ADMIN Scam Email: Your Email Address Have Won Western Union Award Promotion (Usd$600,000,00) from Western Union Lottery Award South Africa [date added: 2016-07-20 19:57:45]

The Scamdex Scam Email Archive X

Subject: Your Email Address Have Won Western Union Award Promotion (Usd$600,000,00)

From: Western Union Lottery Award South Africa <westernunion23@rediffmail.com>

Date: Wed, 05 Sep 2012 10:27:46 -0700

Date Added: 2016-07-20 19:57:45

This Email with the Subject "Your Email Address Have Won Western Union Award Promotion (Usd$600,000,00)" was received in one of Scamdex's honeypot email accounts on Wed, 05 Sep 2012 10:27:46 -0700 and has been classified a s a Lotto/Lottery Scam Email. The sender shows as Western Union Lottery Award South Africa <westernunion23@rediffmail.com>.< /p>

The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be added to their email address lists for spam purpos es.

Scam TagCloud

africa western union westernunion lottery promotion award transfer mail usd (usd$600,000,00)

NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED

Scam Email Headers

This a (redacted) view of the raw email headers of this scam email. Personally Identifiable Information (PII) has been suppressed, but can be supplied as received to appropriate investigating or law enforcement agencies on request.

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => scams@scamdex.com [delivery-date:] => Wed, 05 Sep 2012 10:27:46 -0700 [received:] => Array ( [0] => from nm15-vm1.bullet.mail.sp2.yahoo.com ([98.139.91.209]:40665)by lester.newsblaze.com with smtp (Exim 4.77)(envelope-from )id 1T9JOD-0002Nr-2nfor scams@scamdex.com; Wed, 05 Sep 2012 10:27:46 -0700 [1] => from [72.30.22.93] by nm15.bullet.mail.sp2.yahoo.com with NNFMP; 05 Sep 2012 17:27:45 -0000 [2] => from [66.94.237.99] by tm15.bullet.mail.sp2.yahoo.com with NNFMP; 05 Sep 2012 17:27:43 -0000 [3] => from [127.0.0.1] by omp1004.access.mail.mud.yahoo.com with NNFMP; 05 Sep 2012 17:27:42 -0000 [4] => (qmail 9543 invoked by uid 60001); 5 Sep 2012 17:27:41 -0000 [5] => from [209.73.132.73] by web180904.mail.ne1.yahoo.com via HTTP; Wed, 05 Sep 2012 10:27:41 PDT ) [x-yahoo-newman-property:] => ymail-5 [x-yahoo-newman-id:] => 957952.97020.bm@omp1004.access.mail.mud.yahoo.com [dkim-signature:] => v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1346866061; bh=QsubZBSydiB79o3CVmbKxcuBhR6JzqAJUMnbxDnQyw0=; h=X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=mVbIc/U0WMaxIm/6HN40vBpj+O0TmTIEuO5/FNHnH88zaxM61RGFGdVH8oeMaWduAC3otIF4ci/rg8WnbJtysX+VSEUBQwha4hYNPQMxCl99a+rV8S9lWlThUkM2ktEZSi9yvCiXr1FlmQKUzBDbUWcbdJzu6e2TrL0RQd2CWbg= [x-ymail-osg:] => kqFNzu4VM1nNxXO2G99cEBrUiYC8iT5mifBKEzYgl9D6k7YF59QGxuZl2kCvr_ZL54wmsXiebf8aM3wf.f2bwREfXafVV5W.K9CpumddmYBRsnEK9rKVlm2Nxg.QewwoaLbVt0h_ErLWiQfSPWvs.ZyU4gZoF4OU8GGdZ8uIBsCZ3Ee8hgKUe96aHnPyBVMrt_Ja9LB1rBbQ7246fDjCf3DwlomVuOsVY.i.Yg8J53Lb8OGXY_uC0bf3or_y_dnB3I0_MRkyru0vpPIDEFPaTLhN3xc5YN8MBQc3Rsdc32uBQQ.P6koFlgn1j1zM7eee9re5aJZyUcK4Gp_WQVYyfIvAiqOBn6Qth_._kh24VhyPZnl_v8P0xeGs1QkhIfibmubrXCDONDYT1vGhmi3ffbPD.jWg4qzJjMh_jxllRxySH_0T2jALH.q0.I6vxcu7XGc1Qny71bbteSOr5MD.Xt2Lyn6Awdsz0R3dC1H8 [x-rocketymmf:] => webfavour131d0@att.net [x-mailer:] => YahooMailRC/708 YahooMailWebService/0.8.121.416 [message-id:] => <1346866061.3740.YahooMailRC@web180904.mail.ne1.yahoo.com> [date:] => Wed, 5 Sep 2012 10:27:41 -0700 (PDT) [from:] => Western Union Lottery Award South Africa [reply-to:] => Western Union Lottery Award South Africa [subject:] => Your Email Address Have Won Western Union Award Promotion (Usd$600,000,00) [to:] => undisclosed recipients: ; [mime-version:] => 1.0 [content-type:] => multipart/mixed; boundary="-837175150-1214345442-1346866061=:3740" [x-spam-status:] => No, score=3.0 [x-spam-score:] => 30 [x-spam-bar:] => +++ [x-ham-report:] => Spam detection software, running on the system "lester.newsblaze.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seethe administrator of that system for details.Content preview: [...] Content analysis details: (3.0 points, 4.0 required) pts rule name description---- ---------------------- -------------------------------------------------- 0.5 HK_LOTTO_NAME HK_LOTTO_NAME 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (westernunion23[at]rediffmail.com)-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [98.139.91.209 listed in list.dnswl.org] 1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail) 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit (western union lottery award south africa ) 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit (westernunion23[at]rediffmail.com) 0.0 MIME_HTML_MOSTLY BODY: Multipart message mostly text/html MIME 0.0 HTML_MESSAGE BODY: HTML included in message 0.0 LOTS_OF_MONEY Huge... sums of money 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 0.0 T_FREEMAIL_DOC_PDF MS document or PDF attachment, from freemail [x-spam-flag:] => NO )

Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.

Scam Email Removal Request

Please remove the email referenced by the url

http://www.scamdex.com/email-scam-database/N/html/1346886773.M922858P28834V

The reason is: .

Give more detail or explain what you mean by 'Some Other Reason'.

Read about Email Copyright | Removal Policy | Privacy Policy

WESTERN UNION MONEY TRANSFER1.doc File: MS-Word document

TEXT ONLY EQUIVALENT

   WESTERN UNION MONEY TRANSFER1.doc
 
File: MS-Word document

Previous: Your password has been disabled Fresh Scams Next: JOB VACANCIES!!

The Scamdex Scam Email Archive X

Scamdex Scam Resources and Archive