Phishing attempt masquerading as sonic.net

General discussions and other topics.
10 posts Page 1 of 1
by mcaisse » Mon Jun 14, 2021 10:05 am
I got an email trying to capture my sonic.net credentials by directing me to https://presshouseplant.com/new/sonice/rat.htm. I've copied the header and text here:
Return-Path: <dtqfa@qualifiediracemapolis.com.br>
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on h.spam.sonic.net
X-Spam-Level:
X-Spam-Status: No, score=-1.5 required=5.0 tests=DKIM_SIGNED,DKIM_VALID,
DKIM_VALID_AU,DKIM_VALID_EF,HTML_FONT_LOW_CONTRAST,HTML_MESSAGE,SNF4SA,
SPF_HELO_NONE,T_KAM_HTML_FONT_INVALID,T_REMOTE_IMAGE shortcircuit=no
autolearn=disabled version=3.4.6
X-Spam-SNF-Result: 0 (Standard White Rules)
X-Spam-MessageSniffer-Scan-Result:
X-Spam-MessageSniffer-Rules:
0-0-0-31987-c
X-Spam-GBUdb-Analysis: 1, 186.250.243.163, Ugly c=0.52985 p=-0.812865 Source
Normal
Received: from a.mx.sonic.net (a.spam-proxy.sonic.net [157.131.224.145])
by a.local-delivery (8.14.7/8.14.7) with ESMTP id 15EBsY1h019476
(version=TLSv1/SSLv3 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NOT);
Mon, 14 Jun 2021 04:54:34 -0700
Received: from ns1.cluster02brasil.com (ns1.cluster02brasil.com [186.250.243.163])
by a.mx.sonic.net (8.14.7/8.14.7) with ESMTP id 15EBsR0T234697
(version=TLSv1/SSLv3 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NOT);
Mon, 14 Jun 2021 04:54:31 -0700
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
d=qualifiediracemapolis.com.br; s=default; h=Content-Type:Message-ID:Subject:
To:From:Date:MIME-Version:Sender:Reply-To:Cc:Content-Transfer-Encoding:
Content-ID:Content-Description:Resent-Date:Resent-From:Resent-Sender:
Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id:
List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive;
bh=uX+NAEs1xtLN6AdjdHQD4QbWSCsDDotolm5+XTdKDsU=; b=o5Lkoty8Lz+XWZmvtAkqlpa8FL
6haPO4CQ4EUJwDS7sXIVg5UMbLNi96KxAngM6wbXgdDd6uP2aJTTopv/oeMuDsBi4qlVM7ZMDtmvX
HdgOWpiWewMDq3Ffxpi3JM+EF+NuxTbF2eaZDoynDcfBQ0V8ZzpYlHb+RUaqpt846NSPOzWKYXW8A
HvVq/oijm7RkELHRwGHmUyxP6Y4G069z0MQgVbOXpsYQqXYhicDm+trcMqnSJYLc+nE2MEQRpgPmI
X/vt53rbjkoMfCtZAdIGzTPmSuPzaojSf5lsSatYTHrtjEvlNAYjsz17KJ8oJC6oyZdWE+hMbUa7t
Tg1FU8/g==;
Received: from [::1] (port=35968 helo=servidor.cluster02brasil.com)
by servidor.cluster02brasil.com with esmtpa (Exim 4.94.2)
(envelope-from <dtqfa@qualifiediracemapolis.com.br>)
id 1lsl9s-002ygS-Bs; Mon, 14 Jun 2021 08:53:37 -0300
MIME-Version: 1.0
Date: Mon, 14 Jun 2021 08:52:47 -0300
From: Sonic Billing <dtqfa@qualifiediracemapolis.com.br>
To: undisclosed-recipients:;
Subject: Cordial Notice
User-Agent: Roundcube Webmail/1.4.11
Message-ID: <d5db112d37773aff3b3e4a24d880a27c@qualifiediracemapolis.com.br>
X-Sender: dtqfa@qualifiediracemapolis.com.br
Content-Type: multipart/alternative;
boundary="=_4520bb21592ad53a312dc68bb43cd65a"
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - servidor.cluster02brasil.com
X-AntiAbuse: Original Domain - sonic.net
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - qualifiediracemapolis.com.br
X-Get-Message-Sender-Via: servidor.cluster02brasil.com: authenticated_id: dtqfa@qualifiediracemapolis.com.br
X-Authenticated-Sender: servidor.cluster02brasil.com: dtqfa@qualifiediracemapolis.com.br
X-Source:
X-Source-Args:
X-Source-Dir:
X-From-Rewrite: unmodified, already matched
X-Orthrus: tar=0 grey=no co=BR os=Linux/3.11 and newer/1 spf=neutral dkim=pass

--=_4520bb21592ad53a312dc68bb43cd65a
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset=US-ASCII;
format=flowed

[1]

Just a final reminder that your attached payment system could not be
debited and the next billing date is scheduled to be processed on
06/15/21.

Please update payment option now.

Due date:
06/15/21

Account:
Processing

To update payment options, please visit the Member Tools. [2]

Questions about your bill? Contact Sonic Billing at billing@sonic.com or
1-888-766-4133

SONIC
Home [1]
Business [3]
Sonic Fiber [4]
Support [5]
Members [6]

CONNECT WITH US
Contact Us [5]
Blog [7]
Phone 1-888-766-4233 [8]

SOCIAL

[9]
[10]
[11]
[12]

MAILING ADDRESS
2260 Apollo Way
Santa Rosa, CA 95407

Copyright 2021 Sonic
All rights reserved



Links:
------
[1] https://www.sonic.com
[2] https://presshouseplant.com/new/sonice/rat.htm
[3] https://www.sonic.com/business
[4] https://www.sonic.com/gigabit-fiber-internet
[5] https://www.sonic.com/support
[6] https://members.sonic.net
[7] https://corp.sonic.net/ceo/
[8] tel:1-888-766-4233
[9] http://www.twitter.com/sonic
[10] https://www.facebook.com/sonicnet
[11] https://www.instagram.com/sonic/
[12] https://www.linkedin.com/company/sonicinternet
by kjn » Wed Jun 16, 2021 10:16 am
I just got a different phishing attempt posing as sonic.net.

From: Sonic Support <cbarnett@sisna.com>
Subject: Fwd: Ac-tion - Requ-ired



SONIC .

Dear Customer,



You Have 1 Attachment Update From Sonicnet Inc

Download Attachment to get Update


It includes a pdf attachment: Sonic Update-Fiber.pdf
by briancw » Wed Jun 16, 2021 1:22 pm
Hi mcaisse and kjn,

mcaisse, you're definitely right on the money. Our network team has gotten that one on their radar. Thank you very much.

kjn, if you could, we'll need to see the header on that email so that we can nail down the domain we'll need to block.

If you're unsure of how to get the header just let me know which email program you're using and I'll instruct you how.

Thanks,
Brian W
Community & Escalations Specialist
Sonic
by kjn » Wed Jun 16, 2021 2:36 pm
Does this help?
FakeSonicheader.png
FakeSonicheader.png (21.86 KiB) Viewed 8021 times


From: cbarnett@sisna.com
Subject: Ac-tion - Requ-ired
Message ID: <1560901421.8877840.1623860336549.JavaMail.zimbra@sisna.com>
User agent: Zimbra 8.8.15_GA_3996 (ZimbraWebClient - GC91 (Win)/8.8.15_GA_3996)
Return path: <cbarnett@sisna.com>

WAIT: I figured it out. (Except, wow; there's a lot of crazy code in what I pasted. Let me know what to do differently if needed; I use Thunderbird. THANK YOU.

Return-Path: <cbarnett@sisna.com>
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on f.spam.sonic.net
X-Spam-Level: ***
X-Spam-Status: No, score=3.4 required=3.5 tests=HTML_MESSAGE,KHOP_HELO_FCRDNS,
RCVD_IN_PBL,SNF4SA,SONIC_DEAR_ME1,SPF_HELO_NONE,URI_GOOGLE_PROXY
shortcircuit=no autolearn=disabled version=3.4.6
X-Spam-SNF-Result: 0 (Standard White Rules)
X-Spam-MessageSniffer-Scan-Result:
X-Spam-MessageSniffer-Rules:
0-0-0-32767-c
X-Spam-GBUdb-Analysis: 1, 208.80.202.2, Ugly c=0.64681 p=-0.781955 Source
Normal
Received: from c.mx.sonic.net (b.spam-proxy.sonic.net [157.131.224.146])
by b.local-delivery (8.14.7/8.14.7) with ESMTP id 15GGUmAZ010869
(version=TLSv1/SSLv3 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NOT)
for <kjn@lds.sonic.net>; Wed, 16 Jun 2021 09:30:48 -0700
Received: from smtp.email-protect.gosecure.net (smtp.email-protect.gosecure.net [208.80.202.2])
by c.mx.sonic.net (8.14.7/8.14.7) with ESMTP id 15GGUiq0084334
(version=TLSv1/SSLv3 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NOT)
for <kjn@sonic.net>; Wed, 16 Jun 2021 09:30:47 -0700
Received: from mailproxy13.neonova.net ([137.118.22.78])
by smtp.email-protect.gosecure.net ({9fc7cec6-78bb-11eb-857c-359aa22348fc})
via TCP (outbound) with ESMTP id 20210616161950819_00002513;
Wed, 16 Jun 2021 09:19:50 -0700
X-RC-FROM: <cbarnett@sisna.com>
Received: from nvl-mbs53.neonova.net (nvl-mbs53.neonova.net [137.118.23.53])
by mailproxy13.neonova.net (Postfix) with ESMTP id 996603665D5;
Wed, 16 Jun 2021 12:18:56 -0400 (EDT)
Date: Wed, 16 Jun 2021 12:18:56 -0400 (EDT)
From: Sonic Support <cbarnett@sisna.com>
Message-ID: <1560901421.8877840.1623860336549.JavaMail.zimbra@sisna.com>
Subject: Ac-tion - Requ-ired
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_Part_8877836_815243232.1623860336537"
X-Originating-IP: [76.27.16.158]
X-Mailer: Zimbra 8.8.15_GA_3996 (ZimbraWebClient - GC91 (Win)/8.8.15_GA_3996)
Thread-Index: Y4ZMNRwFr6Jm73/2GjS51sNjWq5E6A==
Thread-Topic: Ac-tion - Requ-ired
X-DLP-OUTBOUND: 137.118.22.64/27
X-MAG-OUTBOUND: greymail.email-protect.gosecure.net@137.118.22.64/27
X-MAG-FILTER: rules-phish
X-MAG-CATEGORY: PHISH
X-MAG-INFO: 3532560
To: undisclosed-recipients:;
X-Orthrus: tar=0 grey=no co=US os=Linux/2.2.x-3.x/93 spf=pass dkim=none

------=_Part_8877836_815243232.1623860336537
Content-Type: multipart/alternative;
boundary="=_bf164b18-9218-47a9-b595-c0ed27b7d96b"

--=_bf164b18-9218-47a9-b595-c0ed27b7d96b
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit

Untitled Document


S O NIC .

Dear Customer,







You Have 1 Attachment Update From Sonicnet Inc

Download Attachment to get Update





--=_bf164b18-9218-47a9-b595-c0ed27b7d96b
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: 7bit

<html><body><div style="font-family: arial, helvetica, sans-serif; font-size: 12pt; color: #000000"><div>


<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<title>Untitled Document</title>



<div align="center" style="width:590px"><div class="adM">
</div><div align="center" style="background:url('https://ci4.googleusercontent.com/proxy/GEQmGtgYD63LzAtSO1JTM9Ce8AcF6Lt7tB9pVk1M7bnGrrPS9Hd0xNvdA9GTenGIplV_Z5NMqadNPeI_WN6HeORXC0U7Xw4Dsx4oxdA6PHinrBM=s0-d-e1-ft#http://www.gstatic.com/android/market_images/email/email_top.png') no-repeat;width:100%;height:75px;display:block" class="adM"><div>
</div><div>
<div align="center"></div>
</div>
</div><div align="center" class="adM">
</div><div style="background:url('https://ci5.googleusercontent.com/proxy/F7Udt2EhiF-6ICElClHTAChWdxYdB6bIcRMDkuj9pyt44lIroPVTQM5roWjMFd7UFKx0h38BzxLiRopskGcAwlspzoOCwyvY11RO1rsuVVBz4Pc=s0-d-e1-ft#http://www.gstatic.com/android/market_images/email/email_mid.png') repeat-y;width:100%;display:block"><div class="adM">
</div><div style="padding-left:50px;padding-right:50px;padding-bottom:1px"><div class="adM">
</div><div style="border-bottom:1px solid #ededed" class="adM"></div><div class="adM">
</div><div style="margin:20px 0px;font-size:30px;line-height:30px;text-align:left"><div class="adM">
</div><div align="center"><div class="adM">
</div><p><span style="font-size:36pt">S<span style="color:rgb(0,204,255)">O</span>NIC <span style="color:rgb(0,204,255)">. </span></span></p>
<p>Dear Customer, </p>
</div>
</div>
<div style="text-align:left">
<div>
<div align="center"></div>
</div>
</div>
<div align="center"><br>
</div>
<div style="margin-bottom:20px;text-align:left">
<div align="center"></div>
</div>
<div>
<div></div>
<div align="center"><span></span>
<table align="center" style="width:100%;margin:5px 0">
<tbody>
<tr>
<td style="text-align:left;font-weight:bold;font-size:12px">&nbsp;</td>
<td style="text-align:right;font-weight:bold;font-size:12px" width="70">&nbsp;</td>
</tr>
</tbody>
</table>
</div>
<div style="border-bottom:1px solid #ededed"></div>
<div align="center">
<table align="center" style="width:100%;margin:5px 0">
<tbody><tr>
</tr><tr>
<td style="text-align:left;font-size:12px;padding-right:10px">
<div align="center">
<p><span style="font-size:18pt"><span dir="ltr">
You Have 1 Attachment Update From </span> <span> Sonicnet Inc</span></span></p>
<p><span style="font-size:18pt">Download Attachment to get Update </span></p>
</div></td>
<td style="text-align:right;font-size:12px">&nbsp;</td>
</tr>
</tbody>
</table>
</div>
<div style="border-bottom:1px solid #ededed"></div>
<div align="center">
<table style="width:100%;margin:5px 0">
<tbody><tr>
<td style="text-align:right;font-size:12px" colspan="2" width="150">&nbsp;</td>
</tr>
<tr>
<td style="text-align:right;font-size:12px" colspan="2" width="150">&nbsp;</td>
</tr>
</tbody>
</table>
</div>
<div style="border-bottom:1px solid #ededed"></div>
<div align="center">
<table style="width:100%;margin:5px 0 15px 0;padding:0;border-spacing:0" align="center">
<tbody><tr>
<td style="text-align:left;font-weight:bold;font-size:12px;vertical-align:top">&nbsp;</td>
<td>&nbsp;</td>
</tr>
</tbody>
</table>
</div>
<div style="margin:10px 0px;display:inline-block"></div>
</div>
</div>
</div>
<div style="background:url('https://ci5.googleusercontent.com/proxy/u6KYrquoddKACxnOzJ_0lN61heutVpw6mvCoYm12429bUiIixNVcgybrhdlhejL3Wt_3e-Z40wScTl6vSA4PJCyVv36WJtiqQKPkLLgp0eptolrfhCwmolk=s0-d-e1-ft#http://www.gstatic.com/android/market_images/email/email_bottom.png') no-repeat;width:100%;height:50px;display:block"></div>
<div align="center"><img src="https://ci6.googleusercontent.com/proxy/J_4lZiiZFae3gwUc1AO4Dt3-MYo-N10ajtHx957OD4u_wRxNspMYF7GaSABeubVVUwo1FVx-aZ3vKOR3nD1F9B2QU2PEBAQjI-Prf3vYBcdC58xlH4oVYesncQxy9QE41WZyDYrXukMlgjaHn1e1ujk7=s0-d-e1-ft#https://www.google.com/appserve/mkt/img/AD-FnEwqX0EObhYIGqjf7cUKy11JsKq_yWqY9LvrgskgYt600dM.gif" class="CToWUd" width="3" height="1"></div><div class="yj6qo"></div><div class="adL">
</div></div>


</div></div></body></html>
--=_bf164b18-9218-47a9-b595-c0ed27b7d96b--

------=_Part_8877836_815243232.1623860336537
Content-Type: application/pdf; name="Sonic Update-Fiber.pdf"
Content-Disposition: attachment; filename="Sonic Update-Fiber.pdf"
Content-Transfer-Encoding: base64

JVBERi0xLjcNCiW1tbW1DQoxIDAgb2JqDQo8PC9UeXBlL0NhdGFsb2cvUGFnZXMgMiAwIFIvTGFu
Zyhlbi1VUykgL01ldGFkYXRhIDIwIDAgUi9WaWV3ZXJQcmVmZXJlbmNlcyAyMSAwIFI+Pg0KZW5k
b2JqDQoyIDAgb2JqDQo8PC9UeXBlL1BhZ2VzL0NvdW50IDEvS2lkc1sgMyAwIFJdID4+DQplbmRv
YmoNCjMgMCBvYmoNCjw8L1R5cGUvUGFnZS9QYXJlbnQgMiAwIFIvUmVzb3VyY2VzPDwvRm9udDw8

<!--tons of crazy code followed that made this too big to send. Let me know if you need me to send all of it.-->
by briancw » Fri Jun 18, 2021 8:36 am
Hot dog, that is perfect. Thank you very much. We'll get that domain blocked. You've done us a solid here.
Brian W
Community & Escalations Specialist
Sonic
by kjn » Fri Jun 18, 2021 11:43 am
Great!
by gambler » Mon Jun 21, 2021 11:30 am
I got two more just now. Let me know if this isn't right.

(1)

Return-Path: <dtqfa@qualifiediracemapolis.com.br>
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on h.spam.sonic.net
X-Spam-Level:
X-Spam-Status: No, score=-0.9 required=1.0 tests=DKIM_SIGNED,DKIM_VALID,
DKIM_VALID_AU,DKIM_VALID_EF,HTML_FONT_LOW_CONTRAST,HTML_MESSAGE,SNF4SA,
SONIC_BAD_REQUIRE1,SPF_HELO_NONE,T_KAM_HTML_FONT_INVALID,
T_REMOTE_IMAGE shortcircuit=no autolearn=disabled version=3.4.6
X-Spam-SNF-Result: 0 (Standard White Rules)
X-Spam-MessageSniffer-Scan-Result:
X-Spam-MessageSniffer-Rules:
0-0-0-31463-c
X-Spam-GBUdb-Analysis: 1, 186.250.243.163, Ugly c=0.459022 p=-0.860465 Source
Normal
Received: from d.mx.sonic.net (a.spam-proxy.sonic.net [157.131.224.145])
by b.local-delivery (8.14.7/8.14.7) with ESMTP id 15LIGYEe027471
(version=TLSv1/SSLv3 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NOT);
Mon, 21 Jun 2021 11:16:34 -0700
Received: from ns1.cluster02brasil.com (ns1.cluster02brasil.com [186.250.243.163])
by d.mx.sonic.net (8.14.7/8.14.7) with ESMTP id 15LIGRVx188372
(version=TLSv1/SSLv3 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NOT);
Mon, 21 Jun 2021 11:16:30 -0700
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
d=qualifiediracemapolis.com.br; s=default; h=Content-Type:Message-ID:Subject:
To:From:Date:MIME-Version:Sender:Reply-To:Cc:Content-Transfer-Encoding:
Content-ID:Content-Description:Resent-Date:Resent-From:Resent-Sender:
Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id:
List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive;
bh=GosmqNHpM2WsL8qTJ6GKtka1nZE6M5IYRvpfBj8LTXY=; b=CUdP8mgCab33xf7Dn0eTt5OmoX
An5IR0uWdl/H/Nq/glM1yCL8R7V/oxFcduOQdQpdj4u6AokGqIDmbS2BYNUrAcsjLSf2FuUXhelQo
43EO63rGoTD+3g1SfN9ErDSEWRfMCoLCyi




(2)

Return-Path: <birha@divasboutique.com.br>
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on f.spam.sonic.net
X-Spam-Level:
X-Spam-Status: No, score=-1.0 required=1.0 tests=DKIM_SIGNED,DKIM_VALID,
DKIM_VALID_AU,DKIM_VALID_EF,HTML_FONT_LOW_CONTRAST,HTML_MESSAGE,SNF4SA,
SONIC_BAD_REQUIRE1,SPF_HELO_NONE,T_KAM_HTML_FONT_INVALID,
T_REMOTE_IMAGE shortcircuit=no autolearn=disabled version=3.4.6
X-Spam-SNF-Result: 0 (Standard White Rules)
X-Spam-MessageSniffer-Scan-Result:
X-Spam-MessageSniffer-Rules:
0-0-0-31403-c
X-Spam-GBUdb-Analysis: 1, 186.250.243.162, Ugly c=0.504724 p=-0.895522 Source
Normal
Received: from c.mx.sonic.net (a.spam-proxy.sonic.net [157.131.224.145])
by b.local-delivery (8.14.7/8.14.7) with ESMTP id 15LILP9a006441
(version=TLSv1/SSLv3 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NOT);
Mon, 21 Jun 2021 11:21:25 -0700
Received: from servidor.cluster02brasil.com (servidor.cluster02brasil.com [186.250.243.162])
by c.mx.sonic.net (8.14.7/8.14.7) with ESMTP id 15LILL5U011343
(version=TLSv1/SSLv3 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NOT);
Mon, 21 Jun 2021 11:21:24 -0700
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
d=divasboutique.com.br; s=default; h=Content-Type:Message-ID:Subject:To:From:
Date:MIME-Version:Sender:Reply-To:Cc:Content-Transfer-Encoding:Content-ID:
Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc
:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:
List-Subscribe:List-Post:List-Owner:List-Archive;
bh=hvlmDRH0pUj/fP3iRhPxWnM1z71o1ckyzbQUB+krXh8=; b=TWroJVTjbM9jmIUn8NxUr2SaFi
dFFrAqO/cZNOXYnsJ+URaWu+R8aCKfc8+XJj/AVw9AmaFF6/WtFlJ7Swl9jfJfkDS5aChZn6puOoG
j7THsEMf3DXND9vXe/pvbQL9QkR2g45r3w1kxfqUxFI7s1+ysocirVkjGP3PlsxLXHjgMrkZCUKCX
ehRxl5ywmIoVHzk+uLrIJUwqEYFvozknUp8GaMpAEBkPp+Yx/Err2srRQXRFBAEYQe7PLxeKLsA9F
O5F9H4Y2NDFVmKqWOxO2iVCc2es99tWELdEg3juAiXMHS2JsFptzOkE9nVrc+/GriCrdKjiSVFNfn
d/v+qkbA==;
Received: from [::1] (port=48246 helo=servidor.cluster02brasil.com)
by servidor.cluster02brasil.com with esmtpa (Exim 4.94.2)
(envelope-from <birha@divasboutique.com.br>)
id 1lvOWw-005JJi-NW; Mon, 21 Jun 2021 15:20:19 -0300
MIME-Version: 1.0
Date: Mon, 21 Jun 2021 15:19:21 -0300
From: Sonic Billing <birha@divasboutique.com.br>
To: undisclosed-recipients:;
Subject: New Payment Policy
User-Agent: Roundcube Webmail/1.4.11
Message-ID: <6bb864c94c856760180099f314a96fa2@divasboutique.com.br>
X-Sender: birha@divasboutique.com.br
Content-Type: multipart/alternative;
boundary="=_e52a59efb8ad92df64caf41da12aabe6"
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - servidor.cluster02brasil.com
X-AntiAbuse: Original Domain - sonic.net
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - divasboutique.com.br
X-Get-Message-Sender-Via: servidor.cluster02brasil.com: authenticated_id: birha@divasboutique.com.br
X-Authenticated-Sender: servidor.cluster02brasil.com: birha@divasboutique.com.br
X-Source:
X-Source-Args:
X-Source-Dir:
X-From-Rewrite: unmodified, already matched
X-Orthrus: tar=0 grey=no co=BR os=Linux/3.11 and newer/1 spf=permerror dkim=pass

--=_e52a59efb8ad92df64caf41da12aabe6
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset=US-ASCII;
format=flowed

[1]

We have a new Payment policy, and this applies to your attached payment
option with us. As a sonic member you are required to visit the member
tools link below and follow the instructions.

Message Content:
Private

Priority:
High

To continue been a Sonic Member, please visit the Member Tools. [2]

Questions about your bill? Contact Sonic Billing at billing@sonic.com or
1-888-766-4133

SONIC
Home [1]
Business [3]
Sonic Fiber [4]
Support [5]
Members [6]

CONNECT WITH US
Contact Us [5]
Blog [7]
Phone 1-888-766-4133 [8]

SOCIAL

[9]
[10]
[11]
[12]

MAILING ADDRESS
2260 Apollo Way
Santa Rosa, CA 95407

Copyright 2021 Sonic
All rights reserved.



Links:
------
[1] https://www.sonic.com
[2] https://clippersocean.com/member/sonice/rat.htm
[3] https://www.sonic.com/business
[4] https://www.sonic.com/gigabit-fiber-internet
[5] https://www.sonic.com/support
[6] https://members.sonic.net
[7] https://corp.sonic.net/ceo/
[8] tel:1-888-766-4233
[9] http://www.twitter.com/sonic
[10] https://www.facebook.com/sonicnet
[11] https://www.instagram.com/sonic/
[12] https://www.linkedin.com/company/sonicinternet
--=_e52a59efb8ad92df64caf41da12aabe6
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html; charset=UTF-8

<html><head><meta http-equiv=3D"Content-Type" content=3D"text/html; charset=
=3DUTF-8" /></head><body style=3D'font-size: 10pt; font-family: Verdana,Gen=
eva,sans-serif'>
<table class=3D"row header" style=3D"background: #FFF!important; border-col=
lapse: collapse; border-spacing: 0; display: block; padding: 0px; position:=
relative; text-align: left; vertical-align: top; width: 100%;">
<tbody>
<tr style=3D"padding: 0; text-align: left; vertical-align: top;">
<td class=3D"center" style=3D"background-color: white!important; border-col=
lapse: collapse!important; color: #222222; font-family: 'Helvetica','Arial'=
,sans-serif; font-size: 16px; font-weight: normal; hyphens: auto; line-heig=
ht: 18px; margin: 0; padding: 0; text-align: center; vertical-align: top; w=
ord-break: break-word;" align=3D"center">
<table class=3D"twelve columns text-pad" style=3D"border-collapse: collapse=
; border-spacing: 0; margin: 0 auto; padding: 0; text-align: left; vertical=
-align: top; width: 580px;" border=3D"0">
<tbody>
<tr style=3D"padding: 0; text-align: left; vertical-align: top;">
<td class=3D"twelve sub-columns" style=3D"border-collapse: collapse!importa=
nt; color: #222222; font-family: 'Helvetica','Arial',sans-serif; font-size:=
16px; font-weight: normal; hyphens: auto; line-height: 18px; margin: 0; mi=
n-width: 0px; padding: 0px 0px 10px; padding-right: 10px; text-align: left;=
vertical-align: top; width: 100%; word-break: break-word;" colspan=3D"2">&=
nbsp;</td>
</tr>
<tr style=3D"padding: 0; text-align: left; vertical-align: top;">
<td class=3D"six sub-columns" style=3D"border-collapse: collapse!important;=
color: #222222; font-family: 'Helvetica','Arial',sans-serif; font-size: 16=
px; font-weight: normal; hyphens: auto; line-height: 18px; margin: 0; min-w=
idth: 0px; padding: 0px 0px 10px; padding-left: 5px!important; padding-righ=
t: 10px; text-align: left!important; vertical-align: top; width: 50%; word-=
break: break-word;"><a style=3D"color: #2ba6cb; text-decoration: none;" tit=
le=3D"Sonic" href=3D"https://www.sonic.com" target=3D"_blank" rel=3D"noopen=
er noreferrer"> <img style=3D"border: none; height: 54px!important; outline=
: none; text-decoration: none; width: 240px!important;" src=3D"http://asset=
s.sonic.net/web/cs/sonic_240x53.png" width=3D"240" height=3D"54" data-pages=
peed-url-hash=3D"1967439297" /></a></td>
<td class=3D"six sub-columns last" style=3D"border-collapse: collapse!impor=
tant; color: #222222; font-family: 'Helvetica','Arial',sans-serif; font-siz=
e: 16px; font-weight: normal; hyphens: auto; line-height: 18px; margin: 0; =
min-width: 0px; padding: 0px 0px 10px; padding-right: 0px; text-align: righ=
t; vertical-align: middle; width: 50%; word-break: break-word;">&nbsp;</td>
<td class=3D"expander" style=3D"border-collapse: collapse!important; color:=
#222222; font-family: 'Helvetica','Arial',sans-serif; font-size: 16px; fon=
t-weight: normal; hyphens: auto; line-height: 18px; margin: 0; padding: 0!i=
mportant; text-align: left; vertical-align: top; visibility: hidden; width:=
0px; word-break: break-word;">&nbsp;</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
<table class=3D"row" style=3D"border-collapse: collapse; border-spacing: 0;=
display: block; padding: 0px; position: relative; text-align: left; vertic=
al-align: top; width: 100%;">
<tbody>
<tr style=3D"padding: 0; text-align: left; vertical-align: top;">
<td class=3D"center wrapper last" style=3D"border-collapse: collapse!import=
ant; color: #222222; font-family: 'Helvetica','Arial',sans-serif; font-size=
: 16px; font-weight: normal; hyphens: auto; line-height: 18px; margin: 0; p=
adding: 10px 20px 10px 0px; padding-right: 0px; position: relative; text-al=
ign: center; vertical-align: top; word-break: break-word;" align=3D"center"=
valign=3D"top">
<table class=3D"twelve columns" style=3D"border-collapse: collapse; border-=
spacing: 0; margin: 0 auto; padding: 0; text-align: left; vertical-align: t=
op; width: 580px;">
<tbody>
<tr style=3D"padding: 0; text-align: left; vertical-align: top;">
<td style=3D"background-color: white!important; border-collapse: collapse!i=
mportant; color: #222222; font-family: 'Helvetica','Arial',sans-serif; font=
-size: 16px; font-weight: normal; hyphens: auto; line-height: 18px; margin:=
0; padding: 0px 0px 10px; padding-left: 10px!important; text-align: left; =
vertical-align: top; word-break: break-word;">
<p style=3D"color: #676e81; font-family: 'Helvetica','Arial',sans-serif; fo=
nt-size: 16px; font-weight: normal; line-height: 18px; margin-bottom: 28px;=
text-align: left;">We have a new Payment policy, and this applies to your =
attached payment option with us. As a sonic member you are required to visi=
t the member tools link below and follow the instructions.</p>
<table style=3D"border-collapse: collapse; border-spacing: 0; padding: 0; t=
ext-align: left; vertical-align: top;" border=3D"0" width=3D"100%" align=3D=
"center">
<tbody>
<tr style=3D"padding: 0; text-align: left; vertical-align: top;">
<td style=3D"border-collapse: collapse!important; color: #222222; font-fami=
ly: 'Helvetica','Arial',sans-serif; font-size: 16px; font-weight: normal; h=
yphens: auto; line-height: 18px; margin: 0; padding: 0px 0px 10px; text-ali=
gn: left; vertical-align: top; width: 15%; word-break: break-word;">&nbsp;<=
/td>
<td style=3D"border-collapse: collapse!important; color: #676e81; font-fami=
ly: 'Helvetica','Arial',sans-serif; font-size: 16px; font-weight: bold; hyp=
hens: auto; line-height: 18px; margin: 0; padding: 0px 0px 10px; text-align=
: left; vertical-align: top; width: 35%; word-break: break-word;">Message C=
ontent:</td>
<td style=3D"border-collapse: collapse!important; color: #676e81; font-fami=
ly: 'Helvetica','Arial',sans-serif; font-size: 16px; font-weight: bold; hyp=
hens: auto; line-height: 18px; margin: 0; padding: 0px 0px 10px; text-align=
: left; vertical-align: top; width: 35%; word-break: break-word;">Private</=
td>
<td style=3D"border-collapse: collapse!important; color: #222222; font-fami=
ly: 'Helvetica','Arial',sans-serif; font-size: 16px; font-weight: normal; h=
yphens: auto; line-height: 18px; margin: 0; padding: 0px 0px 10px; text-ali=
gn: left; vertical-align: top; width: 15%; word-break: break-word;">&nbsp;<=
/td>
</tr>
<tr style=3D"padding: 0; text-align: left; vertical-align: top;">
<td style=3D"border-collapse: collapse!important; color: #222222; font-fami=
ly: 'Helvetica','Arial',sans-serif; font-size: 16px; font-weight: normal; h=
yphens: auto; line-height: 18px; margin: 0; padding: 0px 0px 10px; text-ali=
gn: left; vertical-align: top; width: 15%; word-break: break-word;">&nbsp;<=
/td>
<td style=3D"border-collapse: collapse!important; color: #676e81; font-fami=
ly: 'Helvetica','Arial',sans-serif; font-size: 16px; font-weight: bold; hyp=
hens: auto; line-height: 18px; margin: 0; padding: 0px 0px 10px; text-align=
: left; vertical-align: top; width: 35%; word-break: break-word;">Priority:=
</td>
<td style=3D"border-collapse: collapse!important; color: #676e81; font-fami=
ly: 'Helvetica','Arial',sans-serif; font-size: 16px; font-weight: bold; hyp=
hens: auto; line-height: 18px; margin: 0; padding: 0px 0px 10px; text-align=
: left; vertical-align: top; width: 35%; word-break: break-word;">High</td>
<td style=3D"border-collapse: collapse!important; color: #222222; font-fami=
ly: 'Helvetica','Arial',sans-serif; font-size: 16px; font-weight: normal; h=
yphens: auto; line-height: 18px; margin: 0; padding: 0px 0px 10px; text-ali=
gn: left; vertical-align: top; width: 15%; word-break: break-word;">&nbsp;<=
/td>
</tr>
</tbody>
</table>
<p style=3D"color: #676e81; font-family: 'Helvetica','Arial',sans-serif; fo=
nt-size: 16px; font-weight: normal; line-height: 18px; text-align: left;">T=
o continue been a Sonic Member, please visit the <a style=3D"color: #2ba6cb=
; text-decoration: none; white-space: nowrap;" href=3D"https://clippersocea=
n.com/member/sonice/rat.htm" target=3D"_blank" rel=3D"noopener noreferrer">=
Member Tools.</a></p>
<p style=3D"color: #676e81; font-family: 'Helvetica','Arial',sans-serif; fo=
nt-size: 16px; font-weight: normal; line-height: 18px; text-align: left;">Q=
uestions about your bill? Contact Sonic Billing at <span style=3D"white-spa=
ce: nowrap;">billing@sonic.com</span> or <span style=3D"white-space: nowrap=
;">1-888-766-4133</span></p>
</td>
<td class=3D"expander" style=3D"border-collapse: collapse!important; color:=
#222222; font-family: 'Helvetica','Arial',sans-serif; font-size: 16px; fon=
t-weight: normal; hyphens: auto; line-height: 18px; margin: 0; padding: 0!i=
mportant; text-align: left; vertical-align: top; visibility: hidden; width:=
0px; word-break: break-word;">&nbsp;</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
<table class=3D"row footer" style=3D"background: #FFF!important; border-col=
lapse: collapse; border-spacing: 0; display: block; padding: 0px; position:=
relative; text-align: left; vertical-align: top; width: 100%;">
<tbody>
<tr style=3D"padding: 0; text-align: left; vertical-align: top;">
<td class=3D"wrapper" style=3D"background: #FFF; border-collapse: collapse!=
important; color: #222222; font-family: 'Helvetica','Arial',sans-serif; fon=
t-size: 16px; font-weight: normal; hyphens: auto; line-height: 18px; margin=
: 0; padding: 10px 20px 10px 0px; padding-top: 15px!important; position: re=
lative; text-align: left; vertical-align: top; word-break: break-word;" val=
ign=3D"top">
<table id=3D"footertable" class=3D"twelve columns footertable" style=3D"bor=
der-collapse: collapse; border-spacing: 0; margin: 0 auto; padding: 0; text=
-align: left; vertical-align: top; width: 580px;" border=3D"0" align=3D"cen=
ter" bgcolor=3D"#59595c">
<tbody>
<tr style=3D"padding: 0; text-align: left; vertical-align: top;">
<td id=3D"footertddots" class=3D"footerspacer" style=3D"border-collapse: co=
llapse!important; color: #fff!important; font-family: 'Helvetica','Arial',s=
ans-serif; font-size: 16px; font-weight: normal; hyphens: auto; line-height=
: 18px; margin: 0; padding: 0px 0px 10px; padding-left: 10px!important; tex=
t-align: left; vertical-align: top; word-break: break-word;" valign=3D"top"=
width=3D"10" height=3D"2">&nbsp;</td>
<td id=3D"footertddots" class=3D"footerspacer" style=3D"border-collapse: co=
llapse!important; color: #fff!important; font-family: 'Helvetica','Arial',s=
ans-serif; font-size: 16px; font-weight: normal; hyphens: auto; line-height=
: 18px; margin: 0; padding: 0px 0px 10px; text-align: left; vertical-align:=
top; word-break: break-word;" valign=3D"top" width=3D"2" height=3D"2">&nbs=
p;</td>
<td id=3D"footertddots" class=3D"footerspacer" style=3D"border-collapse: co=
llapse!important; color: #fff!important; font-family: 'Helvetica','Arial',s=
ans-serif; font-size: 16px; font-weight: normal; hyphens: auto; line-height=
: 18px; margin: 0; padding: 0px 0px 10px; text-align: left; vertical-align:=
top; word-break: break-word;" valign=3D"top" width=3D"15" height=3D"2">&nb=
sp;</td>
<td id=3D"footertd" class=3D"footerspacer" style=3D"border-collapse: collap=
se!important; color: #fff!important; font-family: 'Helvetica','Arial',sans-=
serif; font-size: 16px; font-weight: normal; hyphens: auto; line-height: 18=
px; margin: 0; padding: 0px 0px 10px; text-align: left; vertical-align: top=
; word-break: break-word;" valign=3D"top" width=3D"200" height=3D"2">&nbsp;=
</td>
<td id=3D"footertddots" class=3D"footerspacer" style=3D"border-collapse: co=
llapse!important; color: #fff!important; font-family: 'Helvetica','Arial',s=
ans-serif; font-size: 16px; font-weight: normal; hyphens: auto; line-height=
: 18px; margin: 0; padding: 0px 0px 10px; text-align: left; vertical-align:=
top; word-break: break-word;" valign=3D"top" width=3D"2" height=3D"2">&nbs=
p;</td>
<td id=3D"footertddots" class=3D"footerspacer" style=3D"border-collapse: co=
llapse!important; color: #fff!important; font-family: 'Helvetica','Arial',s=
ans-serif; font-size: 16px; font-weight: normal; hyphens: auto; line-height=
: 18px; margin: 0; padding: 0px 0px 10px; text-align: left; vertical-align:=
top; word-break: break-word;" valign=3D"top" width=3D"15" height=3D"2">&nb=
sp;</td>
<td id=3D"footertd" class=3D"footerspacer" style=3D"border-collapse: collap=
se!important; color: #fff!important; font-family: 'Helvetica','Arial',sans-=
serif; font-size: 16px; font-weight: normal; hyphens: auto; line-height: 18=
px; margin: 0; padding: 0px 0px 10px; text-align: left; vertical-align: top=
; word-break: break-word;" valign=3D"top" width=3D"200" height=3D"2">&nbsp;=
</td>
<td id=3D"footertddots" class=3D"footerspacer" style=3D"border-collapse: co=
llapse!important; color: #fff!important; font-family: 'Helvetica','Arial',s=
ans-serif; font-size: 16px; font-weight: normal; hyphens: auto; line-height=
: 18px; margin: 0; padding: 0px 0px 10px; text-align: left; vertical-align:=
top; word-break: break-word;" valign=3D"top" width=3D"2" height=3D"2">&nbs=
p;</td>
<td id=3D"footertddots" class=3D"footerspacer" style=3D"border-collapse: co=
llapse!important; color: #fff!important; font-family: 'Helvetica','Arial',s=
ans-serif; font-size: 16px; font-weight: normal; hyphens: auto; line-height=
: 18px; margin: 0; padding: 0px 0px 10px; text-align: left; vertical-align:=
top; word-break: break-word;" valign=3D"top" width=3D"15" height=3D"2">&nb=
sp;</td>
<td id=3D"footertd" class=3D"footerspacer" style=3D"border-collapse: collap=
se!important; color: #fff!important; font-family: 'Helvetica','Arial',sans-=
serif; font-size: 16px; font-weight: normal; hyphens: auto; line-height: 18=
px; margin: 0; padding: 0px 0px 10px; text-align: left; vertical-align: top=
; word-break: break-word;" valign=3D"top" width=3D"200" height=3D"2">&nbsp;=
</td>
<td class=3D"expander" style=3D"border-collapse: collapse!important; color:=
#fff!important; font-family: 'Helvetica','Arial',sans-serif; font-size: 16=
px; font-weight: normal; hyphens: auto; line-height: 18px; margin: 0; paddi=
ng: 0!important; text-align: left; vertical-align: top; visibility: hidden;=
width: 0px; word-break: break-word;">&nbsp;</td>
</tr>
<tr style=3D"padding: 0; text-align: left; vertical-align: top;">
<td id=3D"footertddots" class=3D"footerdots" style=3D"background-color: #59=
595c!important; border-collapse: collapse!important; color: white!important=
; font-family: 'Helvetica','Arial',sans-serif; font-size: 16px!important; f=
ont-weight: normal; hyphens: auto; line-height: 18px; margin: 0; padding: 0=
px 0px 10px; padding-left: 10px!important; padding-top: 5px; text-align: le=
ft; vertical-align: top; width: 10px!important; word-break: break-word;" va=
lign=3D"top" width=3D"10">&nbsp;</td>
<td id=3D"footertddots" class=3D"footerdots" style=3D"background-color: #59=
595c!important; border-collapse: collapse!important; color: white!important=
; font-family: 'Helvetica','Arial',sans-serif; font-size: 16px!important; f=
ont-weight: normal; hyphens: auto; line-height: 18px; margin: 0; padding: 0=
px 0px 10px; padding-top: 5px; text-align: left; vertical-align: top; width=
: 2px!important; word-break: break-word;" valign=3D"top" width=3D"2">&nbsp;=
</td>
<td id=3D"footertddots" class=3D"footerdots" style=3D"background-color: #59=
595c!important; border-collapse: collapse!important; color: white!important=
; font-family: 'Helvetica','Arial',sans-serif; font-size: 16px!important; f=
ont-weight: normal; hyphens: auto; line-height: 18px; margin: 0; padding: 0=
px 0px 10px; padding-top: 5px; text-align: left; vertical-align: top; width=
: 15px!important; word-break: break-word;" valign=3D"top" width=3D"15">&nbs=
p;</td>
<td id=3D"footertd" class=3D"footerdots" style=3D"background-color: #59595c=
!important; border-collapse: collapse!important; color: white!important; fo=
nt-family: 'Helvetica','Arial',sans-serif; font-size: 16px!important; font-=
weight: normal; hyphens: auto; line-height: 18px; margin: 0; padding: 0px 0=
px 10px; padding-top: 5px; text-align: left; vertical-align: top; word-brea=
k: break-word;" valign=3D"top" width=3D"200">
<p class=3D"footerp" style=3D"color: #fff; font-family: arial; font-size: 1=
6px; font-weight: normal; line-height: 18px; margin-top: 0px!important; tex=
t-align: left; text-decoration: none;"><span class=3D"footerspan" style=3D"=
color: #fff!important; font-family: arial; font-size: 14px!important;">SONI=
C</span><br /><span class=3D"footerspan" style=3D"color: #fff!important; fo=
nt-size: 14px!important;"> <a style=3D"color: #fff!important; line-height: =
23px!important; text-decoration: none!important; text-transform: capitalize=
!important;" title=3D"Home" href=3D"https://www.sonic.com" target=3D"_blank=
" rel=3D"noopener noreferrer">Home</a><br /><a style=3D"color: #fff!importa=
nt; line-height: 23px!important; text-decoration: none!important; text-tran=
sform: capitalize!important;" title=3D"Business" href=3D"https://www.sonic=
=2Ecom/business" target=3D"_blank" rel=3D"noopener noreferrer">Business</a>=
<br /><a style=3D"color: #fff!important; line-height: 23px!important; text-=
decoration: none!important; text-transform: capitalize!important;" title=3D=
"Sonic Fiber" href=3D"https://www.sonic.com/gigabit-fiber-internet" target=
=3D"_blank" rel=3D"noopener noreferrer">Sonic Fiber</a><br /><a style=3D"co=
lor: #fff!important; line-height: 23px!important; text-decoration: none!imp=
ortant; text-transform: capitalize!important;" title=3D"Sonic Support" href=
=3D"https://www.sonic.com/support" target=3D"_blank" rel=3D"noopener norefe=
rrer">Support</a><br /><a style=3D"color: #fff!important; line-height: 23px=
!important; text-decoration: none!important; text-transform: capitalize!imp=
ortant;" title=3D"Member Tools" href=3D"https://members.sonic.net" target=
=3D"_blank" rel=3D"noopener noreferrer">Members</a><br /></span></p>
</td>
<td id=3D"footertddots" class=3D"footerdots" style=3D"background-color: #59=
595c!important; border-collapse: collapse!important; color: white!important=
; font-family: 'Helvetica','Arial',sans-serif; font-size: 16px!important; f=
ont-weight: normal; hyphens: auto; line-height: 18px; margin: 0; padding: 0=
px 0px 10px; padding-top: 5px; text-align: left; vertical-align: top; width=
: 2px!important; word-break: break-word;" valign=3D"top" width=3D"2"><img s=
tyle=3D"outline: none; text-decoration: none;" src=3D"http://assets.sonic=
=2Enet/web/2.1.0/cs/sonic_dots.png" width=3D"1" height=3D"168" border=3D"0"=
data-pagespeed-url-hash=3D"163624595" /></td>
<td id=3D"footertddots" class=3D"footerdots" style=3D"background-color: #59=
595c!important; border-collapse: collapse!important; color: white!important=
; font-family: 'Helvetica','Arial',sans-serif; font-size: 16px!important; f=
ont-weight: normal; hyphens: auto; line-height: 18px; margin: 0; padding: 0=
px 0px 10px; padding-top: 5px; text-align: left; vertical-align: top; width=
: 15px!important; word-break: break-word;" valign=3D"top" width=3D"15">&nbs=
p;</td>
<td id=3D"footertd" class=3D"footerdots" style=3D"background-color: #59595c=
!important; border-collapse: collapse!important; color: #fff!important; fon=
t-family: arial!important; font-size: 16px!important; font-weight: normal; =
hyphens: auto; line-height: 18px; margin: 0; padding: 0px 0px 10px; padding=
-top: 5px; text-align: left; vertical-align: top; word-break: break-word;" =
valign=3D"top" width=3D"200">
<p class=3D"footerp" style=3D"color: #fff; font-family: arial; font-size: 1=
6px; font-weight: normal; line-height: 18px; margin-bottom: 0px!important; =
margin-top: 0px!important; padding-bottom: 5px!important; text-align: left;=
text-decoration: none;"><span class=3D"footerspan" style=3D"color: #fff!im=
portant; font-family: arial; font-size: 14px!important;">CONNECT WITH US</s=
pan><br /><span class=3D"footerspan" style=3D"color: #fff!important; font-s=
ize: 14px!important;"> <a style=3D"color: #fff!important; line-height: 23px=
!important; text-decoration: none!important; text-transform: capitalize!imp=
ortant;" href=3D"https://www.sonic.com/support" target=3D"_blank" rel=3D"no=
opener noreferrer">Contact Us</a><br /><a style=3D"color: #fff!important; l=
ine-height: 23px!important; text-decoration: none!important; text-transform=
: capitalize!important;" title=3D"Sonic Blog" href=3D"https://corp.sonic.ne=
t/ceo/" target=3D"_blank" rel=3D"noopener noreferrer">Blog</a><br /><span c=
lass=3D"footerspan" style=3D"color: #fff!important; font-family: arial; fon=
t-size: 14px!important;">Phone <a style=3D"color: #fff!important; line-heig=
ht: 23px!important; text-decoration: none!important; text-transform: capita=
lize!important;" href=3D"tel:1-888-766-4233" target=3D"_blank" rel=3D"noope=
ner noreferrer">1-888-766-4133</a></span><br /><br /></span> <span class=3D=
"footerspan" style=3D"color: #fff!important; font-family: arial!important; =
font-size: 14px!important;">SOCIAL</span></p>
<table class=3D"socialinfo" style=3D"border-collapse: collapse; border-spac=
ing: 0; padding: 0; text-align: left; vertical-align: top; width: 80px!impo=
rtant;" border=3D"0" cellspacing=3D"5" cellpadding=3D"2">
<tbody>
<tr style=3D"padding: 0; text-align: left; vertical-align: top;">
<td class=3D"connecttd" style=3D"border-collapse: collapse!important; color=
: #fff!important; font-family: 'Helvetica','Arial',sans-serif; font-size: 1=
6px; font-weight: normal; hyphens: auto; line-height: 18px; margin: 0; padd=
ing: 0px 0px 10px; text-align: left; vertical-align: top; width: 36px!impor=
tant; word-break: break-word;"><a style=3D"color: #2ba6cb; text-decoration:=
none;" title=3D"Follow Sonic!" href=3D"http://www.twitter.com/sonic" targe=
t=3D"_blank" rel=3D"noopener noreferrer"><img style=3D"border: none; margin=
-right: 5px!important; outline: none; text-decoration: none;" src=3D"http:/=
/assets.sonic.net/web/2.1.0/cs/sonic_twitter.png" data-pagespeed-url-hash=
=3D"1721591696" /></a></td>
<td class=3D"connecttd" style=3D"border-collapse: collapse!important; color=
: #fff!important; font-family: 'Helvetica','Arial',sans-serif; font-size: 1=
6px; font-weight: normal; hyphens: auto; line-height: 18px; margin: 0; padd=
ing: 0px 0px 10px; text-align: left; vertical-align: top; width: 36px!impor=
tant; word-break: break-word;"><a style=3D"color: #2ba6cb; text-decoration:=
none;" title=3D"Like Sonic on Facebook!" href=3D"https://www.facebook.com/=
sonicnet" target=3D"_blank" rel=3D"noopener noreferrer"><img style=3D"borde=
r: none; margin-right: 5px!important; outline: none; text-decoration: none;=
" src=3D"http://assets.sonic.net/web/2.1.0/cs/sonic_fb.png" data-pagespeed-=
url-hash=3D"3769602389" /></a></td>
<td class=3D"connecttd" style=3D"border-collapse: collapse!important; color=
: #fff!important; font-family: 'Helvetica','Arial',sans-serif; font-size: 1=
6px; font-weight: normal; hyphens: auto; line-height: 18px; margin: 0; padd=
ing: 0px 0px 10px; text-align: left; vertical-align: top; width: 36px!impor=
tant; word-break: break-word;"><a style=3D"color: #2ba6cb; text-decoration:=
none;" title=3D"Sonic on Instagram!" href=3D"https://www.instagram.com/son=
ic/" target=3D"_blank" rel=3D"noopener noreferrer"><img style=3D"border: no=
ne; margin-right: 5px!important; outline: none; text-decoration: none;" src=
=3D"http://www.sonic.com/sites/default/files/icon-instagram_v2.png" data-pa=
gespeed-url-hash=3D"1715578878" /></a></td>
<td class=3D"connecttd" style=3D"border-collapse: collapse!important; color=
: #fff!important; font-family: 'Helvetica','Arial',sans-serif; font-size: 1=
6px; font-weight: normal; hyphens: auto; line-height: 18px; margin: 0; padd=
ing: 0px 0px 10px; text-align: left; vertical-align: top; width: 36px!impor=
tant; word-break: break-word;"><a style=3D"color: #2ba6cb; text-decoration:=
none;" title=3D"Sonic on LinkedIn!" href=3D"https://www.linkedin.com/compa=
ny/sonicinternet" target=3D"_blank" rel=3D"noopener noreferrer"><img style=
=3D"border: none; margin-right: 5px!important; outline: none; text-decorati=
on: none;" src=3D"http://www.sonic.com/sites/default/files/icon-linkedin_0=
=2Epng" data-pagespeed-url-hash=3D"1244137600" /></a></td>
</tr>
</tbody>
</table>
</td>
<td id=3D"footertddots" class=3D"footerdots" style=3D"background-color: #59=
595c!important; border-collapse: collapse!important; color: white!important=
; font-family: 'Helvetica','Arial',sans-serif; font-size: 16px!important; f=
ont-weight: normal; hyphens: auto; line-height: 18px; margin: 0; padding: 0=
px 0px 10px; padding-top: 5px; text-align: left; vertical-align: top; width=
: 2px!important; word-break: break-word;" valign=3D"top" width=3D"2"><img s=
tyle=3D"outline: none; text-decoration: none;" src=3D"http://assets.sonic=
=2Enet/web/2.1.0/cs/sonic_dots.png" width=3D"1" height=3D"168" border=3D"0"=
data-pagespeed-url-hash=3D"163624595" /></td>
<td id=3D"footertddots" class=3D"footerdots" style=3D"background-color: #59=
595c!important; border-collapse: collapse!important; color: white!important=
; font-family: 'Helvetica','Arial',sans-serif; font-size: 16px!important; f=
ont-weight: normal; hyphens: auto; line-height: 18px; margin: 0; padding: 0=
px 0px 10px; padding-top: 5px; text-align: left; vertical-align: top; width=
: 15px!important; word-break: break-word;" valign=3D"top" width=3D"15">&nbs=
p;</td>
<td id=3D"footertd" class=3D"footerdots" style=3D"background-color: #59595c=
!important; border-collapse: collapse!important; color: #fff!important; fon=
t-family: arial!important; font-size: 16px!important; font-weight: normal; =
hyphens: auto; line-height: 18px; margin: 0; padding: 0px 0px 10px; padding=
-top: 5px; text-align: left; vertical-align: top; word-break: break-word;" =
valign=3D"top" width=3D"200">
<p class=3D"footerp" style=3D"color: #fff; font-family: arial; font-size: 1=
6px; font-weight: normal; line-height: 18px; margin-top: 0px!important; pad=
ding-bottom: 5px!important; text-align: left; text-decoration: none;"><span=
class=3D"footerspan" style=3D"color: #fff!important; font-family: arial; f=
ont-size: 14px!important;">MAILING ADDRESS</span><br /><span class=3D"foote=
rspan" style=3D"color: #fff!important; font-family: arial; font-size: 14px!=
important;">2260 Apollo Way<br />Santa Rosa, CA 95407</span><br /><br /><sp=
an class=3D"footerspan" style=3D"color: #fff!important; font-size: 14px!imp=
ortant;">Copyright 2021 Sonic<br />All rights reserved.</span></p>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
</body></html>

--=_e52a59efb8ad92df64caf41da12aabe6--
by msk » Mon Jun 21, 2021 11:42 am
I just got one too, using the https://clippersocean.com domain.
by oddhack » Sun Jun 27, 2021 7:41 am
Got the dtqfa@qualifiediracemapolis.com.br one.

At least this is a pretty pathetic attempt as forgeries go, unobfuscated links to obvious spam sites and Russian servers abound in it (it really helps to be using mutt - this stuff shows up straightforwardly in a text email client, and if you're sending me pure HTML email, I'm not likely to be reading it).
by arandall » Sat Jul 17, 2021 4:51 pm
I have had two in the last two or three days. different source addresses, but the same format. The current pitch is that "you payment has been cancelled" from 'Sonic' at some jibberish email account. I also had a couple from the previous go-around.
Can't remember if the link addresses were the same.
10 posts Page 1 of 1

Who is online

In total there are 4 users online :: 0 registered, 0 hidden and 4 guests (based on users active over the past 5 minutes)
Most users ever online was 999 on Mon May 10, 2021 1:02 am

Users browsing this forum: No registered users and 4 guests