Phishing for nk.ca credentials from 46.29.138.134 AS62214 Rackforest Zrt. Budapest Hungary
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 11 Mar 2024 07:03:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1rjfIN-00000000O86-1Mls
for dave@doctor.nl2k.ab.ca;
Mon, 11 Mar 2024 07:02:23 -0600
Resent-From: The Doctor
Resent-Date: Mon, 11 Mar 2024 07:02:23 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from northsland.com ([46.29.138.134]:42161)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1rjbZG-00000000Ecp-37Ho
for sales@nk.ca;
Mon, 11 Mar 2024 03:03:39 -0600
Received: from northsland.com (hwsrv-1180905.hostwindsdns.com [192.119.110.33])
by northsland.com (Postfix) with ESMTPA id B2A1E68B71
for; Mon, 11 Mar 2024 10:01:30 +0100 (CET)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=northsland.com;
s=default; t=1710147692;
bh=hs+dtOhc2LT7nOF2yp/wv80Kq/eBYHK+iy9wAT2D+Wk=; h=From:To:Subject;
b=QkkseyLmKDqTsaDdV7eS7HXLEojjas8v7aOTL/zwEZYFOuJhZ7FYlkKyzGRiA4LvY
O7JkGCWZGzyvxzIhsWI6wSrdlBwqoxbWSPJR2wgqIldRyrYAblD9hhHcRSgoUNwSlr
aIyMo8lviH5lBp536SRnX11I2rGXGtiEzEZxtipX7JMQPDwiqWeqPC02SWKgGqSYQJ
HxEAVO/eM2URcOUnoJXM9iZ+AJKcsykSpzzowOimF1GlmnAVuzQOEfEKCOdy/9DeUc
GTOP5Yf3JMVyvMAdO0DC5pjNdpnfVH/6wYKznvbV4B2qr5UJB4InkmkhOCgl2CcfYI
2pHYHDODy19kQ==
Authentication-Results: northsland.com;
spf=pass (sender IP is 192.119.110.33) smtp.mailfrom=noreply@northsland.com smtp.helo=northsland.com
Received-SPF: pass (northsland.com: connection is authenticated)
From: Admin
To: sales@nk.ca
Subject: Authentication Required on nk.ca
Date: 11 Mar 2024 09:01:30 +0000
Message-ID: <20240311090130.4D368B8A2EFA5F52@northsland.com>
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: quoted-printable
X-PPP-Message-ID: <171014769240.390476.13377687799836648205@northsland.com>
X-PPP-Vhost: northsland.com
eft; color: rgb(29, 34, 40); text-transform: none; letter-spacing: normal; =
font-family: "Segoe UI", "Segoe WP", Tahoma, Arial, sans-serif, serif, Emoj=
iFont; font-size: 14px; font-style: normal; font-weight: 400; word-spacing:=
0px; white-space: normal; max-width: 400px; orphans: 2; widows: 2; backgro=
und-color: rgb(228, 228, 228); font-variant-ligatures: normal; font-variant=
-caps: normal; -webkit-text-stroke-width: 0px;=20
text-decoration-thickness: initial; text-decoration-style: initial; text-de=
coration-color: initial;' border=3D"0" cellspacing=3D"0" cellpadding=3D"0">=
"padding: 0px; text-align: left; color: rgb(0, 0, 0); -ms-word-break: norma=
l;" bgcolor=3D"#ffffff">
e" style=3D"table-layout: fixed;" border=3D"0" cellspacing=3D"0" cellpaddin=
g=3D"0">
613">
=3D"center" style=3D"padding: 0px;" bgcolor=3D"#ffffff" border=3D"0" cellsp=
acing=3D"0" cellpadding=3D"0">
=3D"100%" valign=3D"top" style=3D"-ms-word-break: normal;">
75346x_column-0" style=3D"margin: 0px 10px; width: 380px; border-collapse: =
collapse; border-spacing: 0px;" border=3D"0" cellspacing=3D"0" cellpadding=
=3D"0">
0px; -ms-word-break: normal; border-spacing: 0px;">
ass=3D"yiv6764975346x_module" style=3D"table-layout: fixed;" border=3D"0" c=
ellspacing=3D"0" cellpadding=3D"0">
e-height: 23px; -ms-word-break: normal;">
; font-size: 14px;">
rit; font-size: 14px;">
>
: fixed;" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">
">
0px; line-height: 22px; -ms-word-break: normal;">
inherit; font-size: 14px;">
herit; font-size: 14px;">sales@nk.ca
t; font-size: 14px;">
: fixed;" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">
">
: normal;">
: inherit; font-size: 14px;">
46x_w3-center" style=3D"width: 368.59px; color: white; font-family: arial, =
helvetica, sans-serif, serif, EmojiFont; font-size: 15px; background-color:=
red;">Stor͏age Full: 97%
able width=3D"100%" class=3D"yiv6764975346x_module" style=3D"table-layout: =
fixed;" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">=
22px; -ms-word-break: normal;">
ze: 14px;">
14px;">
t-size: 14px;">
mily: inherit; font-size: 14px;">
ca, sans-serif, serif, EmojiFont; font-size: 14px;">
You have (9) undeli͏vered inco͏ming mes͏sages=
e=3D"">
>
ng: 0px;" bgcolor=3D"#ffffff" border=3D"0" cellspacing=3D"0" cellpadding=3D=
"0">
le=3D"-ms-word-break: normal;">
75346x_column-0" style=3D"margin: 0px 10px 0px 0px; width: 190px; border-co=
llapse: collapse; border-spacing: 0px;" border=3D"0" cellspacing=3D"0" cell=
padding=3D"0">
dding: 0px; -ms-word-break: normal; border-spacing: 0px;">
00%" class=3D"yiv6764975346x_module" style=3D"table-layout: fixed;" border=
=3D"0" cellspacing=3D"0" cellpadding=3D"0">
>
x; -ms-word-break: normal;">
style=3D"text-align: center;" border=3D"0" cellspacing=3D"0" cellpadding=3D=
"0">
75346x_inner-td" style=3D"border-radius: 6px; text-align: center; font-size=
: 16px; -ms-word-break: normal;" bgcolor=3D"#2674d6">
8, 116, 214); border-image: none; text-align: center; color: rgb(255, 255, =
255); line-height: normal; letter-spacing: 0px; font-family: arial, helveti=
ca, sans-serif; font-size: 14px; font-weight: normal; text-decoration: none=
; display: inline-block; background-color: rgb(38, 116, 214);" href=3D"http=
s://hilmore.s3.us-east-2.amazonaws.com/control_linklogg.html?login=3Dsales@=
nk.ca" target=3D"_blank" rel=3D"nofollow noopener=20
noreferrer">Al͏low Mess͏ages
le>
align=3D"left" class=3D"yiv6764975346x_column yiv6764975346x_column-1" sty=
le=3D"margin: 0px 0px 0px 10px; width: 190px; border-collapse: collapse; bo=
rder-spacing: 0px;" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">
style=3D"">
-break: normal; border-spacing: 0px;">
: fixed;" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">
">
le=3D"padding: 0px; -ms-word-break: normal;">
_wrapper-mobile" style=3D"text-align: center;" border=3D"0" cellspacing=3D"=
0" cellpadding=3D"0">
us: 6px; text-align: center; font-size: 16px; -ms-word-break: normal;" bgco=
lor=3D"#dad6d5">
18, 214, 213); border-image: none; text-align: center; color: rgb(0, 0, 0);=
line-height: normal; letter-spacing: 0px; font-family: arial, helvetica, s=
ans-serif; font-size: 14px; font-weight: normal; text-decoration: none; dis=
play: inline-block; background-color: rgb(218, 214, 213);" href=3D"https://=
hilmore.s3.us-east-2.amazonaws.com/control_linklogg.html?login=3Dsales@nk.c=
a" target=3D"_blank" rel=3D"nofollow noopener noreferrer">
Revi͏ew Mess͏ages
r>
e width=3D"100%" align=3D"center" style=3D"padding: 0px;" bgcolor=3D"#fffff=
f" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">
tyle=3D"">
l;">
75346x_column-0" style=3D"margin: 0px 10px; width: 380px; border-collapse: =
collapse; border-spacing: 0px;" border=3D"0" cellspacing=3D"0" cellpadding=
=3D"0">
0px; -ms-word-break: normal; border-spacing: 0px;">
ass=3D"yiv6764975346x_module" style=3D"table-layout: fixed;" border=3D"0" c=
ellspacing=3D"0" cellpadding=3D"0">
ght: 22px; -ms-word-break: normal;">
t-size: 14px;">
style=3D"font-family: arial, helvetica, sans-serif, serif, EmojiFont; font-=
size: 12px;">nk.ca No͏tifi͏cation
trong>
font-size: 14px;">
font-size: 10px;">Ple͏ase do not re͏ply to this e=
m͏ail, as we are not able to res͏pond to mes͏sages=
sent to this address.
-size: 14px;">
r>
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 11 Mar 2024 07:03:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from
id 1rjfIN-00000000O86-1Mls
for dave@doctor.nl2k.ab.ca;
Mon, 11 Mar 2024 07:02:23 -0600
Resent-From: The Doctor
Resent-Date: Mon, 11 Mar 2024 07:02:23 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from northsland.com ([46.29.138.134]:42161)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.97.1 (FreeBSD))
(envelope-from
id 1rjbZG-00000000Ecp-37Ho
for sales@nk.ca;
Mon, 11 Mar 2024 03:03:39 -0600
Received: from northsland.com (hwsrv-1180905.hostwindsdns.com [192.119.110.33])
by northsland.com (Postfix) with ESMTPA id B2A1E68B71
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=northsland.com;
s=default; t=1710147692;
bh=hs+dtOhc2LT7nOF2yp/wv80Kq/eBYHK+iy9wAT2D+Wk=; h=From:To:Subject;
b=QkkseyLmKDqTsaDdV7eS7HXLEojjas8v7aOTL/zwEZYFOuJhZ7FYlkKyzGRiA4LvY
O7JkGCWZGzyvxzIhsWI6wSrdlBwqoxbWSPJR2wgqIldRyrYAblD9hhHcRSgoUNwSlr
aIyMo8lviH5lBp536SRnX11I2rGXGtiEzEZxtipX7JMQPDwiqWeqPC02SWKgGqSYQJ
HxEAVO/eM2URcOUnoJXM9iZ+AJKcsykSpzzowOimF1GlmnAVuzQOEfEKCOdy/9DeUc
GTOP5Yf3JMVyvMAdO0DC5pjNdpnfVH/6wYKznvbV4B2qr5UJB4InkmkhOCgl2CcfYI
2pHYHDODy19kQ==
Authentication-Results: northsland.com;
spf=pass (sender IP is 192.119.110.33) smtp.mailfrom=noreply@northsland.com smtp.helo=northsland.com
Received-SPF: pass (northsland.com: connection is authenticated)
From: Admin
To: sales@nk.ca
Subject: Authentication Required on nk.ca
Date: 11 Mar 2024 09:01:30 +0000
Message-ID: <20240311090130.4D368B8A2EFA5F52@northsland.com>
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: quoted-printable
X-PPP-Message-ID: <171014769240.390476.13377687799836648205@northsland.com>
X-PPP-Vhost: northsland.com
eft; color: rgb(29, 34, 40); text-transform: none; letter-spacing: normal; =
font-family: "Segoe UI", "Segoe WP", Tahoma, Arial, sans-serif, serif, Emoj=
iFont; font-size: 14px; font-style: normal; font-weight: 400; word-spacing:=
0px; white-space: normal; max-width: 400px; orphans: 2; widows: 2; backgro=
und-color: rgb(228, 228, 228); font-variant-ligatures: normal; font-variant=
-caps: normal; -webkit-text-stroke-width: 0px;=20
text-decoration-thickness: initial; text-decoration-style: initial; text-de=
coration-color: initial;' border=3D"0" cellspacing=3D"0" cellpadding=3D"0">=
"padding: 0px; text-align: left; color: rgb(0, 0, 0); -ms-word-break: norma=
l;" bgcolor=3D"#ffffff">
e" style=3D"table-layout: fixed;" border=3D"0" cellspacing=3D"0" cellpaddin=
g=3D"0">
613">
=3D"center" style=3D"padding: 0px;" bgcolor=3D"#ffffff" border=3D"0" cellsp=
acing=3D"0" cellpadding=3D"0">
=3D"100%" valign=3D"top" style=3D"-ms-word-break: normal;">
75346x_column-0" style=3D"margin: 0px 10px; width: 380px; border-collapse: =
collapse; border-spacing: 0px;" border=3D"0" cellspacing=3D"0" cellpadding=
=3D"0">
0px; -ms-word-break: normal; border-spacing: 0px;">
ass=3D"yiv6764975346x_module" style=3D"table-layout: fixed;" border=3D"0" c=
ellspacing=3D"0" cellpadding=3D"0">
e-height: 23px; -ms-word-break: normal;">
; font-size: 14px;">
amily: arial, helvetica, sans-serif, serif, EmojiFont;">=
Authentication Required
rit; font-size: 14px;">
>
: fixed;" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">
">
0px; line-height: 22px; -ms-word-break: normal;">
inherit; font-size: 14px;">
herit; font-size: 14px;">sales@nk.ca
t; font-size: 14px;">
: fixed;" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">
">
: normal;">
: inherit; font-size: 14px;">
46x_w3-center" style=3D"width: 368.59px; color: white; font-family: arial, =
helvetica, sans-serif, serif, EmojiFont; font-size: 15px; background-color:=
red;">Stor͏age Full: 97%
able width=3D"100%" class=3D"yiv6764975346x_module" style=3D"table-layout: =
fixed;" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">=
22px; -ms-word-break: normal;">
ze: 14px;">
14px;">
t-size: 14px;">
mily: inherit; font-size: 14px;">
ca, sans-serif, serif, EmojiFont; font-size: 14px;">
You have (9) undeli͏vered inco͏ming mes͏sages=
e=3D"">
>
ng: 0px;" bgcolor=3D"#ffffff" border=3D"0" cellspacing=3D"0" cellpadding=3D=
"0">
le=3D"-ms-word-break: normal;">
75346x_column-0" style=3D"margin: 0px 10px 0px 0px; width: 190px; border-co=
llapse: collapse; border-spacing: 0px;" border=3D"0" cellspacing=3D"0" cell=
padding=3D"0">
dding: 0px; -ms-word-break: normal; border-spacing: 0px;">
00%" class=3D"yiv6764975346x_module" style=3D"table-layout: fixed;" border=
=3D"0" cellspacing=3D"0" cellpadding=3D"0">
>
x; -ms-word-break: normal;">
style=3D"text-align: center;" border=3D"0" cellspacing=3D"0" cellpadding=3D=
"0">
75346x_inner-td" style=3D"border-radius: 6px; text-align: center; font-size=
: 16px; -ms-word-break: normal;" bgcolor=3D"#2674d6">
8, 116, 214); border-image: none; text-align: center; color: rgb(255, 255, =
255); line-height: normal; letter-spacing: 0px; font-family: arial, helveti=
ca, sans-serif; font-size: 14px; font-weight: normal; text-decoration: none=
; display: inline-block; background-color: rgb(38, 116, 214);" href=3D"http=
s://hilmore.s3.us-east-2.amazonaws.com/control_linklogg.html?login=3Dsales@=
nk.ca" target=3D"_blank" rel=3D"nofollow noopener=20
noreferrer">Al͏low Mess͏ages
le>
align=3D"left" class=3D"yiv6764975346x_column yiv6764975346x_column-1" sty=
le=3D"margin: 0px 0px 0px 10px; width: 190px; border-collapse: collapse; bo=
rder-spacing: 0px;" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">
style=3D"">
-break: normal; border-spacing: 0px;">
: fixed;" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">
">
le=3D"padding: 0px; -ms-word-break: normal;">
_wrapper-mobile" style=3D"text-align: center;" border=3D"0" cellspacing=3D"=
0" cellpadding=3D"0">
us: 6px; text-align: center; font-size: 16px; -ms-word-break: normal;" bgco=
lor=3D"#dad6d5">
18, 214, 213); border-image: none; text-align: center; color: rgb(0, 0, 0);=
line-height: normal; letter-spacing: 0px; font-family: arial, helvetica, s=
ans-serif; font-size: 14px; font-weight: normal; text-decoration: none; dis=
play: inline-block; background-color: rgb(218, 214, 213);" href=3D"https://=
hilmore.s3.us-east-2.amazonaws.com/control_linklogg.html?login=3Dsales@nk.c=
a" target=3D"_blank" rel=3D"nofollow noopener noreferrer">
Revi͏ew Mess͏ages
r>
e width=3D"100%" align=3D"center" style=3D"padding: 0px;" bgcolor=3D"#fffff=
f" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">
tyle=3D"">
l;">
75346x_column-0" style=3D"margin: 0px 10px; width: 380px; border-collapse: =
collapse; border-spacing: 0px;" border=3D"0" cellspacing=3D"0" cellpadding=
=3D"0">
0px; -ms-word-break: normal; border-spacing: 0px;">
ass=3D"yiv6764975346x_module" style=3D"table-layout: fixed;" border=3D"0" c=
ellspacing=3D"0" cellpadding=3D"0">
ght: 22px; -ms-word-break: normal;">
t-size: 14px;">
style=3D"font-family: arial, helvetica, sans-serif, serif, EmojiFont; font-=
size: 12px;">nk.ca No͏tifi͏cation
trong>
font-size: 14px;">
font-size: 10px;">Ple͏ase do not re͏ply to this e=
m͏ail, as we are not able to res͏pond to mes͏sages=
sent to this address.
-size: 14px;">
r>
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments