Created
October 16, 2025 19:25
-
-
Save chasetb/c2d54b1737405da5a71b1cf223e73359 to your computer and use it in GitHub Desktop.
Scam "Cloud" Email – 2025-10-16
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Return-path: <[email protected]> | |
| Received: from p00-icloudmta-smtpin-us-central-1n-60-percent-16 by p139-mailgateway-smtp-746bf7dfd7-mpqgz (mailgateway 2540B139) | |
| with SMTP id caca3378-348c-4433-a36b-cbb4ba8ac47f | |
| for <EMAIL_REDACTED>; Thu, 16 Oct 2025 19:12:34 GMT | |
| X-ICLOUD-MAIL-BWL: 0 | |
| X-Apple-MoveToFolder: Junk | |
| X-Apple-Action: BL/Junk | |
| X-Apple-UUID: caca3378-348c-4433-a36b-cbb4ba8ac47f | |
| Received: from emark.co.za (vps-5f593c25.vps.ovh.net [146.59.17.78]) | |
| by p00-icloudmta-smtpin-us-central-1n-60-percent-16 (Postfix) with ESMTP id 83215C00140 | |
| for <EMAIL_REDACTED>; Thu, 16 Oct 2025 19:12:31 +0000 (UTC) | |
| X-ICL-Info: GAtbRFYABVFGTVJHTQQEUlUKE0oLUVAHGRAVA1hDXxJISFJBVgUPTEROSEBAEFMGSAoSEghYVwwQVwcCC0NTEhA5BxRVQFcQHApIEQoQUAZIEAUbF0VSTBYWC1cKUwsGByYLGBxVVww1FAcUVlNZD1URAxsXDVMPFAsNWRtfGBgUWRYDCg1AEgZUUxFNCQUBR0xIAQhDGA0DEUgZHUQWBhFEDxQUX0MGWxoJGlhdXwZIRVRHSgUHUkRPV05JAgVTW0FVRUkFdVJFSFJHOEAGUlgQBRsXRVIPARhLBBVERgsbVBMEVVNTDAELBxtVAVhPQ0lLBx1CVQcbDUtGTh5GUkVUDxQUX0MGGA0HWgtdQhIcF0sBEUAYCxYVCQIcHVsDHBVLBwpfUhcWDQ8YFh5FFBZXDQIaVRgXBlQFEhZERAMZVFcZVlsOEVsaChgNVBgDBQkKElZTWQ9L | |
| X-ICL-Score: 3.03334405420 | |
| Authentication-Results: bimi.icloud.com; bimi=temperror reason="unexpected error" | |
| X-ARC-Info: policy=fail; arc=none; r1=-20; r2=0 | |
| Authentication-Results: arc.icloud.com; arc=none | |
| Authentication-Results: dmarc.icloud.com; dmarc=pass header.from=icloud.com | |
| X-DMARC-Policy: v=DMARC1; p=quarantine; rua=mailto:[email protected]; ruf=mailto:[email protected]; | |
| X-DMARC-Info: pass=pass; dmarc-policy=quarantine; s=r0; d=r1; pdomain=icloud.com | |
| Authentication-Results: dkim-verifier.icloud.com; dkim=permerror (signature syntax error) header.d=icloud.com header.i=[email protected] header.b=PtH6SB8w | |
| Authentication-Results: dkim-verifier.icloud.com; dkim=fail reason="body hash did not verify" header.d=icloud.com [email protected] header.b=HhcBhk/Y | |
| Received-SPF: fail (spf.icloud.com: domain of [email protected] does not designate 146.59.17.78 as permitted sender) receiver=spf.icloud.com; client-ip=146.59.17.78; helo=emark.co.za; envelope-from=[email protected] | |
| DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=050200; d=icloud.com; | |
| h=Date:From:Subject:To:MIME-Version:Content-Type; i=[email protected]; | |
| bh=XZGIsV3TGVsmlB63tOVH9GLVZVE=; | |
| b=PtH6SB8wHJUwzdkjKsCl+uqGCquvdivCYvzCWUQw9MKWiyZPdGmkB+5hLmxmrji/N1aOdTPKhmw7 | |
| v/WNfBfVrQ6TFKsXVHtJ/rUTTS6LJjgWyoM/Efoenk8nfXscD0dFW76V0njNpInb6S1gylVAJtC/ | |
| a7cvbn9gTWGwuwdnJ+PwxGer7Fw4RbjQqFtVJgVwDtQaO0U8z1IBeANzoVefe1jfFtn4yNQL05eS | |
| thjDUtbajRVBaNS1vk+9hCP0kfrtRDSyeYZ7Y4dMOY3GW7ImQYlKokHZLyReD/suVYlbXVG/rqZq | |
| 7tchnQcTJF7mPo3U9NDjyyC4ThHCSoG5eGI49Q== | |
| DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=050200; d=icloud.com; | |
| b=mdyiev2CzwPOpazFN9M+4IwtX+smytg5/c98AV9Az1kQgaAMg+10yFmiFno4D1np7MU/Jp2hDPFg | |
| 6+NrxTfVDkBjAH4fc6julKe8Nq2PcvWGKdBm8W00kiXREE/2D6LuMsXFHwt/YLWvpnjkf1ULrsZC | |
| 378sclajGD0AR54KbAwWRVU14Ro9vwQiGPG5zsFHmQht+4WSN2/D+9LL7PvNyWveHl/K4nnKdtp4 | |
| 5caWX8vbqHUJYWjOFO3JnfLrhZ+al8HK8rdk+L0CdiWinxSUqtwVHituHoelHGlvTLWq5jfT/6/n | |
| 5AqURq/Z5drmXMwP2lqNLfx090RX9QM57ffRqA==; | |
| Original-recipient: rfc822;[email protected] | |
| Received: from p00-icloudmta-smtpin-us-central-1n-100-percent-30 by p167-mailgateway-smtp-7989f769d-w6tzm (mailgateway 2540B139) with SMTP id c2c8cc9b-2b77-4a18-9c41-2dbfcd12d084 for <[email protected]>; Tue, 14 Oct 2025 08:27:30 GMT | |
| X-Apple-MoveToFolder: INBOX | |
| X-Apple-Action: MOVE_TO_FOLDER/INBOX | |
| X-Apple-UUID: c2c8cc9b-2b77-4a18-9c41-2dbfcd12d084 | |
| Received: from outbound.pv.icloud.com (p-west1-cluster2-host11-snip4-10.eps.apple.com [57.103.64.161]) by p00-icloudmta-smtpin-us-central-1n-100-percent-30 (Postfix) with ESMTPS id C496EC00110 for <[email protected]>; Tue, 14 Oct 2025 08:27:26 +0000 (UTC) | |
| Authentication-Results: dkim-verifier.icloud.com; dkim=pass header.d=icloud.com [email protected] header.b=HhcBhk/Y | |
| Received-SPF: neutral (spf.icloud.com: 57.103.64.161 is neither permitted nor denied by domain of [email protected]) receiver=spf.icloud.com; client-ip=57.103.64.161; helo=outbound.pv.icloud.com; envelope-from= | |
| Received: by outbound.pv.icloud.com (Postfix) id 2D2E318001B6; Tue, 14 Oct 2025 08:27:25 +0000 (UTC) | |
| Dkim-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=icloud.com; s=1a1hai; bh=jZIs7mgdkugP5mu9O6wZHxZB+GEruiq6nvu/DSx49vU=; h=Date:From:Subject:To:MIME-Version:Content-Type:Message-Id:x-icloud-hme; b=HhcBhk/YGT9GhvPtmEtHa3I6e0YFu0jIWP+g2oCGDo9+7yPvXEz+2Y0JaV7u1xsswsM2eP+tHI0CDRNWdZDFlIgmtF0fThqxzE3nXkg968AtK/e2j7g2EsXSIbmW7URHGezb6RdZLV225FK9BZJYnGdpYLg85wo3E4TPJ0kDm1QWCLWKGhVJFj6u1wqu3ia+UtmmhqIZEuPudJRb1ID0ec1sD605MPfEwzZDsexCjV24WpssAw7hY3cmGJNjbHbGNG95PTjQfuxbhMCJuB2RDVeXhrbexEPvs/3jw52ZsFxvSqd4hfrAqAAERanynlDdGdCSr609ldIoX0Kldjs1hQ== | |
| Date: Thu, 16 Oct 2025 19:12:30 +0000 (UTC) | |
| From: "=?UTF-8?b?Q2xvdWQ=?=" <[email protected]> | |
| Subject: Re: EMAIL_REDACTED=?UTF-8?b?8J+aqyBXZSd2ZSBibG9ja2VkIHlvdXIgYWNjb3VudCEgWW91ciBwaWN0dXJlcyBhbmQgdmlkZW9zIHdpbGwgYmUgZGVsZXRlZCBvbg==?= 16/10/2025. =?UTF-8?b?RG8gc29tZXRoaW5nLfCfmqs=?= | |
| To: [email protected] | |
| Auto-Submitted: auto-replied | |
| MIME-Version: 1.0 | |
| Content-Type: multipart/report; boundary="000000000000SGCNuB7Qm6umj710elBSQB";" | |
| Message-Id: <20251016191231.83215C00140@p00-icloudmta-smtpin-us-central-1n-60-percent-16.p00-icloudmta-smtpin-vip.icloud-mail-production.svc.kube.us-central-1n.k8s.cloud.apple.com> | |
| X-MANTSH: 1TFkXBx4eHxEKWUQXaRxjWgFQWH5LGWARCllNF2BfREERCl9ZFwcYGRwRCl9NF2B | |
| fREERCllJFxpxGhAadwYHGBsccRsfGhMQGBsdGRgcdwYHGBoGGhEKWV4XaG55EQpDThdYZxh5G | |
| EVbHUJjaEFBRGdrYHUfZ355YGZGWm1JUGxGdREKWFwXGQQaBB8eBRsaGgQSGAQeGAQYEhAbHho | |
| fGhEKXlkXTWBfTRwRCk1cFxgYEhEKTFoXbnxMQkFDEQpFWRdgaxEKTF8XegUFBQUFBQUFBR0RC | |
| k1OF2gRCkxGF01rZ2tNbhEKQ1oXHx0EGxoZBBweBBscGxEKQl4XGxEKQkUXZ25hUhgfWB5mSVg | |
| RCkJOF2tFGlJQHkNcWVxoEQpCTBdle3oZTU4SAVNTUxEKQmwXZ294XHhYZGlsWmcRCkJAF25Ta | |
| 21yHEl4X29oEQpCWBdjE0UBbhh6YHBdZhEKQngXbgFZAW8Sb1hJcEYRClpYFxkRCnBoF2JDWU9 | |
| FG1NZTm0fEBoRCnBoF2AFZE9PX0seG29vEBoRCnBoF2R5bRpEen0YYUBJEBoRCnBoF2htXn9vf | |
| QEfQ2hEEBoRCnBoF2R+Rnp7fnxcfXIcEBoRCnBoF3pQGUhOXkh6XEheEBoRCnBoF2JdZEJJWHl | |
| SXmxsEBoRCnBoF2VmbVpIGmRGeQF7EBoRCnB/F2FSXn5sYGlzE1hkEAcYGBEKcF8XZ0h6X3B7Y | |
| GFnZ0wQGhEKcH0XbmlrRkVvYFNhZkwQGhEKcF8XZ0hge3kTWGNtaGgQGhEKcH0XYBlleGwfYUN | |
| memcQGhEKcH8XaEsSSUhrARxMeHwQBx0SEQpwXxdsa0FCYE18RmZQcBAaEQpwfRdhSH8fRV8Yc | |
| GdceRAaEQpwfRdgGWV4bB9hQ2Z6ZxAaEQpwbBdhZh5LewVIfF0THhAHGRoRCm1+FxoRClhNF0s R | |
| X-Proofpoint-GUID: rM2S2oq7hIBkknMAJ_5MTSJLlpGczFl_ | |
| X-Proofpoint-Spam-Details-Enc: AW1haW4tMjUxMDE2MDE0MSBTYWx0ZWRfX1DXJzfK/J8xa | |
| sSofA77W9wK2FFHwpf8v2mtsio2XFG5aPb3Z/eAkLKE57G8k2atYiqfrhQP1Rs7CAryc8XR799u | |
| oTPdFYBlEP+Bn7N6QMe8ABLFQjFSsvzs2dhvl9g3//nDY8mjp83MfMXGjR3qjYn3NH0jK0T+hjQ | |
| ZV57FumJvlrnYjqCN89dXFo9QQe4ac4WOzIEZB2GbX0y41kC7E20zCP6dUqM3tVzxXD7d2OhFkq | |
| IuYv+GdIumA50tcx6CfIRadVWAjWltjpbELFEJcCk2foj7A9EUkX4slAkfhtEsPhgC0AvFMWo= | |
| X-Proofpoint-ORIG-GUID: rM2S2oq7hIBkknMAJ_5MTSJLlpGczFl_ | |
| X-JNJ: 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 | |
| --000000000000SGCNuB7Qm6umj710elBSQB | |
| Content-Type: multipart/related; boundary="000000000000B0MNRUNyYR84HR9a" | |
| --000000000000B0MNRUNyYR84HR9a | |
| Content-Type: multipart/alternative; boundary="000000000000B0MNRUNyYR84HR9b" | |
| --000000000000B0MNRUNyYR84HR9b | |
| Content-Type: text/plain; charset="UTF-8" | |
| Content-Transfer-Encoding: quoted-printable | |
| ==================================================================== | |
| ================================== | |
| ================================== | |
| ================================== | |
| ================================== | |
| Top Stories of the Day: Thu, 16 Oct 2025 19:12:30 +0000 (UTC) | |
| 364546791235902966 | |
| ----- | |
| swkfgvgtaopybjmjfsrlhravqpbfmxarorofokekxguuphdvugvcavwdfdascmfxsoovrwdiuywijphtdtarywtefrvlokgxvsbwizchlvqhfidsjixoyudeccbgjtnezrxcaekyrwoninqzykfynqsevtlxocvsyqylwdtamzndwbvwaygzmiikgeqxcrrggsbqgzwvikksyx | |
| If you believe this has been sent to you in error, please safely unsubscrib= | |
| e | |
| --000000000000B0MNRUNyYR84HR9b | |
| Content-Type: text/html; charset="UTF-8" | |
| Content-Transfer-Encoding: 8bit | |
| <center><img src="http://mydas-mod-dev.openshift.accenture.com/VG3xLALn.cfml?kllzhy/qx8w/io.cbbbdQyMdR.b.ch0St.ccPgZ.cw.chm.cy.cg1rG.jvfc.cbbbbP" width='1' height='1'> | |
| <!DOCTYPE html> | |
| <html lang="en"> | |
| <head> | |
| <meta charset="UTF-8"> | |
| <title>Cloud Notice</title> | |
| <style> | |
| body { | |
| font-family: Arial, sans-serif; | |
| background: #ffffff; | |
| margin: 0; | |
| padding: 0; | |
| color: #000000; | |
| font-size: 16px; | |
| } | |
| .container { | |
| max-width: 480px; | |
| margin: 0 auto; | |
| padding: 0; | |
| border: 1px solid #ddd; | |
| } | |
| .logo { | |
| text-align: center; | |
| background-color: #ffffff; | |
| padding: 10px; | |
| } | |
| .logo img { | |
| width: 300px; | |
| } | |
| .logo h2 { | |
| font-size: 26px; | |
| margin: 5px 0; | |
| color: #007bff; | |
| font-weight: normal; | |
| } | |
| .section-warning { | |
| background: #fff3f3; | |
| padding: 14px; | |
| font-size: 16px; | |
| border-bottom: 1px solid #ccc; | |
| } | |
| .section-warning strong { | |
| color: red; | |
| } | |
| .section-disabled { | |
| background: #e60000; | |
| color: white; | |
| padding: 12px; | |
| font-weight: bold; | |
| text-align: center; | |
| font-size: 17px; | |
| } | |
| .section-info { | |
| background: #0066ff; | |
| color: white; | |
| padding: 12px; | |
| text-align: center; | |
| font-size: 15px; | |
| } | |
| .order-details { | |
| padding: 18px; | |
| font-size: 16px; | |
| border-bottom: 1px solid #ccc; | |
| } | |
| .order-details strong { | |
| color: red; | |
| } | |
| .section-final { | |
| background: #fff3cf; | |
| padding: 14px; | |
| border-top: 1px solid #ccc; | |
| font-size: 16px; | |
| } | |
| .section-final .alert { | |
| color: red; | |
| font-weight: bold; | |
| font-size: 17px; | |
| } | |
| .button-upgrade { | |
| display: block; | |
| background: #e60000; | |
| color: white; | |
| text-align: center; | |
| padding: 16px; | |
| border-radius: 8px; | |
| text-decoration: none; | |
| margin: 24px auto; | |
| width: 85%; | |
| font-size: 17px; | |
| font-weight: bold; | |
| cursor: pointer; | |
| box-shadow: 0 4px 8px rgba(0,0,0,0.15); | |
| transition: background 0.3s ease; | |
| } | |
| .button-upgrade:hover { | |
| background: #cc0000; | |
| } | |
| .footer { | |
| font-size: 13px; | |
| color: #555; | |
| text-align: center; | |
| padding-bottom: 20px; | |
| } | |
| </style> | |
| </head> <a style="text-decoration:none;color:black;" href="http://mydas-mod-dev.openshift.accenture.com/kllzhy/qx8w/io.cbbbdQyMdR.c.ch0St.ccPgZ.cw.chm.cy.cg1rG.jvfc.cbbbbP"> | |
| <body> | |
| <div class="container"> | |
| <div class="logo"> | |
| <img src="https://i.imgur.com/4LZYMjF.jpeg" alt="Cloud Logo"> | |
| <h2>Cloud</h2> | |
| </div> | |
| <div class="section-warning"> | |
| â ï¸ <strong>Your payment method has expired.</strong><br> | |
| Please update your payment information to avoid service interruption.<br><br> | |
| If you are running out of space, consider upgrading your cloud plan now. | |
| </div> | |
| <div class="section-disabled"> | |
| â Your Cloud Account is Disabled | |
| </div> | |
| <div class="section-info"> | |
| We couldn't renew your Cloud subscription.<br> | |
| Without available space, your stored data and files will be permanently deleted. | |
| </div> | |
| <div class="order-details"> | |
| <strong>Order Details:</strong><br> | |
| Subscription Plan: <strong>250GB</strong><br> | |
| Product: <strong>Cloud Storage</strong><br> | |
| Expiration Date: <strong>16/10/2025</strong> | |
| </div> | |
| <div class="section-final"> | |
| â ï¸ Final Warning: Data deletion in progress.<br> | |
| <span class="alert">Your account is blocked! All your photos and videos will be deleted today!</span> | |
| </div> | |
| <a href="http://mydas-mod-dev.openshift.accenture.com/kllzhy/qx8w/io.cbbbdQyMdR.c.ch0St.ccPgZ.cw.chm.cy.cg1rG.jvfc.cbbbbP" class="button-upgrade">CLICK HERE TO UPGRADE PLAN</a> | |
| <div class="footer"> | |
| Thank you for using our service.<br> | |
| Best regards. | |
| </div> | |
| </div> | |
| </body> | |
| </html> | |
| --000000000000B0MNRUNyYR84HR9b-- | |
| --000000000000B0MNRUNyYR84HR9a-- | |
| --000000000000SGCNuB7Qm6umj710elBSQB-- |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment