delivery@royalmail.com Subject: URGENT: Royal-Mail Missed Delivery Notice We were unable to make a delivery today. Please view the attached invoice & tracking number where you can track the package online at the Royal Mail website. We will attempt a delivery again tommorrow. Royal-Mail (c) 2010 Attached: Royal_Mail_Delivery_Notice_312317.pdf The recipient added: I got this message at an email address which I never use for ordering stuff, so there's no way anyone could know the street address that does with it. So I decided not to open the attachment. The extract from the header details (below) suggests that the Royal Mail is sending its emails from Chile; which seems to be a dead giveaway of dodginess! Received-SPF: softfail (google.com: best guess record for domain of transitioning root@sitios.exe.cl does not designate 200.55.208.195 as permitted sender) client-ip=200.55.208.195; Authentication-Results: mx.google.com; spf=softfail (google.com: best guess record for domain of transitioning root@sitios.exe.cl does not designate 200.55.208.195 as permitted sender) smtp.mail=root@sitios.exe.cl