Phishing email impersonating DHL

Attachment: receipt label.htm (3.8KB)

This spam email source IP address is: 197.234.219.41
This spam email source IP hostname is: 41.79.219.213

Country: Benin
City: Zoungoudo
Area Code: -
Latitude: 7.012
Longitude: 1.9816
ISP: Spacetel benin
Organization: Spacetel benin

Subject : Your Parcel is in our office
Date : 2017-05-15 13:26:22
From : "lee@dhl.co.kr" <lee@dhl.co.kr>
To : zhangwei_li@yahoo.com
Cc : casmirfatih@gmail.com; gambirsumnit78@gmail.com; priyeshk00@gmail.com

Dear Sir,

Our company's courier couldn't make the delivery of your parcel.

REASON: POSTAL CODE CONTAINS AN ERROR.
CURRENT PARCEL LOCATION: SHANGHAI
DELIVERY STATUS: SORT ORDER
SERVICE: ONE-DAY SHIPPING
NUMBER OF YOUR PARCEL: 3P2227J3AG
FEATURES: NO

Label is enclosed to the letter.
Print and fill it with the correct details and send back via email.

Thank you for using our services.

Regards,
DHL SHANGHAI FACILITY
Courier Service
Jung-gu, Seoul, South Korea ·
+82 2-3277-1500

-----------------------------------------------------
ISP detail of this spam email
-----------------------------------------------------

inetnum:        41.79.219.0 - 41.79.219.255
netname:        Enterprise_CUST
descr:          Interconnection with Enterprises Network
country:        BJ
admin-c:        ED7-AFRINIC
tech-c:         EI3-AFRINIC
status:         ASSIGNED PA
mnt-by:         Spacetel-MNT
source:         AFRINIC # Filtered
parent:         41.79.216.0 - 41.79.219.255

person:         Eric DEGBOEVI
address:        360 Boulevard Rue de la Marina
address:        01BP5293 Cotnou
address:        Cotonou
address:        Benin
phone:          +229 97970001
phone:          +229 97979961
nic-hdl:        ED7-AFRINIC
mnt-by:         GENERATED-CBCNYOQNFWLCWLCSV4DS9M1QBOOWQW76-MNT
source:         AFRINIC # Filtered
Location: Rue 230, Cotonou, Benin

Comments

Post a Comment

Popular spam

Buyout from DJI is imminent at $1.37 per share

Subject : This stock is about to receive a buyout at 10 times its current market price... Date : 2017-03-20 From : "Efren Bray" <Bray779@airenetworks.es> To : rechelemb@yahoo.com Cc : ekashparmar01@yahoo.com, yaomaiyumingzhaowo@126.com, support@mailminion.com, info@mercranet.com, priyeshk00@gmail.com Dear Subscriber, It's been a long time since I sent you my special newsletter containing a hot stock tip. The reason for that is because I really haven't had many opportunities to present to you. Incapta Inc (ticker: INCT) is a company that was brought to my attention earlier this morning by one of my colleagues at an M&A firm in manhattan. It seems that a buyout from DJI is imminent at $1.37 per share and is set to be announced next week on Tuesday, March 28. INCT is a company that has revolutionized the drone industry by creating the first independent drones that can be dispatched to areas of interest such as crime scenes, car chases, wildfire...
Read more

Vietnamese fake inquiry which sent from Nigeria through German email service

Attachment: RFQ-40371.r11 (345.7KB) Spoofed server Name: Dang Thi Toan Mailing Address: So E61, cho Hoi Do, duong Nguyen Chi Thanh, P.Thanh Binh, Hai Duong Thanh Binh 1000 VN Phone: +84.0978599011 Email:zaimu@wacoh-vn.com Subject : Fwd: RFQ-40371 Date : 2017-06-26 19:11:56 From : DANG THI TOAN <dianameitert@t-online.de> To : "samumex@samudies.co.kr" <samumex@samudies.co.kr> Cc : info@mercranet.com; ludo_gallery@yahoo.com; support@mailminion.com Good Day, Please quote for the following items as attached so you can raise contract terms for PI Appreciate to receive your quotation at your earliest. Thank you for your assistance. Best Regards. Sales Manager DANG THI TOAN (Ms) VIET NAM WACOH Co. Ltd. Add: Room 602, 7 th Floor, Hoa Xa Building, 360 Nguyen Luong Bang Street Thanh Binh Ward, Hai Duong city, Hai Duong Province Tel: +84 3203 895 515 Phone: 0978 599 011 Email: zaimu@wacoh-vn.com Refer to below: SECURITY ALERT - Fake ...
Read more

Confirm your banking details

Attachment: Swift Copy.jar (497.6KB) Subject : Re: Re: Confirm your banking details Date : 2017-03-14 11:35:56 From : kasse@fundus-nienburg.de Dear Sir, We have made the bank transfer today and the transfer has been done by our bank, kindly confirm the receipt of the payment and let us know the estimated ETA. The transfer swift copy is attached, hope the transfer is as you instructed and all information are correct on the attached slip. For security purpose, the document is a secured document, enable content and editing to view the document. Thanks! "Sent from my iPhone"
Read more