Anwer Ghisafon [email protected] +229-7266600

Header Analysis Quick Report
Originating IP: 192.185.82.154
Originating ISP: Cyrusone Llc
City: Houston
Country of Origin: United States
* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by 10.107.130.220 with SMTP id m89csp409693ioi;
Sat, 26 Sep 2015 03:09:54 -0700 (PDT)
X-Received: by 10.66.191.232 with SMTP id hb8mr13322949pac.22.1443262194154;
Sat, 26 Sep 2015 03:09:54 -0700 (PDT)
Return-Path: <[email protected]>
Received: from terracan.websitewelcome.com (terracan.websitewelcome.com. [192.185.82.154])
by mx.google.com with ESMTPS id gl1si11627755pbd.216.2015.09.26.03.09.53
for <<snipped>>
(version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Sat, 26 Sep 2015 03:09:54 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 192.185.82.154 as permitted sender) client-ip=192.185.82.154;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 192.185.82.154 as permitted sender) [email protected]
Received: from [127.0.0.1] (port=12745 helo=webmail.bronhill.com)
by terracan.websitewelcome.com with esmtpa (Exim 4.85)
(envelope-from <[email protected]>)
id 1ZfmQ5-0002w8-JQ; Sat, 26 Sep 2015 05:09:29 -0500
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII;
format=flowed
Content-Transfer-Encoding: 7bit
Date: Sat, 26 Sep 2015 05:09:29 -0500
From: [email protected]
To: undisclosed-recipients:;
Subject: contact me
Reply-To: [email protected]
Mail-Reply-To: [email protected]
Message-ID: <[email protected]>
X-Sender: [email protected]
User-Agent: Roundcube Webmail/1.0.5
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - terracan.websitewelcome.com
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - bronhill.com
X-BWhitelist: no
X-Source-IP: 127.0.0.1
X-Exim-ID: 1ZfmQ5-0002w8-JQ
X-Source:
X-Source-Args:
X-Source-Dir:
X-Source-Sender: (webmail.bronhill.com) [127.0.0.1]:12745
X-Source-Auth: [email protected]
X-Email-Count: 465
X-Source-Cap: YnJvbmhpbGw7a2Vycnk7dGVycmFjYW4ud2Vic2l0ZXdlbGNvbWUuY29t

From The Desk Of Mr Anwer Ghisafon
The Manager Auditing & Accounts Department,
BANK OF AFRICA (B.O.A)
Benin Republic (West Africa)
Website:www.boabenin.com

Attn: Sir,

I am Mr Anwer Ghisafon the manager Audit & Accounts dept. in BANK OF AFRICA (B.O.A). I am writing to request your assistance to transfer the sum of US$11,million [Eleven million, United States dollars) into your accounts.

The above sum belongs to our deceased customer late Dr. Tobias Stitz an German who died along with his entire family in the plane crash of Alaska Airlines Flight 261 which crashed on January 31 2000,
including his wife and only daughter. and since then the fund has been in a suspense account.

After my further investigation, I discovered that Mr Anwer Ghisafon died with his next of kin and according to the laws and constitution guiding this banking institution, it states that after the expiration of (12 TO 13 year) if no body or person comes for the claim as the next of kin, the fund will be transferred to national treasury as unclaimed fund. Because of the static of this transaction I want you to stand as the next of kin so that our bank will accord you the recognition and have the fund transferred to your account.

The total sum will be shared as follows: 50% for me, 50% for you and all incidental expenses that may occur during the transfer process will be incurred by both of us.

The transfer is risk free on both sides hence you will follow my instructions till the fund get to your account. More detailed information's with the official application form will be Forwarded to you to explain more comprehensively what is required of you.

Your Full Name........................
Your Sex..............................
Your Age..............................
Your Country..........................
Your Occupation.......................
Your Personal Mobile Number...........

Thanks
Please contact me immediately
Mr Anwer Ghisafon
Tell: +229-7266600.

Delivered-To: <snipped>
Received: by 10.27.224.10 with SMTP id x10csp140729wlg;
Sat, 3 Oct 2015 03:02:31 -0700 (PDT)
X-Received: by 10.202.224.3 with SMTP id x3mr11307889oig.27.1443866551333;
Sat, 03 Oct 2015 03:02:31 -0700 (PDT)
Return-Path: <[email protected]>
Received: from BAY004-OMC2S8.hotmail.com (bay004-omc2s8.hotmail.com. [65.54.190.83])
by mx.google.com with ESMTPS id kh1si8122274obb.55.2015.10.03.03.02.31
for <<snipped>>
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA bits=128/128);
Sat, 03 Oct 2015 03:02:31 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 65.54.190.83 as permitted sender) client-ip=65.54.190.83;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 65.54.190.83 as permitted sender) [email protected];
dmarc=pass (p=NONE dis=NONE) header.from=outlook.com
Received: from BAY173-W36 ([65.54.190.125]) by BAY004-OMC2S8.hotmail.com over TLS secured channel with Microsoft SMTPSVC(7.5.7601.23008);
Sat, 3 Oct 2015 03:02:29 -0700
X-TMN: [Ylsv+yoPnmq54BkOjxr1ehTYHJ0AByNs]
X-Originating-Email: [[email protected]]
Message-ID: <[email protected]>
Return-Path: [email protected]
Content-Type: multipart/alternative;
boundary="_f3650dae-b03e-421c-bd4b-d12fd47eca5c_"
From: Mr Anwer Ghisafon <[email protected]>
To: <<snipped>>
Subject: Go through the application very well.
Date: Sat, 3 Oct 2015 10:02:29 +0000
Importance: Normal
MIME-Version: 1.0
X-OriginalArrivalTime: 03 Oct 2015 10:02:29.0722 (UTC) FILETIME=[9D3C93A0:01D0FDC2]

Thanks a million times for your acceptance; I promise you that with one mind we will have a smooth transfer of this fund into your account.

Go through the application very well, and fill in your banking information where you would like the bank to re-transfer this fund and send it to me first, so that I will go through it very well before you send it to the Bank to avoid any mistake.

Below is the Application:-

Attn: MR. SAMUEL KOFE.
Foreign Remittance Director
African Development Bank Benin
Cotonou Benin, West Africa
TEL:00229-5282-384/85.
FAX:00229-1324-246/67.
E-MAIL:[email protected]

SUBJECT: APPLICATION AS NEXT OF KIN OF THE DECEASED.

Dear Sir,

I, .................... humbly apply to the bank as next of kin to your deceased customer, Dr. Tobias Stitz Of German, who died in a plane crash. I humbly apply and put claim over his balance with the bank, which is valued at USD$11, left in his account still unclaimed, Until his sudden death, we have been business associates , jointly in exposition and buying of Gold and diamond. The funds were transferred into his account through our bank, FORTES BANK. AMESTERDAM, HOLLAND, for purchase of Gold / Diamond.

I wish to advise your bank to kindly return the funds to this account numbers stated below:-

BENEFICIARY NAME:-
BANK NAME:-
BANK ADDRESS:-
BANK NUMBER :-
BRANCH NUMBER :-
DISIGNATION CODE :-
ACCOUNT NUMBER :-
SWIFT CODE :-
A.B.A. # :-

Wishing my application will be given an urgent attention needed, as I wish the balance be released, and re-transferred into my account details. Accept my apologies for the late application it was due to some logistic problems, which have been just settled.

Thanking you for your anticipation co-operation.
Yours sincerely

Mr. ........................
Tel:-
Fax:-
E-MAIL:-
Occupation:-
Date of Birth:-
ADDRESS:-
Once again i thank you for your concern.

Mr Anwer Ghisafon.

NB. Before you send the application to the bank make sure you send a copy to me first for crosscheeking to avoid any mistake.

Delivered-To: <snipped>
Received: by 10.27.224.10 with SMTP id x10csp1730453wlg;
Tue, 6 Oct 2015 07:34:25 -0700 (PDT)
X-Received: by 10.202.202.14 with SMTP id a14mr19938745oig.73.1444142065079;
Tue, 06 Oct 2015 07:34:25 -0700 (PDT)
Return-Path: <[email protected]>
Received: from BAY004-OMC2S18.hotmail.com (bay004-omc2s18.hotmail.com. [65.54.190.93])
by mx.google.com with ESMTPS id p65si16356823oig.2.2015.10.06.07.34.24
for <<snipped>>
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA bits=128/128);
Tue, 06 Oct 2015 07:34:25 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 65.54.190.93 as permitted sender) client-ip=65.54.190.93;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 65.54.190.93 as permitted sender) [email protected];
dmarc=pass (p=NONE dis=NONE) header.from=outlook.com
Received: from BAY173-W17 ([65.54.190.124]) by BAY004-OMC2S18.hotmail.com over TLS secured channel with Microsoft SMTPSVC(7.5.7601.23008);
Tue, 6 Oct 2015 07:34:17 -0700
X-TMN: [DhnOAVCezpXShjujA25jGkgGbbPELmlH]
X-Originating-Email: [[email protected]]
Message-ID: <[email protected]>
Return-Path: [email protected]
Content-Type: multipart/alternative;
boundary="_d2a2df65-d340-4fb4-a638-a3433c2f0774_"
From: Mr Anwer Ghisafon <[email protected]>
To: <<snipped>>
Subject: The application you forwarded to me is OK.
Date: Tue, 6 Oct 2015 14:34:16 +0000
Importance: Normal
MIME-Version: 1.0
X-OriginalArrivalTime: 06 Oct 2015 14:34:17.0184 (UTC) FILETIME=[147B0E00:01D10044]

Dear Brother ,
Thanks a million times for the assistance you are giving to me.
The application you forwarded to me is OK,go ahead and send it to the bank.
My dear Mr Michelle , you know that nobody in the bank knows that i am the one giving you all the information about the fund so nobody in the bank should even know that i know you since I'm still working in this bank .

So as soon as the fund is transferred into your account and you confirm and inform me I will come down to your country for disbursement and further investment in your country in any business you advice me to invest in,and I also wish to settle down with my family there.
Note, that this transaction lies in your hands as from now. I have done the required underground work and will always advice and furnish you on what to do at every given time. I am a respected woman in the society and will not want to jeopardize my family name that I have taken a long time to build to this level and my good reputation deeds with this bank for many years now.

You should always act like someone who really wishes to have his deceased brother's money claimed and transferred.

Send it to foreign remittance department by e-mail attachment. ( [email protected] ) If she ask you how you get her privet email address, tell her that you have her email address from your brother's file jacket information.
This is very important.You should always get in touch with me at every time for the update and every development.
This transaction will last for just 7 working days as soon as the application is tendered to the bank. Again any advise you will give me for further investment purpose in your country will be highly welcome my dear.

If i should remind you once more, immediately you tender this application to the bank,business starts immediately.
You should then start acting like someone who wishes to have his brothers fund inherited and transferred into his bank account as the procedure
requires.
Once again i thank you for your concern.

Mr Anwer Ghisafon.

First email reply from [email protected]:

Delivered-To: <snipped>
Received: by 10.27.224.10 with SMTP id x10csp865380wlg;
Fri, 9 Oct 2015 01:11:04 -0700 (PDT)
X-Received: by 10.107.18.231 with SMTP id 100mr13389073ios.15.1444378264796;
Fri, 09 Oct 2015 01:11:04 -0700 (PDT)
Return-Path: <[email protected]>
Received: from nm5-vm2.bullet.mail.ne1.yahoo.com (nm5-vm2.bullet.mail.ne1.yahoo.com. [98.138.90.153])
by mx.google.com with ESMTPS id kc3si10104834igb.74.2015.10.09.01.11.04
for <<snipped>>
(version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128);
Fri, 09 Oct 2015 01:11:04 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 98.138.90.153 as permitted sender) client-ip=98.138.90.153;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 98.138.90.153 as permitted sender) [email protected];
dkim=pass [email protected];
dmarc=pass (p=REJECT dis=NONE) header.from=yahoo.com
DKIM-Signature: <snipped>
Received: from [98.138.226.179] by nm5.bullet.mail.ne1.yahoo.com with NNFMP; 09 Oct 2015 08:11:04 -0000
Received: from [98.138.89.250] by tm14.bullet.mail.ne1.yahoo.com with NNFMP; 09 Oct 2015 08:11:03 -0000
Received: from [127.0.0.1] by omp1042.mail.ne1.yahoo.com with NNFMP; 09 Oct 2015 08:11:03 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
X-YMail-OSG: <snipped>
Received: by 98.138.101.170; Fri, 09 Oct 2015 08:11:03 +0000
Date: Fri, 9 Oct 2015 08:11:02 +0000 (UTC)
From: Miss Sogolo <[email protected]>
Reply-To: Miss Sogolo <[email protected]>
To: <<snipped>>
References: <CA+67fMha3hg6ZMnys=CTHBUZbGODYk_g93NHB3B_DNVnFaRUzQ@mail.gmail.com>
Subject: ATTN:
MIME-Version: 1.0

REF: ADB/BRIX-TM/VOL.2015 YOUR REF… Date: Friday October 9.
FROM: MR SAMUEL KOFI.

Foreign Remittance Director (ADB)

ATTN:

SIR/MADAM,
THIS IS TO INFORM YOU THAT THE BANK HAVE RECEIVE YOUR APPLICATION SUBMITTED TO OUR OFFICE ON OCT 7 AT 3:01PM AS THE NEXT OF KIN TO OUR LATE CUSTOMER DR. TOBIAS STITZ.
ACCEPT OUR SYMPATHY FOR THE DEATH OF YOUR BROTHER WHO IS ONE OF OUR BEST CUSTOMER. THE BANK WILL GET BACK TO YOU AFTER BOARD OF DIRECTOR'S MEETING TODAY.
YOURS SINCERELY,
MRS. HALEN CHARLES

PUBLICITY SECRETARY.

Director Foreign Remittance Dept. (ADB)



Second email from [email protected]:

Delivered-To: <snipped>
Received: by 10.27.204.2 with SMTP id c2csp851977wlg;
Mon, 12 Oct 2015 07:23:47 -0700 (PDT)
X-Received: by 10.50.30.7 with SMTP id o7mr9452377igh.90.1444659826890;
Mon, 12 Oct 2015 07:23:46 -0700 (PDT)
Return-Path: <[email protected]>
Received: from nm6.bullet.mail.ne1.yahoo.com (nm6.bullet.mail.ne1.yahoo.com. [98.138.90.69])
by mx.google.com with ESMTPS id t70si12196586ioi.204.2015.10.12.07.23.46
for <<snipped>>
(version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128);
Mon, 12 Oct 2015 07:23:46 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 98.138.90.69 as permitted sender) client-ip=98.138.90.69;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 98.138.90.69 as permitted sender) [email protected];
dkim=pass [email protected];
dmarc=pass (p=REJECT dis=NONE) header.from=yahoo.com
DKIM-Signature: <snipped>
Received: from [98.138.100.112] by nm6.bullet.mail.ne1.yahoo.com with NNFMP; 12 Oct 2015 14:23:45 -0000
Received: from [98.138.87.5] by tm103.bullet.mail.ne1.yahoo.com with NNFMP; 12 Oct 2015 14:23:45 -0000
Received: from [127.0.0.1] by omp1005.mail.ne1.yahoo.com with NNFMP; 12 Oct 2015 14:23:45 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
X-YMail-OSG: <snipped>
Received: by 98.138.105.222; Mon, 12 Oct 2015 14:23:44 +0000
Date: Mon, 12 Oct 2015 14:23:44 +0000 (UTC)
From: Miss Sogolo <[email protected]>
Reply-To: Miss Sogolo <[email protected]>
To: <<snipped>>
References: <CA+67fMha3hg6ZMnys=CTHBUZbGODYk_g93NHB3B_DNVnFaRUzQ@mail.gmail.com>
Subject: ATTN:
MIME-Version: 1.0

REF: ADB/BRIX-TM/VOL.2015 YOUR REF… Date: Monday October 12.
FROM: MR SAMUEL KOFI.
Foreign Remittance Director (ADB)


ATTN:

Subject: ACKNOWLEDGMENT ON THE SUBMITTED APPLICATION.

This is to bring to your notice that we are in receipt of your application letter submitted to our bank on Oct 7 at 3:01 PM, putting claims as the next of kin to our deceased customer Dr. Tobias Stitz Of German, with his balance with our bank amounting to USD$11 Million U.S Dollars.

Therefore, your application have been forwarded to the appropriate bodies concerned for approval and you will be intimated on the model of transfer into your nominated bank account as stated. Further advised to view an Attached copy of Official Questionnaire which you will fill and return back to this bank with a Copy of your
International Passport or any of your I.D for onward Verification and approval accordingly.

Note, you are therefore, given 48 banking hours to comply to this directives and acknowledge the receipt of this message immediately for onward instructions and directives as we will not tolerate any atom of delay from any beneficiary whom it may concern.

Thanks for your co-operation

YOURS SINCERELY,
MRS. HALEN CHARLES
PUBLICITY SECRETARY.

Director Foreign Remittance Dept. (ADB).

Delivered-To: <snipped>
Received: by 10.27.204.2 with SMTP id c2csp1548701wlg;
Tue, 13 Oct 2015 11:34:55 -0700 (PDT)
X-Received: by 10.60.117.170 with SMTP id kf10mr19828786oeb.60.1444761295862;
Tue, 13 Oct 2015 11:34:55 -0700 (PDT)
Return-Path: <[email protected]>
Received: from BAY004-OMC2S21.hotmail.com (bay004-omc2s21.hotmail.com. [65.54.190.96])
by mx.google.com with ESMTPS id x62si2468326oig.106.2015.10.13.11.34.55
for <<snipped>>
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA bits=128/128);
Tue, 13 Oct 2015 11:34:55 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 65.54.190.96 as permitted sender) client-ip=65.54.190.96;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 65.54.190.96 as permitted sender) [email protected];
dmarc=pass (p=NONE dis=NONE) header.from=outlook.com
Received: from BAY173-W31 ([65.54.190.123]) by BAY004-OMC2S21.hotmail.com over TLS secured channel with Microsoft SMTPSVC(7.5.7601.23008);
Tue, 13 Oct 2015 11:34:44 -0700
X-TMN: [6EUddBK8W8tlmz05fxAi4LFBcewDPp6V]
X-Originating-Email: [[email protected]]
Message-ID: <[email protected]>
Return-Path: [email protected]
Content-Type: multipart/alternative;
boundary="_50b16a6a-851e-4d28-961b-74708220d04b_"
From: Mr Anwer Ghisafon <[email protected]>
To: <<snipped>>
Subject: THE ANSWERS.
Date: Tue, 13 Oct 2015 18:34:44 +0000
Importance: Normal
MIME-Version: 1.0
X-OriginalArrivalTime: 13 Oct 2015 18:34:44.0872 (UTC) FILETIME=[D4F1C880:01D105E5]

MY BELOVED ,

I THANK YOU FOR THE INFORMATION YOU SENT TO ME AND AFTER OPENING IT I FOUND CATEGORY A OFFICIAL QUESTIONNAIRE FROM THE BANK.

GOD BLESS YOU AND YOUR FAMILY FOR YOUR COOPERATION IN THIS TRANSACTION AND THANKS FOR INFORMING ME ABOUT THIS AS I WAS A BIT WORRIED.

WE ARE MOVING AHEAD, CORRECTLY AND FAST. THE GODS CHILDREN WILL ALWAYS PREVAIL IN EVERYTHING THEY DO.THE BANK OFFICIALS ARE ALL EXCITED THAT THE NEXT OF KIN TO THIS DECEASED CUSTOMER IS APPLYING AFTER SEVERAL YEARS OF SILENCE BECAUSE NOBODY IN THE BANK WANTS THE FUNDS TO BE PUSHED INTO THE BANK TREASURY THEREBY THE GOVERNMENT WILL USING THE FUNDS.

I GIVE MY THANKS AND PRAISES TO THE ALMIGHTY GOD FOR GIVING ME THIS IDEA AND I WILL BE EXCITED THE DAY THE FUNDS WILL BE RELEASED AND WIRED TO YOUR ACCOUNT.

I WILL BE PUTTING IN AN APPLICATION FOR A LEAVE BY NEXT WEEK SO THAT IT WILL FALL INTO WHEN THE FUNDS WILL BE RELEASED TO YOUR ACCOUNT TO ENABLE ME COME OVER TO YOUR COUNTRY FOR SHARING ACCORDING TO PERCENTAGES INDICATED, AND FOR FURTHER INVESTMENT.

THE ANSWERS AS WRITTEN BY THE DECEASED IN HIS SECURITY FILE JACKET IS AS FOLLOWS.

CATEGORY "A" OFFICIAL QUESTIONNAIRE

1. What is the name of the deceased customer?………… Dr.Tobias Stitz
2. What is his nationality?……………………………………………………………....…...Germany
3. What is your relationship with the deceased customer?……………………………...(Step Brother)
4. How old was he when he died? ………………………………………………………...(52 YEARS ONLY.)
5. When exactly did he die and what led to his death?……………plane crash of Alaska Airlines Flight 261 which crashed on January 31 2000,
6. What was the deceased customer’s profession?……………………………………. (IMPORTER AND EXPORTER OF CARS.)
7. Does the deceased customer own a firm in this country before his death?………..Yes
8. If yes, what was the name of the firm and its registration N°?……….…………….1098
9. What kind of account was he operating with this bank?……………………………..current account
10. What was his account number?…. ……………………………………………………..ADB2122986539.
11. Was he/she married? ………………………………………………………….…………Yes
12. If yes, what is the name of his/her wife/husband?…………………………….………ROSELINE Stitz
13. Did they have any child/children? ………………………………………………….......Yes
14. If yes, how many are they, what were their sexes and what were their names?……………………Anna …………………………..daughter.
15. State clearly his residence address here in Benin Republic?........ ( THE DECEASED RESIDENTIAL ADDRESS HERE WAS 19 RUE DE AVENUE AVAKPA DU BENIN REPUBLIC).

Mr Anwer Ghisafon.