An
Email with the Subject "Re;" was
received in one of Scamdex's honeypot email accounts on Thu, 24 Jan 2019 20:22:33 -0500
and has been classified as a Lotto/Lottery Scam Email.
The sender shows as Richard Wahl <preflima@mininter.gob.pe>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
$533 million millioncharitygooglechecklotteryprizewinlucky millionprojectverifymailusd will blessinggoogle donationcash donationhttps://heavy.com/news/20...
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] => Array
(
[0] =>
[1] =>
)
[delivered-to:] => newblood@scamdex.com
[received:] => Array
(
[0] => from edie.newsblaze.comby edie.newsblaze.com with LMTP id mGcqF9lkSlwaeAAApOa+twfor ; Thu, 24 Jan 2019 20:22:33 -0500
[1] => from relay.mininter.gob.pe ([167.114.125.152]:60076)by edie.newsblaze.com with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)(Exim 4.91)(envelope-from )id 1gmqCX-0007sZ-8lfor submissions@scamdex.com; Thu, 24 Jan 2019 20:22:33 -0500
[2] => from relay.mininter.gob.pe (localhost.localdomain [127.0.0.1])by relay.mininter.gob.pe (Proxmox) with ESMTP id 988802A644B;Thu, 24 Jan 2019 20:12:00 -0500 (-05)
[3] => from mta.mininter.gob.pe (unknown [200.48.4.152])(using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits))(No client certificate requested)by relay.mininter.gob.pe (Proxmox) with ESMTPS id E866E2A6453;Thu, 24 Jan 2019 20:11:54 -0500 (-05)
[4] => from mta.mininter.gob.pe (localhost [127.0.0.1])by mta.mininter.gob.pe (Postfix) with ESMTPS id 140D7303CE08;Thu, 24 Jan 2019 20:11:40 -0500 (-05)
[5] => from mta.mininter.gob.pe (localhost [127.0.0.1])by mta.mininter.gob.pe (Postfix) with ESMTPS id 49BB7301509B;Thu, 24 Jan 2019 20:11:39 -0500 (-05)
[6] => from mailbox1.mininter.gob.pe (mailbox1.mininter.gob.pe [172.22.0.140])by mta.mininter.gob.pe (Postfix) with ESMTP id B9D183156B4D;Thu, 24 Jan 2019 20:11:35 -0500 (-05)
)
[envelope-to:] => submissions@scamdex.com
[delivery-date:] => Thu, 24 Jan 2019 20:22:33 -0500
[x-mininter-mailscanner-from:] => preflima@mininter.gob.pe
[x-mininter-mailscanner-id:] => 49BB7301509B.AA585
[x-mininter-mailscanner-information:] => Please contact the ISP for more information
[dkim-filter:] => OpenDKIM Filter v2.10.3 mta.mininter.gob.pe 49BB7301509B
[dkim-signature:] => v=1; a=rsa-sha256; c=relaxed/relaxed; d=mininter.gob.pe;s=9E629CDE-1D17-11E9-9ECF-0B8359FDCCC0; t=1548378699;bh=KSNIrGvat5ZhoLsE3J93lWcfY/hQrO8zrMKECrw54hQ=;h=Date:From:Message-ID:MIME-Version;b=sKaxai4far9o/yuGui4k4gZzhwqXvWJrdTD8n+hPzSPB8qmdtRNVjGE5LQnBRN+z7 xAJdYn6CHeHd7Nr4wBj6hEnevG+q80r++QVBHdawzaBBIRVqdIkdniL8YYrUai6JLr pbBJno1PKE7+qmNqa05AHLnTgw/Qywv9rJ1Y286eKssOf4XPTFd/LyUkz8GTUSt2jM 0dK9eel9Y8+R80u5+dUokU5+YhABWpK97eCITfT5sH7gOAh0pyTT6Xn7/FLn4S6oqm 38rcMs3/iL1OmTChEJ08NW3QLgwDWH9ZN2J9f3YnFDeVQBOLQI3cyBad5N3fv3Ufau mf+rhNvuOxFGQ==
[x-mininter-mailscanner:] => Found to be clean, Found to be clean
[date:] => Thu, 24 Jan 2019 20:11:26 -0500 (COT)
[from:] => Richard Wahl
[reply-to:] => richardwahl.donationproject@gmail.com
[message-id:] => <1766547511.7892427.1548378686397.JavaMail.zimbra@mininter.gob.pe>
[subject:] => Re;
[mime-version:] => 1.0
[content-type:] => multipart/alternative; boundary="=_7f72a7b2-c357-420b-99e9-ea282623bdb2"
[x-originating-ip:] => [172.22.0.141]
[x-mailer:] => Zimbra 8.8.11_GA_3737 (zclient/8.8.11_GA_3737)
[thread-index:] => VQJ62v10VVBnEMpJ6xMtQ58+rRyc/w==
[thread-topic:] => Re;
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
I am Richard Wahl,I won the biggest New Jersey Mega lottery prize of $533 Million and we just commenced our Charity Donation and we will be giving out a cash donation of $1,900,000.00USD to 5 lucky individuals and 10 charity organizations from any part of the world. To verify the genuineness of this email, check this web page; https://heavy.com/news/2018/04/richard-wahl-wall-mega-millions-winner-new-jersey-533-million/ Your email address was submitted to me by the Google Management Team and you are therefore approved $1,900,000.00USD.
Please Reply with *Full Names:..,*Tel:...*Age:....& *Country:... and Remember to be a blessing to your family and the society at large.
Regards, Richard Wahl Copyright 2018 Richard Wahl Donation Project All Rights Reserved
I am Richard Wahl,I won the biggest New Jersey Mega lottery prize of $533 Million and we just commenced our Charity Donation and we will be giving out a cash donation of $1,900,000.00USD to 5 lucky individuals and 10 charity organizations from any part of the world. To verify the genuineness of this email, check this web page; https://heavy.com/news/2018/04/richard-wahl-wall-mega-millions-winner-new-jersey-533-million/ Your email address was submitted to me by the Google Management Team and you are therefore approved $1,900,000.00USD. Please Reply with *Full Names:..,*Tel:...*Age:....& *Country:... and Remember to be a blessing to your family and the society at large. Regards, Richard Wahl Copyright 2018 Richard Wahl Donation Project All Rights Reserved
