DHL Fake shipment malware scam; Subject: Mail Exception Notification; From: \"Express Service\" - Scamalot

Seen a Scammer? Report Them!

Seen a scammer? Been caught out? Let the world know so they don't get burned. Add information if you see one that's already been logged - scammers move quickly and change details often to avoid detection. Details you log here will be in major search engines within an hour or two.

Please Like, Share, Tweet etc. to spread the word.
  Scam type at Advanced Search      
Scam ReporterScam Tips Received
No Name
Edinburgh, Edinburgh, United Kingdom
2013-04-27 14:38:47
Generic/Unspecified Scam
DHL Fake shipment malware scam; Subject: Mail Exception Notification; From: "Express Service" 
?? ( authenticated_id: nobody)
Email Address:;
Scam Website:
Fake DHL shipment malware and scam sent by User of German based host; ([]) with link to malware URL: (DO NOT CLICK ON LINK OR DOWNLOAD ANY FILES).

Originating Sender: id 1UVvb7-0006jx-HI ; (

Reply-To: \"Express Service\"

X-Get-Message-Sender-Via: authenticated_id: nobody

Originating IP:
ISP & Organization: Hetzner Online AG
Host Name:
Country: Germany.
 Got more information on this Scam/Scammer?
Add to Report
 Problems with this Report? (Spam/Legal/Abuse etc) ?
Report to Scamalot
Curious what information about you is out there? You may be surprised! | Reverse Email Lookup | Reverse Phone Lookup

Increase ad revenue 50-250% with Ezoic
    [CONTEXT_DOCUMENT_ROOT] => /home2/scamalot/public_html
    [DOCUMENT_ROOT] => /home2/scamalot/public_html
    [HTTPS] => on
    [HTTP_ACCEPT] => text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
    [HTTP_ACCEPT_ENCODING] => x-gzip, gzip, deflate
    [HTTP_HOST] =>
    [HTTP_USER_AGENT] => CCBot/2.0 (
    [HTTP_X_HTTPS] => 1
    [PATH] => /bin:/usr/bin
    [PATH_INFO] => /9413
    [PATH_TRANSLATED] => /home2/scamalot/public_html/ScamTipReports
    [QUERY_STRING] => 
    [REDIRECT_STATUS] => 200
    [REMOTE_ADDR] =>
    [REMOTE_PORT] => 46990
    [REQUEST_SCHEME] => https
    [REQUEST_URI] => /ScamTipReports/9413
    [SCRIPT_FILENAME] => /home2/scamalot/public_html/ScamTipReports
    [SCRIPT_NAME] => /ScamTipReports
    [SCRIPT_URI] =>
    [SCRIPT_URL] => /ScamTipReports/9413
    [SERVER_ADDR] =>
    [SERVER_NAME] =>
    [SERVER_PORT] => 443
    [SERVER_SOFTWARE] => Apache
    [SSL_TLS_SNI] =>
    [TZ] => America/Sacramento
    [UNIQUE_ID] => WeudbkKT5osAAEoSv20AAAAB
    [PHP_SELF] => /ScamTipReports/9413
    [REQUEST_TIME_FLOAT] => 1508613486.35
    [REQUEST_TIME] => 1508613486
    [argv] => Array

    [argc] => 0