ICloud phish from Beauharnois, Quebec
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 14 Dec 2023 18:40:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97 (FreeBSD))
(envelope-from)
id 1rDxB8-00000000B5W-0a7b
for dave@doctor.nl2k.ab.ca;
Thu, 14 Dec 2023 18:39:50 -0700
Resent-From: The Doctor
Resent-Date: Thu, 14 Dec 2023 18:39:50 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from [194.116.215.187] (port=59946 helo=anc.org.za)
by doctor.nl2k.ab.ca with esmtp (Exim 4.97 (FreeBSD))
(envelope-from)
id 1rDx1Z-00000000AVU-15WT
for doctor@doctor.nl2k.ab.ca;
Thu, 14 Dec 2023 18:30:03 -0700
Delivered-To: elenadibrova545@gmail.com
Received: by 2002:ab0:2757:0:b0:7cb:4ca5:1567 with SMTP id c23csp1508342uap;
Thu, 14 Dec 2023 16:39:51 -0800 (PST)
X-Google-Smtp-Source: AGHT+IFU5dp8iZoLLEc3toxbAKwJp2FZ7ezsUJntr/yg9lItOVqbUZpwLRUA2rsf2OBDHJM1sfZK
X-Received: by 2002:a05:620a:4482:b0:77b:c650:5eab with SMTP id x2-20020a05620a448200b0077bc6505eabmr14462218qkp.5.1702600791405;
Thu, 14 Dec 2023 16:39:51 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; t=1702600791; cv=none;
d=google.com; s=arc-20160816;
b=YvbmYSMkQMrPJRgX1GHSEssQ1OFjOn913VAxBEk6xPIDSfpwiyvnUplXSkbznkyTo7
45RxQr28InRYMF0gVHkKRUxk+JFimKI7H/5Ogrlpjo6WqYgE1SbRPNLOW9Z9dzCRcQwb
a6/Q9oUq73zviOaey7Qo46xMbc6dDBM9c8CmguIPcEB5Bxwt9RUNSJ769IRtjczSPX0w
dFmyI6EXJW6u7WjSft48HNrNEPyzi38kGocBvDbs5WKtBmQedZqmp6rxBLqtru7RG37E
m4UKaipsT+880sTtRwGmQhQ4Itt3oSKl058VJReB3v6TgPDyWlmYQ4Ryab5o4AgRywYu
2NOg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=feedback-id:sent-on:content-transfer-encoding:subject:message-id:to
:reply-to:from:date:mime-version:dkim-signature;
bh=ZrWHQ1/w8ylcSl3L5kJry3BzXyEHJPe3piXr2+KjeTI=;
fh=qc65l13lZ0vMBrocc+JXeKNmoPY8s+vbjVodSH1g9fQ=;
b=hXyJRvzbIq1224Z0ne13zQRTCyTmSE+w2WIvBwi/Neuso4VbaEeXh/a5n3d/zqFUGc
wtTj+EEOavyJCHCBWzCIi44Aa+D/km7xx71MrofuEVdzyTXgtNhG/qA8iY8ySBzf2a2A
puuJK0yYPeq4ys549BHsvX3BcFZLIVmvoVPnFko7sqBnS34+bbuOWrf6rJWM90auJ90T
9rMlVOTgGTMKH5abGNFPow6r7vqeB/25UVtqQxBVtC+L+tN1RAbGNEyLoJP8aDeul4s/
QGF/UYGthrboRFWDnQUYIRrQMGSCR99a7ueoYvp6n4KD5XiF9mxvRqxLP0ZmDcsKvGJI
dBrg==
ARC-Authentication-Results: i=1; mx.google.com;
dkim=pass header.i=@freshdesk.com header.s=fdusmail header.b=L7WxTUuU;
spf=pass (google.com: domain of bounces+us.1.2993963.607-support=info4193.freshdesk.com@emailus.freshdesk.com designates 44.192.35.192 as permitted sender) smtp.mailfrom="bounces+us.1.2993963.607-support=info4193.freshdesk.com@emailus.freshdesk.com";
dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=freshdesk.com
Received: from mail-usn193.freshemail.io (mail-usn193.freshemail.io. [44.192.35.192])
by mx.google.com with ESMTPS id b19-20020a05620a0f9300b0077f129f0a08si15450721qkn.784.2023.12.14.16.39.51
for
(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
Thu, 14 Dec 2023 16:39:51 -0800 (PST)
Received-SPF: pass (google.com: domain of bounces+us.1.2993963.607-support=info4193.freshdesk.com@emailus.freshdesk.com designates 44.192.35.192 as permitted sender) client-ip=44.192.35.192;
Authentication-Results: mx.google.com;
dkim=pass header.i=@freshdesk.com header.s=fdusmail header.b=L7WxTUuU;
spf=pass (google.com: domain of bounces+us.1.2993963.607-support=info4193.freshdesk.com@emailus.freshdesk.com designates 44.192.35.192 as permitted sender) smtp.mailfrom="bounces+us.1.2993963.607-support=info4193.freshdesk.com@emailus.freshdesk.com";
dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=freshdesk.com
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=simple/relaxed; t=1702600791;
s=fdusmail; d=freshdesk.com;
h=MIME-Version:Date:From:Reply-To:To:Message-ID:Subject:Content-Type:Content-Transfer-Encoding;
bh=ZrWHQ1/w8ylcSl3L5kJry3BzXyEHJPe3piXr2+KjeTI=;
b=L7WxTUuUokUajKVSNQJcxiMLCMut3m5EuCs7gQLymNl7ID+x/glhiGnqMzUI68v4
ZdAIoqupwVHY7gy4mnhS3YrFiEosqtmC1Ds2vRG0W7oD4EDllhRqfmTfxp0sQOMcG99
Wgp7inO2dg+6nBq8RFkakBtiQkf47RmYQg2mDhDWUEHAWOfADogu1lFrKJwb4fVuAKa
ElO51fGttXoJ9+ASQxrgCTs5I9DGXTPJ20tXrF3DfsEvW5Utr7H/h51cpXGGA79UpBD
cEg9/KkfNxiEoSzW0YALhIA35Na/s624CodDr5kTZHQETmWjEzYxEx9ptYBF7a2XdEk
p6rSJTpFHQ==
MIME-Version: 1.0
X-Received: from ip-172-16-192-79.ec2.internal (EHLO freshdesk.com) ([172.16.192.79])
by smtpout.freshdesk.com (Freshworks SMTP Server) with ESMTPA ID 2138801853.318
for;
Fri, 15 Dec 2023 00:39:50 +0000 (UTC)
Date: Fri, 15 Dec 2023 00:39:50 +0000
From: INFO
Reply-To: INFO
To: elenadibrova545@gmail.com
Message-ID: <657ba0567bdf8_1c43f846935c1a427008157.sidekiq-frequent-fd-poduseast1-main-blue-8464cb4f86-rpxr4@outbound-email.freshdesk.com>
Subject: LAST ALERT: All Your Photos Will Be Deleted!
Content-Type: multipart/alternative;
boundary="--==_mimepart_657ba0568226f_1c43f846935c1a4270082e7";
charset=UTF-8
Content-Transfer-Encoding: 7bit
sent-on: 2023-12-15 00:39:50 +0000
X-FUP-PRIORITY: 1
Feedback-ID: appId_b_accId_cjjdjgd:appId_b_accId_cjjdjgd:appId_b:freshemail
X-MESSAGEID: BZ/irWDg3ErN6WKppURD036faqt3wSKAOzDiMKgGEvoMkqgx6yrenk5+An41jZAv5dsJctaMpI+Pya1OErjTNZElDMpvY5x/29damaL/yeTPZWIBL10exR9p6gcZACbY3iRhbgFDj33V2ejJQySIs6xjMBkGQVSYkD+4DLWG1qo=
----==_mimepart_657ba0568226f_1c43f846935c1a4270082e7
Content-Type: text/plain;
charset=UTF-8
Content-Transfer-Encoding: quoted-printable
=C2=A0 You have reached your storage limit Dear customer, Your iCloud=
storage is full. But, as part of our loyalty program, you can now recei=
ve an additional 50 GB for free before the files on your iCloud Drive are=
deleted. Receive 50 GB After signing up, you have to insert your cre=
dit card details for validation of your Apple ID. We=C2=A0will not withdr=
aw any amount. If you no longer wish to receive these emails, you may=
unsubscribe by=C2=A0clicking here or by writing to 6130 W Flamingo Rd. L=
as Vegas, NV 89103
----==_mimepart_657ba0568226f_1c43f846935c1a4270082e7
Content-Type: text/html;
charset=UTF-8
Content-Transfer-Encoding: quoted-printable
boto, Helvetica Neue, Arial, sans-serif; font-size:14px;">
oboto, Helvetica Neue, Arial, sans-serif; font-size:14px">
ize: medium; font-style: normal; font-variant-ligatures: normal; font-var=
iant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; =
text-align: start; text-indent: 0px; text-transform: none; widows: 2; wor=
d-spacing: 0px; -webkit-text-stroke-width: 0px; white-space: normal; text=
-decoration-thickness: initial; text-decoration-style: initial; text-deco=
ration-color: initial'>=C2=A0
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 14 Dec 2023 18:40:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97 (FreeBSD))
(envelope-from
id 1rDxB8-00000000B5W-0a7b
for dave@doctor.nl2k.ab.ca;
Thu, 14 Dec 2023 18:39:50 -0700
Resent-From: The Doctor
Resent-Date: Thu, 14 Dec 2023 18:39:50 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from [194.116.215.187] (port=59946 helo=anc.org.za)
by doctor.nl2k.ab.ca with esmtp (Exim 4.97 (FreeBSD))
(envelope-from
id 1rDx1Z-00000000AVU-15WT
for doctor@doctor.nl2k.ab.ca;
Thu, 14 Dec 2023 18:30:03 -0700
Delivered-To: elenadibrova545@gmail.com
Received: by 2002:ab0:2757:0:b0:7cb:4ca5:1567 with SMTP id c23csp1508342uap;
Thu, 14 Dec 2023 16:39:51 -0800 (PST)
X-Google-Smtp-Source: AGHT+IFU5dp8iZoLLEc3toxbAKwJp2FZ7ezsUJntr/yg9lItOVqbUZpwLRUA2rsf2OBDHJM1sfZK
X-Received: by 2002:a05:620a:4482:b0:77b:c650:5eab with SMTP id x2-20020a05620a448200b0077bc6505eabmr14462218qkp.5.1702600791405;
Thu, 14 Dec 2023 16:39:51 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; t=1702600791; cv=none;
d=google.com; s=arc-20160816;
b=YvbmYSMkQMrPJRgX1GHSEssQ1OFjOn913VAxBEk6xPIDSfpwiyvnUplXSkbznkyTo7
45RxQr28InRYMF0gVHkKRUxk+JFimKI7H/5Ogrlpjo6WqYgE1SbRPNLOW9Z9dzCRcQwb
a6/Q9oUq73zviOaey7Qo46xMbc6dDBM9c8CmguIPcEB5Bxwt9RUNSJ769IRtjczSPX0w
dFmyI6EXJW6u7WjSft48HNrNEPyzi38kGocBvDbs5WKtBmQedZqmp6rxBLqtru7RG37E
m4UKaipsT+880sTtRwGmQhQ4Itt3oSKl058VJReB3v6TgPDyWlmYQ4Ryab5o4AgRywYu
2NOg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=feedback-id:sent-on:content-transfer-encoding:subject:message-id:to
:reply-to:from:date:mime-version:dkim-signature;
bh=ZrWHQ1/w8ylcSl3L5kJry3BzXyEHJPe3piXr2+KjeTI=;
fh=qc65l13lZ0vMBrocc+JXeKNmoPY8s+vbjVodSH1g9fQ=;
b=hXyJRvzbIq1224Z0ne13zQRTCyTmSE+w2WIvBwi/Neuso4VbaEeXh/a5n3d/zqFUGc
wtTj+EEOavyJCHCBWzCIi44Aa+D/km7xx71MrofuEVdzyTXgtNhG/qA8iY8ySBzf2a2A
puuJK0yYPeq4ys549BHsvX3BcFZLIVmvoVPnFko7sqBnS34+bbuOWrf6rJWM90auJ90T
9rMlVOTgGTMKH5abGNFPow6r7vqeB/25UVtqQxBVtC+L+tN1RAbGNEyLoJP8aDeul4s/
QGF/UYGthrboRFWDnQUYIRrQMGSCR99a7ueoYvp6n4KD5XiF9mxvRqxLP0ZmDcsKvGJI
dBrg==
ARC-Authentication-Results: i=1; mx.google.com;
dkim=pass header.i=@freshdesk.com header.s=fdusmail header.b=L7WxTUuU;
spf=pass (google.com: domain of bounces+us.1.2993963.607-support=info4193.freshdesk.com@emailus.freshdesk.com designates 44.192.35.192 as permitted sender) smtp.mailfrom="bounces+us.1.2993963.607-support=info4193.freshdesk.com@emailus.freshdesk.com";
dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=freshdesk.com
Received: from mail-usn193.freshemail.io (mail-usn193.freshemail.io. [44.192.35.192])
by mx.google.com with ESMTPS id b19-20020a05620a0f9300b0077f129f0a08si15450721qkn.784.2023.12.14.16.39.51
for
(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
Thu, 14 Dec 2023 16:39:51 -0800 (PST)
Received-SPF: pass (google.com: domain of bounces+us.1.2993963.607-support=info4193.freshdesk.com@emailus.freshdesk.com designates 44.192.35.192 as permitted sender) client-ip=44.192.35.192;
Authentication-Results: mx.google.com;
dkim=pass header.i=@freshdesk.com header.s=fdusmail header.b=L7WxTUuU;
spf=pass (google.com: domain of bounces+us.1.2993963.607-support=info4193.freshdesk.com@emailus.freshdesk.com designates 44.192.35.192 as permitted sender) smtp.mailfrom="bounces+us.1.2993963.607-support=info4193.freshdesk.com@emailus.freshdesk.com";
dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=freshdesk.com
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=simple/relaxed; t=1702600791;
s=fdusmail; d=freshdesk.com;
h=MIME-Version:Date:From:Reply-To:To:Message-ID:Subject:Content-Type:Content-Transfer-Encoding;
bh=ZrWHQ1/w8ylcSl3L5kJry3BzXyEHJPe3piXr2+KjeTI=;
b=L7WxTUuUokUajKVSNQJcxiMLCMut3m5EuCs7gQLymNl7ID+x/glhiGnqMzUI68v4
ZdAIoqupwVHY7gy4mnhS3YrFiEosqtmC1Ds2vRG0W7oD4EDllhRqfmTfxp0sQOMcG99
Wgp7inO2dg+6nBq8RFkakBtiQkf47RmYQg2mDhDWUEHAWOfADogu1lFrKJwb4fVuAKa
ElO51fGttXoJ9+ASQxrgCTs5I9DGXTPJ20tXrF3DfsEvW5Utr7H/h51cpXGGA79UpBD
cEg9/KkfNxiEoSzW0YALhIA35Na/s624CodDr5kTZHQETmWjEzYxEx9ptYBF7a2XdEk
p6rSJTpFHQ==
MIME-Version: 1.0
X-Received: from ip-172-16-192-79.ec2.internal (EHLO freshdesk.com) ([172.16.192.79])
by smtpout.freshdesk.com (Freshworks SMTP Server) with ESMTPA ID 2138801853.318
for
Fri, 15 Dec 2023 00:39:50 +0000 (UTC)
Date: Fri, 15 Dec 2023 00:39:50 +0000
From: INFO
Reply-To: INFO
To: elenadibrova545@gmail.com
Message-ID: <657ba0567bdf8_1c43f846935c1a427008157.sidekiq-frequent-fd-poduseast1-main-blue-8464cb4f86-rpxr4@outbound-email.freshdesk.com>
Subject: LAST ALERT: All Your Photos Will Be Deleted!
Content-Type: multipart/alternative;
boundary="--==_mimepart_657ba0568226f_1c43f846935c1a4270082e7";
charset=UTF-8
Content-Transfer-Encoding: 7bit
sent-on: 2023-12-15 00:39:50 +0000
X-FUP-PRIORITY: 1
Feedback-ID: appId_b_accId_cjjdjgd:appId_b_accId_cjjdjgd:appId_b:freshemail
X-MESSAGEID: BZ/irWDg3ErN6WKppURD036faqt3wSKAOzDiMKgGEvoMkqgx6yrenk5+An41jZAv5dsJctaMpI+Pya1OErjTNZElDMpvY5x/29damaL/yeTPZWIBL10exR9p6gcZACbY3iRhbgFDj33V2ejJQySIs6xjMBkGQVSYkD+4DLWG1qo=
----==_mimepart_657ba0568226f_1c43f846935c1a4270082e7
Content-Type: text/plain;
charset=UTF-8
Content-Transfer-Encoding: quoted-printable
=C2=A0 You have reached your storage limit Dear customer, Your iCloud=
storage is full. But, as part of our loyalty program, you can now recei=
ve an additional 50 GB for free before the files on your iCloud Drive are=
deleted. Receive 50 GB After signing up, you have to insert your cre=
dit card details for validation of your Apple ID. We=C2=A0will not withdr=
aw any amount. If you no longer wish to receive these emails, you may=
unsubscribe by=C2=A0clicking here or by writing to 6130 W Flamingo Rd. L=
as Vegas, NV 89103
----==_mimepart_657ba0568226f_1c43f846935c1a4270082e7
Content-Type: text/html;
charset=UTF-8
Content-Transfer-Encoding: quoted-printable
boto, Helvetica Neue, Arial, sans-serif; font-size:14px;">
oboto, Helvetica Neue, Arial, sans-serif; font-size:14px">
ize: medium; font-style: normal; font-variant-ligatures: normal; font-var=
iant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; =
text-align: start; text-indent: 0px; text-transform: none; widows: 2; wor=
d-spacing: 0px; -webkit-text-stroke-width: 0px; white-space: normal; text=
-decoration-thickness: initial; text-decoration-style: initial; text-deco=
ration-color: initial'>=C2=A0
rphans: 2; text-transform: none; widows: 2; word-spacing: 0px; -webkit-te=
xt-stroke-width: 0px; text-decoration-thickness: initial; text-decoration=
-style: initial; text-decoration-color: initial' width=3D"100%">
order-top: 1px solid rgb(240, 240, 240);background-color:#fff" width=3D"5=
50">
el=3D"noreferrer">
achment?token=3DeyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpZCI6MTUzMDAyMTY0=
MTI0LCJkb21haW4iOiJpbmZvNDE5My5mcmVzaGRlc2suY29tIiwiYWNjb3VudF9pZCI6Mjk5M=
zk2M30.9GTYbXRLZriObhumslF9a6FzlcjCCIOdsz2mHRI7Zt4" alt=3D"" width=3D"70"=
height=3D"86" class=3D"fr-fic fr-dii" data-id=3D"153002164124">
=
You have reached your storage limit
You have reached your storage limit
el=3D"noreferrer">
achment?token=3DeyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpZCI6MTUzMDAyMTY0=
MTI1LCJkb21haW4iOiJpbmZvNDE5My5mcmVzaGRlc2suY29tIiwiYWNjb3VudF9pZCI6Mjk5M=
zk2M30.xiOZDCSUDoPvuicKj-B4_NHIci-qO_4St9r92vSircE" width=3D"350" height=3D=
"350" class=3D"fr-fic fr-dii" data-id=3D"153002164125">
Dear cust=
omer,
Your iCloud storage is full.
omer,
Your iCloud storage is full.
But, as part of our loyalty program, you can now receive an addition=
al 50 GB for free before the files on your iCloud Drive are deleted.
>
al 50 GB for free before the files on your iCloud Drive are deleted.
>
loudder" rel=3D"noreferrer">Receive 50 GB
After signing up, you have to insert your credit card details for =
validation of your Apple ID.
We=C2=A0will not withdra=
w any amount.
validation of your Apple ID.
We=C2=A0will not withdra=
w any amount.
: rgb(121, 121, 121); max-width: 550px; line-height: 1.4; margin-top: 15p=
x">If you no longer wish to receive these emails, you may unsubscribe by=C2=
=A0
155" style=3D"color: rgb(102, 102, 102); text-decoration: none" rel=3D"no=
referrer">clicking here or by writing to 6130 W Flamingo Rd. Las Vega=
s, NV 89103
tktid"; min-height:0px; height:0px; opacity:0; max-height:0px; line-heigh=
t:0px; color:#ffffff'>607:2993963
=
----==_mimepart_657ba0568226f_1c43f846935c1a4270082e7--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments