USPS Phishing attempt from Germany
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 30 May 2022 18:25:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1nvpgm-0008RH-GD
for dave@doctor.nl2k.ab.ca;
Mon, 30 May 2022 18:24:48 -0600
Resent-From: The Doctor
Resent-Date: Mon, 30 May 2022 18:24:48 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from vsmx001.mijndomein.xion.oxcs.net ([157.97.78.141]:51191)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1nvpfZ-0008JF-QA
for doctor@doctor.nl2k.ab.ca;
Mon, 30 May 2022 18:23:38 -0600
Received: from vsmx001.mijndomein.xion.oxcs.net (unknown [10.93.2.1])
by mx-out.mijndomein.xion.oxcs.net (Postfix) with ESMTP id 3692D34D6939
for; Tue, 31 May 2022 00:23:09 +0000 (UTC)
Received: from proxy-2.proxy.shared.ns.xion.oxcs.net (proxy-2.proxy.shared.ns.xion.oxcs.net [140.238.159.46])
by mx-out.mijndomein.xion.oxcs.net (Postfix) with ESMTPA id 7D58DA404DB
for; Tue, 31 May 2022 00:23:08 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=supportusps.store;
s=mail1; t=1653956589;
bh=5evGQtzieP9k9staXeRkVRCNzg5l9vz1ZokRkxwOkC0=;
h=From:To:Reply-To:Date:Subject:From;
b=cnMAwpj+iT0bcXkhwLUBbjU410bgqABNM8/N9xU9AYvZZOTG+Y8SuuWnDc5PhopN2
ADVar3UGh0z2CzfwvTbvpuYyvf848gVU7JE/MQB53iqrbvH/M5HGDaqamVApL1fDiX
Xpreuju4oEq3DPrN2PB1g3iZM0jZf211pHcyLsPI=
MIME-Version: 1.0
From: " "
To: doctor@doctor.nl2k.ab.ca
Reply-To: info@supportusps.store
Date: 31 May 2022 00:23:08 +0000
Subject: Reroute Reminder
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: base64
X-VadeSecure-Status: LEGIT
X-VADE-STATUS: LEGIT
X-VadeSecure-Status: LEGIT
X-VADE-STATUS: LEGIT
X-Spam_score: 6.7
X-Spam_score_int: 67
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear Customer, Information on your shipment US/9514901185421
is still pending. You have received this email as a reminder for a package
that arrived at USA originating facility 05/27/2022.
Content analysis details: (6.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.4 NO_DNS_FOR_FROM DNS: Envelope sender has no MX or A DNS records
3.4 FROMSPACE Idiosyncratic "From" header format
0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in
DNS
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML
tag
0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.1 MISSING_MID Missing Message-Id: header
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal
information
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: cgicrnesp.com, pngio.com]
Subject: {SPAM?} Reroute Reminder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Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 30 May 2022 18:25:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1nvpgm-0008RH-GD
for dave@doctor.nl2k.ab.ca;
Mon, 30 May 2022 18:24:48 -0600
Resent-From: The Doctor
Resent-Date: Mon, 30 May 2022 18:24:48 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from vsmx001.mijndomein.xion.oxcs.net ([157.97.78.141]:51191)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.95 (FreeBSD))
(envelope-from
id 1nvpfZ-0008JF-QA
for doctor@doctor.nl2k.ab.ca;
Mon, 30 May 2022 18:23:38 -0600
Received: from vsmx001.mijndomein.xion.oxcs.net (unknown [10.93.2.1])
by mx-out.mijndomein.xion.oxcs.net (Postfix) with ESMTP id 3692D34D6939
for
Received: from proxy-2.proxy.shared.ns.xion.oxcs.net (proxy-2.proxy.shared.ns.xion.oxcs.net [140.238.159.46])
by mx-out.mijndomein.xion.oxcs.net (Postfix) with ESMTPA id 7D58DA404DB
for
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=supportusps.store;
s=mail1; t=1653956589;
bh=5evGQtzieP9k9staXeRkVRCNzg5l9vz1ZokRkxwOkC0=;
h=From:To:Reply-To:Date:Subject:From;
b=cnMAwpj+iT0bcXkhwLUBbjU410bgqABNM8/N9xU9AYvZZOTG+Y8SuuWnDc5PhopN2
ADVar3UGh0z2CzfwvTbvpuYyvf848gVU7JE/MQB53iqrbvH/M5HGDaqamVApL1fDiX
Xpreuju4oEq3DPrN2PB1g3iZM0jZf211pHcyLsPI=
MIME-Version: 1.0
From: " "
To: doctor@doctor.nl2k.ab.ca
Reply-To: info@supportusps.store
Date: 31 May 2022 00:23:08 +0000
Subject: Reroute Reminder
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: base64
X-VadeSecure-Status: LEGIT
X-VADE-STATUS: LEGIT
X-VadeSecure-Status: LEGIT
X-VADE-STATUS: LEGIT
X-Spam_score: 6.7
X-Spam_score_int: 67
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear Customer, Information on your shipment US/9514901185421
is still pending. You have received this email as a reminder for a package
that arrived at USA originating facility 05/27/2022.
Content analysis details: (6.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.4 NO_DNS_FOR_FROM DNS: Envelope sender has no MX or A DNS records
3.4 FROMSPACE Idiosyncratic "From" header format
0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in
DNS
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML
tag
0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.1 MISSING_MID Missing Message-Id: header
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal
information
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: cgicrnesp.com, pngio.com]
Subject: {SPAM?} Reroute Reminder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