FedEx - Scamalot

Seen a Scammer? Report Them!

Seen a scammer? Been caught out? Let the world know so they don't get burned. Add information if you see one that's already been logged - scammers move quickly and change details often to avoid detection. Details you log here will be in major search engines within an hour or two.

Please Like, Share, Tweet etc. to spread the word.
Scam Report Type: at  
Scam ReporterScam Tips Received
Anonymous
Marbella, Malaga, Spain
2012-12-09 11:37:14
Identity Theft
+1 FedEx
 Scammer
  Information
Scam Website:
   http://www.nele-ouwens.com/GQDQFTOILD.php?php=receipt
Info in mail:


FedEx

Order: SGH-2093-4806141070
Order Date: Monday, 2 December 2012, 12:32 AM
Dear Customer,

Your parcel has arrived at the post office at December 7.Our postrider was unable to deliver the parcel to you.

To receive a parcel, please, go to the nearest our office and show )+++this postal receipt.





GET POSTAL RECEIPT

Best Regards, The FedEx Team.
Follow Ups/Extra Information. Most recent is listed first.
Lee NJ   (Jackson, NJ, United States) Added the following extra information on :2012-12-10 06:08:50
 Scammer
  Information
Name:
   ds.lemonox.com
Email Address:
   tnl-752@indianapolis.com shipping@ds.lemonox.com
Telephone:
   IP 66.232.127.108
Fax:
   IP 66.232.127.108
PostalService
Tracking Detail (920)12-920-920-7627-7627
FedEx
Order: SGH-8651-7280261684
Order Date: Monday, 2 December 2012, 12:32 AM
Dear Customer,
Your parcel has arrived at the post office at December 7.Our postrider was unable to deliver the parcel to you.
To receive a parcel, please, go to the nearest our office and show this postal receipt.
GET POSTAL RECEIPT <-------**THIS WAS A LINK TO A SUSPICIOUS ATTACHMENT TO "GET RECIEPT**
Best Regards, The FedEx Team.
**FULL HEADER INFORMATION**
Return-Path: X-YahooFilteredBulk: 66.232.127.108 Received-SPF: none (domain of ds.lemonox.com does not designate permitted sender hosts) X-YMailISG: AlM3mZ8WLDuumzz_zhyAnZKEOXh5TciUXzMUlRKtmT_o6Kx4 I4bd3MQsFSSAA1jBVDW3ZEMelaJhNvmczOERm5Y2nMe0YCinjTVBqDx_1FcU v61Wj6N6liixLDAKEa82ZH1t939DSI0L0itHg30LwsyvAJAwuR_pt3l566QX GRlIFfGwshY94WCaRbtaMYpR.uRMgyB19i19Gl3Y_LYfVu8jTVwFBbRa_gTm 74MRib2zV8uDbKRAzjUT606EFCxsV7FwJPVnSjrsUpQ18OyJWmQ8FZSiv_KA VNx6a72bUXtmb3rOHcTooCL3_EbCuDmehdClj_u5Wu1b_bOvL4KUgR3iCYXW rG2EoR8jRUKcVbKboMVOCZsSI5ViR_ddmELD2C7PzYfIZq_WvUx08IyMbCVU dATuWhDVORR0sNumJU_5KB3Iah7xogNUVZXjMChVwe9l2VEa8g35v3rtR5_5 Qf2ZmDLrHU0wUR5AJ3IASLQ25ZOiWaLwHO9SpT2JKZ0WzwlohJGVwdDgUoyy Z4Y8T86YebrYLAx2s0ZG7UHEmlhiUEs7J4njuXhAo3mdoMu3K6SzsT8.rlwq tc67bcdiN.gU7uLQwq5E5jp97n_HBxx__HWAfxygtdwHFIoMRv6Xj8nTKLdD uQhjE_F1btcnwXaBc0z8wesh5V0DXLGeBT81cVZnWure_fHdmwTY_6ECG3g5 a5UJRhqYhPRfW2ApVfi3Gu_xDu97M.50UuXBM9EKLlTYHEwZ0ITH4XvlMSZO QONyyyxlmXUVB.Oe1eCKCE2_nRc_Az2.L9qUBMldF7jzUyb_awtgdIZWtAAe K_MLHbDYmUnSVCXz5bzLqyH9EUDUPmuY1P5Pr1sTcTMeQHAcb6T.4_pV0ntM G.Ua2PYJtesPuDnnFxTimu8bQ_d_KcyQzEqWPbHFojDOmujXD2HjPHrjjEHx 9xkUjROyqp_3fbzfG9P8q_LSBKy9vQpJ1Wtt6TFSGtJ_U8JI_misubjb5E4w NB7aR_Q6Ptl23TVNqG.T_PF_4C33v0ws_TtKyxti6Zt24KTMgy.IhA3ciyuQ bIhDiZP5GIh2ACue5W8f8cUcQ3ZERRG_vnpex8TjcOzJ81x6f2DUngOWwQqA Rw2frFVB8dVvmwSH21hhdIvDSeyVS9P9wc.uT1ZyzQYN8gNpjubVTzXuHUUx IFTeGnGwpzdhit69gs39wKSACG4m_GFsZf3zRPc- X-Originating-IP: [66.232.127.108] Authentication-Results: mta1034.mail.ac4.yahoo.com from=indianapolis.com; domainkeys=neutral (no sig); from=indianapolis.com; dkim=neutral (no sig) Received: from 127.0.0.1 (EHLO ds.lemonox.com) (66.232.127.108) by mta1034.mail.ac4.yahoo.com with SMTP

 Got more information on this Scam? Add to Report