USPS Phishing attempt from Germany

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 30 May 2022 18:25:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1nvpgm-0008RH-GD

for dave@doctor.nl2k.ab.ca;

Mon, 30 May 2022 18:24:48 -0600

Resent-From: The Doctor

Resent-Date: Mon, 30 May 2022 18:24:48 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from vsmx001.mijndomein.xion.oxcs.net ([157.97.78.141]:51191)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1nvpfZ-0008JF-QA

for doctor@doctor.nl2k.ab.ca;

Mon, 30 May 2022 18:23:38 -0600

Received: from vsmx001.mijndomein.xion.oxcs.net (unknown [10.93.2.1])

by mx-out.mijndomein.xion.oxcs.net (Postfix) with ESMTP id 3692D34D6939

for ; Tue, 31 May 2022 00:23:09 +0000 (UTC)

Received: from proxy-2.proxy.shared.ns.xion.oxcs.net (proxy-2.proxy.shared.ns.xion.oxcs.net [140.238.159.46])

by mx-out.mijndomein.xion.oxcs.net (Postfix) with ESMTPA id 7D58DA404DB

for ; Tue, 31 May 2022 00:23:08 +0000 (UTC)

DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=supportusps.store;

s=mail1; t=1653956589;

bh=5evGQtzieP9k9staXeRkVRCNzg5l9vz1ZokRkxwOkC0=;

h=From:To:Reply-To:Date:Subject:From;

b=cnMAwpj+iT0bcXkhwLUBbjU410bgqABNM8/N9xU9AYvZZOTG+Y8SuuWnDc5PhopN2

ADVar3UGh0z2CzfwvTbvpuYyvf848gVU7JE/MQB53iqrbvH/M5HGDaqamVApL1fDiX

Xpreuju4oEq3DPrN2PB1g3iZM0jZf211pHcyLsPI=

MIME-Version: 1.0

From: " "

To: doctor@doctor.nl2k.ab.ca

Reply-To: info@supportusps.store

Date: 31 May 2022 00:23:08 +0000

Subject: Reroute Reminder

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: base64

X-VadeSecure-Status: LEGIT

X-VADE-STATUS: LEGIT

X-VadeSecure-Status: LEGIT

X-VADE-STATUS: LEGIT

X-Spam_score: 6.7

X-Spam_score_int: 67

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Customer, Information on your shipment US/9514901185421

is still pending. You have received this email as a reminder for a package

that arrived at USA originating facility 05/27/2022.



Content analysis details: (6.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.4 NO_DNS_FOR_FROM DNS: Envelope sender has no MX or A DNS records

3.4 FROMSPACE Idiosyncratic "From" header format

0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in

DNS

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily

valid

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML

tag

0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.1 MISSING_MID Missing Message-Id: header

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal

information

0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was

blocked. See

http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block

for more information.

[URIs: cgicrnesp.com, pngio.com]

Subject: {SPAM?} Reroute Reminder



PFA+DQo8UD4NCjxQPjxCUj48L1A+DQo8VEFCTEUgY2VsbFNwYWNpbmc9MCBjZWxsUGFk

ZGluZz00MCB3aWR0aD0iOTglIiBib3JkZXI9MD4NCjxUQk9EWT4NCjxUUj4NCjxURCBz

dHlsZT0iRk9OVC1GQU1JTFk6ICdsdWNpZGEmIzEzOyYjMTA7ICAgICAgICBncmFuZGUn

LHRhaG9tYSx2ZXJkYW5hLGFyaWFsLHNhbnMtc2VyaWYiIGJnQ29sb3I9I2Y3ZjdmNyB3

aWR0aD0iMTAwJSI+DQo8VEFCTEUgY2VsbFNwYWNpbmc9MCBjZWxsUGFkZGluZz0wIHdp

ZHRoPTU2MCBib3JkZXI9MD4NCjxUQk9EWT4NCjxUUj4NCjxURCBzdHlsZT0iRk9OVC1T

SVpFOiAxNnB4OyBGT05ULUZBTUlMWTogJ2x1Y2lkYSBncmFuZGUnLHRhaG9tYSx2ZXJk

YW5hLGFyaWFsLHNhbnMtc2VyaWY7IFZFUlRJQ0FMLUFMSUdOOiBtaWRkbGU7IEJBQ0tH

Uk9VTkQ6IHdoaXRlOyBGT05ULVdFSUdIVDogYm9sZDsgQ09MT1I6IGJsYWNrOyBQQURE

SU5HLUJPVFRPTTogNHB4OyBURVhULUFMSUdOOiBsZWZ0OyBQQURESU5HLVRPUDogNHB4

OyBQQURESU5HLUxFRlQ6IDhweDsgTEVUVEVSLVNQQUNJTkc6IC0wLjAzZW07IFBBRERJ

TkctUklHSFQ6IDhweCIgYm9yZGVyQ29sb3I9I2ZmMDAwMD48SU1HIGFsdD0iIiBzcmM9

Imh0dHBzOi8vaW1nLnBuZ2lvLmNvbS91c3BzLXBuZy1sb2dvLWZyZWUtdHJhbnNwYXJl

bnQtcG5nLWxvZ29zLXVzcHMtbG9nby1wbmctMTAyMF8yNjEucG5nIiB3aWR0aD00ODkg

aGVpZ2h0PTEyMCBtb3otZG8tbm90LXNlbmQ9InRydWUiPiA8L1REPg0KPFREIHN0eWxl

PSJGT05ULVNJWkU6IDEycHg7IEZPTlQtRkFNSUxZOiAnbHVjaWRhIGdyYW5kZScsdGFo

b21hLHZlcmRhbmEsYXJpYWwsc2Fucy1zZXJpZjsgVkVSVElDQUwtQUxJR046IG1pZGRs

ZTsgQkFDS0dST1VORDogd2hpdGU7IEZPTlQtV0VJR0hUOiBib2xkOyBDT0xPUjogcmdi

KDI1NSwyNTUsMjU1KTsgUEFERElORy1CT1RUT006IDRweDsgVEVYVC1BTElHTjogcmln

aHQ7IFBBRERJTkctVE9QOiA0cHg7IFBBRERJTkctTEVGVDogOHB4OyBQQURESU5HLVJJ

R0hUOiA4cHgiPjxCUj48L1REPjwvVFI+DQo8VFI+DQo8VEQgc3R5bGU9IkZPTlQtRkFN

SUxZOiAnbHVjaWRhJiMxMzsmIzEwOyAgICAgICAgICAgICAgICBncmFuZGUnLHRhaG9t

YSx2ZXJkYW5hLGFyaWFsLHNhbnMtc2VyaWY7IFBBRERJTkctQk9UVE9NOiAxNXB4OyBQ

QURESU5HLVRPUDogMTVweDsgUEFERElORy1MRUZUOiAxNXB4OyBQQURESU5HLVJJR0hU

OiAxNXB4OyBCQUNLR1JPVU5ELUNPTE9SOiByZ2IoMjU1LDI1NSwyNTUpIiBoZWlnaHQ9

MjkyIHZBbGlnbj10b3AgY29sU3Bhbj0yPg0KPFRBQkxFIHdpZHRoPSI5MCUiPg0KPFRC

T0RZPg0KPFRSPg0KPFREIHN0eWxlPSJGT05ULVNJWkU6IDEycHgiIGhlaWdodD0yNTYg

dkFsaWduPXRvcCB3aWR0aD01MjYgYWxpZ249bGVmdD4NCjxQPjxTUEFOPkRlYXIgQ3Vz

dG9tZXIsPC9TUEFOPjwvUD4NCjxQPjxTUEFOPjwvU1BBTj48U1BBTiBsYW5nPWVuIGNs

YXNzPVZJaXlpPjxTUEFOIGNsYXNzPSJKTHFKNGIgQ2hNazBiIiBkYXRhLWxhbmd1YWdl

LWZvci1hbHRlcm5hdGl2ZXM9ImVuIiBkYXRhLWxhbmd1YWdlLXRvLXRyYW5zbGF0ZS1p

bnRvPSJkZSIgZGF0YS1waHJhc2UtaW5kZXg9IjAiIGRhdGEtbnVtYmVyLW9mLXBocmFz

ZXM9IjMiPjxTUEFOIGNsYXNzPVE0aUFXYz5JbmZvcm1hdGlvbiBvbiB5b3VyIHNoaXBt

ZW50IFVTLzk1MTQ5MDExODU0MjEgaXMgc3RpbGwgcGVuZGluZy48L1NQQU4+PC9TUEFO

PjxTUEFOIGNsYXNzPUpMcUo0YiBkYXRhLWxhbmd1YWdlLWZvci1hbHRlcm5hdGl2ZXM9

ImVuIiBkYXRhLWxhbmd1YWdlLXRvLXRyYW5zbGF0ZS1pbnRvPSJkZSIgZGF0YS1waHJh

c2UtaW5kZXg9IjEiIGRhdGEtbnVtYmVyLW9mLXBocmFzZXM9IjMiPjxTUEFOIGNsYXNz

PVE0aUFXYz4gPEJSPjwvU1BBTj48L1NQQU4+PC9TUEFOPjwvUD4NCjxQPjxTUEFOIGxh

bmc9ZW4gY2xhc3M9VklpeWk+PFNQQU4gY2xhc3M9SkxxSjRiIGRhdGEtbGFuZ3VhZ2Ut

Zm9yLWFsdGVybmF0aXZlcz0iZW4iIGRhdGEtbGFuZ3VhZ2UtdG8tdHJhbnNsYXRlLWlu

dG89ImRlIiBkYXRhLXBocmFzZS1pbmRleD0iMSIgZGF0YS1udW1iZXItb2YtcGhyYXNl

cz0iMyI+PFNQQU4gY2xhc3M9UTRpQVdjPjwvU1BBTj48L1NQQU4+PFNQQU4gY2xhc3M9

IkpMcUo0YiBDaE1rMGIiIGRhdGEtbGFuZ3VhZ2UtZm9yLWFsdGVybmF0aXZlcz0iZW4i

IGRhdGEtbGFuZ3VhZ2UtdG8tdHJhbnNsYXRlLWludG89ImRlIiBkYXRhLXBocmFzZS1p

bmRleD0iMiIgZGF0YS1udW1iZXItb2YtcGhyYXNlcz0iMyI+PFNQQU4gY2xhc3M9UTRp

QVdjPllvdSBoYXZlIHJlY2VpdmVkIHRoaXMgZW1haWwgYXMgYSByZW1pbmRlciBmb3Ig

YSBwYWNrYWdlIHRoYXQgYXJyaXZlZCBhdCBVU0EmbmJzcDtvcmlnaW5hdGluZyBmYWNp

bGl0eSAwNS8yNy8yMDIyLjwvU1BBTj48L1NQQU4+PC9TUEFOPjwvUD4NCjxQPjxTUEFO

IGxhbmc9ZW4gY2xhc3M9VklpeWk+PFNQQU4gY2xhc3M9IkpMcUo0YiBDaE1rMGIiIGRh

dGEtbGFuZ3VhZ2UtZm9yLWFsdGVybmF0aXZlcz0iZW4iIGRhdGEtbGFuZ3VhZ2UtdG8t

dHJhbnNsYXRlLWludG89ImRlIiBkYXRhLXBocmFzZS1pbmRleD0iMiIgZGF0YS1udW1i

ZXItb2YtcGhyYXNlcz0iMyI+PFNQQU4gY2xhc3M9UTRpQVdjPlRoZSBwYXJjZWwgd2ls

bCBiZSByZXR1cm5lZCB0byB0aGUgc2VuZGVyIGFmdGVyIDA2LzAxLzIwMjIgMDk6MDAg

Q0VULjxCUj48L1A+PC9TUEFOPjwvU1BBTj48L1NQQU4+DQo8UD48U1RST05HPjwvU1RS

T05HPjxTVFJPTkc+PC9TVFJPTkc+PFNUUk9ORz48U1BBTiBsYW5nPWRlIGNsYXNzPVZJ

aXlpPjxTUEFOIGNsYXNzPSJKTHFKNGIgQ2hNazBiIiBkYXRhLWxhbmd1YWdlLWZvci1h

bHRlcm5hdGl2ZXM9ImRlIiBkYXRhLWxhbmd1YWdlLXRvLXRyYW5zbGF0ZS1pbnRvPSJm

ciIgZGF0YS1waHJhc2UtaW5kZXg9IjAiIGRhdGEtbnVtYmVyLW9mLXBocmFzZXM9IjEi

PjxTUEFOIGNsYXNzPVE0aUFXYz48L1NQQU4+PC9TUEFOPjwvU1BBTj48L1NUUk9ORz48

U1RST05HPjxTUEFOIGxhbmc9ZGUgY2xhc3M9VklpeWk+PFNQQU4gY2xhc3M9IkpMcUo0

YiBDaE1rMGIiIGRhdGEtbGFuZ3VhZ2UtZm9yLWFsdGVybmF0aXZlcz0iZGUiIGRhdGEt

bGFuZ3VhZ2UtdG8tdHJhbnNsYXRlLWludG89ImZyIiBkYXRhLXBocmFzZS1pbmRleD0i

MCIgZGF0YS1udW1iZXItb2YtcGhyYXNlcz0iMSI+PFNQQU4gY2xhc3M9UTRpQVdjPjxT

UEFOIGxhbmc9ZW4gY2xhc3M9VklpeWk+PFNQQU4gY2xhc3M9IkpMcUo0YiYjMTM7JiMx

MDsgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIENoTWswYiIgZGF0

YS1sYW5ndWFnZS1mb3ItYWx0ZXJuYXRpdmVzPSJlbiIgZGF0YS1sYW5ndWFnZS10by10

cmFuc2xhdGUtaW50bz0iZGUiIGRhdGEtcGhyYXNlLWluZGV4PSIwIiBkYXRhLW51bWJl

ci1vZi1waHJhc2VzPSIxIj48U1BBTiBjbGFzcz1RNGlBV2M+SG93IGRvIEkgY2FuY2Vs

IHRoZSByZXJvdXRlIDwvU1BBTj48L1NQQU4+PC9TUEFOPj88L1NQQU4+PC9TUEFOPjwv

U1BBTj48L1NUUk9ORz48L1A+DQo8RElWPg0KPFRBQkxFIHN0eWxlPSJCT1JERVItQ09M

TEFQU0U6IGNvbGxhcHNlIiBjZWxsU3BhY2luZz0wIGNlbGxQYWRkaW5nPTAgd2lkdGg9

NTIwPg0KPFRCT0RZPg0KPFRSPg0KPFREIHN0eWxlPSJQQURESU5HLUJPVFRPTTogMTBw

eDsgUEFERElORy1UT1A6IDEwcHg7IFBBRERJTkctTEVGVDogMTBweDsgUEFERElORy1S

SUdIVDogMTBweDsgQkFDS0dST1VORC1DT0xPUjogcmdiKDI1NSwyNDksMjE1KSIgYm9y

ZGVyQ29sb3I9I2ZmMDAwMD4NCjxESVYgY2xhc3M9ZWN4c3R5bGUyIHN0eWxlPSJGT05U

LVNJWkU6IDExcHg7IE1BUkdJTi1CT1RUT006IDJweCI+PEEgY2xhc3M9ZWN4c3R5bGUy

IGhyZWY9Imh0dHA6Ly9jZ2ljcm5lc3AuY29tL3UiIHRhcmdldD1fYmxhbmsgbW96LWRv

LW5vdC1zZW5kPSJ0cnVlIj48U1BBTiBsYW5nPWVuIGNsYXNzPVZJaXlpPjxTUEFOIGNs

YXNzPSJKTHFKNGIgQ2hNazBiIiBkYXRhLWxhbmd1YWdlLWZvci1hbHRlcm5hdGl2ZXM9

ImVuIiBkYXRhLWxhbmd1YWdlLXRvLXRyYW5zbGF0ZS1pbnRvPSJkZSIgZGF0YS1waHJh

c2UtaW5kZXg9IjAiIGRhdGEtbnVtYmVyLW9mLXBocmFzZXM9IjEiPjxTUEFOIGNsYXNz

PVE0aUFXYz5Db25maXJtIHNoaXBwaW5nIGZlZXMuPEJSPjwvU1BBTj48L1NQQU4+PC9T

UEFOPjwvQT48L0RJVj48L1REPjwvVFI+PC9UQk9EWT48L1RBQkxFPjwvRElWPg0KPFAg

Y2xhc3M9ZWN4c3R5bGU1PjxTVFJPTkc+T3VyIFRlYW08L1NUUk9ORz4gaXMgaGVyZSB0

byBoZWxwLjwvUD4NCjxQIGNsYXNzPWVjeHN0eWxlNT5BdCB5b3VyIHNlcnZpY2UhPC9Q

PjwvVEQ+PC9UUj48L1RCT0RZPjwvVEFCTEU+PC9URD48L1RSPg0KPFRSPg0KPFREIHN0

eWxlPSJGT05ULVNJWkU6IDExcHg7IEZPTlQtRkFNSUxZOiAnbHVjaWRhJiMxMzsmIzEw

OyAgICAgICAgICAgICAgICBncmFuZGUnLHRhaG9tYSx2ZXJkYW5hLGFyaWFsLHNhbnMt

c2VyaWY7IENPTE9SOiByZ2IoMTUzLDE1MywxNTMpOyBQQURESU5HLUJPVFRPTTogMTBw

eDsgUEFERElORy1UT1A6IDEwcHg7IFBBRERJTkctTEVGVDogMTBweDsgUEFERElORy1S

SUdIVDogMTBweCIgYm9yZGVyQ29sb3I9Izk5OTk5OSBjb2xTcGFuPTI+DQo8RElWPjxT

UEFOIGNsYXNzPWVjeHN0eWxlMTA+PEJSPjwvU1BBTj4NCjxQIHN0eWxlPSJGT05ULVNJ

WkU6IDlweDsgQ09MT1I6IGdyZXkiPlRoaXMgbWVzc2FnZSBpcyBzZW50IHRvIHlvdSBi

eSBVU1BTIGFuZCBpcyBpbnRlbmRlZCB0byBpbmZvcm0geW91IG9mIHRoZSBzdGF0dXMg

b2YgdGhlIGRlbGl2ZXJ5IG9mIHlvdXIgcGFja2FnZS4gWW91ciBjb250YWN0IGRldGFp

bHMgaGF2ZSBiZWVuIHRyYW5zbWl0dGVkIHRvIHVzLCBmb3IgdGhlIGV4Y2x1c2l2ZSBu

ZWVkcyBvZiB0aGUgZGVsaXZlcnksIGJ5IHRoZSBzZW5kZXIgb2YgeW91ciBwYWNrYWdl

LiBUaGV5IHdpbGwgYmUga2VwdCBmb3IgNiBtb250aHMgdGhlbiBhcmNoaXZlZCBmb3Ig

YSBtYXhpbXVtIHBlcmlvZCBvZiAzIHllYXJzLiBUaGV5IHdpbGwgbm90IGJlIHVzZWQg

Zm9yIGNvbW1lcmNpYWwgcHJvc3BlY3RpbmcgcHVycG9zZXMuIEluIGFjY29yZGFuY2Ug

d2l0aCB0aGUgcmVndWxhdGlvbnMgYXBwbGljYWJsZSB0byBwZXJzb25hbCBkYXRhLCB5

b3UgaGF2ZSB0aGUgcmlnaHQgdG8gYWNjZXNzLCByZWN0aWZ5IGFuZCBvcHBvc2UgeW91

ciBwZXJzb25hbCBkYXRhIGZvciBsZWdpdGltYXRlIHJlYXNvbnMgd2hpY2ggeW91IGNh

biBleGVyY2lzZSB2aWEgdGhlIGZvcm0gb24gd3d3LnVzcHMuY29tIGV4ZXJjaXNlLW9m

LXJpZ2h0cy1vbi1wZXJzb25hbC1kYXRhIG9yIGJ5IG1haWwgdG8gdGhlIGZvbGxvd2lu

ZyBhZGRyZXNzOiBVU1BTIFNBUyAtIENvbnRhY3QgSW5mb3JtYXRpcXVlIGV0IExpYmVy

dMOpcyAtIDMwMCBOIE5ldyBZb3JrIEF2ZSwgV2ludGVyIFBhcmssIEZMIDMyNzg5cywg

aW5kaWNhdGluZyB5b3VyIG5hbWUsIGZpcnN0IG5hbWUsIHBvc3RhbCBhZGRyZXNzIGFu

ZCBhdHRhY2hpbmcgYSBjb3B5IG9mIGJvdGggc2lkZXMgb2YgeW91ciBpZGVudGl0eSBk

b2N1bWVudC4gQW55IHJlcXVlc3QgcmVsYXRpbmcgdG8gdGhlIHBlcmZvcm1hbmNlIG9m

IHRoZSB0cmFuc3BvcnQgc2VydmljZSBtdXN0IGJlIGFkZHJlc3NlZCB0byBDdXN0b21l

ciBTZXJ2aWNlLiwqICJHcmVlbiBkZWxpdmVyeSIgem9uZXMgMTAwJSBvZiBsYXN0IG1p

bGUgZGVsaXZlcmllcyBpbiBlbGVjdHJpYyB2ZWhpY2xlcywgbmF0dXJhbCBnYXMgb3Ig

Y2FyZ28gYmlrZXM8L1A+PC9ESVY+PC9URD48L1RSPjwvVEJPRFk+PC9UQUJMRT48L1RE

PjwvVFI+PC9UQk9EWT48L1RBQkxFPiZuYnNwOyANCjxQPjwvUD4mbmJzcDsgDQo8UD48

L1A+