An
Email with the Subject "Western Union Money Transfer" was
received in one of Scamdex's honeypot email accounts on Wed, 13 Oct 2010 01:01:30 -0700
and has been classified as a Generic Scam Email.
The sender shows as Western Union Money Transfer <westernunion366@gala.net>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
beneficiarymobilbankthird partywestern unionwesternunionwestern contactprizewinelectronicsafeaccountagentpaymentrepresentativecustomerserviceswiftaccess transfercustomsenton-linemailbank usdn000.00 1.) bank will dear
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] =>
[envelope-to:] => 05461568.20080522191307@scamdex.com
[delivery-date:] => Wed, 13 Oct 2010 01:01:30 -0700
[received:] => Array
(
[0] => from web83707.mail.sp1.yahoo.com ([69.147.85.76])by chester.loopbiz.com with smtp (Exim 4.69)(envelope-from )id 1P5wHB-0007JQ-2Sfor 05461568.20080522191307@scamdex.com; Wed, 13 Oct 2010 01:01:30 -0700
[1] => (qmail 73791 invoked by uid 60001); 13 Oct 2010 07:53:56 -0000
[2] => from [41.241.161.83] by web83707.mail.sp1.yahoo.com via HTTP; Wed, 13 Oct 2010 00:53:56 PDT
)
[dkim-signature:] => v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1286956436; bh=RQoTnGjBjuKnhandg/du9CBlLazPMreU5EGtp6sQPDs=; h=Message-ID:X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=NDkmtLyBhFPtI2w6AyazG61YVwebXA2p/ctGbSi3zSAOF7aEdhhWWWoL6gziJWllytgWxWifSQuijqHOoT07e3969oGzRwrHV+EajIC6B+///keQh/8RahK78Qu3PaVtx72AXAmarhL84URrbUHnRgdrJ9XNZq+dwzx8S0qWVXY=
[message-id:] => <74638.71525.qm@web83707.mail.sp1.yahoo.com>
[x-ymail-osg:] => baOwxH4VM1lsc35NH4_k.eVVRRerzitZz7PoxLa2FiFWaOODWYNLge4o9dxoa5USDJ7X5qiT6hVVHZTbwg6agyLzGYfQ11lvjSCMDSHO2ogrVwCWkCyphcSXYkYGjzWuv4d349gNZnrBG56ouytUOLoCADUFLDQ5agXHubqp20Ldfj3ACMqK_3garxofLXv9F1uzGJwcHLOk3AhhPANlh3ljtdUnttTYamohSkj_BzWmsZVvSpXSoOyWuL..4ZY67Z3ISIZw0w6xlvSg1TehOmppvAnAe_XVk7txP_Nnxx5txj8Qy4Rf6QJQw2nQsdj1d9biNEuKZ57E5KehVwJkGpAbZfvtF.XAi9324DZ4zwg9cMIe4e1B_2ge9FSludMUB7RL1QJi_nNtc6WyQP1e3Loc0PJciibcg1npsn..csvkJC9VObYCqtkqb2LPeugIB9lNslKyEHOkvzv07wm.LAsEVUqTR.YvZg2FKAs1dALL5tYhFjDGojHbm3577_l8J6Trw.e5ZYjSLzLpJXVWFe5wDHMP8kelj0_pMdXL.Me8pJ9AyiphWI.rUL3JYLUmdX5eSSgFtTXF7Izkc3jHHfRjJojAxqLsOYK3HicEDjeiodU.Ew9f1oppyhfI9oFwJr5Xjc7AlM06JaGxRTvb_VxLWmMS_IhllXTdpUgFGciC8PcJngKJcnNVn3jM07KIHXdC5Pu31u8MJKE4FCtuP2HJ7G4BL0qqfuG3s0CgjUdFozZfUuQ63dohbkUNXKh3YrUEMD9xt1XLGenX44tH18uvzJtNeBwItrty9kVeKaEZHK_B9v2nGzFPsuwSnWG8uWAZ1LZP8rDcqacwKyOp0Ld_dOfq6AuCoDhIMSDxh2o5I6J1ybnG4_mW.2B0NUhcgtQlofAO6y9snv2w4Ghp6neH9kzbuEt979Uj0n_da3.SDLIEeRuk6LLN25JJajuXwJle_Wt7Iykn0Sz1AfSXbCRSlOgiCJsYUwKovszwjPKOa95fbpIXJ1dePA1uuzd4FeQG32HxOEx.xwRn8aFP3yp12LcUbSRPf5XACJIB6CdpBTo7Tk2b1vsgxPWUKNtE6K4F3QF8BR5Sr9cuVQcQLUpoksPEZq.Pl9iHbaQ__sDZjzKpXc87CtLP8TfNnbGv7df5ZpYUtfeB0IMeDxvl7j_TgciYX.nc.enH3J2SGHXXalT37XuyQinpoh8r1YowFG.G6KHj_WqHMcg26YWaapvfmTFgcA3dd6aKWzBGCnNsxjgdIqMiD4.kuJa7.sUcihRo
[x-rocketymmf:] => coral0014@att.net
[x-mailer:] => YahooMailRC/504.5 YahooMailWebService/0.8.106.282862
[date:] => Wed, 13 Oct 2010 00:53:56 -0700 (PDT)
[from:] => Western Union Money Transfer
[reply-to:] => Western Union Money Transfer
[subject:] => Western Union Money Transfer
[to:] => undisclosed recipients: ;
[mime-version:] => 1.0
[content-type:] => multipart/alternative; boundary="0-515191078-1286956436=:71525"
[x-spam-status:] => No, score=-2.3
[x-spam-score:] => -22
[x-spam-bar:] => --
[x-spam-flag:] => NO
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
Dear Sir / Madam,
For 156 years, Western Union has been connecting people. At Western
Union , there's so much more than ac money you're sending. Every sender and
receiver is important to us. To celebrate our 156th Anniversary Switzerland ,
we're rewarding our customers with prizes of USD250, 000.00
Because you sent money on-line, from an agent location or received
money through Western Union , you've been selected. However, you are required
to forward the following information for immediate payment of your USD250,
000.00
1.) Bank Name: 2.) Beneficiary: 3.) Account Number: 4.)
Bank Address: 5.) Swift Code or Routing Number: 6.) Your Mobile Telephone
Number:
You will be contacted by a Western Union in the next 24 hours as
soon as you forward your required information and you will receive the USD250,
000.00 prizes immediately from us.
Save time, send money, earn rewards! Western Union is a service
people trust. ANNIVERSARY DAY Thank you for using Western Union
! EMAIL: westernunion832@gala.net ----------------------------------------------------- We
endeavor to maintain physical, electronic and procedural safeguards to guard
your Information. We also endeavor to restrict Information access to our
employees, agents and representatives that need to know it. Western Union will
never disclose your personal or billing information to a third party