Return to Sender - A Brief Analysis of a US Postal Service Smishing Campaign

This report analyzes a USPS-themed smishing campaign: starting from the domain hamsoraei.info, investigators used DomainTools and Maltego pivots to identify approximately 200 related domains, multiple registration email addresses reused across services, and a likely Iran-based individual associated via a Facebook account; the report lists IOCs (emails and domains) and highlights the social-engineering risk to individuals and organizations.