WILL BE USED TO OPEN A CHARITY ORGANIZATION IN MY NAME WHICH WILL BE CALLED (INNA HOME) IN YOUR COUNTRY BUT WILL BE MANAGED BY YOU.SECONDLY YOU WILL HELP TRANSFER ME TO A BETTER HOSPITAL IN YOUR COUNTRY THAT IS STANDARD AND WELL EQUIPPED BECAUSE WERE I AM PRESENTLY DON’T HAVE STANDARD EQUIPMENTS TO TREAT ME. YOU WILL DO THIS WHEN YOU RECEIVE MY MONEY SO THAT I CAN SEE IF I WILL LIVE MORE DAYS. DUE I WILL TELL YOU HOW MUCH YOU WILL TAKE FROM THIS MONEY FOR YOUR OWN PERSONAL USE AND THE REST WILL BE USED AS I HAVE INSTRUCTED. TILL I HEAR FROM YOU, MY DREAMS WILL REST SQUARELY ON YOUR SHOULDERS. I WILL SEND YOU MY PICTURE IN THE HOSPITAL, AND MY CERTIFICATE OF DEPOSIT AS AT THE TIME OF DEPOSIT. PLEASE MY DEAR, AM SORRY TO TELL YOU THIS, THERE WILL BE A LITTLE EXPENSES TO BE MADE BY BOTH OF US, SINCE MY LATE HUSBAND DEPOSITED THIS $38 MILLION IN A SECURITY COMPANY IN THE YEAR 2010 AND IT HAS ACCUMULATED A DEMURRAGE FEE.

IF ALL I HAVE WRITTEN IS OK WITH YOU, SEND ACROSS TO ME THE FOLLOWING

(1) YOUR FULL NAMES
(2) YOUR TELEPHONE NUMBER
(3) AGE AND OCCUPATION
(4) MARITAL STATUS AND ADDRESS

FOR FURTHER PROCESSING TO RECEIVE MY FUND ON YOUR NAME. AS I READ FROM YOU I WILL FEED YOU WITH MORE DETAILS PLEASE
REGARDS.

MRS. INNA KHODORKOVSKY

Email analysis :

NOTE : mnnakhodorkosky@gmail.com
NOTE : mnnakhodorkosky@mail.com.ru
NOTE : 46.36.217.65 ()

Thursday, November 24, 2016

bill 73726332

See you in court !!!

Subpoena for

Matthew Riley

Link analysis :

CLICK : Subpoena for
OPEN : http://techsmart.vn/backup/get.php?id=d2VibWFzdGVyQHJiY2FmZS5jb20=
RESULT : 404 Error...

Email analysis :

NOTE : matthew@trattnerlaw.com
NOTE : Received : from unknown (HELO trattnerlaw.com) (190.108.92.109)

,

Cash Grant

Hello.

I'm Raymond Scott Bells, My wife and I won $50-million Lotto Max cheque,in Edmonton,we have decided to donate to the less privileged and charity projects all over the world, and make at least 5 people millionaires.

To verify, please see our interview by visiting the web page below.

http://www.ctvnews.ca/canada/after-life-of-struggle-alberta-truck-driver-wife-win-50m-lotto-prize-1.2526163

Get back to me with your name,address,Gender,Country and phone number for more details on how you can receive

your Cash Grant.

Here is my personal email raymondsbells@yandex.com contact me as soon as possible.

Stay Bless

Mr Raymond Scott Bells

Email analysis :

NOTE : raymondsbells@yandex.com
NOTE : maggib@btnet.is
NOTE : client-ip=5.23.79.39;

Tuesday, November 22, 2016

Maerskline Shipping BL (Phishing + Virus)

FYI

Please see attached shipping documents.

1 attachment(s)
Download | View

Best Regards

MAERSK LINE
One Commercial Place, 20th Floor
Norfolk, VA 23510
Phone: 757-857-4800
Fax: 757-852-3232
© Maersk Group.

Virus :

CLICK : DOWNLOAD
OPEN : http://original-documents.alkhalifa.pw/document/FAX_001.zip
RESULT : UNRESPONSIVE

Phishing analysis :

CLICK : View
OPEN : http://eretailday.org/img/shippingdoc/index.html
SCREENSHOT :


VALIDATE : FORM
REDIRECT : https://my.maerskline.com/?_nfpb=true&_pageLabel=page_tracking3_trackSimple

Email analysis :

NOTE : logistics@maerskline.com
NOTE : Received : from unknown (HELO ?192.168.2.254?)
NOTE : (198.72.31.234)

XMAS LOAN OFFER

2% LOAN OFFER APPLY NOW *

You lose sleep at night care how to get a loan?
* Are you looking for a loan to pay the debt?
* Are you looking for a loan to start your own business?
* Are you looking for loans to large projects perform?

CONTACT US TODAY...FAST LOAN INVESTMENT.......forward your reply here :
firstonlineloaninvesment@gmail.com

Fill out the for m to your loan application:

Name:
Country:
Amount Of Loan Needed:
Occupation:
Monthly Income:
Phone:
Length oF The Loan (years):

Note: All mail must be sent to: firstonlineloaninvesment@gmail.com

I hope to live your financial expectations.

Thank You.
2016 FIRST LOAN Co-operation

Email analysis :

NOTE : firstonlineloaninvesment@gmail.com
NOTE : plan_follow@scmt.gov.iq
NOTE : Received : from [41.113.85.128] (port=48514 helo=[172.20.10.5])


NOTE : by alsco.cloudscis.com with esmtpa (Exim 4.87)
NOTE : (envelope-from < plan_follow@scmt.gov.iq >)
NOTE : alsco.cloudscis.com : authenticated_id: plan_follow@scmt.gov.iq

Your LogMein.com subscription has expired! (Virus)

Dear client,

You are receiving this message because your subscription for LogMeIn Central has expired.
We were not able to charge you with the due amount because your credit card was declined.

You can download the bill directly from the LogMeIn website:
https://accounts.logme.in/billing.aspx?clusterid=0724&view_bill_id=3716 4647&file_type=doc

Please use another credit card or payment method in order to avoid complete service interruption.

Event type: Credit Card Declined
Account email: *.*
At: 21/11/2016

If you need more help, visit LogMeIn Support at:
http://solutions.logmein. com/SalesContactUs

Important Security Notice:
LogMeIn will never for your password or other sensitive information by email.

(Please don't reply to this email, as it's sent from an address that's not monitored.)

© LogMeIn Inc

Virus analysis :

CLICK : https://accounts.logme.in/billing.aspx?clusterid=0724&view_bill_id=3716 4647&file_type=doc
OPEN : https://reg.vn/en/view_bill.php?id=d2VibWFzdGVyQHJiY2FmZS5jb20=
DOWNLOAD : lgm_bill89831.doc
lgm_bill89831.doc : VIRUS


lgm_bill89831.doc analysis :

SHA256 : fc1f1845e47d4494a02407c524eb0e94b6484045adb783e90406367ae20a83ac
FILE : lgm_bill89831.doc
ALYac : Trojan.Downloader.W97M.Gen
Ad-Aware : W97M.Downloader.ESE
AegisLab : Troj.Downloader.Msword.Agent!c
Arcabit : W97M.Downloader.ESE
BitDefender : W97M.Downloader.ESE
Cyren : W97M/Nastjencro
ESET-NOD32 : VBA/Kryptik.T
Emsisoft : W97M.Downloader.ESE (B)
F-Prot : New or modified W97M/Nastjencro
F-Secure : Trojan:W97M/Nastjencro.A
GData : W97M.Downloader.ESE
Ikarus : Trojan-Downloader.VBA.Agent 20161121
Kaspersky : Trojan-Downloader.MSWord.Agent.auz
McAfee : W97M/Dropper.cu
McAfee-GW-Edition : W97M/Dropper.cu
eScan : W97M.Downloader.ESE
Microsoft : TrojanDownloader:O97M/Donoff!map
Sophos : Troj/DocDl-FQK
Symantec : W97M.Downloader
Tencent : Win32.Trojan.Inject.Auto
TrendMicro : W2KM_HANCITOR.AUSTT
TrendMicro-HouseCall : W2KM_HANCITOR.AUSTT

Email analysis :

NOTE : billing@secure-lgm.com
NOTE : Received : from wsip-70-165-74-172.hr.hr.cox.net
NOTE : (HELO secure-lgm.com) (70.165.74.172)

IN GOD I TRUST....212

Federal Ministry of Agriculture and Natural Resources
Address FCDA Secretariat, Garki
City Abuja
Phone +234 9 314 1931
Fax +234 9 314 2532
http://www.fmard.gov.ng/
P.M.B. 135, Garki, Abuja, FCT

Dear Friend

It is with trust and confidence that i write to make this urgent business proposal to you.i was assigned by two of my colleague to seek for a foreign partner who will assist us in providing a convenient foreign account in any designated bank abroad for the transfer of us$35,500,000.00 pending on our arrival in your country for utilization and disbursement with the owner of the account.

this amount results from a deliberate inflation of the value of a contract awarded by our ministry - the federal ministry of agriculture (F.M.A)to an expatriate company.the contract has been executed and payment made to the original contractor,remaining the over-invoiced amount of us$35.5 million,which we want to transfer the funds out the country in our favor for disbursement among ourselves.the transfer of this money can only be possible with the help of a foreigner who will be presented as the beneficiary of the fund.

as government officials, we are not allowed to operate foreign accounts,and this is the reason why we decided to contact you. we have agreed that if you/your company can act as the beneficiary of this fund (us$35,500,000.00 million)25% of the total sum will be for you for providing the account while 5% will be set aside for the expenses incurred during the cost of transfer of the fund into your account while 70% will be reserved for us.

we hereby solicit for your assistance in providing a convenient account number in a designated bank abroad where this fund would be transferred.we intend coming over there on the completion of this transfer to secure our own share of the money.

please note that we have been careful and have made all arrangements towards the success and smooth transfer of the fund to your account before you. for security reasons and confidentiality of this transaction, we demand that you should not expose this proposal and the entire transaction to anybody.

we are putting so much trust in you with the hope that you would not betray us. or sit on this money when it is finally transferred into your account.be rest assured that this transaction is 100% risk free. if this proposal is acceptable to you,indicate your interest by sending a email to us including your bank name & address,account number,telephone and fax numbers.

note:our former president Dr.Good luck Ebele Jonathan collaborated with the former chairman of the Economic Financial Crime Commission,Mrs Farida Mzamber Waziri to stop the junior ranks officers from transferring funds out of the country. he sent different publication to many countries in the world as propaganda to discourage all government officials from transferring funds into an overseas account to avoid and save guides the countries economy.

apparently, so that other government officials will not benefits from these( oil windfalls venture) where he has been a culprit alone with his aides.more details about this transaction will be given to you as soon as we receive your positive respond.

note that the particular nature of your company's business is irrelevant to this transaction. if this transaction interests you, your urgent response will be appreciated.

yours faithfully,

Dr.Evans Egobia

Email analysis :

NOTE : drevanegobia2@yahoo.com
NOTE : accdeptfedminagric1@naij.com
NOTE : mail.kapakli.bel.tr
NOTE : Received : from User (197.255.171.250)


NOTE : by MAIL.KAPAKLI.BEL.TR (192.168.34.251)
NOTE : Remote : 212.156.146.234 (mail.kapakli.bel.tr)