coinbase phish from Indianapolis, Indiana, United States
Posted by Dave Yadallee onEnvelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 09 Jun 2023 07:49:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))
(envelope-from
id 1q7cTe-0005yg-2z
for dave@doctor.nl2k.ab.ca;
Fri, 09 Jun 2023 07:48:30 -0600
Resent-From: The Doctor
Resent-Date: Fri, 9 Jun 2023 07:48:30 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from server1101.webhsp.com ([216.37.42.48]:39954)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.96 (FreeBSD))
(envelope-from
id 1q7WmX-000LZv-0x
for root@nk.ca;
Fri, 09 Jun 2023 01:43:41 -0600
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
d=oishi.com.ph; s=default; h=Content-Type:MIME-Version:Reply-To:Sender:To:
Message-Id:Subject:Date:From:Cc:Content-Transfer-Encoding:Content-ID:
Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc
:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:
List-Subscribe:List-Post:List-Owner:List-Archive;
bh=waclb6FTGNhTeWnfXkaZOM1TvFbCzRUoyuuqQgnKOw8=; b=AszoFzX921wWvRIUOhmQRL+Rc/
yF00Fnkptl+1H8Y/y6cxDLgUFKydHaNNUhozdidBQtYOCbWJ0OzDKNSiDklavKXsYVpguJ0myDzsm
hU46tDIMKyQqyjAQniZLRq90dPuLF1aySKXX2lKnOV6tbeDmkpbQsQ71dyB9JTRZNW08ARn1QXCW6
FzRKFpfQh1HX9fafPAqrVR9TxiKofzUIxs5I3kef3oAPYiubqDhGGzfAwKKyTZbeoRUn0CXNVfo9g
cDFdBQo/0BOF83OSjExroymGkrShBMoLopADKOc68vV3FymDCd8LlXxGvkdnZMd3Stkf3lZJsctD0
FzgTwYbA==;
Received: from [185.248.85.32] (port=64878 helo=ADMIN)
by server1101.webhsp.com with esmtpsa (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.96)
(envelope-from
id 1q7Wk6-00Ffof-1z
for root@nk.ca;
Fri, 09 Jun 2023 03:41:04 -0400
From: Coinbase WaIIet
Date: Fri, 09 Jun 2023 09:40:59 +0200
Subject: Some changes!
Message-Id:
To: root@nk.ca
Sender: qadeptcebu@oishi.com.ph
Reply-To: qadeptcebu@oishi.com.ph
Priority: urgent
Importance: high
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="=-d5g1Mso47bbhl+aMw3kgOA=="
X-WebHSP-MailScanner-Information: Please contact the ISP for more information
X-WebHSP-MailScanner-ID: 1q7Wk6-00Ffof-1z
X-WebHSP-MailScanner: Found to be clean
X-WebHSP-MailScanner-SpamCheck:
X-WebHSP-MailScanner-From: qadeptcebu@oishi.com.ph
X-Spam-Status: No
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server1101.webhsp.com
X-AntiAbuse: Original Domain - nk.ca
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - oishi.com.ph
X-Get-Message-Sender-Via: server1101.webhsp.com: authenticated_id: qadeptcebu@oishi.com.ph
X-Authenticated-Sender: server1101.webhsp.com: qadeptcebu@oishi.com.ph
X-Source:
X-Source-Args:
X-Source-Dir:
X-Antivirus: AVG (VPS 230609-4, 6/9/2023), Inbound message
X-Antivirus-Status: Clean
--=-d5g1Mso47bbhl+aMw3kgOA==
Content-Type: text/plain; charset=utf-8
Hi root@nk.ca,
To act in accordance with the newest policy we have introduced local regulations. To keep deposits, trading and withdrawals, do the new 2FA task. Get going
It's quick, easy and takes just a few minutes.
--=-d5g1Mso47bbhl+aMw3kgOA==
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Open Sans,Helvetica,Arial,sans-serif; COLOR: #fefefe; DISPLAY: none; LINE-H=
EIGHT: 1px; MAX-HEIGHT: 0px; opacity: 0">
Helvetica, sans-serif">
-serif"><=
FONT size=3D2 face=3D"Arial, Helvetica, sans-serif">
ce=3D"Arial, Helvetica, sans-serif">
vetica, sans-serif">
if">
size=3D2 face=3D"Arial, Helvetica, sans-serif">
"Arial, Helvetica, sans-serif">
a, sans-serif"><=
/FONT>
=3D2 face=3D"Arial, Helvetica, sans-serif">
al, Helvetica, sans-serif">
ans-serif">
T>
face=3D"Arial, Helvetica, sans-serif">
Helvetica, sans-serif">
serif">
ONT size=3D2 face=3D"Arial, Helvetica, sans-serif">
e=3D"Arial, Helvetica, sans-serif">
etica, sans-serif">
f">
size=3D2 face=3D"Arial, Helvetica, sans-serif">
"Arial, Helvetica, sans-serif">
a, sans-serif"><=
/FONT>
=3D2 face=3D"Arial, Helvetica, sans-serif">
al, Helvetica, sans-serif">
ans-serif">
T>
face=3D"Arial, Helvetica, sans-serif">
Helvetica, sans-serif">
serif">
ONT size=3D2 face=3D"Arial, Helvetica, sans-serif">
100%" border=3D0>
DING-LEFT: 15px; PADDING-RIGHT: 15px" bgColor=3D#0052ff vAlign=3Dtop align=3D=
center>
pse !important; TABLE-LAYOUT: fixed; MARGIN: 0px auto" cellSpacing=3D0 cellP=
adding=3D0 width=3D"100%" align=3Dcenter border=3D0>
0>
DING-RIGHT: 0px" vAlign=3Dtop align=3Dcenter>
"100%" bgColor=3D#ffffff border=3D0>
20px">
gn=3Dtop colSpan=3D2 align=3Dcenter>
le=3D"BORDER-TOP: medium none; BORDER-RIGHT: medium none; WIDTH: 112px; BORD=
ER-BOTTOM: medium none; BORDER-LEFT: medium none; DISPLAY: block" border=3D0=
alt=3DCoinbase src=3D"https://d15k2d11r6t6rl.cloudfront.net/public/users/In=
tegrators/669d5713-9b6a-46bb-bd7e-c542cff6dd6a/3aca56371967418192255878e9689=
713/Continuum%20Welcome%20Images/masterhead_coinbase_logo.png" width=3D112><=
/FONT>
&=
nbsp;
Hi root@=
nk.ca,
To act i=
n accordance with the newest policy we have introduced local regulations. To=
keep deposits, trading and withdrawals, do the new 2FA task.
ps://t.co/LKOwurG8m5">Get going
It's qui=
ck, easy and takes just a few minutes.
lvetica, sans-serif">
ial, Helvetica, sans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRA=
NSFORM: none; FLOAT: none; FONT-WEIGHT: 400; COLOR: rgb(78,92,110); FONT-STY=
LE: normal; ORPHANS: 2; WIDOWS: 2; DISPLAY: inline !important; LETTER-SPACIN=
G: normal; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-varian=
t-ligatures: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0=
px; text-decoration-thickness: initial; text-decoration-style: initial; text=
-decoration-color: initial">
--=-d5g1Mso47bbhl+aMw3kgOA==--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments