RSS

“Mr James Fox”

11 Dec

BANK SCAM – FRAUD – NIGERIAN SCAMMER

SUBJECT: I AM MR JAMES FOX PLEASE OPEN THE ATTACHMENT PLEASE GET BACK TO ME

EMAIL: NDA Bank attached file/link was in the email. (I don’t click on files and aren’t comfortable posting them but this is 100% a scam and the scammer is using email-addresses and IP’s that have all been blacklisted and/or reported by other internet users.

HEADER:

Return-Path: <jamesfox2345678@gmail.com>
X-YahooFilteredBulk: 66.94.237.120
Received-SPF: neutral (66.94.237.120 is neither permitted nor denied by domain of gmail.com)
X-YMailISG: FSponE8WLDv1qEgwLWJkoAzzpRDDpl2RpmRyQq1SM3Ykdmkw cihWyoXJqBq1geD1DKxPpEQP4O7SgyIv.ZodDuPxAVqtVPdTpJwswCk74kcG 1NTx6Bx9A_GNn8neXgK_5WJwnxKo9UZ7TgQ06rHNT8yLjle_R6xMZBE.zhyV BHe.bOLvZM5KjvoGHebzIgVWTHMVv5WSTNTWARs3HMqyHqeRIW3Hj_fjx1sc 5ayZKxO8DKLiuphAvZicObsTZScQZLOHfvDKQxPVloPf7TkfG2e2I0rs6Oxn JoIBq9IIbuRtLxqmG.LsPbVuTHQ0EiLNBTqJBqHNL2taL.skKvST9MLb_Xe. o9Fx61WFKeTHkTaLoWPClkAcjQtQxsS0eCop0d67gndiId6EokcVxu7KrUz1 R2L5jkivuwiGiCnSj8Z6ukV8.OnAHEf2ygaQubN_GgodSWCG8E16gCe7B3ah ReyGDis7XfKCuXzT62Gj7Se9GN._v8tMq.s9ANH3L1cZy7qksOotz73TQTVw uBzXZdkARYzVmTKUhZyHRLc8Ot8Yy19aWNfUGL46yhvYrmaDWOs2Wtr4p6AO kugLHGt3AzHdnfUo_oz9y2FZBi.JzvJoO2t4H4IKtlzYo13WnL3RAJ_kYmHX 4xa1MozPiP82gKVbuQWP_yzI_7hSMHokbBRFL9TlnmzXkqq0vPy_2eFzmYKF jiWGZTjaKk1qb0CUcPIjB_j4Dx5SDZahXt7KdpAOV03uPtMY..l8BwEZGCGT DpVtdFBNKI7i8.qws6OOsli76CmS1qbLJpX0Zbg92NFR6v_rVL4t57iyHV9z Ua21ySlatJujvI3LEliLnmfFk9bDo.Eh7nFNn4aLPzP9SC2w8QXgV6zQkzys 11F1nBdZQ9nTV5tB9.Uyey1LYzLFFHmdVLQYHeiDTo0AgIxQjkfNX5OolDzm jQjPGsZks5NWkkM5AuHJwMklEJsZ0sCM9iTA2UyhZeoyRkpWFQxeHOEDfHFu 6AMzxOCI2725CCqDLH5IgX8dmJnIbk7ydPzZBaDNza0wty9B.2Xk_sfA5b4D qRqn6g–
X-Originating-IP: [66.94.237.120]
Authentication-Results: mta1236.mail.ac4.yahoo.com from=gmail.com; domainkeys=neutral (no sig); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (HELO omp1025.access.mail.mud.yahoo.com) (66.94.237.120) by mta1236.mail.ac4.yahoo.com with SMTP; Mon, 10 Dec 2012 01:07:40 -0800
Received: (qmail 58489 invoked by uid 1000); 10 Dec 2012 09:07:38 -0000
Received: (qmail 40240 invoked by uid 60001); 10 Dec 2012 09:07:32 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1355130452; bh=QdS8ZFnPwwAR6czSZDgJAa0xV0EikRD/Yg5FxyTjWyU=; h=X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=dKdLrDvVZM6VMh6BoHokCV/3ZvzFJxa1oAI99iIAMgx4cHNHedbNjUSXtBR6MmfruMzDpTSub60hdN47OKloGZ3iNF7aCjVtFID9HaeI2rldT7bB6rrOHmmFmLHVeGh8/rl7mJVXIQ4jTXzrFha34pIh2xlV5UFr2nW4CTN8p7E=
X-YMail-OSG: LumPmWEVM1ke4dkIO2wxogXiuDJEdGwe2AvGVgOBkieLimi _R_vsgz6Mmp9EpWxPcYH6FJ2VrCRrb72Zx553Jrlp1bcBy5QJVpE3jqMpHXs NVFK.cJxVep0SaZVF7lraTJrUc5pWb8Wuh_tzAmqNitSJhkjp5Em.Dj4J7hM uYe85K0UWxYBdck66CqhSdbeXKUw4gTbUSLiT95WELLm24YcVrKa2ts84i9u 2No_PuvyU6X1Z5PHoGS9RliMeZ_5x76YPq4R3uB_OY.l_gULi2bLwhYGMCDP TYEYWgzKqeFcRjC6o7UolqIkd1xhC0bJ9kGY6w4_G3Vn4Z9nZ1Gx8JB70wsQ fKwmJcbiZi4mwuKLqPfOGs_WtX52Hv9pACvIZKQ53X6wsjsMuHHddZ1KkauE ee62ZE1rclvKzfoH0GnGoxdEcW.8sHj6v5MXs5XSqaJ._Q_d2IlzQfNQ.aXh 3iIDBOnws0Q_ZOIlcK2yZ9eSYuL9QoT7geNMdQl0g7z4iS0nGcjZOj0kQldP S
Received: from [41.244.139.208] by web5708.biz.mail.ne1.yahoo.com via HTTP; Mon, 10 Dec 2012 01:07:32 PST
X-Mailer: YahooMailClassic/15.1.1 YahooMailWebService/0.8.128.478
Message-ID: <1355130451.40038.YahooMailClassic@web5708.biz.mail.ne1.yahoo.com>
Date: Mon, 10 Dec 2012 01:07:31 -0800 (PST)
From: Mr James Fox <jamesfox2345678@gmail.com>
Reply-To: jamesfox1997@hotmail.co.za
Subject: I AM MR JAMES FOX PLEASE OPEN THE ATTACHMENT PLEASE GET BACK TO ME

“Mr James Fox” <jamesfox2345678@gmail.com> RETURN-PATH: <jamesfox2345678@gmail.com> REPLY-TO: jamesfox1997@hotmail.co.za

RECEIVED IP: 41.244.139.208 by web5708.biz.mail.ne1.yahoo.com

X-ORIGINATING-IP: 66.94.237.120

Advertisements
 
Leave a comment

Posted by on 12/11/2012 in Other

 

Tags: , , , , , , , , , , , ,

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

 
%d bloggers like this: