An
Email with the Subject "$8,000 was sent to you today" was
received in one of Scamdex's honeypot email accounts on Sun, 11 Sep 2011 04:55:21 -0700
and has been classified as a Generic Scam Email.
The sender shows as Western Union Foundation <hlttr13@gmail.com>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] =>
[envelope-to:] => cw2000@legomad.com
[delivery-date:] => Sun, 11 Sep 2011 04:55:21 -0700
[received:] => Array
(
[0] => from nm20.bullet.mail.ird.yahoo.com ([77.238.189.77])by lester.newsblaze.com with smtp (Exim 4.69)(envelope-from )id 1R2id6-00050Y-VTfor cw2000@legomad.com; Sun, 11 Sep 2011 04:55:21 -0700
[1] => from [77.238.189.234] by nm20.bullet.mail.ird.yahoo.com with NNFMP; 11 Sep 2011 11:55:18 -0000
[2] => from [212.82.108.114] by tm15.bullet.mail.ird.yahoo.com with NNFMP; 11 Sep 2011 11:55:18 -0000
[3] => from [127.0.0.1] by omp1023.mail.ird.yahoo.com with NNFMP; 11 Sep 2011 11:55:18 -0000
[4] => (qmail 93457 invoked by uid 60001); 11 Sep 2011 11:55:17 -0000
[5] => from [212.52.153.96] by web132302.mail.ird.yahoo.com via HTTP; Sun, 11 Sep 2011 12:55:17 BST
)
[x-yahoo-newman-property:] => ymail-3
[x-yahoo-newman-id:] => 115703.32499.bm@omp1023.mail.ird.yahoo.com
[dkim-signature:] => v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1315742117; bh=R4Iz5KftBR9d/1eKZi/kOkyLbzeWandlxV8HZpy/S8Q=; h=X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=wAFonouXJZUJOTYdFPI6nQPM/bO8fdRqd+ic9ESergpt3UK63JouLGMBxhPwTh1oCQuhlqi5DrHjfiX3SwwY431w2vRgIUmJz/mXTMk1VryLR24hO6lWZ+pqIJ13eT7jvlKS9v9FvxDhgjGVySsFtejTkZekcjsJe1gVlg9ZKIo=
[x-ymail-osg:] => 4h2IFgMVM1k1A2ZE6CR0SMB3uB_M0g_LagakZ6jMOtXRSimd8RNI2NcV50pQBVKhcPUnYlJDyNu4TJ33JZb3wl1LLHcKESDK_N2lWirXA4CqVL75wvRjpC5GQhgSZ9lbm6aQlycbT3DWm9ZVG0QsEU_oS50llViNQ8uzaWccY0Z2DKw0LdHXsFisNC9aB7M0._W5RgYE9kHDTMJhZpiBkx1XY6Z7DJDGowRLUHHG3HtcTNBFb4WV9uMR49wYDIQYuPn3L5i2XI.RSXqvTpFT40oSc.v42PqEezdUYWsJVcXUnAJRt2Jn_GciCjPZec6GnXjHbXXgEnTqLK7vWlgH_gU2ye4TAYS3Rh7YPF2VleM093FWF9IdUeXIRi1vqCECRnFK8yX6pFtyNiCCdMP1fB52Qc.nZ3HRaTdj9HrXfe4cjTgmeuROti9n1NJKi6HClNZPH.U.qQulAgzNjTh0JNA.CYSe2xj43GimX2CegKNu0RY.gkqwwYoD37Y71SsryqqW5lqpetFyQbTn48PGcacBTe4C0HzH2lHVDJNS1GypboQoib_I9C6AimFhYx72QFy0u9I5F7KdULaIJvisG.CbY4hT4csTSsVMn28TrRbbiqS2zSX8tsMZUBOAljtWVg4ciiCDhR8RQfirD3SNDxU.A54sAiJoPxTyenwSsccXplAuHnUeGYOWs9KYDfHWWfvX8xZc7xmt3Ao-
[x-rocketymmf:] => ben.beni15
[x-mailer:] => YahooMailClassic/14.0.5 YahooMailWebService/0.8.113.315625
[message-id:] => <1315742117.67333.YahooMailClassic@web132302.mail.ird.yahoo.com>
[date:] => Sun, 11 Sep 2011 12:55:17 +0100 (BST)
[from:] => Western Union Foundation
[reply-to:] => alexx.willi1@sify.com
[subject:] => $8,000 was sent to you today
[to:] => undisclosed recipients: ;
[mime-version:] => 1.0
[content-type:] => multipart/alternative; boundary="1151217193-1482055318-1315742117=:67333"
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
Dear Beneficiary,
Be informed that we have already sent you $8,000.00 U.S.Dollars through Western union as we have been given the mandate to transfer your full payment total sum of US$2,000,000.00 (Two Million U.S. Dollars) via western union.The first $8,000.00 has already been sent to you today.As We have concluded to effect your payment through western union.You will be picking up $8,000.00 daily until the $2,000,000.00 is completed.Therefore,you are required to contact the Western Union Money Transfer Office via email or phone as listed below for an immediate release of the payment informations to you.
Contact Person:Mr.Brown Odeh, Manager,Western Union office, Burkina Faso,West Africa. Phone:+226 76 168 413 E-mail: western01union2@gmail.com
Make sure you send the following informations to the Western Union Officer to enable him Verify and be sure that you are the real Beneficiary. 1:Your Full name: 2:City: 3:Country: 3:Phone number: 4:Occupation: Age:
Note that there is Processing fee of $175 for the payment.You will be expected to pay for the renew of your funds payment file before the western union will release the full payment informations to you.Please Bear this in mind before forwarding your informations to them.
Yours Faithfully, Alexander Wade
.