Tuesday, April 2, 2019

B/L Documents by DHL/AWB Number: 1090...

This email was bad enough I only get to keep the header information, so here it is:

Envelope Sender:
'From' Header: "DHL"
Subject: B/L Documents by DHL/AWB Number: 10909010
Timestamp: 02:00:08 CDT, Saturday 30 March 2019
Message-ID: <12996826fa9601461d031a78f16a3512@mail.dpm-logistics.com>

Classification: Malicious
Threat Level: Very High
Confidence: Very High
Classification Breakdown:
TAGS CONFIDENCE
Virus (Exploit.EXP/JAVA.Banload.AMAG.Gen [Aquarius]) Very High
Spam Very High

Category: Virus
Delivery: Status: Blocked
Summary: This message has been blocked
Released? No

Client IP Address: 114.30.80.43
Client GeoIP Lookup: Indonesia
Email Size: 910.4 kB
Encrypted? No


114.30.80.43 IP Address Location
Reverse IP (PTR) mx2.bmp.net.id
ASN 38766 (PT. Bumi Merbabu Permai)
ISP / Organization PT. Bumi Merbabu Permai
IP Connection Type Dial-Up [internet speed test]
IP Location Salatiga, Central Java, Indonesia
IP Continent Asia
IP Country Indonesia (ID)
IP State Central Java (JT)
IP City Salatiga
IP Postcode unknown
IP Latitude -7.3214 / 7°19′17″ S
IP Longitude 110.5078 / 110°30′28″ E
IP Timezone Asia/Jakarta
IP Local Time Wed, 03 Apr 2019 03:57:08 +0700

No comments:

Post a Comment