Phishing for nk.ca credentials from Croatia
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 12 Oct 2023 06:26:11 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96.1 (FreeBSD))
(envelope-from)
id 1qqul3-000NJT-39
for dave@doctor.nl2k.ab.ca;
Thu, 12 Oct 2023 06:25:41 -0600
Resent-From: The Doctor
Resent-Date: Thu, 12 Oct 2023 06:25:41 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from ravnica.ptfos.hr ([161.53.207.3]:48000)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.96.1 (FreeBSD))
(envelope-from)
id 1qqu7M-000MXy-2l
for abuse@nk.ca;
Thu, 12 Oct 2023 05:44:45 -0600
Received: from localhost (localhost.ptfos.hr [127.0.0.1])
by ravnica.ptfos.hr (Postfix) with ESMTP id 134A7780298
for; Thu, 12 Oct 2023 13:40:34 +0200 (CEST)
X-Virus-Scanned: Debian amavisd-new at ptfos.hr
Received: from ravnica.ptfos.hr ([127.0.0.1])
by localhost (ravnica.ptfos.hr [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id kNos2GaCeM6c for;
Thu, 12 Oct 2023 13:40:31 +0200 (CEST)
Received: from DESKTOP-7L4AR28 (unknown [102.215.57.48])
by ravnica.ptfos.hr (Postfix) with ESMTPSA id ABE9678029F
for; Thu, 12 Oct 2023 13:38:57 +0200 (CEST)
From: =?UTF-8?B?8J+bkcKtU8KtZcKtY8KtdcKtcsKtZcKtLk5rwq4=?=
Subject: =?UTF-8?B?wq1Bwq1jwq10wq1pwq1vwq1uwq0gwq1Swq1lwq1xwq11wq1p?=
=?UTF-8?B?wq1ywq1lwq1kwq06IMKtwq1hYnVzZS91cGRhdGUgfCAxMC8xMi8yMDIz?=
To:
Content-Type: multipart/alternative; boundary="wnPeA=_q5bN3fLcoVgZhxidsszvChyt9r4"
MIME-Version: 1.0
Reply-To:
Date: Thu, 12 Oct 2023 12:38:58 +0100
Message-Id: <12572023103812978F68D3EF-488A56D66E@ptfos.hr>
This is a multi-part message in MIME format
--wnPeA=_q5bN3fLcoVgZhxidsszvChyt9r4
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Nk Ticket Notifcation
Your password for your Nk account expires today 10/12/2023:
abuse@nk.ca
Click the button to keep your current login.
S=C2=ADT=C2=ADA=C2=ADY =C2=ADW=C2=ADI=C2=ADT=C2=ADH =C2=ADC=C2=ADU=C2=AD=
R=C2=ADR=C2=ADE=C2=ADN=C2=ADT =C2=ADP=C2=ADA=C2=ADS=C2=ADS=C2=ADW=C2=AD=
O=C2=ADR=C2=ADD https://googleads.g.doubleclick.net/pcs/click?xai=3DAK=
AOjssIdZGtK2LGw4coQMwtQcONuf8cVZUVHUrlFgT33_wiLCuxpoweUvHdBH9neY4iW-CZ=
h2SzgITptx6j64F0B2pEU0uoeRfmKTeyn7LSG5Irubqjv6IFl9MeqTp84ZT99WRJlZDMgr=
wUaUI7QjgNwL22AVveJm980wuVNryiILT2WhxCPmcY8M7PVIOygAXT_382p7PUn7bIByn2=
OjlTfCiaqta3tAhZWCuROeXZPznm5cGhgUYspVywPb8Y8GbuT5pyEUyF89icmqe5zg&sig=
=3DCg0ArKJSzFtr0kI2Y6Ll&adurl=3Dhttps://ergoserv.com.br/nnl/index.html=
?va=3DYWJ1c2VAbmsuY2E=3D
Account will be locked after 24 hours.
--wnPeA=_q5bN3fLcoVgZhxidsszvChyt9r4
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
8">
=C2=ADA=C2=ADc=C2=ADt=C2=ADi=C2=ADo=C2=ADn=C2=AD =C2=ADR=C2=AD=
e=C2=ADq=C2=ADu=C2=ADi=C2=ADr=C2=ADe=C2=ADd=C2=AD: =C2=AD=C2=ADabuse/u=
pdate | 10/12/2023
OX-SIZING: border-box; FONT-SIZE: 16px; MAX-WIDTH: 100%; HEIGHT: 56px;=
FONT-FAMILY: Roboto, sans-serif; WIDTH: 407px; VERTICAL-ALIGN: bottom=
; WHITE-SPACE: normal; WORD-SPACING: 0px; MIN-WIDTH: 0px; BORDER-BOTTO=
M: 1px solid; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(44,54=
,58); PADDING-BOTTOM: 12px; FONT-STYLE: normal; TEXT-ALIGN: left; PADD=
ING-TOP: 12px; PADDING-LEFT: 12px; ORPHANS: 2; WIDOWS: 2; MARGIN: 0px;=
LETTER-SPACING: normal; PADDING-RIGHT: 12px; BACKGROUND-COLOR: rgb(25=
5,255,255); TEXT-INDENT: 0px; background-clip: padding-box; font-varia=
nt-ligatures: normal; font-variant-caps: normal; -webkit-text-stroke-w=
idth: 0px; text-decoration-thickness: initial; text-decoration-style: =
initial; text-decoration-color: initial">
der-box; FONT-SIZE: 24px; MAX-WIDTH: 100%; VERTICAL-ALIGN: bottom; MIN=
-WIDTH: 0px; FONT-WEIGHT: normal; PADDING-BOTTOM: 0px; PADDING-TOP: 0p=
x; PADDING-LEFT: 0px; MARGIN: 0px; LINE-HEIGHT: 1.3; PADDING-RIGHT: 0p=
x; background-clip: padding-box">Nk Ticket Notifcation=
%; HEIGHT: 212px; FONT-FAMILY: Roboto, sans-serif; WIDTH: 406px; VERTI=
CAL-ALIGN: bottom; WHITE-SPACE: normal; WORD-SPACING: 0px; MIN-WIDTH: =
0px; BORDER-BOTTOM: 1px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR=
: rgb(44,54,58); PADDING-BOTTOM: 12px; FONT-STYLE: normal; TEXT-ALIGN:=
left; PADDING-TOP: 12px; PADDING-LEFT: 12px; ORPHANS: 2; WIDOWS: 2; M=
ARGIN: 0px; LETTER-SPACING: normal; PADDING-RIGHT: 12px; BACKGROUND-CO=
LOR: rgb(255,255,255); TEXT-INDENT: 0px; background-clip: padding-box;=
font-variant-ligatures: normal; font-variant-caps: normal; -webkit-te=
xt-stroke-width: 0px; text-decoration-thickness: initial; text-decorat=
ion-style: initial; text-decoration-color: initial">
IZING: border-box; MAX-WIDTH: 100%; VERTICAL-ALIGN: bottom; MIN-WIDTH:=
0px; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; MARGIN=
: 0px; PADDING-RIGHT: 0px; background-clip: padding-box">Your password=
for your Nk account expires today 10/12/2023:
NG: border-box; MAX-WIDTH: 100%; VERTICAL-ALIGN: bottom; MIN-WIDTH: 0p=
x; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; MARGIN: 0=
px; PADDING-RIGHT: 0px; background-clip: padding-box">
le=3D"BOX-SIZING: border-box; MAX-WIDTH: 100%; VERTICAL-ALIGN: bottom;=
MIN-WIDTH: 0px; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: =
0px; MARGIN: 0px; PADDING-RIGHT: 0px; background-clip: padding-box">
TRONG style=3D"BOX-SIZING: border-box; MAX-WIDTH: 100%; VERTICAL-ALIGN=
: bottom; MIN-WIDTH: 0px; FONT-WEIGHT: bolder; PADDING-BOTTOM: 0px; PA=
DDING-TOP: 0px; PADDING-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px; ba=
ckground-clip: padding-box">abuse@nk.ca
ZING: border-box; MAX-WIDTH: 100%; VERTICAL-ALIGN: bottom; MIN-WIDTH: =
0px; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; MARGIN:=
16px 0px 0px; PADDING-RIGHT: 0px; background-clip: padding-box">Click=
the button to keep your current login.
der-box; FONT-SIZE: 16px; TEXT-DECORATION: none; MAX-WIDTH: 100%; BORD=
ER-TOP: 1px solid; FONT-FAMILY: inherit; BORDER-RIGHT: 1px solid; VERT=
ICAL-ALIGN: bottom; MIN-WIDTH: 0px; BORDER-BOTTOM: 1px solid; COLOR: r=
gb(255,255,255); PADDING-BOTTOM: 12px; TEXT-ALIGN: center; PADDING-TOP=
: 12px; PADDING-LEFT: 16px; BORDER-LEFT: 1px solid; MARGIN: 16px 0px 0=
px; DISPLAY: block; LINE-HEIGHT: 1.5; PADDING-RIGHT: 16px; BACKGROUND-=
COLOR: rgb(31,97,196); background-clip: padding-box; border-radius: 4p=
x" href=3D"https://googleads.g.doubleclick.net/pcs/click?xai=3DAKAOjss=
IdZGtK2LGw4coQMwtQcONuf8cVZUVHUrlFgT33_wiLCuxpoweUvHdBH9neY4iW-CZh2Szg=
ITptx6j64F0B2pEU0uoeRfmKTeyn7LSG5Irubqjv6IFl9MeqTp84ZT99WRJlZDMgrwUaUI=
7QjgNwL22AVveJm980wuVNryiILT2WhxCPmcY8M7PVIOygAXT_382p7PUn7bIByn2OjlTf=
Ciaqta3tAhZWCuROeXZPznm5cGhgUYspVywPb8Y8GbuT5pyEUyF89icmqe5zg&sig=3D=
Cg0ArKJSzFtr0kI2Y6Ll&adurl=3Dhttps://ergoserv.com.br/nnl/index.htm=
l?va=3DYWJ1c2VAbmsuY2E=3D" rel=3Dnoreferrer target=3D_blank>ST&sh=
y;AY WITH CURRE=
NT PASSWORD
"BOX-SIZING: border-box; MAX-WIDTH: 100%; VERTICAL-ALIGN: bottom; MIN-=
WIDTH: 0px; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; =
MARGIN: 16px 0px 0px; PADDING-RIGHT: 0px; background-clip: padding-box=
">Account will be locked after 24 hours.
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 12 Oct 2023 06:26:11 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96.1 (FreeBSD))
(envelope-from
id 1qqul3-000NJT-39
for dave@doctor.nl2k.ab.ca;
Thu, 12 Oct 2023 06:25:41 -0600
Resent-From: The Doctor
Resent-Date: Thu, 12 Oct 2023 06:25:41 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from ravnica.ptfos.hr ([161.53.207.3]:48000)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.96.1 (FreeBSD))
(envelope-from
id 1qqu7M-000MXy-2l
for abuse@nk.ca;
Thu, 12 Oct 2023 05:44:45 -0600
Received: from localhost (localhost.ptfos.hr [127.0.0.1])
by ravnica.ptfos.hr (Postfix) with ESMTP id 134A7780298
for
X-Virus-Scanned: Debian amavisd-new at ptfos.hr
Received: from ravnica.ptfos.hr ([127.0.0.1])
by localhost (ravnica.ptfos.hr [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id kNos2GaCeM6c for
Thu, 12 Oct 2023 13:40:31 +0200 (CEST)
Received: from DESKTOP-7L4AR28 (unknown [102.215.57.48])
by ravnica.ptfos.hr (Postfix) with ESMTPSA id ABE9678029F
for
From: =?UTF-8?B?8J+bkcKtU8KtZcKtY8KtdcKtcsKtZcKtLk5rwq4=?=
Subject: =?UTF-8?B?wq1Bwq1jwq10wq1pwq1vwq1uwq0gwq1Swq1lwq1xwq11wq1p?=
=?UTF-8?B?wq1ywq1lwq1kwq06IMKtwq1hYnVzZS91cGRhdGUgfCAxMC8xMi8yMDIz?=
To:
Content-Type: multipart/alternative; boundary="wnPeA=_q5bN3fLcoVgZhxidsszvChyt9r4"
MIME-Version: 1.0
Reply-To:
Date: Thu, 12 Oct 2023 12:38:58 +0100
Message-Id: <12572023103812978F68D3EF-488A56D66E@ptfos.hr>
This is a multi-part message in MIME format
--wnPeA=_q5bN3fLcoVgZhxidsszvChyt9r4
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Nk Ticket Notifcation
Your password for your Nk account expires today 10/12/2023:
abuse@nk.ca
Click the button to keep your current login.
S=C2=ADT=C2=ADA=C2=ADY =C2=ADW=C2=ADI=C2=ADT=C2=ADH =C2=ADC=C2=ADU=C2=AD=
R=C2=ADR=C2=ADE=C2=ADN=C2=ADT =C2=ADP=C2=ADA=C2=ADS=C2=ADS=C2=ADW=C2=AD=
O=C2=ADR=C2=ADD https://googleads.g.doubleclick.net/pcs/click?xai=3DAK=
AOjssIdZGtK2LGw4coQMwtQcONuf8cVZUVHUrlFgT33_wiLCuxpoweUvHdBH9neY4iW-CZ=
h2SzgITptx6j64F0B2pEU0uoeRfmKTeyn7LSG5Irubqjv6IFl9MeqTp84ZT99WRJlZDMgr=
wUaUI7QjgNwL22AVveJm980wuVNryiILT2WhxCPmcY8M7PVIOygAXT_382p7PUn7bIByn2=
OjlTfCiaqta3tAhZWCuROeXZPznm5cGhgUYspVywPb8Y8GbuT5pyEUyF89icmqe5zg&sig=
=3DCg0ArKJSzFtr0kI2Y6Ll&adurl=3Dhttps://ergoserv.com.br/nnl/index.html=
?va=3DYWJ1c2VAbmsuY2E=3D
Account will be locked after 24 hours.
--wnPeA=_q5bN3fLcoVgZhxidsszvChyt9r4
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
8">
e=C2=ADq=C2=ADu=C2=ADi=C2=ADr=C2=ADe=C2=ADd=C2=AD: =C2=AD=C2=ADabuse/u=
pdate | 10/12/2023
OX-SIZING: border-box; FONT-SIZE: 16px; MAX-WIDTH: 100%; HEIGHT: 56px;=
FONT-FAMILY: Roboto, sans-serif; WIDTH: 407px; VERTICAL-ALIGN: bottom=
; WHITE-SPACE: normal; WORD-SPACING: 0px; MIN-WIDTH: 0px; BORDER-BOTTO=
M: 1px solid; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(44,54=
,58); PADDING-BOTTOM: 12px; FONT-STYLE: normal; TEXT-ALIGN: left; PADD=
ING-TOP: 12px; PADDING-LEFT: 12px; ORPHANS: 2; WIDOWS: 2; MARGIN: 0px;=
LETTER-SPACING: normal; PADDING-RIGHT: 12px; BACKGROUND-COLOR: rgb(25=
5,255,255); TEXT-INDENT: 0px; background-clip: padding-box; font-varia=
nt-ligatures: normal; font-variant-caps: normal; -webkit-text-stroke-w=
idth: 0px; text-decoration-thickness: initial; text-decoration-style: =
initial; text-decoration-color: initial">
der-box; FONT-SIZE: 24px; MAX-WIDTH: 100%; VERTICAL-ALIGN: bottom; MIN=
-WIDTH: 0px; FONT-WEIGHT: normal; PADDING-BOTTOM: 0px; PADDING-TOP: 0p=
x; PADDING-LEFT: 0px; MARGIN: 0px; LINE-HEIGHT: 1.3; PADDING-RIGHT: 0p=
x; background-clip: padding-box">Nk Ticket Notifcation
%; HEIGHT: 212px; FONT-FAMILY: Roboto, sans-serif; WIDTH: 406px; VERTI=
CAL-ALIGN: bottom; WHITE-SPACE: normal; WORD-SPACING: 0px; MIN-WIDTH: =
0px; BORDER-BOTTOM: 1px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR=
: rgb(44,54,58); PADDING-BOTTOM: 12px; FONT-STYLE: normal; TEXT-ALIGN:=
left; PADDING-TOP: 12px; PADDING-LEFT: 12px; ORPHANS: 2; WIDOWS: 2; M=
ARGIN: 0px; LETTER-SPACING: normal; PADDING-RIGHT: 12px; BACKGROUND-CO=
LOR: rgb(255,255,255); TEXT-INDENT: 0px; background-clip: padding-box;=
font-variant-ligatures: normal; font-variant-caps: normal; -webkit-te=
xt-stroke-width: 0px; text-decoration-thickness: initial; text-decorat=
ion-style: initial; text-decoration-color: initial">
IZING: border-box; MAX-WIDTH: 100%; VERTICAL-ALIGN: bottom; MIN-WIDTH:=
0px; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; MARGIN=
: 0px; PADDING-RIGHT: 0px; background-clip: padding-box">Your password=
for your Nk account expires today 10/12/2023:
NG: border-box; MAX-WIDTH: 100%; VERTICAL-ALIGN: bottom; MIN-WIDTH: 0p=
x; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; MARGIN: 0=
px; PADDING-RIGHT: 0px; background-clip: padding-box">
le=3D"BOX-SIZING: border-box; MAX-WIDTH: 100%; VERTICAL-ALIGN: bottom;=
MIN-WIDTH: 0px; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: =
0px; MARGIN: 0px; PADDING-RIGHT: 0px; background-clip: padding-box">
TRONG style=3D"BOX-SIZING: border-box; MAX-WIDTH: 100%; VERTICAL-ALIGN=
: bottom; MIN-WIDTH: 0px; FONT-WEIGHT: bolder; PADDING-BOTTOM: 0px; PA=
DDING-TOP: 0px; PADDING-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px; ba=
ckground-clip: padding-box">abuse@nk.ca
ZING: border-box; MAX-WIDTH: 100%; VERTICAL-ALIGN: bottom; MIN-WIDTH: =
0px; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; MARGIN:=
16px 0px 0px; PADDING-RIGHT: 0px; background-clip: padding-box">Click=
the button to keep your current login.
der-box; FONT-SIZE: 16px; TEXT-DECORATION: none; MAX-WIDTH: 100%; BORD=
ER-TOP: 1px solid; FONT-FAMILY: inherit; BORDER-RIGHT: 1px solid; VERT=
ICAL-ALIGN: bottom; MIN-WIDTH: 0px; BORDER-BOTTOM: 1px solid; COLOR: r=
gb(255,255,255); PADDING-BOTTOM: 12px; TEXT-ALIGN: center; PADDING-TOP=
: 12px; PADDING-LEFT: 16px; BORDER-LEFT: 1px solid; MARGIN: 16px 0px 0=
px; DISPLAY: block; LINE-HEIGHT: 1.5; PADDING-RIGHT: 16px; BACKGROUND-=
COLOR: rgb(31,97,196); background-clip: padding-box; border-radius: 4p=
x" href=3D"https://googleads.g.doubleclick.net/pcs/click?xai=3DAKAOjss=
IdZGtK2LGw4coQMwtQcONuf8cVZUVHUrlFgT33_wiLCuxpoweUvHdBH9neY4iW-CZh2Szg=
ITptx6j64F0B2pEU0uoeRfmKTeyn7LSG5Irubqjv6IFl9MeqTp84ZT99WRJlZDMgrwUaUI=
7QjgNwL22AVveJm980wuVNryiILT2WhxCPmcY8M7PVIOygAXT_382p7PUn7bIByn2OjlTf=
Ciaqta3tAhZWCuROeXZPznm5cGhgUYspVywPb8Y8GbuT5pyEUyF89icmqe5zg&sig=3D=
Cg0ArKJSzFtr0kI2Y6Ll&adurl=3Dhttps://ergoserv.com.br/nnl/index.htm=
l?va=3DYWJ1c2VAbmsuY2E=3D" rel=3Dnoreferrer target=3D_blank>ST&sh=
y;AY WITH CURRE=
NT PASSWORD
"BOX-SIZING: border-box; MAX-WIDTH: 100%; VERTICAL-ALIGN: bottom; MIN-=
WIDTH: 0px; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; =
MARGIN: 16px 0px 0px; PADDING-RIGHT: 0px; background-clip: padding-box=
">Account will be locked after 24 hours.
--wnPeA=_q5bN3fLcoVgZhxidsszvChyt9r4--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments