Kevin Kessinger [email protected] +44-7937411892

Header Analysis Quick Report
Originating IP: 198.57.177.175
Originating ISP: Unified Layer
City: Provo
Country of Origin: United States
* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by 10.107.170.86 with SMTP id t83csp1263628ioe;
Fri, 26 Jun 2015 06:43:34 -0700 (PDT)
X-Received: by 10.66.62.202 with SMTP id a10mr3641157pas.42.1435326213826;
Fri, 26 Jun 2015 06:43:33 -0700 (PDT)
Return-Path: <[email protected]>
Received: from server.ticsic.com (server.ticsic.com. [198.57.177.175])
by mx.google.com with ESMTPS id re12si50611184pdb.36.2015.06.26.06.43.12
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Fri, 26 Jun 2015 06:43:33 -0700 (PDT)
Received-SPF: softfail (google.com: domain of transitioning [email protected] does not designate 198.57.177.175 as permitted sender) client-ip=198.57.177.175;
Authentication-Results: mx.google.com;
spf=softfail (google.com: domain of transitioning [email protected] does not designate 198.57.177.175 as permitted sender) [email protected];
dmarc=fail (p=NONE dis=NONE) header.from=outlook.com
Received: from localhost ([127.0.0.1]:43589 helo=ticsic.com)
by server.ticsic.com with esmtpa (Exim 4.84)
(envelope-from <[email protected]>)
id 1Z8Tu1-0007Yu-VF; Fri, 26 Jun 2015 13:42:45 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII;
format=flowed
Content-Transfer-Encoding: 7bit
Date: Fri, 26 Jun 2015 13:42:45 +0000
From: FRED WILLIAMS <[email protected]>
To: undisclosed-recipients:;
Subject: REF: - INSTRUCTION TO CREDIT YOUR ACCOUNT WITH THE SUM OF
(US$10,500,000.00)
Reply-To: [email protected]
Mail-Reply-To: [email protected]
Message-ID: <[email protected]>
X-Sender: [email protected]
User-Agent: Roundcube Webmail/1.0.3
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server.ticsic.com
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - outlook.com
X-Get-Message-Sender-Via: server.ticsic.com: authenticated_id: [email protected]
X-Source:
X-Source-Args:
X-Source-Dir:

CITI BANK LONDON UK.
Promenade Level, Cabot Place East,
Canary Wharf, London, E144QS.
http://www.citibank.co.uk

Dear Valued Customer,

REF: - INSTRUCTION TO CREDIT YOUR ACCOUNT WITH THE SUM OF (US$10,500,000.00)

This is to inform you about the latest RESOLVED by the Board of Directors in respect to your (UNCLAIMED) overdue Inheritance fund, Which was forwarded to Us from CENTRAL BANK NIGERIA to credit your account. which have been in our custody for a long period till date. Also we wish to inform you that you money has been forwarded to the remit department of this noble Bank through Mr Kevin Kessinger (PAY MASTER) who will direct you on how you will be receiving your money and an escrow account has been open with your information and your money was deposited into the escrow Account.

Meanwhile, you are advised to contact Mr Kevin Kessinger who will direct you on how you will be receiving your fund.

Contact person: Mr Kevin Kessinger
Email Address: [email protected]
Tel: +44-793-741-1892

Do contact him and get back to me because your file has been forwarded to his office.

Now re-confirm and forward the below required information to the Bank immediately

to avoid wrong transfer:

(1) Beneficiary Name----------------

(2) Country and Address--------------------

(3) Direct Tel------------------

(4) Attach of your ID or driving license--------------------

Yours sincerely,
FRED WILLIAMS
Secretary.
International Banking Unit, Citibank UK.
CITI BANK LONDON

He's using a new email address [email protected]

Delivered-To: <snipped>
Received: by 10.202.199.78 with SMTP id x75csp1032469oif;
Mon, 13 Jul 2015 06:27:53 -0700 (PDT)
X-Received: by 10.60.141.42 with SMTP id rl10mr30063642oeb.25.1436794073220;
Mon, 13 Jul 2015 06:27:53 -0700 (PDT)
Return-Path: <[email protected]>
Received: from SNT004-OMC4S40.hotmail.com (snt004-omc4s40.hotmail.com. [65.54.51.91])
by mx.google.com with ESMTPS id fw2si13668902obb.91.2015.07.13.06.27.52
for <<snipped>>
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA bits=128/128);
Mon, 13 Jul 2015 06:27:53 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 65.54.51.91 as permitted sender) client-ip=65.54.51.91;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 65.54.51.91 as permitted sender) [email protected];
dmarc=pass (p=NONE dis=NONE) header.from=outlook.com
Received: from SNT152-W33 ([65.55.90.200]) by SNT004-OMC4S40.hotmail.com over TLS secured channel with Microsoft SMTPSVC(7.5.7601.23008);
Mon, 13 Jul 2015 06:26:56 -0700
X-TMN: [eiIxCrqxmTtHAQeMw0WSD1DeZyawxPGE]
X-Originating-Email: [[email protected]]
Message-ID: <[email protected]>
Return-Path: [email protected]
Content-Type: multipart/alternative;
boundary="_4132eb36-d72e-491b-96fc-ee23cacfe45b_"
From: "CITI BANK LONDON UK" <[email protected]>
To: "<snipped>" <<snipped>>
Subject: REF: - INSTRUCTION TO CREDIT YOUR ACCOUNT WITH THE SUM OF
(US$10,500,000.00)
Date: Mon, 13 Jul 2015 14:26:56 +0100
Importance: Normal
MIME-Version: 1.0
X-OriginalArrivalTime: 13 Jul 2015 13:26:56.0591 (UTC) FILETIME=[96FCBDF0:01D0BD6F]

LONDON UK.
Promenade Level, Cabot Place East,
Canary Wharf, London, E144QS.
Tel: +44-793-741-1892
United Kingdom (UK)


Attention:


REF: - INSTRUCTION TO CREDIT YOUR ACCOUNT WITH THE SUM OF (US$10,500,000.00)

We have received your Banking details regards for the transferring of your payment into your account, as been provided to us. But before we can commence the transfer of your fund into your account you have to obtain Non-Residential Clearance Certificate from United Kingdom from the office of Her Royal Majesty. In order to avoid transfer delay. You have to obtain it. It will cost you $950 dollars and you have to send through WESTERN UNION with this information below:

Name: <snipped>
Country: United States.
Test Question: God
Test Answer: We Trust.

You have to send it to her immediately and send us that payment information slip ASAP for confirmation.


Yours sincerely,
Mr Kevin Kessinger.
Chief Operation Officer.
International Banking Unit, Citibank UK.
CITI BANK,london

Header Analysis Quick Report
Originating IP: 105.112.8.36
Originating ISP: Airtel Networks Limited
City: n/a
Country of Origin: Nigeria
* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by 10.37.203.22 with SMTP id b22csp1151749ybg;
Mon, 17 Aug 2015 03:51:47 -0700 (PDT)
X-Received: by 10.170.143.10 with SMTP id k10mr644830ykc.55.1439808707287;
Mon, 17 Aug 2015 03:51:47 -0700 (PDT)
Return-Path: <[email protected]>
Received: from if10-mail-fb06-mia.mta.terra.com (if10-mail-fb06-mia.mta.terra.com. [98.142.233.73])
by mx.google.com with ESMTP id b8si8594092yka.23.2015.08.17.03.51.19;
Mon, 17 Aug 2015 03:51:47 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 98.142.233.73 as permitted sender) client-ip=98.142.233.73;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 98.142.233.73 as permitted sender) [email protected]
Received: from 10j.tpn.terra.com (unknown [10.235.200.51])
by mail-fb06-mia.tpn.terra.com (Postfix) with ESMTP id D4C08800C5BC;
Mon, 17 Aug 2015 10:51:18 +0000 (UTC)
X-Terra-Karma: -2%
X-Terra-Hash: 2b4da345fe4f9d68f9dfac5f4a82c64e
Received: from localhost (1ge.terra.com [208.84.242.165])
(authenticated user ipec!speedylm)
by 10j.tpn.terra.com (Postfix) with ESMTPA id 2FBA268DE;
Mon, 17 Aug 2015 10:51:18 +0000 (UTC)
reply-to: [email protected]
date: Mon, 17 Aug 15 10:51:18 +0000
X-Priority: 3
x-msmail-priority: normal
importance: normal
priority: normal
subject: REF: - INSTRUCTION TO CREDIT YOUR ACCOUNT WITH THE SUM OF (US$10,500,000.00)
x-origin: 105.112.8.36
from: "Alfred Nna" <[email protected]>
message-id: <[email protected]>
content-type: text/html; charset=utf-8
content-transfer-encoding: QUOTED-PRINTABLE
mime-version: 1.0
to:
X-CMAE-Score: 100

CITI BANK LONDON UK.
Promenade Level, Cabot Place East,
Canary Wharf, London, E144QS.
United Kingdom, Uk.
TEL: +447937414363
FAX: 447937414415
Email: [email protected]

Dear Valued Customer,

REF: - INSTRUCTION TO CREDIT YOUR ACCOUNT WITH THE SUM OF (US$10,500,000.00)

This is to inform you about the latest RESOLVED by the Board of Directors in respect to your (UNCLAIMED) overdue Inheritance fund, Which was forwarded to Us from CENTRAL BANK NIGERIA to credit your account. which have been in their custody for a long period time. Also we wish to inform you that you money has been forwarded to the remit department of this noble Bank through Mr Kevin Kessinger (PAY MASTER) who will direct you on how you will be receiving your money and an escrow account has been open with your information and your money was deposited into the escrow Account.

Meanwhile, you are advised to contact Mr Kevin Kessinger who will direct you on how you will be receiving your fund.

Contact person: Mr Kevin Kessinger
Email Address: [email protected]
Tel: +44-793-741-1892

Do contact him and get back to me because your file has been forwarded to his office.

Now re-confirm and forward the below required information to the Bank immediately

to avoid wrong transfer: We are very sorry, if you receive our letter in your spam box, due to the network problem we are having now.


(1) Beneficiary Name----------------

(2) Country and Address--------------------

(3) Direct Tel------------------

(4) Attach of your ID or driving license--------------------

Yours sincerely,
Jane Trading
Secretary.
International Banking Unit, Citibank UK.
CITI BANK LONDON

Using the same email address [email protected] with a new name, Ben Okeke and the phone number +234-7033832968.

Delivered-To: <snipped>
Received: by 10.13.234.195 with SMTP id t186csp1164012ywe;
Sat, 16 Jan 2016 09:05:32 -0800 (PST)
X-Received: by 10.107.137.26 with SMTP id l26mr14828705iod.141.1452963932399;
Sat, 16 Jan 2016 09:05:32 -0800 (PST)
Return-Path: <[email protected]>
Received: from mail-ig0-x244.google.com (mail-ig0-x244.google.com. [2607:f8b0:4001:c05::244])
by mx.google.com with ESMTPS id d5si14763421igx.19.2016.01.16.09.05.32
for <<snipped>>
(version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Sat, 16 Jan 2016 09:05:32 -0800 (PST)
Received-SPF: pass (google.com: domain of [email protected] designates 2607:f8b0:4001:c05::244 as permitted sender) client-ip=2607:f8b0:4001:c05::244;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 2607:f8b0:4001:c05::244 as permitted sender) [email protected];
dkim=pass [email protected];
dmarc=pass (p=NONE dis=NONE) header.from=gmail.com
Received: by mail-ig0-x244.google.com with SMTP id o2so3451540iga.3
for <<snipped>>; Sat, 16 Jan 2016 09:05:32 -0800 (PST)
DKIM-Signature: <snipped>
X-Google-DKIM-Signature: <snipped>
X-Gm-Message-State: <snipped>
MIME-Version: 1.0
X-Received: by 10.50.3.39 with SMTP id 7mr3813836igz.56.1452963932199; Sat, 16
Jan 2016 09:05:32 -0800 (PST)
Received: by 10.107.134.163 with HTTP; Sat, 16 Jan 2016 09:05:32 -0800 (PST)
Reply-To: [email protected]
Date: Sat, 16 Jan 2016 09:05:32 -0800
Message-ID: <CAPQXaXs9wwkfYBGgvimkJP+3NeC20aaAO9mcMCkgwO+PB4tsFw@mail.gmail.com>
Subject: REF: - INSTRUCTION TO CREDIT YOUR ACCOUNT WITH THE SUM OF (US$10,500,000.00)
From: CENTRAL BANK NIGERIA <[email protected]>
To: <snipped>

This is to inform you about the latest RESOLVED by the Board of
Directors FOREIGN DEBT COMMITTEE OF FEDERAL REPUBLIC OF NIGERIA in
respect to your (UNCLAIMED). Inheritance fund (US$5.500,000.00), Which
was forwarded to Us from MINISTER FOR OFFICE With an approval from the
President ( Gen. Mohammadu Buhari GCFR) to credit your account. which
has been held for a long period. Also we wish to inform you that your
FUND has been forwarded to the remittance department of CENTRAL BANK
OF NIGERIA, for immediate payment through Mr Ben Okeke, who will
direct you on how you will receive your Fund.

Meanwhile, you are advised to contact Mr Ben Okeke who will direct you
on how you will be receiving your fund.

CENTRAL BANK OF NIGERIA.
Contact person: Mr Ben Okeke
Email Address: [email protected]
Tel: +234-7033-832-968

Do contact him and get back to me because your file has been forwarded
to his office.

Now re-confirm and forward the below required information to the Bank
immediately

to avoid wrong transfer.

We are very sorry, if you may received our letter in your spam, due
to the network problem we are having now.

(1) Beneficiary Name----------------

(2) Country and Address--------------------

(3) Direct Tel------------------

(4) Attach of your ID or driving license--------------------

Yours sincerely,
Dr, Mike Mokoro
Secretary of Debt Committee.