USPS Phish from AS21396 NetConnex Broadband Ltd London UK
Posted by Dave Yadallee onEnvelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 19 Oct 2023 20:43:02 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96.2 (FreeBSD))
(envelope-from
id 1qtfQp-000K6M-1K
for dave@doctor.nl2k.ab.ca;
Thu, 19 Oct 2023 20:40:11 -0600
Resent-From: The Doctor
Resent-Date: Thu, 19 Oct 2023 20:40:11 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from buddybear.nh-serv.co.uk ([93.114.185.164]:43422)
by doctor.nl2k.ab.ca with esmtp (Exim 4.96.2 (FreeBSD))
(envelope-from
id 1qte4y-0007EP-1P
for root@nk.ca;
Thu, 19 Oct 2023 19:13:36 -0600
Received: by buddybear.nh-serv.co.uk (Postfix, from userid 1045)
id B00931200783; Fri, 20 Oct 2023 02:10:46 +0100 (BST)
To: root@nk.ca
Subject: =?UTF-8?B?WW91ciBwYWNrYWdlIGlzIG9uIGhvbGQ=?=
From: =?UTF-8?B?VVNQU8Ku?=
MIME-Version: 1.0;
Content-type: multipart/mixed; boundary="--gLu3Ak93JE"
Message-Id: <20231020011046.B00931200783@buddybear.nh-serv.co.uk>
Date: Fri, 20 Oct 2023 02:10:46 +0100 (BST)
X-Spam_score: 6.1
X-Spam_score_int: 61
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear Costumer, We hope this email finds you well. We wanted
to inform you that your pending shipment with tracking number N° US9514501135441
has outstanding charges due including. To complete the delivery as soon as
possible, Click on the button below and complete the steps
Content analysis details: (6.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,
https://senderscore.org/blocklistlookup/
[93.114.185.164 listed in bl.score.senderscore.com]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[93.114.185.164 listed in bl.score.senderscore.com]
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
domains are different
0.0 T_TVD_MIME_NO_HEADERS BODY: No description available.
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to
background
3.5 BOGUS_MIME_VERSION Mime version header is bogus
0.0 LOTS_OF_MONEY Huge... sums of money
Subject: {SPAM?} =?UTF-8?B?WW91ciBwYWNrYWdlIGlzIG9uIGhvbGQ=?=
X-Antivirus: AVG (VPS 231019-6, 10/19/2023), Inbound message
X-Antivirus-Status: Clean
----gLu3Ak93JE
Content-type: text/html; charset="utf-8"
Content-Transfer-Encoding: 8bit
Dear Costumer,
We hope this email finds you well. We wanted to inform you that your pending shipment with tracking number N° US9514501135441 has outstanding charges due including.
To complete the delivery as soon as possible, Click on the button below and complete the steps
We cannot receive or respond to replies to this email. If you have any questions
or comments
contact us online or call 1-800-463-3339.
31631 Hwy 278 Addison, AL 35540 US
Copyright © 2023 USPS. All Rights Reserved.
----gLu3Ak93JE
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments