An
Email with the Subject "Winning Notification!" was
received in one of Scamdex's honeypot email accounts on Fri, 12 Aug 2011 07:53:56 -0700
and has been classified as a Generic Scam Email.
The sender shows as Western Union Promo <hlttr13@gmail.com>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] =>
[envelope-to:] => cw2000@legomad.com
[delivery-date:] => Fri, 12 Aug 2011 07:53:56 -0700
[received:] => Array
(
[0] => from nm1.bullet.mail.ird.yahoo.com ([77.238.189.58])by chester.loopbiz.com with smtp (Exim 4.69)(envelope-from )id 1Qrt7T-0005P7-W7for cw2000@legomad.com; Fri, 12 Aug 2011 07:53:56 -0700
[1] => from [77.238.189.49] by nm1.bullet.mail.ird.yahoo.com with NNFMP; 12 Aug 2011 14:53:55 -0000
[2] => from [212.82.108.113] by tm2.bullet.mail.ird.yahoo.com with NNFMP; 12 Aug 2011 14:53:55 -0000
[3] => from [127.0.0.1] by omp1022.mail.ird.yahoo.com with NNFMP; 12 Aug 2011 14:53:55 -0000
[4] => (qmail 59027 invoked by uid 60001); 12 Aug 2011 14:53:55 -0000
[5] => from [212.52.153.96] by web132305.mail.ird.yahoo.com via HTTP; Fri, 12 Aug 2011 15:53:55 BST
)
[x-yahoo-newman-property:] => ymail-3
[x-yahoo-newman-id:] => 678212.24135.bm@omp1022.mail.ird.yahoo.com
[dkim-signature:] => v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1313160835; bh=Gh2aMqAG+GGZpU04QSEAEltUiOEvAdcsrHtdRaUM9GI=; h=X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=ko4XBdg6RKVSqDdmgnqM0AXwA5m1IyrjiOM61261aUfrFTL5wYEzR7UN+ARMfDLilN9cOxw2aTWTV8E0q9oXuLQJNFWg6LtbxXmpYcZY9p97oPSU3sxa5Z1vu2+mlBZ8Eg2LjNvk/jY8zKP+5ohubCzaElmuJPf9e2MCBfYV4nc=
[x-ymail-osg:] => msfqCHQVM1lNi9nMys1FdOac4N8mDCy.KZ0qZcKh2f5lJbKmd0uzGrr23ANBVxX76U9MJPE9l9nqyIlPXGe9NTPVtg7dWLMZgKnCbUORCIlSF6mR13tyn0QAlN9k331aw4o3GPvLwtan3DC4YM0Z070ide0B0tDYi55pCh1NWZB1k4U0xwsUuTY.mqiargixt8O4QthyONwzJE6AVmO4wa0PRZQMFN1VUMlqD_hmtvxe7pc3z51fx6offSrBROk3LyTiKm0ujt7Pvc5QHAL2poNLjJnktg.OANrr8cdZbEG8PWZaNB2d6q5C6zspBnCpfqXKRk_fcz0XbEgEib5s6y_Y2neFF2nilbGrPUqMRyGNSYFINYpDHONpRfq4Qvc2gCifip3ok6Gk..RIxfC6dP_8_x5nG8gKHuQCabKA2hkATy.fHiU2tHbV3.mYi4S59.MPeUzbDdp50CrxjvRTXxogphct_GaZE8rc044HNr9wnV_7hYXNz84_b7HckLnpTmusyc.P818IDMXGN_CE9MCvJtCPZ.4uOx4edn2qTMd1CgBNrBsoOEzmzdVBAKZlnu_bwf5DmQLlnsT1g9g_7J5HaSWqUX7vtd7x9kRmerNuIxo3CbYeYBhjVwNypRmeIjABJ7pFMXzVZwpajGnadHB6FrrRuXpGrQMX_hffFLP.4eIJpjD06O0l3lx0DeYGuQoU9FBs__8fwMx3ex28IdDTMJ.Ty53vXJod4LxJVnkEjhD9n7DGGljjHDdxDUgmr6bl9c_D7KyZ1YWBpgoHwz4sEtJx6vwgZ2a2CP2MK6fv71KtTQSgUJU0JL6JBsm5_JFpDkkEkhMrGxso_yMETaBIjM6t8eOhb2mh38dvuZ3g42gW_c7u6x77t3wJ
[x-rocketymmf:] => ben.beni15
[x-mailer:] => YahooMailClassic/14.0.4 YahooMailWebService/0.8.113.313619
[message-id:] => <1313160835.83470.YahooMailClassic@web132305.mail.ird.yahoo.com>
[date:] => Fri, 12 Aug 2011 15:53:55 +0100 (BST)
[from:] => Western Union Promo
[reply-to:] => western.union810@yahoo.com
[subject:] => Winning Notification!
[to:] => undisclosed recipients: ;
[mime-version:] => 1.0
[content-type:] => multipart/alternative; boundary="0-422198481-1313160835=:83470"
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
We are here to notify you that the sum of US$4,800,000.00 was generated and awarded to you by the Western Union Burkina Faso in conjunction with western union Foundation.You have been approved for a lump sum payment of US$4,800,000.00 in this year Western Union Lottery Awards organized by the Western Union Burkina Faso in conjunction with western union Foundation.Your Email ID was one of the selected email all over the world in the lottery draw and it comes out one of the lucky winning number.You do Not need to buy ticket before you are selected as the Winner.
This award was been selected through the internet, where your e-mail address was indicated and notified.The Western Union Burkina Faso collects all the email addresses of the people that are active online,among the millions of our customers who use Western Union in their business transactions.Only three people are selected Yearly to benefit from this promotion and you are one of the Selected Winners.
Therefore,you are required to contact the Western Union Money Transfer Office in Burkina Faso,West Africa via email or phone as listed bellow for an immediate release of your funds to you.
Contact Person:Mr.John Coulibaly, Director of Operation,Western Union, Burkina Faso,West Africa. Phone:+226 76 168 413 E-mail:western01union2@gmail.com
Ask him to send to you a proof, the ownership certificate of the Funds. It is for you to be sure that the funds belong to
you. Make sure you send the following informations to the Western Union Officer to enable him process your payment:
Your Full name:
City: Contact Address: Country: Phone number: Occupation: Age:
Comply now because as soon as you send the above informations to Mr.John Coulibaly, he will Process and make arrangement for the release of your funds to you. His contact email is(western01union2@gmail.com ).
Yours Faithfully,
Mrs.Ann Douglas Management,Western Union Foundation.
