AWB ref#PRN 2951A047AG2

AWB ref#PRN 2951A047AG2
############# START #############

##############################
# Links
##############################

#VirusTotal https://www.virustotal.com/#/file/0bdac15d91dcec6518e5b18fe2871989bd550086be460980e75363fc1439cbdc/detection
#HybridAnalysis https://www.hybrid-analysis.com/sample/0bdac15d91dcec6518e5b18fe2871989bd550086be460980e75363fc1439cbdc?environmentId=100


##############################
# Email
##############################

From: DHI|Express [mailto:info@skyservices.it]
Sent: Wednesday, February 14, 2018 3:10 AM
To: abuse <abuse@ups.com>
Subject: AWB ref#PRN 2951A047AG2

=D H L=

abuse@ups.com

We just received a package addressed to you in our arrival facility.

There was a mix up of addresses and we could not specify your delivery address.

Kindly check verify your delivery address here so as to receive your package.
Best Regards
DHL TEAM

© 2018 DHL International GmbH · All Rights Reserved


1 Attachment:    143kb


AWB ref#PRN 2951A047AG2.pdf                         View |  Download


##############################
# Headers                    #
##############################

Authentication-Results: ppops.net;
	spf=pass smtp.mailfrom=marketing@skyservices.it
Received: from eur02-he1-obe.outbound.protection.outlook.com (mail-he1eur02hn0216.outbound.protection.outlook.com [104.47.5.216])
	by mx0a-0021de01.pphosted.com with ESMTP id 2g44fauv5e-1
	(version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT)
	for <abuse@ups.com>; Wed, 14 Feb 2018 02:24:58 -0700
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=skyservicescloud.onmicrosoft.com; s=selector1-skyservices-it;
 h=From:Date:Subject:Message-ID:Content-Type:MIME-Version;
 bh=HWfzM4w8oV+5LsC8ycfhbCkazmyI+2zvKDBdXFbl5qI=;
 b=OW3yabSiDizniHb8JynPaEa1E0nkYvxb8kjrYfz/5/zrnz0ZDyaIxmqCrOpxPmr567T0BD5AGUsLgoS1cnbaH9yDqwft0Tm4ZS4Wcbx63336Zldt+Q2r4JZM8GdqjxAUs4GBvksRyqOXkYY87EDxswmWVinG3sDuDSsPy9evFxU=
Received: from skyservices.it (188.214.30.218) by
 AM5PR03MB2899.eurprd03.prod.outlook.com (2603:10a6:206:17::28) with Microsoft
 SMTP Server (version=TLS1_2,
 cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.506.18; Wed, 14
 Feb 2018 09:24:53 +0000
From: DHI|Express <marketing@skyservices.it>
To: abuse@ups.com
Subject: AWB ref#PRN 2951A047AG2
Date: 14 Feb 2018 01:24:53 -0800
Message-ID: <20180214012452.CA8F28FA613440EA@skyservices.it>
Content-Type: text/html;
	charset="iso-8859-1"
X-Originating-IP: [188.214.30.218]
X-ClientProxiedBy: HE1P195CA0003.EURP195.PROD.OUTLOOK.COM (2603:10a6:3:fd::13)
 To AM5PR03MB2899.eurprd03.prod.outlook.com (2603:10a6:206:17::28)
Return-Path: marketing@skyservices.it
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-Correlation-Id: 272d867a-5525-423c-bc0c-08d5738cce8e