This “USPS-Notification” spam uses a goo.gl redirector to go to pclr.timingexpress.ru then a malware site hosted on 199.19.215.133 (Vexxhost, Canada)
Date: Fri, 2 Mar 2012 10:56:41 -0500
From: “03456465?”
Subject: USPS-Notification? #74050379#�?77-0915398-10516944-5-120
http://goo.gl/XE84B
Oqq06dsgk19y1oup4kt8vrt!
You can see a Wepawet report for the malware here. Blocking access to that IP address might be prudent.
Leave a reply