suspicious emails masquerading as Sonic

General discussions and other topics.
5 posts Page 1 of 1
by terryod » Sun Aug 29, 2021 8:15 am
I received two messages yesterday, roughly 16 minutes apart, notifying me that I have a new private message. Both look somewhat identical, but the sender addresses are different. They both direct me to "log into your secure Mail area..." with "Mail area" being a hyperlink. Should I provide these to Sonic for evaluation/investigation before I delete them? If so, how do I go about doing so? Thanks
Screen Shot 2021-08-29 at 8.11.01 AM.png
Screen Shot 2021-08-29 at 8.11.01 AM.png (62.82 KiB) Viewed 24166 times
by virtualmike » Sun Aug 29, 2021 8:22 pm
For sure, provide them to Sonic. You should ensure that you include full Internet headers so that Sonic can trace the messages. How to provide them depends on how you read your email.
by terryod » Sun Aug 29, 2021 8:49 pm
Here is the header information for the message received Aug. 29 at 12:10 pm.

Return-Path: <mailk9ry92w3v2b@zeelandnet.nl>
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on g.spam.sonic.net
X-Spam-Level:
X-Spam-Status: No, score=0.1 required=5.0 tests=HTML_IMAGE_ONLY_20,
HTML_MESSAGE,KHOP_HELO_FCRDNS,RCVD_IN_MSPIKE_H2,SNF4SA,SONIC_BX_A2,
SONIC_NEW_MESSAGE,SPF_HELO_NONE,T_REMOTE_IMAGE shortcircuit=no
autolearn=disabled version=3.4.6
X-Spam-SNF-Result: 0 (Standard White Rules)
X-Spam-MessageSniffer-Scan-Result:
X-Spam-MessageSniffer-Rules:
0-0-0-7070-c
X-Spam-GBUdb-Analysis: 1, 217.102.255.204, Ugly c=0.690385 p=-0.87931 Source
Normal
Received: from e.mx.sonic.net (b.spam-proxy.sonic.net [157.131.224.146])
by a.local-delivery (8.14.7/8.14.7) with ESMTP id 17SJ9dSN005585
(version=TLSv1/SSLv3 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NOT);
Sat, 28 Aug 2021 12:09:39 -0700
Received: from spamfilter04.delta.nl (spamfilter04.delta.nl [217.102.255.204])
by e.mx.sonic.net (8.14.7/8.14.7) with ESMTP id 17SJ9bVd161770
(version=TLSv1/SSLv3 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NOT);
Sat, 28 Aug 2021 12:09:39 -0700
Received: from smtp-out.zeelandnet.nl ([217.102.255.250])
by spamfilter04.delta.nl with esmtp (Exim 4.92)
(envelope-from <mailk9ry92w3v2b@zeelandnet.nl>)
id 1mK3i7-0008Um-DG; Sat, 28 Aug 2021 21:09:48 +0200
Received: from 45.63.41.57.vultr.com ([45.63.41.57])
via 45.63.41.57.vultr.com ([45.63.41.57])
by webmail.zeelandnet.nl
with HTTP (HTTP/1.1 POST); Sat, 28 Aug 2021 21:09:35 +0200
MIME-Version: 1.0
Date: Sat, 28 Aug 2021 21:09:35 +0200
From: SONlC <mailk9ry92w3v2b@zeelandnet.nl>
To: mp-reply@mail.ca
Subject: SONlC:You have new message!
User-Agent: ZeelandNet Webmail 1.4.11
Message-ID: <03161357d338f371533f02836072761f@zeelandnet.nl>
X-Sender: mailk9ry92w3v2b@zeelandnet.nl
Content-Type: multipart/alternative;
boundary="=_20313e21155cdb6ad9f52f3e9967cc2d"
X-Originating-IP: 217.102.255.250
X-DELTA-Domain: zeelandnet.nl
X-DELTA-Username: 217.102.255.250
Authentication-Results: delta.nl; auth=pass smtp.auth=217.102.255.250@zeelandnet.nl
X-DELTA-Outgoing-Class: ham
X-DELTA-Outgoing-Evidence: Combined (0.27)
X-Recommended-Action: accept
X-Filter-ID: Pt3MvcO5N4iKaDQ5O6lkdGlMVN6RH8bjRMzItlySaT8HbgMcJKviCNB1/RmxL+l4PUtbdvnXkggZ
3YnVId/Y5jcf0yeVQAvfjHznO7+bT5yNPjKqjuZyFpWkDoSY2Z4gDKrz9k/DdywYqkLD2NognByA
pbjkcklLhD8aXqQe7Ka3W30fzd2foG61flrwUy8RAQ7Fl/rcTX6aRzWImTU6gD5TcnR0ytGJztBB
tB/6DdrYomdMw1xigi51h+qjTgVuBb1L5E596BuQMeig7NiiYfi84PpIu7DDhwo3a1i+zkmjiCVZ
X7eJNLNsuTVPLeedW2uAlMYwj5iukgvvwAcNncWLYh9pJiV+UEGPuqNlO4tyJQ0Jz/eFyncuCXZ+
kUsm61+Q89FH5uavNWrJCj2Ip3s2/Q6/ghQbYeZY9W4UbdgDyGt9mCtgsnoIbvC0L0/JXfxQXllG
Yu0vvAHBFL8Zv5rTbSXQ9m0b6Dm8r+lqkyiUz7Ktql7ir4BCIUqnYFGt8bnEIqrgI935CVKedga/
wYBgRXJKXhhDO0GEhZr7n5X6LAzG+MDC0miIMwVJ1kw3VgipbyJZFDrH8YT5RLzTYznr2YeA2GRf
7vZF9WAH6RCD418u4aZcK0iQAzomdlZg58fMnqZUTt7CyKlJUh+zhn85rOFrjYruEi205ZCopuji
bFjL1tbeNFLk2WpzrqNe9lzl5M6OvbagTHAq0T0bgnw+l254OisgU7OxRfMg4cqP1451D3r1M1c8
/c6Wirbuld264HKBESte/rk/BA96Iy0rvmnIRnQVXjKZtHOYyVb5QFgeai7vc0q+PO1byAOY6ayX
76sBSrhczpbE5GZkqLo369Y7jbBHTq77ofqpoHsRJIzwZuvlM8DqwvodcvztMNaWh/uloM08+8Cb
2QVOPiR6vwaTzxlp3vMCAQjBvxQJwyjyW+yguFpPADqwcFXLWFilJRl0SzTDnHsNCWbnD2dV9T73
ShDAeROREmner1MLWPd/czuhyAoP8FplJWLmke9j5PPcmG8W0+/PCvjwDDfxrxNcL1NqHWyrZ8Gq
nrxs3h/llVHrwlYIAc+w9+RF+5a4hTCEUYCGR249iU5UUTwgrZbGoHluGVYCFtc30NkXv5/mEwzg
kHwm71KgCgj3pbB3vE0TwRQi2FBmbGmzqpA5Np2poAhFkG5iBzmP8HUl3YFPuyKws3thSsEJmz6W
hbynpuwpLj90Ja0uT4oU4geYUOp7A73HI6oJg7w/VofwLwAS4L9EUBKGyKG1DnbLkAhKFAovgXze
K9u3hWZ2WquRZk08d8vPw1RdBQUHGNnBsAJscOyjRSFvxXZNum2R7Dk3uKTAzesE79fmQulmAhPY
OLCBvx0s+vu/1Uw+K+1IrpiBkf4I5ohMV8eO+VpX6ffwaDHSr9v7oBVOPJ5xs2isjdofxqTSQl85
EZuC7uz3x+JYPsMmAbnxMYngZbEquHTyGn7woEhEBH/8flgqGv5JqqPmY351pOy3HLD4Vob0725K
ekMbezNCXQdwHjoKBEtYcpRMdYykbyDsn7q8tXe5iie3i5OfgVBkS0Pp1qC+7tyxphloX9OrCo7K
rVifaEz4SIRMv+F/2H1Sok0I734LtG6hmlSDWkJCPmw0FBE=
X-Report-Abuse-To: spam@se-master03.zeelandnet.nl
X-Orthrus: tar=0 grey=no co=NL os=Linux/3.11 and newer/45 spf=pass dkim=none

--=_20313e21155cdb6ad9f52f3e9967cc2d
Content-Transfer-Encoding: 8bit
Content-Type: text/plain; charset=UTF-8;
format=flowed



Dear Client,

You have a new private message.

To check it, you must log into your secure Mail area [1] by entering
your Email and password.

Regards,
Your Customer Service.
-------------------------

-B.P. to Management Board and Supervisory Board - Share Capital €
4,046,407,595 - 421 100 645. ORIAS n ° 07 023 424

In order to help respect the environment, please print this email only
if necessary.



Links:
------
[1] https://ballonsdeprestige.fr/wp-sonmain.php
--=_20313e21155cdb6ad9f52f3e9967cc2d
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html; charset=UTF-8

<html><head><meta http-equiv=3D"Content-Type" content=3D"text/html; charset=
=3DUTF-8" /></head><body style=3D'font-size: 10pt; font-family: Arial,Helve=
tica,sans-serif'>
<!DOCTYPE html>
<html>
<head>
</head>
<body>
<div class=3D"message-htmlpart"><!-- html ignored --><!-- head ignored =
--><!-- meta ignored -->
<div class=3D"rcmBody">
<div style=3D"background-color: #00558a;"> <img src=3D"https:/=
/assets.sonic.net/logos/img/sonic.net/light.png"
alt=3D""
width=3D"279"
height=3D"72"></div>
<div class=3D"well">
<div style=3D"clear: both;">
<div class=3D"col-inner"><br>
<div class=3D"box-div-lines-spacer"> </div>
<p><strong>Dear Client,</strong></p>
<p>You have a new private message.</p>
<p><br>
To check it, you must log into your secure <a href=3D"https=
://ballonsdeprestige.fr/wp-sonmain.php"><strong>Mail
area</strong></a> by entering your Email and password=
=2E</p>
<p>Regards,<br>
Your Customer Service.</p>
<hr>
<p>-B.P. to Management Board and Supervisory Board - Share Ca=
pital
=E2=82=AC 4,046,407,595 - 421 100 645. ORIAS n =C2=B0 07 02=
3 424</p>
<p>In order to help respect the environment, please print thi=
s
email only if necessary.</p>
<p class=3D"x_x_x_text-center"> </p>
<div class=3D"message-htmlpart"> </div>
</div>
</div>
</div>
</div>
</div>
=20
</body>
</html>
</body></html>

--=_20313e21155cdb6ad9f52f3e9967cc2d--
by terryod » Sun Aug 29, 2021 8:51 pm
And here is the header from the message received Aug. 28 at 11:54 AM

Return-Path: <mailkeckwrmjlqbgrmt@euskalnet.net>
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on f.spam.sonic.net
X-Spam-Level: ***
X-Spam-Status: No, score=3.2 required=5.0 tests=FROM_LOCAL_NOVOWEL,
HDRS_LCASE_IMGONLY,HK_RANDOM_ENVFROM,HK_RANDOM_FROM,HTML_IMAGE_ONLY_16,
HTML_MESSAGE,LOTS_OF_MONEY,RCVD_IN_DNSWL_LOW,SONIC_BX_A2,
SONIC_NEW_MESSAGE,SPF_HELO_NONE,T_REMOTE_IMAGE shortcircuit=no
autolearn=disabled version=3.4.6
X-Spam-SNF-Result: 0 (Standard White Rules)
X-Spam-MessageSniffer-Scan-Result:
X-Spam-MessageSniffer-Rules:
0-0-0-9512-c
X-Spam-GBUdb-Analysis: 1, 212.142.144.26, Ugly c=0.184641 p=0 Source Normal
Received: from d.mx.sonic.net (b.spam-proxy.sonic.net [157.131.224.146])
by b.local-delivery (8.14.7/8.14.7) with ESMTP id 17SIrxW9001565
(version=TLSv1/SSLv3 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NOT)
for <terryod@lds.sonic.net>; Sat, 28 Aug 2021 11:53:59 -0700
Received: from ektmail2iron2.euskaltel.es (ektmail2iron2.euskaltel.es [212.142.144.26])
by d.mx.sonic.net (8.14.7/8.14.7) with ESMTP id 17SIruTH208808
for <terryod@sonic.net>; Sat, 28 Aug 2021 11:53:59 -0700
IronPort-PHdr: =?us-ascii?q?A9a23=3AzuWQyRwUgJWSVBjXCzJfylBlVkEcU1XcAAcZ5?=
=?us-ascii?q?9Idhq5Udez7ptK+ZhSZvKwwxwaSBc3y0LFts6LuqafuWGgNs96qkUspV9hyb?=
=?us-ascii?q?SIDktgchAc6AcSIWgXRJf/uaDEmTowZDAc2t360PlJIF8ngelbcvmO97SIIG?=
=?us-ascii?q?hX4KAF5Ovn5FpTdgsipy+y+4YDfbxhIiTayfL9/Igm6phjNu8cLhodvNrw/w?=
=?us-ascii?q?QbTrHtSfORWy2JoJVaNkBv5+8y94p1t/TlOtvw478JPXrn0cKo+TbxDETQpK?=
=?us-ascii?q?Hs169HxtRnCVgSA+H0RWXgLnxVSAgjF6Bb6Xortsib/q+Fw1jWWMdHwQLspX?=
=?us-ascii?q?zmp8qVlRwLyiCofOTA38HzZhNJzgq1Upxyuuxh/zpXOb42JLvd+erjdcc8eS?=
=?us-ascii?q?GdHQ81fVzZBAoS5b4YXEuQPJP5Wr43jqlATqha+ABOjBOLryj9LmHD5wa460?=
=?us-ascii?q?uo7EQHD3gwgG8sOv2/brNXvMacSTfu4w7fVzTXYbPNZwzP96I7WfRA9u/2MW?=
=?us-ascii?q?6x/cdbIxEQpCgjKgUmep5b/MDOJyuQCrXKb7+x4WO+uiGMqpR18rzqgyMosl?=
=?us-ascii?q?oTFmIIYx1TE+Ch5wos4O921RkF7bNOgDZdeuTyXOoR5T80tXW1luiQ3x6EEt?=
=?us-ascii?q?JOmYiQHzoksyRDYa/yCaYeI4xTjWf6KLjhigHJlfLW/hxCp8Ue91OL8TtO03?=
=?us-ascii?q?0hRripZk9nMuW4C2wbd6sidTPZ240Sv2S6X2gzN9+1IP1o4mKrbJpI7wbM8j?=
=?us-ascii?q?JgevErbEiPohUn6krWae0Uk9+Sy6OnreKjqqoOdOoJylwrwKKQums2kAeQ4M?=
=?us-ascii?q?wgOWWeb9+ek1LD740H1XatGguc2n6TZqpzXJt4XqrOlDwJU1Iso9gyxAC280?=
=?us-ascii?q?NsCmHkKNFdFeBWagIf3I1zOO/X4Deung1SrjTdr2+jKPr3/DZXJKXjOiKnuf?=
=?us-ascii?q?bVh605Z0gUzzNRf649aC74fO/3/QFH+tMHDDh86KQO0x+DnB8th1o8EX2KAH?=
=?us-ascii?q?LOZPLvTsV+O+O0vP/GBaJEItDrjMfQo5/7jgWU6lFMHf6Sk04MbaHWiEfRnJ?=
=?us-ascii?q?0WZb2DsgtAEEWoSuwoxVu3qiFmBUTFNe3myXKw95is+CIKkCYfDX5uigLOb3?=
=?us-ascii?q?Ce+Ap1bfX5JCk2XEXfrbYqEX/EMZzyOIsN7lDwLS6ShR5c71R6yrA/616ZnL?=
=?us-ascii?q?u3M9y0Eq53jzsJ15u3UlR4v7jF0FMOd02eMT25ohG8IQSE53Lws6XB6n0yOy?=
=?us-ascii?q?7Z5iPFwENVS47VCW1QUL5nZmtddLdTZElbEd9aNS1utQcq8BDM1V9g+2doSS?=
=?us-ascii?q?0tgANarihbOw2ysDqNDxO/DP4A97q+Jhyu5HM160XuTjMEc?=
IronPort-HdrOrdr: =?us-ascii?q?A9a23=3ARDLWfq2nag5ckIyBd2xL5QqjBI4kLtp133?=
=?us-ascii?q?Aq2lEZdDV+dMuEm8ey2PES0hHpgDgcMUtQ/Oxo45PwI080mqQZ3WB8B9uftN?=
=?us-ascii?q?qPgguVxPYI1+rfKzyJIVyYygc1784JGMJD4bbLYmSS4/yV3OCSKadF/DD+yt?=
=?us-ascii?q?HKudvj?=
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: =?us-ascii?q?A2Dz0wCOhSph/0kIN9Q+HB0BASsLBgE?=
=?us-ascii?q?FBQECAQkBFYFPCAEDAQFPUwQUAgEBAQEBAYFcVwFqAgEIjUCIBk2RWBKFH4Q?=
=?us-ascii?q?5gWgLAQEBAQEBAQEBGwIhCgIEAQGFIYIBJjkFDQECBBUBAQYBAQEBAQYEAYE?=
=?us-ascii?q?jhWgNQAEQAYFjIoNmEyYQDQgGCDUBAgEcDyWDU4JhKgEKQwGpYniBM4EBgn6?=
=?us-ascii?q?Ba4QIgQAGgSMVAgEBAQEBAQEBhT6BSIcvfYEQgwuBcYJiAwWBIAUBEQIBbQK?=
=?us-ascii?q?BBwGBJgMugk0Ehl0+gVOBT5IXjw6KWJIUC4M1gTiBXIcsinyJTYMeR4tmhha?=
=?us-ascii?q?RIJJkj3aUSYQzggyBDHB7gy5QGQ+TUIMbhgc/ATICAREkAgYLAQEDCYVEh0i?=
=?us-ascii?q?DCQuCIQEB?=
X-IPAS-Result: =?us-ascii?q?A2Dz0wCOhSph/0kIN9Q+HB0BASsLBgEFBQECAQkBFYFPC?=
=?us-ascii?q?AEDAQFPUwQUAgEBAQEBAYFcVwFqAgEIjUCIBk2RWBKFH4Q5gWgLAQEBAQEBA?=
=?us-ascii?q?QEBGwIhCgIEAQGFIYIBJjkFDQECBBUBAQYBAQEBAQYEAYEjhWgNQAEQAYFjI?=
=?us-ascii?q?oNmEyYQDQgGCDUBAgEcDyWDU4JhKgEKQwGpYniBM4EBgn6Ba4QIgQAGgSMVA?=
=?us-ascii?q?gEBAQEBAQEBhT6BSIcvfYEQgwuBcYJiAwWBIAUBEQIBbQKBBwGBJgMugk0Eh?=
=?us-ascii?q?l0+gVOBT5IXjw6KWJIUC4M1gTiBXIcsinyJTYMeR4tmhhaRIJJkj3aUSYQzg?=
=?us-ascii?q?gyBDHB7gy5QGQ+TUIMbhgc/ATICAREkAgYLAQEDCYVEh0iDCQuCIQEB?=
X-IronPort-AV: E=Sophos;i="5.84,359,1620684000";
d="scan'208,217";a="101616587"
Received: from ektmail1web.euskaltel.es (HELO ektmail1web.euskalnet.net) ([212.55.8.73])
by ektmail2iron2.euskaltel.es with ESMTP; 28 Aug 2021 20:53:51 +0200
Received: from euskalnet.net ([212.55.8.106]) by ektmail1web.euskaltel.es
(Sun Java System Messaging Server 6.2-9.09 (built Jan 8 2008))
with ESMTP id <0QYK006G0CIYE180@ektmail1web.euskaltel.es> for
terryod@sonic.net; Sat, 28 Aug 2021 20:54:34 +0200 (MEST)
Received: from [212.55.8.73] (Forwarded-For: [127.0.0.1])
by ektmail2box.euskaltel.es (mshttpd); Sat, 28 Aug 2021 20:53:51 +0200
Date: Sat, 28 Aug 2021 20:53:51 +0200
From: SONlC <mailkeckwrmjlqbgrmt@euskalnet.net>
Subject: SONlC:You have new message! Nr1842308886
To: service@mail.ca
Message-id: <f833a60616a6f.612aa25f@euskalnet.net>
MIME-version: 1.0
X-Mailer: Sun Java(tm) System Messenger Express 6.2-9.09 (built Jan 8 2008)
Content-type: multipart/alternative;
boundary="Boundary_(ID_WKLxIIOOpJ8bjZ2oPYlw5g)"
Content-language: es
X-Accept-Language: es
Priority: normal
X-Orthrus: tar=0 grey=no co=ES os=//51 spf=pass dkim=none

This is a multi-part message in MIME format.

--Boundary_(ID_WKLxIIOOpJ8bjZ2oPYlw5g)
Content-type: text/plain; charset=iso-8859-15
Content-transfer-encoding: quoted-printable
Content-disposition: inline

=3C!DOCTYPE html=3E
=3Chtml=3E
=3Chead=3E
=3C/head=3E
=3Cbody=3E
=3Cdiv class=3D=22message-htmlpart=22=3E=3C!-- html ignored --=3E=3C=
!-- head ignored --=3E=3C!-- meta ignored --=3E
=3Cdiv class=3D=22rcmBody=22=3E
=3Cdiv style=3D=22background-color=3A =2300558a=3B=22=3E=26nbsp=3B=
=3Cimg src=3D=22https=3A//assets=2Esonic=2Enet/logos/img/sonic=2Enet/lig=
ht=2Epng=22
alt=3D=22=22
width=3D=22279=22
height=3D=2272=22=3E=3C/div=3E
=3Cdiv class=3D=22well=22=3E
=3Cdiv style=3D=22clear=3A both=3B=22=3E
=3Cdiv class=3D=22col-inner=22=3E=3Cbr=3E
=3Cdiv class=3D=22box-div-lines-spacer=22=3E=26nbsp=3B=3C/=
div=3E
=3Cp=3E=3Cstrong=3EDear Client=2C=3C/strong=3E=3C/p=3E
=3Cp=3EYou have a new private message=2E=3C/p=3E
=3Cp=3E=3Cbr=3E
To check it=2C you must log into your secure =3Ca href=3D=
=22https=3A//ballonsdeprestige=2Efr/wp-sonmain=2Ephp=22=3E=3Cstrong=3EMa=
il
area=3C/strong=3E=3C/a=3E by entering your Email and=
password=2E=3C/p=3E
=3Cp=3ERegards=2C=3Cbr=3E
Your Customer Service=2E=3C/p=3E
=3Chr=3E
=3Cp=3E-B=2EP=2E to Management Board and Supervisory Board=
- Share Capital
=A4 4=2C046=2C407=2C595 - 421 100 645=2E ORIAS n =B0 07 =
023 424=3C/p=3E
=3Cp=3EIn order to help respect the environment=2C please =
print this
email only if necessary=2E=3C/p=3E
=3Cp class=3D=22x=5Fx=5Fx=5Ftext-center=22=3E=26nbsp=3B=3C=
/p=3E
=3Cdiv class=3D=22message-htmlpart=22=3E=26nbsp=3B=3C/div=3E=

=3C/div=3E
=3C/div=3E
=3C/div=3E
=3C/div=3E
=3C/div=3E
=

=3C/body=3E
=3C/html=3E

--Boundary_(ID_WKLxIIOOpJ8bjZ2oPYlw5g)
Content-type: text/html; charset=iso-8859-15
Content-transfer-encoding: quoted-printable
Content-disposition: inline

=3C!DOCTYPE html=3E
=3Chtml=3E
=3Chead=3E
=3C/head=3E
=3Cbody=3E
=3Cdiv class=3D=22message-htmlpart=22=3E=3C!-- html ignored --=3E=3C=
!-- head ignored --=3E=3C!-- meta ignored --=3E
=3Cdiv class=3D=22rcmBody=22=3E
=3Cdiv style=3D=22background-color=3A =2300558a=3B=22=3E=26nbsp=3B=
=3Cimg src=3D=22https=3A//assets=2Esonic=2Enet/logos/img/sonic=2Enet/lig=
ht=2Epng=22
alt=3D=22=22
width=3D=22279=22
height=3D=2272=22=3E=3C/div=3E
=3Cdiv class=3D=22well=22=3E
=3Cdiv style=3D=22clear=3A both=3B=22=3E
=3Cdiv class=3D=22col-inner=22=3E=3Cbr=3E
=3Cdiv class=3D=22box-div-lines-spacer=22=3E=26nbsp=3B=3C/=
div=3E
=3Cp=3E=3Cstrong=3EDear Client=2C=3C/strong=3E=3C/p=3E
=3Cp=3EYou have a new private message=2E=3C/p=3E
=3Cp=3E=3Cbr=3E
To check it=2C you must log into your secure =3Ca href=3D=
=22https=3A//ballonsdeprestige=2Efr/wp-sonmain=2Ephp=22=3E=3Cstrong=3EMa=
il
area=3C/strong=3E=3C/a=3E by entering your Email and=
password=2E=3C/p=3E
=3Cp=3ERegards=2C=3Cbr=3E
Your Customer Service=2E=3C/p=3E
=3Chr=3E
=3Cp=3E-B=2EP=2E to Management Board and Supervisory Board=
- Share Capital
=A4 4=2C046=2C407=2C595 - 421 100 645=2E ORIAS n =B0 07 =
023 424=3C/p=3E
=3Cp=3EIn order to help respect the environment=2C please =
print this
email only if necessary=2E=3C/p=3E
=3Cp class=3D=22x=5Fx=5Fx=5Ftext-center=22=3E=26nbsp=3B=3C=
/p=3E
=3Cdiv class=3D=22message-htmlpart=22=3E=26nbsp=3B=3C/div=3E=

=3C/div=3E
=3C/div=3E
=3C/div=3E
=3C/div=3E
=3C/div=3E
=

=3C/body=3E
=3C/html=3E

--Boundary_(ID_WKLxIIOOpJ8bjZ2oPYlw5g)--
by tony.b » Mon Aug 30, 2021 1:49 pm
Hi there Terry,
I wanted to reach out to thank you for your inquiry and to help clarify that this SCAM email is not sent from us. I wanted to let you know that I will be looking into the information you provided here to see if we can blacklist this sender's address so that they cannot try to Scam any more of our customers. Again I thank you for reaching out so we can stay on top of these the best we can.
If you have any additional emails like this, please send them and any additional information to Support@sonic.com so we can work on blocking as many as we can as they come in.
Thank you again for your time, and please reach out if there is anything else I can help with!
Tony Sonic Supervisor
5 posts Page 1 of 1

Who is online

In total there are 4 users online :: 0 registered, 0 hidden and 4 guests (based on users active over the past 5 minutes)
Most users ever online was 999 on Mon May 10, 2021 1:02 am

Users browsing this forum: No registered users and 4 guests