Please recheck your delivery address USPS parcel 632063287

Hello,

This is to confirm that your item has been shipped at Tue, 16 May 2017 10:49:00 -0700.

You can print the shipment label by clicking on the link.

information.doc

With sincere thanks.

Shanae Stovall - USPS Support Clerk.

Email analysis :

NOTE : fisou75@viajeseci.es
NOTE : Received : from viajeseci.es (unknown [222.222.219.154])

Phishing analysis :

CLICK : information.doc
OPEN : http://be-tiger.com/wp-content/sg.php
RESULT : Phishing was removed

AUTOMATIC USPS statement: your package has been postponed

This is an automatic message: you are obliged to read this letter to accept
the order.
Please, use the link seen down below to contact the USPS support team.

http://www.stbishoy.org/wp-content/b4d47c6405.html

Thanks and best regards.
Takeisha Wernecke - USPS Senior Station Manager.

Email analysis :

NOTE : wo56816421@occhristian.pvt.k12.ia.us
NOTE : USPS Priority
NOTE : Received : from occhristian.pvt.k12.ia.us (unknown [186.151.239.161])
NOTE : User-Agent : Opera Mail/10.62 (Win32)
NOTE : 186.151.239.161

Phishing analysis :

CLICK : http://www.stbishoy.org/wp-content/b4d47c6405.html
OPEN : http://www.stbishoy.org/wp-content/b4d47c6405.html
REDIRECT : http://servisedelivery.com/bot14/lgen.php
RESULT : Phishing is unresponsive...

Stbishoy.org analysis :

Registrant Email: stbishoy.org@proxy.dreamhost.com
Updated Date: 2016-11-01T18:00:21
Creation Date: 2009-08-02T04:33:23
Registry Expiry Date: 2017-08-02T04:33:23

Servisedelivery.com analysis :

Updated Date: 2017-04-24T17:04:10
Creation Date: 2017-04-24T00:00:00
Registrar Registration Expiration Date: 2018-04-24T00:00:00
Registrar Abuse Contact Email: abuse@bizcn.com
Registrant Name: Wuxi Yilian LLC
Registrant Organization: Wuxi Yilian LLC
Registrant Street: No.1001 Anling Road
Registrant City: Xiamen
Registrant State/Province: Fujian
Registrant Postal Code: 361008
Registrant Country: cn
Registrant Phone: +86.5922577888
Registrant Fax: +86.5922179606
Registrant Email: whoisprivacyprotect@whoisservices.cn

Failed Delivery for Package #085043120 (USPS Phishing)

We tried but failed to deliver your package again today, because no one was present at the destination address. On the delivery day, there must be someone present at the destination address to receive the parcel.

Shipping type: Priority 1day
Box size: Large Flat Rate box
Date : Nov 14th 2016
Delivery Notification : e-mail sent

To reschedule the parcel delivery, visit our nearest office, with a printed copy of the Delivery Notice Card. An electronic copy of the Delivery Notice Card, in Microsoft Word format, can be downloaded from our website :

https://tools.usps.com/go/TrackConfirmAction?action=download&invoice=82 108506870

The tracking number can be found on the Delivery Notice Card and can be used to track your parcel:

https://t ools.usps.com/go/TrackConfirmAction_input

Thanks for shipping with us

© 2016 United States Postal Service

Phishing analysis :

CLICK : https://tools.usps.com/go/TrackConfirmAction?action=download&invoice=82 108506870

OPEN : http://hoasan.vn/js/view.php?id=d2VibWFzdGVyQHJiY2FmZS5jb20=
RESULT : Phishing attempt.

Email analysis :

NOTE : usps@transitsystems.com
NOTE : Content-Type : text/html; charset="UTF-8"
NOTE : Mime-Version : 1.0
NOTE : X-Mailer : PHPMailer 5.2.8 (https://github.com/PHPMailer/PHPMailer/)
NOTE : X-Priority : 3
NOTE : Return-Path : < usps@transitsystems.com >
NOTE : Content-Transfer-Encoding : 8bit
NOTE : Received : from unknown (HELO transitsystems.com) (194.75.227.248)

NOTE : Message-Id :
NOTE : Failed Delivery for Package #085043120