Conversation

Notices

Embed this notice
[FWGS]DjBRINE1 :verified_think: :tiasmile: (djbrine1@pony.social)'s status on Thursday, 07-Sep-2023 09:41:22 JST [FWGS]DjBRINE1 :verified_think: :tiasmile:

Seems like something happened to Oracle.
I had just received an email from no-reply@oracle.com. This looks like a typical fishing mail. And apparently it is.
It's strange to see an email from oracle on behalf of usps.com that redirects to vertssert.postinfo-center.live.
The last domain is also freshly registered and the site is trying to look like usps.com.
Be careful with emails you receive and take care.
In conversation about a year ago from pony.social permalink
Attachments
1. No result found on File_thumbnail lookup.
  
  Oracle | Cloud Applications and Cloud Platform
  
  Oracle offers a comprehensive and fully integrated stack of cloud applications and cloud platform services.
2. A screenshot of an email from no-reply@oracle.com with the title [USPS] Your package address is wrong. and a timestamp. Seems like this email is not from oracle, but USPS.com. The content as follows: Hi. Your package is undeliverable, the address ion file did not match the zip code, please update the address. Sign in and edit! USPS.com
  https://cdn.pony.social/media_attachments/files/111/017/180/333/934/602/original/6cb460e2c40e7d36.png
3. Domain not in remote thumbnail source whitelist: www.usps.com
  
  Welcome | USPS
  
  Welcome to USPS.com. Track packages, pay and print postage with Click-N-Ship, schedule free package pickups, look up ZIP Codes, calculate postage prices, and find everything you need for sending mail and shipping packages.
4. Untitled attachment
- Embed this notice
  feld (feld@bikeshed.party)'s status on Thursday, 07-Sep-2023 09:41:21 JST feld
  in reply to
  
  Did it really come from Oracle's mail servers or was it spoofed?
  
  Paste the headers
  
  In conversation about a year ago permalink
- Embed this notice
  [FWGS]DjBRINE1 :verified_think: :tiasmile: (djbrine1@pony.social)'s status on Thursday, 07-Sep-2023 11:01:01 JST [FWGS]DjBRINE1 :verified_think: :tiasmile:
  in reply to
  - feld
  @feld
  Received: from chclsmtp02.us2.oraclecloud.com (chclsmtp02.us2.oraclecloud.com [160.34.15.19])
  by mail-nwsmtp-mxfront-production-main-56.myt.yp-c.yandex.net (mxfront/Yandex) with ESMTPS id VfPquH3YNW20-ImMnHrTn;
  Wed, 06 Sep 2023 07:41:33 +0300
  X-Yandex-Fwd: 1
  Authentication-Results: mail-nwsmtp-mxfront-production-main-56.myt.yp-c.yandex.net; spf=pass (mail-nwsmtp-mxfront-production-main-56.myt.yp-c.yandex.net: domain of oracle.com designates 160.34.15.19 as permitted sender, rule=[ip4:160.34.15.16/28]) smtp.mail=OPCNS-BOUNCES-US2_WW@oracle.com
  X-Yandex-Spam: 1
  X-Yandex-Uid-Status: redacted
  Received: from cns-managed-server10 ([192.29.104.207])
  by chclsmtp02.us2.oraclecloud.com
  (Oracle Communications Messaging Server 8.0.2.1.20180104 64bit (built Jan 4
  2018)) with ESMTP id <0S0J00185RP77I20@chclsmtp02.us2.oraclecloud.com> for
  redacted@yandex.ru; Wed, 06 Sep 2023 04:41:31 +0000 (GMT)
  In conversation about a year ago permalink
  Attachments
  1. No result found on File_thumbnail lookup.
    
    Oracle | Cloud Applications and Cloud Platform
    
    Oracle offers a comprehensive and fully integrated stack of cloud applications and cloud platform services.
  2. Untitled attachment
  3. Untitled attachment
  4. Untitled attachment
  5. Domain not in remote thumbnail source whitelist: yastatic.net
    
    Яндекс
    
    Найдётся всё
- Embed this notice
  [FWGS]DjBRINE1 :verified_think: :tiasmile: (djbrine1@pony.social)'s status on Thursday, 07-Sep-2023 11:01:03 JST [FWGS]DjBRINE1 :verified_think: :tiasmile:
  in reply to
  - feld
  @feld gimme a sec.
  
  In conversation about a year ago permalink
- Embed this notice
  feld (feld@bikeshed.party)'s status on Thursday, 07-Sep-2023 11:01:31 JST feld
  in reply to
  
  Haha wow 🤩
  
  I wonder if its a bug on their cloud platform that lets you spoof senders
  
  In conversation about a year ago permalink

Public

Conversation

Notices

Feeds