Scam Tip Report #1694 - Delivery Error No#5816 From: \"FedEx Service\" <customs-cleared@fedex.com>


Scam ReporterScam Tips Received
No Name
Cricklewood, Brent, United Kingdom
2012-02-20 11:58:02
Identity Theft
Delivery Error No#5816 From: "FedEx Service" <customs-cleared@fedex.com> 
 Scammer
  Information
Name:
nobody@hs-388.dedicated.hostalia.com>) id 1RzPLI-0006Di-MM
Email Address:
customs-cleared@fedex.com
Scam Website:
Fax:
FedEx notification,

Your package has been returned to the FedEx office.
The reason of the return is - Incorrect delivery address of the package.
Please print out the invoice copy attached and collect the package at our office.

FedEx Global Services.

------------13297293324F420F34A5622
Content-Type: application/octet-stream;name=\"FedEx_Invoice.zip\"
Content-Transfer-Encoding:base64
Content-Disposition:attachment;filename=\"FedEx_Invoice.zip\"


Headers on phishing email:-

Received: from hs-388.dedicated.hostalia.com ([82.194.74.115])
Mon, 20 Feb 2012 01:15:34 -0800
Received: from nobody by hs-388.dedicated.hostalia.com with local (Exim 4.69)
(envelope-from )
id 1RzPLI-0006Di-MM
for xxxxx@xxxxxx Mon, 20 Feb 2012 10:15:32 +0100
To: wxxxxxxxxxxxxxxxxx
Subject: Delivery Error No#5816
From: \"FedEx Service\"
X-Mailer: FightIKVersion1.22
Reply-To: \"FedEx Service\"
Mime-Version: 1.0
Content-Type:multipart/mixed;boundary=\"----------13297293324F420F34A5622\"
Message-Id:
Date: Mon, 20 Feb 2012 10:15:32 +0100
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - hs-388.dedicated.hostalia.com
xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
X-AntiAbuse: Originator/Caller UID/GID - [99 99] / [47 12]
X-AntiAbuse: Sender Address Domain - hs-388.dedicated.hostalia.com
Return-Path: nobody@hs-388.dedicated.hostalia.com
X-OriginalArrivalTime: 20 Feb 2012 09:15:35.0282 (UTC) FILETIME=[34035D20:01CCEFB0]


 Got more information on this Scam/Scammer?
 Problems with this Report? Let us know


Since you’re here …
we have a small favour to ask. More people are visting Scamdex and Scamalot than ever but advertising revenues are falling fast and we have no 'product' to sell. And unlike many informational websites, we haven’t put up a paywall or membership barrier – we want to keep our site as open as we can. So you can see why we need to ask for your help. Scamdex/Scamalot websites takes a lot of time, money and hard work to keep running. We do this because we hate to see our fellow humans getting scammed out of their hard-earned money by low-lives.
Consider switching off your AdBlocker (if you use one) or contributing directly by one of the links below. Thank you for reading!
Ad Blocker Detected
Our website is made possible by displaying online advertisements to our visitors.
Please consider supporting us by disabling your ad blocker.
Thanks!
Scamdex
PING