Original Blog Entry: Another Moron E-mail

JADELottery — Sat, 17 Dec 2011 17:43:36 GMT

Below is an e-mail we got with an attached ZIP file; it's been deleted, both the e-mail and attachment.

Now, think about this message very carefully; we'll explain why it's a Moron sender.

__________

Dear customer,

Your parcel has arrived at the post office on December 4.

We were not able to deliver your package to your address.

To receive a parcel you must go to the nearest USPS office and show your post label.

The post label is attached to this letter.

Thank you for your attention.

USPS Express Services.

__________

First of all, we pick apart EVERY mail we get: real or virtual!

We past it through a series of investigative deduction and logic before we do ANYTHING with it.

The e-mail is designed to provoke your natural curiosity so you do something with the attachment.

What's interesting is the e-mail address this was sent to has an associated physical address that is defunct, we no longer live there.

My nearest USPS is nowhere near the old address; simply put it makes no sense that we would take this supposed label to the USPS near us.

The e-mail is designed to be very non-specific so it provokes the mystery solving, but for us the solving is not one that acts like Pavlov's Dog, noo-noo-noo!

We pick this muther apart and examine it beyond the scope of natural curiosity.

A closer look at the Internet Header information shows the origin of deception.

We removed our e-mail address.

__________

X-Apparently-To: nnnnnn@aaaaaaaaa.ddd via 68.142.201.111; Fri, 16 Dec 2011 10:56:51 -0800

X-YahooFilteredBulk: 76.247.45.75

Received-SPF: softfail (transitioning domain of usps.com does not designate 76.247.45.75 as permitted sender)

X-YMailISG: IPgbw4kWLDtR.HtdVELO2BX8o0yjeAnIFTT41ASr7xRLlLO4

6QGCQJ22qT7N0Wy6n0WTi993HR4bq.UmVzp86V.zbZAdXhOvhjzy2BGcIAkz

J_LJygknqXpj.IZnT8528vK3vKMeNBnnxdhg9Be2HfcIooaXZx0I98wjtnjA

l8ea6HiS9rPtdl3W78MY8QI0IShseWM7XLGHZdO8jVjMehvwNO80q7fGfQu6

xulDXMZBqv3.vMZttczVPkUb31y_Rn7xVPJ7SCTSFSGvZxLLCjxn3RGMH8Jc

NHf.N7QTepYKWMke_PnSBthkUg3LBnt6IxiRC9sHP_VX6AuvkotjJkFwdA--

X-Originating-IP: [76.247.45.75]

Authentication-Results: mta1015.sbc.mail.mud.yahoo.com from=usps.com; domainkeys=neutral (no sig); from=usps.com; dkim=neutral (no sig)

Received: from 207.115.20.126 (EHLO flpd116.prodigy.net) (207.115.20.126)

by mta1015.sbc.mail.mud.yahoo.com with SMTP; Fri, 16 Dec 2011 10:56:51 -0800

X-Originating-IP: [76.247.45.75]

Received: from usps.com (adsl-76-247-45-75.dsl.pltn13.sbcglobal.net [76.247.45.75])

by flpd116.prodigy.net (8.14.4 IN/8.14.4) with SMTP id pBGIul7G007336

for nnnnnn@aaaaaaaaa.ddd ; Fri, 16 Dec 2011 10:56:48 -0800

Message-ID: 001d01ccbc24$6c509973$7001a8c0@rsmoore

From: Postal Service postal.service@usps.com

To: nnnnnn@aaaaaaaaa.ddd

Subject: USPS Invoice copy NO#86011695

Date: Fri, 16 Dec 2011 10:56:30 -0700

MIME-Version: 1.0

Content-Type: multipart/mixed;

boundary= ----=_NextPart_000_001A_01CCBBE1.5E2AF110

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2900.2180

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180

__________

Notice the 3rd line of the Internet Header.

Moron E-mail!

... [ More ]