Advert.

Do NOT tell your scammer he is posted here, or report their accounts as it puts others at risk!

Phishers impersonating DHL

DO NOT click on any links in these emails.

mail@alarcon2.com.br

Unread postby SlapHappy » Fri Dec 11, 2015 12:22 am

122.160.33.64 Airtel Broadband Delhi India

Return-Path: <>
Received: from [122.160.33.64] (port=17679 helo=[192.168.1.200])
by server.iprofessores.com.br with esmtpsa (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.86)
id 1a7AGx-0005V3-D7; Thu, 10 Dec 2015 21:05:16 -0200
Subject: Shipment Delivery
To: Recipients <>
From: "DHL Express. " <>
Date: Fri, 11 Dec 2015 04:35:00 +0530
X-Authenticated-Sender: server.iprofessores.com.br: mail@alarcon2.com.br

Dear Sir/Ma,

Kindly find Attached Shipping Document issued to us from your Customer.

Please confirm accordingly if your address is correct before we submit to our outlet office for dispatch to your destination.

Thank you for using DHL Express!

Princes Court 11
Wapping Ln, London,
E1W 2DA, United Kingdom
Toll Free: +44 20 7553 2200

Opening Hours
Mon-Fri 07:30-19:00
Sat-Sun 10:00-14:00
Holidays Closed

Attachments area
Preview attachment SHIPMENT LABEL.pdf
[PDF]

-
+442075532200
Number billable as geographic number
Country or destination United Kingdom
City or exchange location London
Original network provider* BT
If anyone asks you for money on the Internet they are always a scammer, 100% of the time.
Blackmail Scammed? Go here: https://www.scamsurvivors.com/blackmail/#/
FAQ viewtopic.php?f=3&t=19
Victim of a scam? Go here: https://scamsurvivors.com/forum/viewtop ... =3&t=26504
User avatar
SlapHappy
Retired admin/co creator
 
Posts: 44968
Joined: Tue Apr 17, 2012 5:18 am
Location: Just a face in a magazine, watching you post your scammer's details.

Re: mail@alarcon2.com.br

Unread postby SlapHappy » Fri Dec 11, 2015 12:28 am

* 122.160.33.64 Airtel Broadband Delhi India

Return-Path: <>
Received: from [122.160.33.64] (port=17305 helo=[192.168.1.200])
by server.iprofessores.com.br with esmtpsa (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.86)
id 1a79dY-0001zq-V6; Thu, 10 Dec 2015 20:24:34 -0200
Subject: Shipment Delivery
To: Recipients <>
From: "DHL Express. " <>
Date: Fri, 11 Dec 2015 03:54:18 +0530
X-Authenticated-Sender: server.iprofessores.com.br: mail@alarcon2.com.br



Dear Sir/Ma,

Kindly find Attached Shipping Document issued to us from your Customer.

Please confirm accordingly if your address is correct before we submit to our outlet office for dispatch to your destination.

Thank you for using DHL Express!

Princes Court 11
Wapping Ln, London,
E1W 2DA, United Kingdom
Toll Free: +44 20 7553 2200

Opening Hours
Mon-Fri 07:30-19:00
Sat-Sun 10:00-14:00
Holidays Closed

Attachments area
Preview attachment SHIPMENT LABEL.pdf
[PDF]
If anyone asks you for money on the Internet they are always a scammer, 100% of the time.
Blackmail Scammed? Go here: https://www.scamsurvivors.com/blackmail/#/
FAQ viewtopic.php?f=3&t=19
Victim of a scam? Go here: https://scamsurvivors.com/forum/viewtop ... =3&t=26504
User avatar
SlapHappy
Retired admin/co creator
 
Posts: 44968
Joined: Tue Apr 17, 2012 5:18 am
Location: Just a face in a magazine, watching you post your scammer's details.

From: "DHL Courier " <>

Unread postby SlapHappy » Thu Dec 17, 2015 11:01 pm

* 122.160.33.64 Airtel Broadband Delhi India

Return-Path: <>
Received: from [122.160.33.64] (port=23583 helo=[192.168.1.200])
by ju001lcr14.cbr.the-server.net.au with esmtpsa (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.86)
id 1a9LjG-000M0I-02; Thu, 17 Dec 2015 10:43:31 +1100
Subject: Dear Customer,
To: Recipients <>
From: "DHL Courier " <>
Date: Thu, 17 Dec 2015 05:12:56 +0530


Dear Customer,

An enclosed package addressed to you was sent through our courier service by your business associate. We need to confirm you are the actual receiver before we set out for final delivery to your address.

Please confirm your delivery address with us to ensure smooth and fast delivery. Attached is the Electronic package of your Shipment. Please Check attachment and make corrections if Any. Failure to verify address might lead to delay in scheduled delivery or loss of important document.

Sincerely
DHL Delivery Team.
(c) 2015 DHL International

Attachments area
Preview attachment ELECTRONIC SHIPMENT.pdf
[PDF]
If anyone asks you for money on the Internet they are always a scammer, 100% of the time.
Blackmail Scammed? Go here: https://www.scamsurvivors.com/blackmail/#/
FAQ viewtopic.php?f=3&t=19
Victim of a scam? Go here: https://scamsurvivors.com/forum/viewtop ... =3&t=26504
User avatar
SlapHappy
Retired admin/co creator
 
Posts: 44968
Joined: Tue Apr 17, 2012 5:18 am
Location: Just a face in a magazine, watching you post your scammer's details.

Misheck Munsanje <hagandu.mm@gmail.com>

Unread postby SlapHappy » Fri Jan 15, 2016 4:26 am

Return-Path: <hagandu.mm@gmail.com>
Date: Fri, 15 Jan 2016 01:44:39 +0100
Subject: Fwd: ARRIVAL NOTICE confirm address!!!
From: Misheck Munsanje <hagandu.mm@gmail.com>
To: undisclosed-recipients:;
Bcc: xxx


---------- Forwarded message ----------
From: DHL Courier Service
Date: Fri, Jan 15, 2016 at 1:32 AM
Subject: Fwd: ARRIVAL NOTICE confirm address!!!
To:


Parcel: 6584389740
Arrival Date: Sunday; January 8,11:50AM

Dear Valued Customer,

Our courier agent was unable to deliver the packages to you due to incorrect delivery address details on the packages we received at our post service.

To receive your packages.
please download the attached receipt and confirm delivery details

Thanks
DHL customer care.


This email was sent to you because you are a customer of DHL

Attachments area
Preview attachment DHL_RECEIPT_&_TRACKING_NUMBER.pdf
[PDF]
If anyone asks you for money on the Internet they are always a scammer, 100% of the time.
Blackmail Scammed? Go here: https://www.scamsurvivors.com/blackmail/#/
FAQ viewtopic.php?f=3&t=19
Victim of a scam? Go here: https://scamsurvivors.com/forum/viewtop ... =3&t=26504
User avatar
SlapHappy
Retired admin/co creator
 
Posts: 44968
Joined: Tue Apr 17, 2012 5:18 am
Location: Just a face in a magazine, watching you post your scammer's details.

"Cooperate Logistics Co.,Ltd" <jessica.escobar@legrand.us>

Unread postby SlapHappy » Fri Feb 12, 2016 2:32 pm

* 14.139.59.195 Nkn Core Network n/a India

Return-Path: <jessica.escobar@legrand.us>
Received: from emea01-am1-obe.outbound.protection.outlook.com (mail-am1on0137.outbound.protection.outlook.com. [157.56.112.137])
by mx.google.com with ESMTPS id eb7si8783879oeb.35.2016.02.11.03.52.57
for xxx
(version=TLS1_2 cipher=ECDHE-RSA-AES128-SHA bits=128/128);
Thu, 11 Feb 2016 03:52:57 -0800 (PST)
Received-SPF: pass (google.com: domain of jessica.escobar@legrand.us designates
157.56.112.137 as permitted sender) client-ip=157.56.112.137;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of jessica.escobar@legrand.us designates
157.56.112.137 as permitted sender) smtp.mailfrom=jessica.escobar@legrand.us
Authentication-Results: gmail.com; dkim=none (message not signed)
header.d=none;gmail.com; dmarc=none action=none header.from=legrand.us;
Received: from TESTXENAPP32.slbsrsv.ac.in (14.139.59.195) by
DB5PR06MB1206.eurprd06.prod.outlook.com (10.162.153.156) with Microsoft SMTP
Server (TLS) id 15.1.403.16; Thu, 11 Feb 2016 11:52:54 +0000
Content-Type: text/html; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Subject: FW: Your Shipping Documents
To: xxx
From: "Cooperate Logistics Co.,Ltd" <jessica.escobar@legrand.us>
Date: Thu, 11 Feb 2016 17:23:51 +0530
X-Originating-IP: [14.139.59.195]



Shipping Documents Receiver's eMail: xxx
Greetings,

As instructed by your shipper, we have attached below the secured PDF copies of your shipping
documents and your shipment tracking details from our international logistic partner, DHL Epress.

Click Here To View Your Documents And Shipment Tracking Details: www. dhl.com/documents/0094325.pdf redirected to phishing link:
http:/ /theperfectmocha.com/shippingdocs/DHL/tracking.php?userid=xxx




At Co-Logistics we offer best Service Delivery Commitment with shipper & client.

*´¨)
¸.• ´¸.•*´¨) ¸.•*¨)
(¸.•´ (¸.•'* Best Regards
(¸.•'* .•*´¨)
Smith Wan *
(¸.•'*
Sales Excutive

Cooperate Logistics Co.,Ltd
************************


Head Office
Rm 2401-2502,Guidu Bld, Chungfeng Rd,
Luohu, Shenzhen, China
Phone: (86) 755 88863799
Email: info@co-logistics.com
URL: www. co-logistics.com

Image result for Carrier: DHL FedEx UPS TNT


Ce message, ainsi que tous les fichiers joints à ce message, peuvent contenir des informations sensibles et/ ou confidentielles ne devant pas être divulguées. Si vous n'êtes pas le destinataire de ce message (ou que vous recevez ce message par erreur), nous vous remercions de le notifier immédiatement à son expéditeur, et de détruire ce message. Toute copie, divulgation, modification, utilisation ou diffusion, non autorisée, directe ou indirecte, de tout ou partie de ce message, est strictement interdite.
Se désabonner: Si vous souhaitez être retiré de notre liste de diffusion, s'il vous plaît envoyer vos coordonnées à CASL.unsubscribe @legrand.ca et indiquer quels sont les messages que vous ne souhaitez plus recevoir.


This e-mail, and any document attached hereby, may contain confidential and/or privileged information. If you are not the intended recipient (or have received this e-mail in error) please notify the sender immediately and destroy this e-mail. Any unauthorized, direct or indirect, copying, disclosure, distribution or other use of the material or parts thereof is strictly forbidden.
Unsubscribe: If you would like to be removed from our mailing list, please send your contact information to CASL.unsubscribe @legrand.ca and indicate what messages you no longer wish to receive.
If anyone asks you for money on the Internet they are always a scammer, 100% of the time.
Blackmail Scammed? Go here: https://www.scamsurvivors.com/blackmail/#/
FAQ viewtopic.php?f=3&t=19
Victim of a scam? Go here: https://scamsurvivors.com/forum/viewtop ... =3&t=26504
User avatar
SlapHappy
Retired admin/co creator
 
Posts: 44968
Joined: Tue Apr 17, 2012 5:18 am
Location: Just a face in a magazine, watching you post your scammer's details.

DHL EXPRESS <mmakwelero@yahoo.co.uk>

Unread postby SlapHappy » Thu Apr 14, 2016 3:00 pm

Return-path: <mmakwelero@yahoo.co.uk>
Date: Thu, 14 Apr 2016 05:33:53 +0000 (UTC)
From: DHL EXPRESS <mmakwelero@yahoo.co.uk>
Reply-To: DHL EXPRESS <mmakwelero@yahoo.co.uk>
Subject: DHL Package Arrival Notification:- DH38796776032




Dear Valued Customer,

Thank you for giving us the opportunity to address your shipping needs
Please receive your package
Kindly download the attached and confirm your delivery details to avoid further delay.
Best regard,

DHL delivery dept.

attachment; filename= DHL_RECEIPT_TRACKING_DETAIL.PDF
If anyone asks you for money on the Internet they are always a scammer, 100% of the time.
Blackmail Scammed? Go here: https://www.scamsurvivors.com/blackmail/#/
FAQ viewtopic.php?f=3&t=19
Victim of a scam? Go here: https://scamsurvivors.com/forum/viewtop ... =3&t=26504
User avatar
SlapHappy
Retired admin/co creator
 
Posts: 44968
Joined: Tue Apr 17, 2012 5:18 am
Location: Just a face in a magazine, watching you post your scammer's details.

"Cooperate Logistics Co.,Ltd" <jbarba@morsco.com>

Unread postby SlapHappy » Sat Apr 16, 2016 12:03 am

* 14.139.59.195 Nkn Core Network n/a India

Return-Path: <jbarba@morsco.com>
Received: from na01-bn1-obe.outbound.protection.outlook.com
(mail-bn1on0074.outbound.protection.outlook.com. [157.56.110.74])
by mx.google.com with ESMTPS id xt3si5344556pab.145.2016.04.13.07.58.31
for xxx
(version=TLS1_2 cipher=ECDHE-RSA-AES128-SHA bits=128/128);
Wed, 13 Apr 2016 07:58:35 -0700 (PDT)
Received-SPF: pass (google.com: domain of jbarba@morsco.com designates
157.56.110.74 as permitted sender) client-ip=157.56.110.74;
Authentication-Results: mx.google.com;
dkim=pass header.i=@MorrisonSupplyCompany.onmicrosoft.com;
spf=pass (google.com: domain of jbarba@morsco.com designates
157.56.110.74 as permitted sender) smtp.mailfrom=jbarba@morsco.com
DKIM-Signature:
Authentication-Results: gmail.com; dkim=none (message not signed)
header.d=none;gmail.com; dmarc=none action=none header.from=morsco.com;
Received: from TESTXENAPP32.slbsrsv.ac.in (14.139.59.195) by
DM2PR0501MB1294.namprd05.prod.outlook.com (10.160.130.148) with Microsoft
SMTP Server (TLS) id 15.1.447.15; Wed, 13 Apr 2016 14:58:29 +0000
Content-Type: text/html; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Subject: FW: Your Shipping Documents
To: xxx
From: "Cooperate Logistics Co.,Ltd" <jbarba@morsco.com>
Date: Wed, 13 Apr 2016 20:28:35 +0530
X-Originating-IP: [14.139.59.195]
X-ClientProxiedBy: PN1PR01CA0016.INDPRD01.PROD.OUTLOOK.COM (10.164.137.23) To
DM2PR0501MB1294.namprd05.prod.outlook.com (10.160.130.148)
Return-Path: jbarba@morsco.com


Shipping Documents Receiver's eMail: xxxxx

Greetings,

As instructed by your shipper, we have attached below the secured PDF copies of your shipping
documents and your shipment tracking details from our international logistic partner, DHL Epress.

Click Here To View Your Documents And Shipment Tracking Details: www.dhl.com/documents/0094325.pdf

"http:/ /namaren.com/jyg/DHL/tracking.php?userid=xxxx@xxxxx"

At Co-Logistics we offer best Service Delivery Commitment with shipper & client.

*´¨)
¸.• ´¸.•*´¨) ¸.•*¨)
(¸.•´ (¸.•'* Best Regards
(¸.•'* .•*´¨)
Smith Wan *
(¸.•'*
Sales Excutive

Cooperate Logistics Co.,Ltd
************************

Head Office
Rm 2401-2502,Guidu Bld, Chungfeng Rd,
Luohu, Shenzhen, China
Phone: (86) 755 88863799
Email: info@co-logistics.com
URL: http:/ /www. co-logistics.com

Image result for Carrier: DHL FedEx UPS TNT
If anyone asks you for money on the Internet they are always a scammer, 100% of the time.
Blackmail Scammed? Go here: https://www.scamsurvivors.com/blackmail/#/
FAQ viewtopic.php?f=3&t=19
Victim of a scam? Go here: https://scamsurvivors.com/forum/viewtop ... =3&t=26504
User avatar
SlapHappy
Retired admin/co creator
 
Posts: 44968
Joined: Tue Apr 17, 2012 5:18 am
Location: Just a face in a magazine, watching you post your scammer's details.

Previous

Return to No clicky clicky. Sites that try to install a virus on your PC.

Who is online

Users browsing this forum: No registered users and 19 guests

cron