An
Email with the Subject "Your payment notification" was
received in one of Scamdex's honeypot email accounts on Wed, 18 Jan 2012 08:06:42 -0800
and has been classified as a Generic Scam Email.
The sender shows as "Western UNion Office" <lisa@homeandindustrial.com.au>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
bello-818-679-4002western unionnotificationpaymentopportunityprojectcustomerservicecustom transferfundonlinemailmtcn will treasury(customer)(next week)(note that after (next week)(w.uniontransfer03@skymai...(mr.amed jim)(regards)(brenda foster)my dear
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] =>
[envelope-to:] => bartijderogate@scamdex.com
[delivery-date:] => Wed, 18 Jan 2012 08:06:42 -0800
[received:] => Array
(
[0] => from homeandindustrial.com.au ([207.57.113.145])by lester.newsblaze.com with esmtp (Exim 4.69)(envelope-from )id 1RnY25-0006Sy-Safor bartijderogate@scamdex.com; Wed, 18 Jan 2012 08:06:42 -0800
[1] => (qmail 17075 invoked by uid 29073); 18 Jan 2012 16:06:40 -0000
)
[message-id:] => <20120118160640.17074.qmail@homeandindustrial.com.au>
[content-disposition:] => inline
[content-transfer-encoding:] => 7bit
[content-type:] => text/html; charset="US-ASCII"; format="flowed"
[mime-version:] => 1.0
[x-mailer:] => MIME::Lite 3.0104 (F2.72; T1.15; A1.47; B3.01; Q3.01)
[date:] => Wed, 18 Jan 2012 16:06:39 +0000
[from:] => "Western UNion Office"
[reply-to:] => w.uniontransfer03@skymail.mn
[to:] => westeru09@globomail.com
[subject:] => Your payment notification
[x-spam-status:] => No, score=1.7
[x-spam-score:] => 17
[x-spam-bar:] => +
[x-ham-report:] => Spam detection software, running on the system "lester.newsblaze.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seethe administrator of that system for details.Content preview: Attention: Customer This is to notify you about the latestdevelopment concerning your western union money transfer hence; our westernunion Head office is now offering a Special bonus for month of January tohelp all our customers that are having their funds in our custody due tohigh price of the fee. In order words we are now requesting that you shouldpay only the sum of $98.00 to enable us activate your transfer file Besidesmy dear (Customer), this is the opportunity for you to comply and you canstart receive your funds through this western union money transfer office.[...] Content analysis details: (1.7 points, 4.0 required)pts rule name description---- ---------------------- ---------------------------------------------------0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relaydomain0.0 T_FRT_BELOW2 BODY: ReplaceTags: Below (2)0.0 HTML_MESSAGE BODY: HTML included in message1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
[x-spam-flag:] => NO
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
This is to notify you about the latest development concerning your western union money transfer hence; our western union Head office is now offering a Special bonus for month of January to help all our customers that are having their funds in our custody due to high price of the fee. In order words we are now requesting that you should pay only the sum of $98.00 to enable us activate your transfer file Besides my dear (Customer), this is the opportunity for you to comply and you can start receive your funds through this western union money transfer office.
Note that after (next week) you did not make the payment then we will divert your funds to Government Treasury, or we will cancel your transfer again after (Note that after (next week) We will enter A new project for the year and that is the reason why we decided to help all our customers with their outstanding payments before we enter into the new project. &n
bsp; Be advised to send the $98.00 immediately to enable us register your transfer online without any delay .and make sure you send the balance of $250.00 to us once you receive your transfer Send the $98.00 through western union Transfer with the information below,
RECEIVER'S NAME==== NKECHIKWULU CHINEDU COUNTRY====== BENIN REPUBLIC. CITY========= COTONUO TEXT QUESTION==== HOW ARE YOU ANSWER====== FINE AMOUNT=======$98.00
You advice to send your payment information to our e-mail below (w.uniontransfer03@skymail.mn) Driector (MR.AMED JIM) Phone: +234-818-679-4002 As Bellow;
SENDER'S NAME............ MTCN.............
The moment we receive the payment of $98.00 we will activate your file and have your funds transfer to you within 3 hours and send the information that you will use to pick it up call +234-818-679-4002 ok
I wish you good luck. Yours in service (Regards) (Brenda Foster) Officer in charge!!! TELL: +234-818-679-4002 Address. 455 Nabokov, Napa Road Cotonuo
Attention: Customer
This is to notify you about the latest development concerning your western union money transfer hence; our western union Head office is now offering a Special bonus for month of January to help all our customers that are having their funds in our custody due to high price of the fee. In order words we are now requesting that you should pay only the sum of $98.00 to enable us activate your transfer file Besides my dear (Customer), this is the opportunity for you to comply and you can start receive your funds through this western union money transfer office.
Note that after (next week) you did not make the payment then we will divert your funds to Government Treasury, or we will cancel your transfer again after (Note that after (next week) We will enter A new project for the year and that is the reason why we decided to help all our customers with their outstanding payments before we enter into the new project. &n
bsp; Be advised to send the $98.00 immediately to enable us register your transfer online without any delay .and make sure you send the balance of $250.00 to us once you receive your transfer Send the $98.00 through western union Transfer with the information below,
RECEIVER'S NAME==== NKECHIKWULU CHINEDU COUNTRY====== BENIN REPUBLIC. CITY========= COTONUO TEXT QUESTION==== HOW ARE YOU ANSWER====== FINE AMOUNT=======$98.00
You advice to send your payment information to our e-mail below (w.uniontransfer03@skymail.mn) Driector (MR.AMED JIM) Phone: +234-818-679-4002 As Bellow;
SENDER'S NAME............ MTCN.............
The moment we receive the payment of $98.00 we will activate your file and have your funds transfer to you within 3 hours and send the information that you will use to pick it up call +234-818-679-4002 ok
I wish you good luck. Yours in service (Regards) (Brenda Foster) Officer in charge!!! TELL: +234-818-679-4002 Address. 455 Nabokov, Napa Road Cotonuo
