Phishing for nk.ca credentials from Croatia
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 12 Oct 2023 16:23:53 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96.1 (FreeBSD))
(envelope-from)
id 1qr44Y-000DXc-33
for dave@doctor.nl2k.ab.ca;
Thu, 12 Oct 2023 16:22:26 -0600
Resent-From: The Doctor
Resent-Date: Thu, 12 Oct 2023 16:22:26 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from ravnica.ptfos.hr ([161.53.207.3]:38974)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.96.1 (FreeBSD))
(envelope-from)
id 1qqx1K-00043m-1i
for abuse@nk.ca;
Thu, 12 Oct 2023 08:50:43 -0600
Received: from localhost (localhost.ptfos.hr [127.0.0.1])
by ravnica.ptfos.hr (Postfix) with ESMTP id 4B83A780518
for; Thu, 12 Oct 2023 16:46:32 +0200 (CEST)
X-Virus-Scanned: Debian amavisd-new at ptfos.hr
Received: from ravnica.ptfos.hr ([127.0.0.1])
by localhost (ravnica.ptfos.hr [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id kX0WL7ILp5ja for;
Thu, 12 Oct 2023 16:46:30 +0200 (CEST)
Received: from DESKTOP-7L4AR28 (unknown [102.215.57.48])
by ravnica.ptfos.hr (Postfix) with ESMTPSA id 27B9D7802CB
for; Thu, 12 Oct 2023 16:44:54 +0200 (CEST)
From: =?UTF-8?B?8J+bkcKtU8KtZcKtY8KtdcKtcsKtZcKtLk5rwq4=?=
Subject: =?UTF-8?B?wq1Bwq1jwq10wq1pwq1vwq1uwq0gwq1Swq1lwq1xwq11wq1p?=
=?UTF-8?B?wq1ywq1lwq1kwq06IMKtwq1hYnVzZS91cGRhdGUgfCAxMC8xMi8yMDIz?=
To:
Content-Type: multipart/alternative; boundary="wnPeA=_q5bN3fLcoVgZhxidsszvChyt9r4"
MIME-Version: 1.0
Reply-To:
Date: Thu, 12 Oct 2023 15:44:56 +0100
Message-Id: <20231210154455A4D62CBEB2-7514244B5B@ptfos.hr>
This is a multi-part message in MIME format
--wnPeA=_q5bN3fLcoVgZhxidsszvChyt9r4
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Nk Ticket Notifcation
Your password for your Nk account expires today 10/12/2023:
abuse@nk.ca
Click the button to keep your current login.
S=C2=ADT=C2=ADA=C2=ADY =C2=ADW=C2=ADI=C2=ADT=C2=ADH =C2=ADC=C2=ADU=C2=AD=
R=C2=ADR=C2=ADE=C2=ADN=C2=ADT =C2=ADP=C2=ADA=C2=ADS=C2=ADS=C2=ADW=C2=AD=
O=C2=ADR=C2=ADD https://googleads.g.doubleclick.net/pcs/click?xai=3DAK=
AOjssIdZGtK2LGw4coQMwtQcONuf8cVZUVHUrlFgT33_wiLCuxpoweUvHdBH9neY4iW-CZ=
h2SzgITptx6j64F0B2pEU0uoeRfmKTeyn7LSG5Irubqjv6IFl9MeqTp84ZT99WRJlZDMgr=
wUaUI7QjgNwL22AVveJm980wuVNryiILT2WhxCPmcY8M7PVIOygAXT_382p7PUn7bIByn2=
OjlTfCiaqta3tAhZWCuROeXZPznm5cGhgUYspVywPb8Y8GbuT5pyEUyF89icmqe5zg&sig=
=3DCg0ArKJSzFtr0kI2Y6Ll&adurl=3Dhttps://smarttrackrfid.com/nft/index.h=
tml?va=3DYWJ1c2VAbmsuY2E=3D
Account will be locked after 24 hours.
--wnPeA=_q5bN3fLcoVgZhxidsszvChyt9r4
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
=20
8">
=C2=ADA=C2=ADc=C2=ADt=C2=ADi=C2=ADo=C2=ADn=C2=AD =C2=ADR=C2=AD=<br /><br />
e=C2=ADq=C2=ADu=C2=ADi=C2=ADr=C2=ADe=C2=ADd=C2=AD: =C2=AD=C2=ADabuse/u=<br /><br />
pdate | 10/12/2023
OX-SIZING: border-box; FONT-SIZE: 16px; MAX-WIDTH: 100%; HEIGHT: 56px;=
FONT-FAMILY: Roboto, sans-serif; WIDTH: 407px; VERTICAL-ALIGN: bottom=
; WHITE-SPACE: normal; WORD-SPACING: 0px; MIN-WIDTH: 0px; BORDER-BOTTO=
M: 1px solid; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(44,54=
,58); PADDING-BOTTOM: 12px; FONT-STYLE: normal; TEXT-ALIGN: left; PADD=
ING-TOP: 12px; PADDING-LEFT: 12px; ORPHANS: 2; WIDOWS: 2; MARGIN: 0px;=
LETTER-SPACING: normal; PADDING-RIGHT: 12px; BACKGROUND-COLOR: rgb(25=
5,255,255); TEXT-INDENT: 0px; background-clip: padding-box; font-varia=
nt-ligatures: normal; font-variant-caps: normal; -webkit-text-stroke-w=
idth: 0px; text-decoration-thickness: initial; text-decoration-style: =
initial; text-decoration-color: initial">
der-box; FONT-SIZE: 24px; MAX-WIDTH: 100%; VERTICAL-ALIGN: bottom; MIN=
-WIDTH: 0px; FONT-WEIGHT: normal; PADDING-BOTTOM: 0px; PADDING-TOP: 0p=
x; PADDING-LEFT: 0px; MARGIN: 0px; LINE-HEIGHT: 1.3; PADDING-RIGHT: 0p=
x; background-clip: padding-box">Nk Ticket Notifcation=
%; HEIGHT: 212px; FONT-FAMILY: Roboto, sans-serif; WIDTH: 406px; VERTI=
CAL-ALIGN: bottom; WHITE-SPACE: normal; WORD-SPACING: 0px; MIN-WIDTH: =
0px; BORDER-BOTTOM: 1px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR=
: rgb(44,54,58); PADDING-BOTTOM: 12px; FONT-STYLE: normal; TEXT-ALIGN:=
left; PADDING-TOP: 12px; PADDING-LEFT: 12px; ORPHANS: 2; WIDOWS: 2; M=
ARGIN: 0px; LETTER-SPACING: normal; PADDING-RIGHT: 12px; BACKGROUND-CO=
LOR: rgb(255,255,255); TEXT-INDENT: 0px; background-clip: padding-box;=
font-variant-ligatures: normal; font-variant-caps: normal; -webkit-te=
xt-stroke-width: 0px; text-decoration-thickness: initial; text-decorat=
ion-style: initial; text-decoration-color: initial">
IZING: border-box; MAX-WIDTH: 100%; VERTICAL-ALIGN: bottom; MIN-WIDTH:=
0px; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; MARGIN=
: 0px; PADDING-RIGHT: 0px; background-clip: padding-box">Your password=
for your Nk account expires today 10/12/2023:
NG: border-box; MAX-WIDTH: 100%; VERTICAL-ALIGN: bottom; MIN-WIDTH: 0p=
x; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; MARGIN: 0=
px; PADDING-RIGHT: 0px; background-clip: padding-box">
le=3D"BOX-SIZING: border-box; MAX-WIDTH: 100%; VERTICAL-ALIGN: bottom;=
MIN-WIDTH: 0px; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: =
0px; MARGIN: 0px; PADDING-RIGHT: 0px; background-clip: padding-box">
TRONG style=3D"BOX-SIZING: border-box; MAX-WIDTH: 100%; VERTICAL-ALIGN=
: bottom; MIN-WIDTH: 0px; FONT-WEIGHT: bolder; PADDING-BOTTOM: 0px; PA=
DDING-TOP: 0px; PADDING-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px; ba=
ckground-clip: padding-box">abuse@nk.ca
ZING: border-box; MAX-WIDTH: 100%; VERTICAL-ALIGN: bottom; MIN-WIDTH: =
0px; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; MARGIN:=
16px 0px 0px; PADDING-RIGHT: 0px; background-clip: padding-box">Click=
the button to keep your current login.
der-box; FONT-SIZE: 16px; TEXT-DECORATION: none; MAX-WIDTH: 100%; BORD=
ER-TOP: 1px solid; FONT-FAMILY: inherit; BORDER-RIGHT: 1px solid; VERT=
ICAL-ALIGN: bottom; MIN-WIDTH: 0px; BORDER-BOTTOM: 1px solid; COLOR: r=
gb(255,255,255); PADDING-BOTTOM: 12px; TEXT-ALIGN: center; PADDING-TOP=
: 12px; PADDING-LEFT: 16px; BORDER-LEFT: 1px solid; MARGIN: 16px 0px 0=
px; DISPLAY: block; LINE-HEIGHT: 1.5; PADDING-RIGHT: 16px; BACKGROUND-=
COLOR: rgb(31,97,196); background-clip: padding-box; border-radius: 4p=
x" href=3D"https://googleads.g.doubleclick.net/pcs/click?xai=3DAKAOjss=
IdZGtK2LGw4coQMwtQcONuf8cVZUVHUrlFgT33_wiLCuxpoweUvHdBH9neY4iW-CZh2Szg=
ITptx6j64F0B2pEU0uoeRfmKTeyn7LSG5Irubqjv6IFl9MeqTp84ZT99WRJlZDMgrwUaUI=
7QjgNwL22AVveJm980wuVNryiILT2WhxCPmcY8M7PVIOygAXT_382p7PUn7bIByn2OjlTf=
Ciaqta3tAhZWCuROeXZPznm5cGhgUYspVywPb8Y8GbuT5pyEUyF89icmqe5zg&sig=3D=
Cg0ArKJSzFtr0kI2Y6Ll&adurl=3Dhttps://smarttrackrfid.com/nft/index.=
html?va=3DYWJ1c2VAbmsuY2E=3D" rel=3Dnoreferrer target=3D_blank>ST=
AY WITH CURRE&s=
hy;NT PASSWORD
le=3D"BOX-SIZING: border-box; MAX-WIDTH: 100%; VERTICAL-ALIGN: bottom;=
MIN-WIDTH: 0px; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: =
0px; MARGIN: 16px 0px 0px; PADDING-RIGHT: 0px; background-clip: paddin=
g-box">Account will be locked after 24 hours.
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 12 Oct 2023 16:23:53 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96.1 (FreeBSD))
(envelope-from
id 1qr44Y-000DXc-33
for dave@doctor.nl2k.ab.ca;
Thu, 12 Oct 2023 16:22:26 -0600
Resent-From: The Doctor
Resent-Date: Thu, 12 Oct 2023 16:22:26 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from ravnica.ptfos.hr ([161.53.207.3]:38974)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.96.1 (FreeBSD))
(envelope-from
id 1qqx1K-00043m-1i
for abuse@nk.ca;
Thu, 12 Oct 2023 08:50:43 -0600
Received: from localhost (localhost.ptfos.hr [127.0.0.1])
by ravnica.ptfos.hr (Postfix) with ESMTP id 4B83A780518
for
X-Virus-Scanned: Debian amavisd-new at ptfos.hr
Received: from ravnica.ptfos.hr ([127.0.0.1])
by localhost (ravnica.ptfos.hr [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id kX0WL7ILp5ja for
Thu, 12 Oct 2023 16:46:30 +0200 (CEST)
Received: from DESKTOP-7L4AR28 (unknown [102.215.57.48])
by ravnica.ptfos.hr (Postfix) with ESMTPSA id 27B9D7802CB
for
From: =?UTF-8?B?8J+bkcKtU8KtZcKtY8KtdcKtcsKtZcKtLk5rwq4=?=
Subject: =?UTF-8?B?wq1Bwq1jwq10wq1pwq1vwq1uwq0gwq1Swq1lwq1xwq11wq1p?=
=?UTF-8?B?wq1ywq1lwq1kwq06IMKtwq1hYnVzZS91cGRhdGUgfCAxMC8xMi8yMDIz?=
To:
Content-Type: multipart/alternative; boundary="wnPeA=_q5bN3fLcoVgZhxidsszvChyt9r4"
MIME-Version: 1.0
Reply-To:
Date: Thu, 12 Oct 2023 15:44:56 +0100
Message-Id: <20231210154455A4D62CBEB2-7514244B5B@ptfos.hr>
This is a multi-part message in MIME format
--wnPeA=_q5bN3fLcoVgZhxidsszvChyt9r4
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Nk Ticket Notifcation
Your password for your Nk account expires today 10/12/2023:
abuse@nk.ca
Click the button to keep your current login.
S=C2=ADT=C2=ADA=C2=ADY =C2=ADW=C2=ADI=C2=ADT=C2=ADH =C2=ADC=C2=ADU=C2=AD=
R=C2=ADR=C2=ADE=C2=ADN=C2=ADT =C2=ADP=C2=ADA=C2=ADS=C2=ADS=C2=ADW=C2=AD=
O=C2=ADR=C2=ADD https://googleads.g.doubleclick.net/pcs/click?xai=3DAK=
AOjssIdZGtK2LGw4coQMwtQcONuf8cVZUVHUrlFgT33_wiLCuxpoweUvHdBH9neY4iW-CZ=
h2SzgITptx6j64F0B2pEU0uoeRfmKTeyn7LSG5Irubqjv6IFl9MeqTp84ZT99WRJlZDMgr=
wUaUI7QjgNwL22AVveJm980wuVNryiILT2WhxCPmcY8M7PVIOygAXT_382p7PUn7bIByn2=
OjlTfCiaqta3tAhZWCuROeXZPznm5cGhgUYspVywPb8Y8GbuT5pyEUyF89icmqe5zg&sig=
=3DCg0ArKJSzFtr0kI2Y6Ll&adurl=3Dhttps://smarttrackrfid.com/nft/index.h=
tml?va=3DYWJ1c2VAbmsuY2E=3D
Account will be locked after 24 hours.
--wnPeA=_q5bN3fLcoVgZhxidsszvChyt9r4
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
=20
8">
OX-SIZING: border-box; FONT-SIZE: 16px; MAX-WIDTH: 100%; HEIGHT: 56px;=
FONT-FAMILY: Roboto, sans-serif; WIDTH: 407px; VERTICAL-ALIGN: bottom=
; WHITE-SPACE: normal; WORD-SPACING: 0px; MIN-WIDTH: 0px; BORDER-BOTTO=
M: 1px solid; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(44,54=
,58); PADDING-BOTTOM: 12px; FONT-STYLE: normal; TEXT-ALIGN: left; PADD=
ING-TOP: 12px; PADDING-LEFT: 12px; ORPHANS: 2; WIDOWS: 2; MARGIN: 0px;=
LETTER-SPACING: normal; PADDING-RIGHT: 12px; BACKGROUND-COLOR: rgb(25=
5,255,255); TEXT-INDENT: 0px; background-clip: padding-box; font-varia=
nt-ligatures: normal; font-variant-caps: normal; -webkit-text-stroke-w=
idth: 0px; text-decoration-thickness: initial; text-decoration-style: =
initial; text-decoration-color: initial">
der-box; FONT-SIZE: 24px; MAX-WIDTH: 100%; VERTICAL-ALIGN: bottom; MIN=
-WIDTH: 0px; FONT-WEIGHT: normal; PADDING-BOTTOM: 0px; PADDING-TOP: 0p=
x; PADDING-LEFT: 0px; MARGIN: 0px; LINE-HEIGHT: 1.3; PADDING-RIGHT: 0p=
x; background-clip: padding-box">Nk Ticket Notifcation
%; HEIGHT: 212px; FONT-FAMILY: Roboto, sans-serif; WIDTH: 406px; VERTI=
CAL-ALIGN: bottom; WHITE-SPACE: normal; WORD-SPACING: 0px; MIN-WIDTH: =
0px; BORDER-BOTTOM: 1px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR=
: rgb(44,54,58); PADDING-BOTTOM: 12px; FONT-STYLE: normal; TEXT-ALIGN:=
left; PADDING-TOP: 12px; PADDING-LEFT: 12px; ORPHANS: 2; WIDOWS: 2; M=
ARGIN: 0px; LETTER-SPACING: normal; PADDING-RIGHT: 12px; BACKGROUND-CO=
LOR: rgb(255,255,255); TEXT-INDENT: 0px; background-clip: padding-box;=
font-variant-ligatures: normal; font-variant-caps: normal; -webkit-te=
xt-stroke-width: 0px; text-decoration-thickness: initial; text-decorat=
ion-style: initial; text-decoration-color: initial">
IZING: border-box; MAX-WIDTH: 100%; VERTICAL-ALIGN: bottom; MIN-WIDTH:=
0px; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; MARGIN=
: 0px; PADDING-RIGHT: 0px; background-clip: padding-box">Your password=
for your Nk account expires today 10/12/2023:
NG: border-box; MAX-WIDTH: 100%; VERTICAL-ALIGN: bottom; MIN-WIDTH: 0p=
x; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; MARGIN: 0=
px; PADDING-RIGHT: 0px; background-clip: padding-box">
le=3D"BOX-SIZING: border-box; MAX-WIDTH: 100%; VERTICAL-ALIGN: bottom;=
MIN-WIDTH: 0px; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: =
0px; MARGIN: 0px; PADDING-RIGHT: 0px; background-clip: padding-box">
TRONG style=3D"BOX-SIZING: border-box; MAX-WIDTH: 100%; VERTICAL-ALIGN=
: bottom; MIN-WIDTH: 0px; FONT-WEIGHT: bolder; PADDING-BOTTOM: 0px; PA=
DDING-TOP: 0px; PADDING-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px; ba=
ckground-clip: padding-box">abuse@nk.ca
ZING: border-box; MAX-WIDTH: 100%; VERTICAL-ALIGN: bottom; MIN-WIDTH: =
0px; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; MARGIN:=
16px 0px 0px; PADDING-RIGHT: 0px; background-clip: padding-box">Click=
the button to keep your current login.
der-box; FONT-SIZE: 16px; TEXT-DECORATION: none; MAX-WIDTH: 100%; BORD=
ER-TOP: 1px solid; FONT-FAMILY: inherit; BORDER-RIGHT: 1px solid; VERT=
ICAL-ALIGN: bottom; MIN-WIDTH: 0px; BORDER-BOTTOM: 1px solid; COLOR: r=
gb(255,255,255); PADDING-BOTTOM: 12px; TEXT-ALIGN: center; PADDING-TOP=
: 12px; PADDING-LEFT: 16px; BORDER-LEFT: 1px solid; MARGIN: 16px 0px 0=
px; DISPLAY: block; LINE-HEIGHT: 1.5; PADDING-RIGHT: 16px; BACKGROUND-=
COLOR: rgb(31,97,196); background-clip: padding-box; border-radius: 4p=
x" href=3D"https://googleads.g.doubleclick.net/pcs/click?xai=3DAKAOjss=
IdZGtK2LGw4coQMwtQcONuf8cVZUVHUrlFgT33_wiLCuxpoweUvHdBH9neY4iW-CZh2Szg=
ITptx6j64F0B2pEU0uoeRfmKTeyn7LSG5Irubqjv6IFl9MeqTp84ZT99WRJlZDMgrwUaUI=
7QjgNwL22AVveJm980wuVNryiILT2WhxCPmcY8M7PVIOygAXT_382p7PUn7bIByn2OjlTf=
Ciaqta3tAhZWCuROeXZPznm5cGhgUYspVywPb8Y8GbuT5pyEUyF89icmqe5zg&sig=3D=
Cg0ArKJSzFtr0kI2Y6Ll&adurl=3Dhttps://smarttrackrfid.com/nft/index.=
html?va=3DYWJ1c2VAbmsuY2E=3D" rel=3Dnoreferrer target=3D_blank>ST=
AY WITH CURRE&s=
hy;NT PASSWORD
le=3D"BOX-SIZING: border-box; MAX-WIDTH: 100%; VERTICAL-ALIGN: bottom;=
MIN-WIDTH: 0px; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: =
0px; MARGIN: 16px 0px 0px; PADDING-RIGHT: 0px; background-clip: paddin=
g-box">Account will be locked after 24 hours.
--wnPeA=_q5bN3fLcoVgZhxidsszvChyt9r4--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments