From: DHL Express
Sent: 19 December 2011 10:03
Subject: DHL Express Dispatch Confirmation
Order number: 9672834463
Your order has now been dispatched and your DHL Express air waybill number is 9672834463.
To follow the progress of your shipment and print invoice for your records, please go to :
DHL Express will deliver your order between 9am-5pm GMT, Monday to Friday. If you are unavailable, DHL Express will leave a card so you can contact them to reschedule.
All orders must be signed for upon delivery.
Please note, we are unable to change the shipping address on your order now it has been dispatched. Your purchase should arrive in perfect condition. If you are unhappy with the quality, please let us know immediately.
For assistance email email@example.com or call 0800 099 27671 from the UK, +44 (0)20 2781 62512 from the rest of the world, 24 hours a day, seven days a week
The information in this email is confidential and is intended solely for the addressee. Access to this email by anyone else is unauthorised. If you are not the intended recipient, you must not read, use or disseminate the information. Any views expressed in this message are those of the individual sender, except where the sender specifically states them to be the views of DHL Express Deliveries.
secure.dhldispatches.com (hosted on 220.127.116.11, Primus Australia) looks like a DHL page, but it carries a malicious payload which is loads from 18.104.22.168 (Dedicated Servers Australia). Blocking access to both those IPs may be prudent. The Wepawet report for this one is here.