Привет https://apple.com

Scammer!

Scammer!

Received a communicatin form this IP in email in regards to an order I placed on Traveux.com which website entireless and magically disappeared once I contacted them. They did get back to me saying they didn't have an order from me. I submitted screen shots of their site with the order info and numbers. never heard again and they disappeared. Here is the top ppart of the header leading me to this IP: "Return-Path: <bounces+13898262-0f63-tekwizrd=stny.rr.com@em5772.cutetopshop.com> Received: from p-impin007.msg.pkvw.co.charter.net ([47.43.26.148]) by p-mtain011.msg.pkvw.co.charter.net (InterMail vM.9.01.00.037.1 201-2473-137-122-172) with ESMTP id <20210408081504.ZASJ30426.p-mtain011.msg.pkvw.co.charter.net@p-impin007.msg.pkvw.co.charter.net> for <tekwizrd@stny.rr.com>; Thu, 8 Apr 2021 08:15:04 +0000 Received: from wrqvzzcv.outbound-mail.sendgrid.net ([149.72.238.200]) by cmsmtp with ESMTP id UPodlnUDCPiRYUPodliVN2; Thu, 08 Apr 2021 08:15:04 +0000 X-ORIG-RCPT: tekwizrd@stny.rr.com X-Authority-Analysis: v=2.3 cv=YKvhNiOx c=1 sm=1 tr=0 b=1 cx=a_idp_d a=fnHcPiRhCuUdmAsDhhUiDg==:117 a=fnHcPiRhCuUdmAsDhhUiDg==:17 a=ayC55rCoAAAA:8 a=IkcTkHD0fZMA:10 a=5KLPUuaC_9wA:10 a=GYNJNCkMMaEA:10 a=-5u_LAPiAAAA:8 a=gU1HOJDR9xIB_p-U62sA:9 a=4YWbZ2u-ThesWIx0:21 a=QEXdDO2ut3YA:10 a=B_RyunTPg8udlmYm5Cu2:22 a=5PE20vykcA-OOIfNBcuM:22 cc=prm DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cutetopshop.com; h=content-transfer-encoding:content-type:from:mime-version:subject: reply-to:to; s=s1; bh=mLu08fIxdesCjiw9swSLHLlKLmWuJ9/XlWHIGobKwco=; b=ZQvui4nj1zIkhOvSYLlOy7YNp92me2HIxsj0KZ8gqDHUE58DlfaY8t801pBMx2P9PbJ7 1+e4DlG7kmdKW5rMSai+7SMtzvJccobvgfEPIQuu2KvyEe+t9AypANwpkhdlJcetxmtiBS 3izqN0MjdoVGFztVpSSKN3/qJ1fvnBlGo= Received: by filterdrecv-p3las1-canary-9b76658bd-9gh9m with SMTP id filterdrecv-p3las1-canary-9b76658bd-9gh9m-19-606EBB86-1F 2021-04-08 08:15:02.818583487 +0000 UTC m=+1347955.767790739 Received: from MTM4OTgyNjI (unknown) by geopod-ismtpd-canary-0 (SG) with HTTP id _JXOxMfgSdCVTkC2M91Yng Thu, 08 Apr 2021 08:15:02.528 +0000 (UTC) Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 Date: Thu, 08 Apr 2021 08:15:02 +0000 (UTC) From: Customer service support <natasha@customerservicemode.com> Mime-Version: 1.0 Message-ID: <_JXOxMfgSdCVTkC2M91Yng@geopod-ismtpd-canary-0> Subject: [Customer service support] their fake site email support listed natasha@customerservicemode.com as the contact. I reached out and thats the header from their response. Complete scammers .....

Capitalizing on recent Rogers Communication outage, claiming refund of $60... Text message with IP.

data:image/jpg;base64,/9j/4AAQSkZJRgABAQEAYABgAAD//gA7Q1JFQVRPUjogZ2QtanBlZyB2MS4wICh1c2luZyBJSkcgSlBFRyB2NjIpLCBxdWFsaXR5ID0gODAK/9sAQwAGBAUGBQQGBgUGBwcGCAoQCgoJCQoUDg8MEBcUGBgXFBYWGh0lHxobIxwWFiAsICMmJykqKRkfLTAtKDAlKCko/9sAQwEHBwcKCAoTCgoTKBoWGigoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgo/8AAEQgAFABOAwEiAAIRAQMRAf/EAB8AAAEFAQEBAQEBAAAAAAAAAAABAgMEBQYHCAkKC//EALUQAAIBAwMCBAMFBQQEAAABfQECAwAEEQUSITFBBhNRYQcicRQygZGhCCNCscEVUtHwJDNicoIJChYXGBkaJSYnKCkqNDU2Nzg5OkNERUZHSElKU1RVVldYWVpjZGVmZ2hpanN0dXZ3eHl6g4SFhoeIiYqSk5SVlpeYmZqio6Slpqeoqaqys7S1tre4ubrCw8TFxsfIycrS09TV1tfY2drh4uPk5ebn6Onq8fLz9PX29/j5+v/EAB8BAAMBAQEBAQEBAQEAAAAAAAABAgMEBQYHCAkKC//EALURAAIBAgQEAwQHBQQEAAECdwABAgMRBAUhMQYSQVEHYXETIjKBCBRCkaGxwQkjM1LwFWJy0QoWJDThJfEXGBkaJicoKSo1Njc4OTpDREVGR0hJSlNUVVZXWFlaY2RlZmdoaWpzdHV2d3h5eoKDhIWGh4iJipKTlJWWl5iZmqKjpKWmp6ipqrKztLW2t7i5usLDxMXGx8jJytLT1NXW19jZ2uLj5OXm5+jp6vLz9PX29/j5+v/aAAwDAQACEQMRAD8A4n4ZeF9P8RahetO0Vtp+nxzSz3hw4SIYIdg/BOMgAxqCNxzlcCx4h0fwg+mS6zoWt30RMweTTNUdDcOxyUlRAG8xeThXwSGyWAOT0fwG1Gayi1/RGjin1WWwMtnZTESozIzMV2l8B8tzH8n3AT3I09Xk1nUfAN9qnjbTSuuWGpRHQ5WtRHdTbXBZAm1CybQT90cZbHy0AZF14Q8HaTc6doPiW5urbxDJBmU2Vsr2tk0wCqJWbLtgspB3cFuoGAOGvNDvPDfje50ee0n1XUbe5gtIxhlWXcuAmcn5WU4VSORjOACrejePPCGq+Kvivaarplndah4b1sQTLdW74jjCxBN7N0UrywDdeQM5IrVn8ReHIvit4y1LVNW/syTEEWm3T2jTJ5iQkSyJhSCwVsLk4PmA4bgUAcL8SPhvZeGtA8PzQ6pc32sXjS286Aq8fmRLgpH0PysBHgkk9hkba2r/AMJ+FdLvdO8P+JtXv7TxLfW8cRTTVLW9ozZCCXcxZztYp1+6egGDW540t/Ddh8L9BuU1dNVSzmvJrGRrORRdM1z84O0FUALFckAMcFSnBrN+J3hDXfEnxPtNQ0O2vLjT9Tlt7iK9jVvLtQqIjEsDhGyuSCAflXB6igDnvCPw5hm8a6z4e1281WIaLbzzzixAPmqQoDR5yQXRl+XacgdecCP4g6J4fstIiudI8PeKLK+u5PIii1O3gjRtzs3CJ+8DA4C9BgAHIOD22rXfiXX/AB741u/hzcQRSW2yJ5Rs33W1I1KRlkYHaUf+Jfvqc9jQ1SXWrP4K6lL46W7kuBqVvJpI1Ni9wPmUuvzgPkKJAScZ+bHHUAz7XwT4W8NPBpOv+ILyy8TXEMUcxtUjMVu0rbk3B8sxUhPmTGPlPHJrz74g6P8A2Dq15pd/ez3GsWk4WYyJuEqtGpDq5+YjAU4bpvAGcFm9T+IvhDVfFnxQsNY0NJ7zStVSCa31CHfstQkYH3wCqgt82Dg5BHy9Tzvxb8YS2HxS1u40sGSJ/LiHmyboXKKEdwq453Jtzk42sD1woBwniBV0pNGGn74Hezhu/MSV9yysCGZecDOFzj+6MYqOXV9V1u1upNV1W/u3soGeFpp2dhveONlycnaVPTOP1yUUAWNG8Q6vpvhW9gstSuobYXMQ8hJCEJYOSSB977gG05Xk8ZwRkavFFZ6ze28USmKCR4FDE87cqGPPXjd6Z7Y4oooA1de1zUbzRtKtr66kuoWtWZVnYv5TecQWTP3SREoPrlj1Yk6Ok65qS6DbwWt7cWcbPePIttK0aSeXH5qhowfLILOQfl6ACiigChZSzWXihLq1laG4Sy+1I8IEW1/svmDAQAY3dsc985OdX4gXt/pmvaekup6jqRh2XitqFy8xLhiADk4wNvYA8nnpgooAwdN8V6rpmmLp9jczw2u4mWNLmYJMDkEMgfbyD1AB4BBzzWmNTuPDi2l/a+XPcToyO1wgJO+OCUksuGY7nP3icCiigD//2Q==

data:image/jpg;base64,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

9051722077

Hibro

Suspicious SMS sent from +4915703036086: Your Morrisons order will be delivered soon. Details at: http://www.alfakalor.com/dhl/?xy57ovltwsar Haven't ordered anything and the website is routed to this IP

188.212.61.52

Attempted password reset on our site

Been getting hacked a lot can you help

Some ruthless chinese robot. Does not obey robots.txt

as

161.97.158.110

161.97.158.110 165.22.243.94 23.250.95.106 179.43.10.44

161.97.158.110 165.22.243.94 23.250.95.106 179.43.10.44

161.97.158.110 165.22.243.94 23.250.95.106 179.43.10.44

161.97.158.110 165.22.243.94 23.250.95.106 179.43.10.44

161.97.158.110 165.22.243.94 23.250.95.106 179.43.10.44

185.78.221.133 103.140.54.179 68.241.77.170 208.116.155.10

Ip 113,211,179,137

Country: Brazil, City: Cotia Interlink Solucoes em Telecomunicacoes Ltda-ME

this ip is is assigned to my stolen iphone 11 which was stolen from 7872 Stark Dr apt 1, which was my underaged autistic daughters and i steal paying for it. it was three months old ive reported to police at Huntington Beach Police Dept HB california holly m valleau-Zimlich hmvz@icloud.com 7147606848