Apple, iTunes, iPhone & iCloud

Kat

Administrator
Staff member
Return-Path: <bounces+5502127-e324-.......=yahoo.com@sendgrid.net>
Received: from (EHLO o1.hv1e.shared.sendgrid.net) (167.89.100.165)
From: Apple ID <8302721408@yuclrmixbt.com>
Date: Sun, 30 Jun 2019
Subject: Re: Your Apple ID has been Locked. [ id : 8302721408 ]

Your Apple ID has been temporarily locked due to login activity, this is because your account has been detected for use in different device.

Country : Western Sahara
Date and Time : 30/06/2019 15:13:35
IP : 250.103.15.59
Operating System : Linux

If you have not signed in to iCloud recently and believe someone may have accessed your account, log in to your account and change your password as soon as possible.

Sign in to Apple ID https://zop.jp/jaya6?....@yahoo.com

Sincerely
Apple Support
 

Garreg Ddu

Gweinyddwr
Staff member
No useful IP information in the header.


Subject: Re : [New Update Statement Information] Status added login From Safari , iOS #62364638.
Return-Path: IQLWXRWHQZKUWTRLDRZESCZLHUDGH
From: "Apple Incâ" <eu6amijl8ej@rapopoaa.com>
To: customer@email.apple.com
OriginalArrivalTime: 01 Jul 2019 18:36:12.1601 (UTC)

Dear Customer

Your Apple ID has been used from another device and location. We`ve temporarily locked your Apple ID for the protect account and the Apple Community.

Login details :
iPhone X
Spain, July, 1 2019 PDT GMT
Operating System: iOS11
Browser: Safari

To continue enjoy our service.
You should to verify your identity and update your security settings to unlock your Apple ID. If today you didn't verify your identity, your Apple ID will be locked for permanently. To complete the process, click the link below.


Verify your account now > https://www.linkedin.com/slink?code=fXGr9tQ?03280136?/03280136 Link is MALWARE infected and reported for closing.

Best Regards,

Apple Support


Apple ID | Support | Privacy Policy
Copyright © 2019
Apple Distribution International, Hollyhill Industtial Estate, Hollyhill, Cork, Ireland.
All Rights Reserved.
 

Spanish Admin

THE Spanish Administrator
Staff member
From: 123.30.50.74, Viet Nam, Hanoi, Vietnam Posts And Telecommunications Group
Return-Path: <gath936@tianshi-deutschland.de>
Date: Mon, 8 Jul 2019
From: Apple <gath936@tianshi-deutschland.de>
Subject: You have a message that will be deleted in 7 days

You have a message that will be deleted in 7 days.

Read Now > <http://www.neurorehabpartners.com/wordpress/wp-content/emitz.html>

For more information, see our frequently asked questions <http://www.neurorehabpartners.com/wordpress/wp-content/emitz.html> .

Thanks,
Apple Customer Support

TM and copyright ゥ 2019 Apple Inc. Apple Sales International, Hollyhill Industrial Estate, Cork, Ireland. Company Registration number: 15719. VAT number: IE6554690W.
 

Garreg Ddu

Gweinyddwr
Staff member
Sun, 21 Jul 2019 13:12:49 -0700 (PDT)
Return-Path: i8hue03uwka@sugoiney-05.me
Subject: Re: [ Daily News Apple ] [Statement Updates] New Information: Summary Report Alert KTKRGKMF [FWD] / [Recibo de transacción] Hemos recibido pedidos de la App Store. Orden Su recibo de pago ha sido enviado a ...
From: "ApplelD" <i8hue03uwka@sugoiney-05.me>
To: service@apple.com
X-Sender-IP: 209.85.215.193

Origin IP Address = 209.85.215.193 = Google (DCH) Data Center/Web Hosting/Transit, Noord-Holland, Amsterdam, Netherlands.


Your Apple ID has been locked
It looks like your account is outdated and required update. You have to update your account and enable two factor authentication for secure your account.

You cannot access your account and any Apple service before completing verification, and you have to completing verification before 24 hours or your account will be Permanently Locked.

You can read our new Terms Of Service and Privacy Policy Update.

Sincerely,
Apple Support

Sign in now Link leads via a "Linkedin" redirect to the phishing site...
 

Plutonium

Member
Return-Path: <postmaster@f5dfgr4s.com>
Received: from (EHLO mail-oi1-f225.google.com) (209.85.167.225)
Return-Path: <postmaster@f5dfgr4s.com>
Date: Thu, 15 Aug 2019
From: Apple Support <Vjz2O4G9aI2TjP8-4Ih0fLVu6R7bAM3o@vZlRqWEv-93291386.club>
Subject: Apple ID Locked

http://www.linkedin.com/slink?code=fY6tgk8?idtrack=u2JwuEv7
 

Central Scrutinizer

Administrator
Staff member
Return-Path: <7mgab6jqqrv@accountprivateincorpc.com>
Return-Path: <7mgab6jqqrv@accountprivateincorpc.com>
Received: from bgaldi6agustus19 ([167.71.107.154])
Date: Sun, 11 Aug 2019
From: "Apple lD" <7mgab6jqqrv@accountprivateincorpc.com>
To: mail-serv@id.apple.com

Dear

For your protection, your Apple ID is automatically locked.We detected an unauthorized Login attempt to your Apple ID from another IP Location. Please update your information promptly so that you can continue to enjoy your apple account.

Sign In details :
Login Date : August, 11 2019 PDT
Location : Mauritania
IP Address : 31.45.65.72
Browser : Safari

Please verify your identity today or your account will be disable.After that, change your appleid password. To verify your Apple ID, we recommend that you go to: Login to Apple IDSincerely,Apple

*The location is approximate and determined by the IP address it was

This email can't receive replies. For more information, visit the Apple account Help Center.

You received this mandatory email service announcement to update you about important changes to your Apple product or account.

2019 Apple Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
 

Sphinx

Administrator
Staff member
Return-Path: <postmaster@dimanaotakkau-01.com>
Received: from (EHLO mail-pf1-f227.google.com) (209.85.210.227)
Date: Sat, 17 Aug 2019
Subject: Sat, August 17, 2019 10:07 PM Activity : Notification log-in recently your account result

(Update Now). https://www.linkedin.com/slink?code=fMuwCVY?SEMOGABISAPLISSS?idtrack=SEjusUna

Sincerely,
Apple Support
 

Garreg Ddu

Gweinyddwr
Staff member
Authentication-Results: spf=pass (sender IP is 209.85.166.67)
smtp.mailfrom=intel-id158.com; hotmail.com; dkim=fail (signature did not verify) header.d=intel-id158.com;hotmail.com; dmarc=bestguesspass action=none
header.from=intel-id158.com;
Received-SPF: Pass (protection.outlook.com: domain of intel-id158.com
designates 209.85.166.67 as permitted sender)
receiver=protection.outlook.com; client-ip=209.85.166.67;
helo=mail-io1-f67.google.com;
Received: from mail-io1-f67.google.com (209.85.166.67) by
BN8NAM11FT055.mail.protection.outlook.com (10.13.177.62) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
15.20.2199.13 via Frontend Transport; Mon, 26 Aug 2019 02:10:11 +0000

Return-Path: 5k4xtx3hv7p@intel-id158.com
From: "Apple lD" <5k4xtx3hv7p@intel-id158.com>
To: user@domain.com
Date: Sun, 25 Aug 2019 19:10:09 -0700
Subject: Re: [ Daily Report ] [ New August Statement ] Confirmation: QOJEZRHW Recent Changes 'August 25, 2019' sent to 'word' /
X-Sender-IP: 209.85.166.67

Origin IP Address = 209.85.166.67 = Noord-Holland, Amsterdam, Netherlands


Please open the attached for details about of your account

Apple Support

The attached file, CASE-ID#278713.docx has the fake link, which leads to a tumblr.com redirect

Dear Customer,

The following changes to your Apple ID, were made on August 25, 2019 :

Billing and/or Shipping Address

If you did not make these changes or you believe an unauthorized person has accessed your
account, you should updates your account information as soon as possible from your Apple ID
account page at https://appleid.apple.com/ or your account will be locked permanently for the
security community of Apple.
Apple Support

Apple ID | Support | Privacy Policy
Copyright © 2017 Apple Inc. 1 Infinite Loop, Cupertino, CA 95014, United States All Rights Reserved.
 

Kat

Administrator
Staff member
Return-Path: <fnzYlfhJRMKCGEuCmLM@hsk8piky820.myid.hsk.asubasah.info>
Received: from (EHLO mail-ua1-f104.google.com) (209.85.222.104)
From: "Apple lD" <fnzYlfhJRMKCGEuCmLM@hsK8pikY820.myid.HSK.asubasah.info>
Date: 29 Aug 2019
Subject: [ImportanCheck]Important information about your Apple lD account. [Reference-ID : HSK8PIKY82] [FWD]

https://kaywa.me/Pk6KW?fnzYl=hsk8pik
 

Dororo

Administrator
Staff member
Return-Path: <postmaster@demonx-03.com>
Received: from (EHLO mail-ua1-f98.google.com) (209.85.222.98)
Date: Fri, 20 Sep 2019 14:26:54 +0000
From: Apple <ETEUZAYJser.vicGsPs5hKa@sgWEQbK.id>
Subject: [CASE-ID 20342364] RTSKC : Statement Updated new log-in with Windows and checking account data

Dear Customer,

We've got a unauthorized activity with yout account , Recently we have detect several unusual activity on your account changes. To protect your account from unauthorized access, We temporarily disable your account.

Our security has been disabled all services in your Apple ID. We just need verify your identity. Your account will became locked until your verify your identity. We just want to protect your account to be more safe.

Please help us to unclock your account by click the button below.

UNLOCK NOW https://www.linkedin.com/slink?code=fsAzN2t?idtrack=dglZyGte

If you do not update your account within 24 hours (from opening this email) it will be Temporary Limited.

Thank you for your comprehension.
Apple Support Team
 

ADD-Coder

Paladin
"Locked Apple ID"
I do have to hand it to them, their use of HTML to obfuscate the message to bypass filters was rather clever.

DeTx5dlEHar CustTx5dlEHomer

Yo3MUSXQP4Our ApLydXY94Cple ID has be3MUSXQP4Oen locTx5dlEHked for secuTx5dlEHrity reaTx5dlEHsons. To unTx5dlEHlock it, you mTx5dlEHust veTx5dlEHrify your ideTx5dlEHntity.

UnlyR6Ygock AccouTx5dlEHnt >

If you don't unlo1KqzYSck your accouTx5dlEHnt before 24 hours, your accTx5dlEHount passTx5dlEHword will chaTx5dlEHnge automatTx5dlEHically. You can resTx5dlEHet your passwTx5dlEHord at ifoTx5dlEHrgoTx5dlEHt.appTx5dlEHleTx5dlEH.com.

Sincerely,
Apple Support



Return-Path: <postmaster@iappuruincd.com>
X-Originating-IP: [209.85.219.228]
X-Relaying-Domain: iappuruincd.com
Date: Sun, 13 Oct 2019 16:04:09 +0200
From: Apple Support <D0UK3aJgu0M6uJu-PsxiW9LAonU1APXK@xnPJWXgM-80930156.info>
Subject: Apple ID Locked

Dear Customer

Your Apple ID has been locked for security reasons. To unlock it, you must verify your identity.

Unlock Account > https://rplg.co/c58c3040?idtrack=3D8bvDLLhN

If you don't unlock your account before 24 hours, your account password will change automatically. You can reset your password at
iforgot.apple.com > https://rplg.co/c58c3040?idtrack=3D8bvDLLhN

Sincerely,
Apple Support
 

Miyuki

Administratrix
Staff member
Return-Path: <customermailsupports7@informationkapan.com>
Received: from mail-io1-f68.google.com ([209.85.166.68])
From: <customermailsupports7@informationkapan.com>
Date: Tue, 5 Nov 2019
Subject: Congratulations! Per your request, we have successfully received your orders.

Dear Apple Customer,

Thanks for your purchase on App Store .

Your orders of "Clash of Clans" has been successfully paid.

Your invoice orders is attached on this email.

To view, manage or request a cancellation for your orders. Please download and read the instructions on the invoice.

Thank you again for shopping with us..

Apple Store
 

Sphinx

Administrator
Staff member
Return-Path: <qwedas@samlimbaer.org>
Date: Thu, 14 Nov 2019
Subject: Your account has been locked
From: =?UTF-8?B?76O/IEF1dGg=?= <qwedas@samlimbaer.org>

Hello

Due to a problem with your payment information, we have been unable to charge your account.

Your Apple ID has been locked to protect your security and you can't sign in to any Apple services. You can unlock your Apple ID after you update payment information.

UPDATE ACCOUNT
The Apple Support Team
https://mysp.ac/4UbwP

Valve C Valve Corporation. PO Box 1688 Bellevue, WA 98009.
All rights reserved. All trademarks are property of their respective owners in the US and other countries.

Trouble viewing this message? Click here.
 

Quark

Moderator
Staff member
Return-Path: <6g7Gu6V3N8-NFwgeKJFnjkegJKFEgjknegjk3748.anakhrmse@8084-hairdrayer.6g7gu6v3n.hdwkhefjghjfdwhjefhjbhfhj367.kodaratyangmenakidrkan.org>
From: "Apple Support" <6g7Gu6V3N8-NFwgeKJFnjkegJKFEgjknegjk3748.anakhrmse@8084-hairdrayer.6g7gu6v3n.HDWkhefjgHJFdwhjefhjbhFHJ367.kodaratyangmenakidrkan.org>
Date: 18 Nov 2019
Subject: RE: Important to your account about last sign in activity from Uruguay IP 241.24.244.115

For your protection your Apple ID is automatically disabled.

Login Apple: http://baliklah.com/r/ogJfgxC?_ga=....@yahoo.com
 

ADD-Coder

Paladin
There is a button on the page that goes to the url below.

Return-Path: <cgi-mailer-bounces-469571001@perfora.net>
X-Originating-IP: [74.208.4.196]
Received: from infong1318.perfora.net ([74.208.57.148]) by mrelay.perfora.net
Received: from 182.253.162.115 (IP may be forged by CGI script)
X-Sender-Info: <469571001@infong1318.perfora.net>
Date: Thu, 21 Nov 2019
Subject: Your receipt from Apple Store #W451150001
From: service@store.appleid.com-customers-receipt-sakitdong.luxerone.com

Dear Customers,

Thank you for making a purchase at the Apple Store.
Date: Nov 21, 2019, 23:45 AM
Item: $25 iTunes & AppStore GiftCard E-Mail Delivery
Sent to: Amirul Sanz (sanz.binomopro@gmail.com)
Price: $25.00

Payment Method: Debit/Credit Card
Status: PENDING

If you did not make this purchase or you believe an unauthorized person has accessed your account, you must change your password immediately and cancel this purchase.

Cancel This Purchase https://essentialemailmarketer.com/payment/

Sincerly,
Apple Store

Please do not reply to this email; it will not get through.
The information contained in this email message is confidential and intended only for the recipient to which it was addressed.
© 2019 Apple, Inc. All rights reserved.
 

Sphinx

Administrator
Staff member
Return-Path: <postmaster@sekarangsuda.info>
Date: Sun, 15 Dec 2019
From: AppIe Support <bAUh91D5tnrFUbF-R72WOY0y6VJKbuXq@cf8YaypT-74503398.info>
Subject: Apple ID Locked

Dear Custoomer

Your Apple ID has been locked for secucrity reasons. To unock it, you must verify your identity.

Unlock account http://pixelfy.me/Y5TcrI?idtrack=NSAgSkjY

If you don't unlock your accouont before 24 hours, your account passoword will change automatocally. You can reset your password at ifooU9O8OLrgooU9O8OLt.appoU9O8OLleoU9O8OL.com.

Sincerely,
Apple Support
 

GhanaGeria

Na Frustrate Go Kill All Diss Phools?
from: APPLE <heidi.uebler@t-online.de>
date: Dec 24, 2019, 2:19 AM
subject: Important Message
mailed-by: t-online.de
security: Standard encryption (TLS) Learn more

Dear Customer,

Your AppIe ID is temporarily Iocked!

Our system has detected several unsuccessful attempts with your Apple ID from unknown devices.

Your Apple ID allows you to make purchases on the App Store and iTunes Store.
Please validate your informations below:

Login http://www.dietwithdieted.com/wp-admin/css/apple/apple/

Wondering why you got this email?
We detect unusual attempt on your account. If you are aware of it kindly IGNORE this message.

For more information, see our frequently asked questions. http://www.dietwithdieted.com/wp-admin/css/apple/apple/

Thanks,
Apple Customer Support
 

Marie

Administrator
Staff member
Return-Path: <jaguso@manisdidbir.com>
Date: Tue, 31 Dec 2019
Subject: Your Apple account has been locked
From: Support <jaguso@manisdidbir.com>

Hello,
We recently noticed a problem with the Billing Account associated with your Apple ID. As a result of this activity, your account has been locked.

You can help us unlock your account by logging in to https://appleid.apple.com and following the on-screen instructions.

Regards,
Apple[/plain]
 
Top