An
Email with the Subject "FROM WESTERN UNION MONEY TRANSFER OFFICE" was
received in one of Scamdex's honeypot email accounts on Wed, 22 Sep 2010 14:12:52 -0700
and has been classified as a Generic Scam Email.
The sender shows as WESTERN UNION <wuunn2@rediffmail.com>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] =>
[envelope-to:] => submissions@scamdex.com
[delivery-date:] => Wed, 22 Sep 2010 14:12:52 -0700
[received:] => Array
(
[0] => from n2-vm1.bullet.mail.gq1.yahoo.com ([67.195.23.155])by chester.loopbiz.com with smtp (Exim 4.69)(envelope-from )id 1OyWcV-0002Qp-7lfor submissions@scamdex.com; Wed, 22 Sep 2010 14:12:52 -0700
[1] => from [67.195.9.81] by n2.bullet.mail.gq1.yahoo.com with NNFMP; 22 Sep 2010 21:12:54 -0000
[2] => from [67.195.9.111] by t1.bullet.mail.gq1.yahoo.com with NNFMP; 22 Sep 2010 21:12:54 -0000
[3] => from [127.0.0.1] by omp115.mail.gq1.yahoo.com with NNFMP; 22 Sep 2010 21:12:54 -0000
[4] => (qmail 16113 invoked by uid 60001); 22 Sep 2010 21:12:53 -0000
[5] => from [41.191.86.149] by web120302.mail.ne1.yahoo.com via HTTP; Wed, 22 Sep 2010 14:12:53 PDT
)
[x-yahoo-newman-property:] => ymail-3
[x-yahoo-newman-id:] => 702909.29280.bm@omp115.mail.gq1.yahoo.com
[dkim-signature:] => v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1285189973; bh=7djQklkyIPdkyu12kjEqlO62ysg2+K+vKeIRVeXedHw=; h=Message-ID:X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=sWVLPJXJcLb3uIf+tkU9BI1Xjd9eF+9nIRaEQcwraninOYKAF4J8VJ6cZoAbNPZ6D0bOC1pSF46jmqv/+FyeIhEChLqLXeRzmmbdF068aN2hnF59oKCazm2uNRuoynH9o1cfQkhccOu5P08VU1DJNg7gJbZLsDeDlqXI81TKtMo=
[message-id:] => <425903.11013.qm@web120302.mail.ne1.yahoo.com>
[x-ymail-osg:] => pQzc5JYVM1kisGJzfhX7xfjfdMOzke1PeB2VmjeqzNPBfVNUidO5hlcGaNUxXNt1hEA1eUmm6oEp9ua7Vua8PhsC1jJIzzrIJs4SLJ.sTb1doEz78gJSNc_79nf3dycawxMYqN7O3IeJE8XYGwQpGShnscgLgylXn_yHKESeTyFdQMHB8QgkJRQ7OY63W9d_rGJcbc4cElN4gW76x_0zP0IxltsWjl765oPdfsVEbeQrRrIGGf4B7bu_DKbKu7aGzsydxLiQ.vL3AhnBOfqqVnVVvUSXuYTEbWfghJHiDRz7FbUOYm0iyPuJCI8b5tLnd4xBXSZC18l.TleH8u89.M27QziiYlg2wYh.fI15ZQdLDMsWeayTw2aYvC.RndToGbdACVkEJ8DIEdym_rPj6dx0DFYPhASd_SeqFhIW0v5hboJ8sBE4aGUWZQXLSrFJXv6ISY0Lxj.O8TS9sjxUTKoGRtDCC5g5Gt5uCk5k0LE8tJix672qUvoF8l4tkvTLtrOlnRGKkOy2x6qtkIkwOf4Pytx3zXMGwurP35H_MM3IA2MDPmwA8i.bjlO9GSsoAZJk9bzRQ_3umFGtqiFiW4MFu9GxRlKHjnFGTpsNENdxOBWTBoJ_euEZFAFlU_TsOW7CE7yO0vaG91z8bsmVelsUYCCQxjBfsxhq2k4LhBNMVMl.Qy8NX4YN0Cgji9Vc3wocavPP3Rb_i5BHSPsVgHVyr5Rwo8.3g1YnS0LO.l137WyVbwtE6wzbaJHy7A8J6qljYRDVPVO93_Kd.MezRJKsWni15vDVEPqnE3RlURddkzMUfkWiwbeeWXgqdsBKJdE.XncVAio0rKBOS0RkrVfvoD12vqt_P1rp8raYbFiIYqACQjWu1fjZQhsBarkWXZ2QNSBak9odCBHJ5AewjDRr_jncN4yINy9JTbjiP8uhp5ZE3ioCXg4bEFO7weuM447hiGa15Oxpc0.DwTZFENLS.nQhe4iL5pyFPMrleJ0jN9HFnLzigbLguU1jNv7P5TsTEUopXxRHvHSFU.9a4Z2JeYCtkRPguugyhgGFIzOOGwdOX6cT9.mKQ5rxOfMMXXGyh8as69FK.fZPblBqx2P2DeZkzW7ZWmv3O_SQ_6OeCKmMDs59RF3933rOF3L8he1v2zpKypxov7f6Sr5rCqGC9aXFk8u93SxfmBCGBt7A1xBh51Ioq8wBoSN1pW8yZd37gFhP3NWdU1.7MDL5sWtWM1oXp6cboif2ouHAU2OjwlSV0pnQFz6bvnMOmsN1KzM.6PHxMCic5GXY1sHj4JGOg1IPx1jcNJ.nsz7hvJrK033v59c83XBqE9tb7q6EE1PRMQG4j05B48leD72cGOaUdMRA3ZEdxnNX1wADsz2qT30Ldl819jeSRZWvybzGPjh13TM5ZRe2cCPRTlUQ2l5ZENY2UA1Gs7Q3mbsFPSc2l3QydVxwKS8CrclWy5nMviyGangRyriTus7HWzsw2E6hzMFJH7KmHumfH_zot_ssocw-
[x-rocketymmf:] => ffofofgogog@y7mail.com
[x-mailer:] => YahooMailClassic/11.4.9 YahooMailWebService/0.8.105.279950
[date:] => Wed, 22 Sep 2010 14:12:53 -0700 (PDT)
[from:] => WESTERN UNION
[reply-to:] => westu2010@mail.ru
[subject:] => FROM WESTERN UNION MONEY TRANSFER OFFICE
[to:] => undisclosed recipients: ;
[mime-version:] => 1.0
[content-type:] => multipart/alternative; boundary="0-180747529-1285189973=:11013"
[x-spam-status:] => No, score=-1.3
[x-spam-score:] => -12
[x-spam-bar:] => -
[x-spam-flag:] => NO
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
WELCOME
TO WESTERN
UNION
MONEY
TRANSFER Send And Receive Money
Worldwide
BRANCH:
PLOT 117 JEAN PAUL AVENUE, COTONOU-BENIN REPUBLIC. Tel: + 229 97 00 49
48.
+ 229
96 61 61 88.
Website:
www.westernunion.com
Dear Beneficiary ,
In reference to the general consensus meeting held
with The Benin Fondation De France (B.F.D.F), the Ministry of Finance and
Ministry of Justice which the theme was to settle all astanding compensation
Debts owed by Individuals and Government and as well conduct and issue
compensation to the new beneficiaries.
Therefore you are a beneficiary of compensation
funds of $500,000.00. The fund was arranged by the Organisations to be
transferred via Western Union Money Transfer to you. In accordance to the
engagement's agreement with the various Ministries, The Western Union here in
Benin Republic has limited transfer rate because of International communities
and Anti-Terrorist/Drug Law rules and regulations, we are only permitted to
transfer US$5,000.00 daily until your total funds has been completely
paid.
Provide us with the following information for
the transfer:
Receiver's Name: ------------- Country:
-------------- City: ---------------- Phone: -------------- Test
question: ------------- Answer: ----------------
We await your prompt
response.
Mr. Jones Williams.
Senior Management.
Tel: + 229 97 00 49 48.