German language cloud credential phishing from Google Gmail Part 2




cellspacing=3D"0" border=3D"0">








olid #f1d1d1;padding:14px 24px;text-align:center;font-family:-apple-system,=

BlinkMacSystemFont,'SF Pro Text','Segoe UI',Arial,sans-serif;font-size:14px=

;line-height:20px;font-weight:600;color:#c9342f;">

Payment failed =E2=80=93 Please update your payment method. =








cellspacing=3D"0" border=3D"0">






















































































e-system,BlinkMacSystemFont,'SF Pro Text','Segoe UI',Arial,sans-serif;font-=

size:13px;line-height:18px;color:#6e6e73;font-weight:600;">

iCIoud Storage


system,BlinkMacSystemFont,'SF Pro Display','Segoe UI',Arial,sans-serif;font=

-size:32px;line-height:38px;font-weight:600;color:#1d1d1f;letter-spacing:-0=

.5px;">

Your account has been deactivated

system,BlinkMacSystemFont,'SF Pro Text','Segoe UI',Arial,sans-serif;font-si=

ze:16px;line-height:26px;color:#424245;">

Payment method update required =E2=9A=A0=EF=B8=8F Your photos and videos wi=

ll be deleted.




=3D"0" cellspacing=3D"0" border=3D"0" style=3D"background-color:#f5f5f7;bor=

der:1px solid #ebebed;border-radius:16px;">














y:-apple-system,BlinkMacSystemFont,'SF Pro Display','Segoe UI',Arial,sans-s=

erif;font-size:18px;line-height:24px;font-weight:600;color:#1d1d1f;">

Subscription details



adding=3D"0" cellspacing=3D"0" border=3D"0" style=3D"font-family:-apple-sys=

tem,BlinkMacSystemFont,'SF Pro Text','Segoe UI',Arial,sans-serif;font-size:=

15px;color:#1d1d1f;">


































solid #e5e5e7;color:#6e6e73;width:42%;">Tarif

solid #e5e5e7;font-weight:500;">Storage

solid #e5e5e7;color:#6e6e73;">Email address

solid #e5e5e7;font-weight:500;">doctor@edmontonab.ca

solid #e5e5e7;color:#6e6e73;">Product

;">iCloud Storage
R=

enewal date

>13.03.2026





system,BlinkMacSystemFont,'SF Pro Display','Segoe UI',Arial,sans-serif;font=

-size:21px;line-height:28px;font-weight:600;color:#1d1d1f;">

Action required

system,BlinkMacSystemFont,'SF Pro Text','Segoe UI',Arial,sans-serif;font-si=

ze:15px;line-height:25px;color:#424245;">

Verification required

Please update your payment method




ing=3D"0" border=3D"0">








:980px;">


tent.com/cl?d=3D8gG5HuesHEriW3ZkH5PkMqUZu7mdVRavMZcvm1KY&e=3Ddoctor@edmonto=

nab.ca"

style=3D"display:inline-block;padding:14px 30p=

x;font-family:-apple-system,BlinkMacSystemFont,'SF Pro Text','Segoe UI',Ari=

al,sans-serif;font-size:15px;line-height:20px;font-weight:600;color:#ffffff=

;text-decoration:none;border-radius:980px;">

Update payment method







background-color:#ececee;"> 



r;font-family:-apple-system,BlinkMacSystemFont,'SF Pro Text','Segoe UI',Ari=

al,sans-serif;font-size:13px;line-height:21px;color:#6e6e73;">

This notification was generated automatically and concerns your iCloud stor=

age plan.













ily:-apple-system,BlinkMacSystemFont,'SF Pro Text','Segoe UI',Arial,sans-se=

rif;font-size:12px;line-height:18px;color:#8e8e93;">

Apple Services =C2=B7 iCIoud =C2=B7 Support


















text-align:center;margin-top:10px">Unsub
.googleusercontent.com/un?d=3D8gG5HuesHEriW3ZkH5PkMqUZu7mdVRavMZcvm1KY&e=3D=

doctor@edmontonab.ca">here
to remove yourself from our emails list
n>

--0000000000006214ee064ccc4f15--

German language cloud credential phishing from Google Gmail Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 12 Mar 2026 04:18:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w0d73-00000000FWB-3uOz

for dave@doctor.nl2k.ab.ca;

Thu, 12 Mar 2026 04:17:53 -0600

Resent-From: The Doctor

Resent-Date: Thu, 12 Mar 2026 04:17:53 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oi1-f198.google.com ([209.85.167.198]:48260)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w0XoU-000000000CY-0dtV

for doctor@edmontonab.ca;

Wed, 11 Mar 2026 22:38:30 -0600

Received: by mail-oi1-f198.google.com with SMTP id 5614622812f47-467094213caso5825882b6e.0

for ; Wed, 11 Mar 2026 21:37:35 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=cloudstorage04.jmpghana.com; s=firebase1; t=1773290249; x=1773895049; darn=edmontonab.ca;

h=to:from:subject:date:message-id:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=hc6Wj4NG20LNprSTiV6k3u276Uv5jdH4/XBDVdwGuK4=;

b=XP2VbU6xZWeUR3Ex8+DGY1OxBIkUrwbYwUqtkWWKeVIBOZeZVizCmI3jMWG/snRqJP

Iws6sPztqYpP0Iyg5HgcpTALiU2wZK0xhEPfJO0NKTVNdZ/4iAjj7mVw9ogx+Tp2BFkN

2Cg2PwxeO8086obLLjwrb1yxgS27Mn6YNmsVg+ThHk5PAWS/3N78F64801f1546VAorO

Qwrg353ep8LLZd4l6F3/XUadbFBK89+YrREvgBZUItu9LSsLbaQCs2HxoC+N/ZrO8jE3

dWc/MT8VnuLHe/bN7UNJS+pfdXH47rBFzv1sdbWxAd5KgBlTkiQDHeAPF7Jd4ZAhj9sj

QN3Q==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1773290249; x=1773895049;

h=to:from:subject:date:message-id:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=hc6Wj4NG20LNprSTiV6k3u276Uv5jdH4/XBDVdwGuK4=;

b=tEhbbfupVoIkaVOP+xB+BlWio8StT3RdBXKi4mQYFoP3xvkHuMlM/foy86uFkdNAs0

aVjDtG4lWfMmJbjBbIJ23fwwz3CbbhNZ41KjTVRI68k88ShgMmkcTBiYJR6e5jGeGjuE

QH1SWAQjrjHsQt3FbNhlmicmd6wFqhtzhQcocLdEahvn/gFwIjfXrwSgtB1fc0oKAAKg

7Iq/gdkluzbYrjFs+86f8ltDTWrvh7nccugfz2fVgePgB3buQEF9OcbKOBQzVYyszCq2

oX+IkcRXZxQrYKs261xIeCVZlyxnKVzcz+7DX7T54YyfFwouMC955IoHURgc39n+nu/2

D4ag==

X-Gm-Message-State: AOJu0YxMxFBBKOt1ofzS5JikpnTfa5GpwZ3v4N51564wCYhDmWPJxgIg

kVQA96YcIlv3cez+kgT0/O/FYvpNA2aQyBpQgjnTzylGygL5i5ra/syTTtfc4OFr+SZq1AyjXbb

X9VrYFC6QQHM8dw==

MIME-Version: 1.0

X-Received: by 2002:a05:6808:2389:b0:467:de9:3eaf with SMTP id

5614622812f47-467333c5e0dmr2559337b6e.10.1773290249130; Wed, 11 Mar 2026

21:37:29 -0700 (PDT)

Message-ID: <00000000000062150b064ccc4f18@google.com>

Date: Thu, 12 Mar 2026 04:37:29 +0000

Subject: =?UTF-8?Q?=F0=9F=9A=AB_Ihr_Konto_wird_am_13=2E_M=C3=A4rz_2026_deaktiviert_?=

=?UTF-8?Q?=E2=80=93_Fotos_=26_Videos?=

From: =?UTF-8?Q?iCIoud=2DSupport=C2=AE?=

To: doctor@edmontonab.ca

Content-Type: multipart/alternative; boundary="0000000000006214ee064ccc4f15"

X-Spam_score: 5.3

X-Spam_score_int: 53

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Your account has been deactivated – verification required.

iCIoud Payment failed – Please update your payment method.



Content analysis details: (5.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.167.198 listed in will-spam-for-food.eu.org]

[209.85.167.198 listed in will-spam-for-food.eu.org]

[209.85.167.198 listed in will-spam-for-food.eu.org]

[209.85.167.198 listed in will-spam-for-food.eu.org]

[209.85.167.198 listed in will-spam-for-food.eu.org]

[209.85.167.198 listed in will-spam-for-food.eu.org]

[209.85.167.198 listed in will-spam-for-food.eu.org]

[209.85.167.198 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.167.198 listed in dnsbl.ahbl.org]

[209.85.167.198 listed in dnsbl.ahbl.org]

[209.85.167.198 listed in dnsbl.ahbl.org]

[209.85.167.198 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.167.198 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.167.198 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.167.198 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.167.198 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.167.198 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.167.198 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.5 VOWEL_FROM_5 Impronouncable from header (6 consecutive vowels)

0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information

Subject: {SPAM?} =?UTF-8?Q?=F0=9F=9A=AB_Ihr_Konto_wird_am_13=2E_M=C3=A4rz_2026_deaktiviert_?=

=?UTF-8?Q?=E2=80=93_Fotos_=26_Videos?=



--0000000000006214ee064ccc4f15

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



WW91ciBhY2NvdW50IGhhcyBiZWVuIGRlYWN0aXZhdGVkIOKAkyB2ZXJpZmljYXRpb24gcmVxdWly

ZWQuDQoNCg0KDQoNCmlDSW91ZA0KDQoNCg0KUGF5bWVudCBmYWlsZWQg4oCTIFBsZWFzZSB1cGRh

dGUgeW91ciBwYXltZW50IG1ldGhvZC4NCg0KDQoNCmlDSW91ZCBTdG9yYWdlDQoNCllvdXIgYWNj

b3VudCBoYXMgYmVlbiBkZWFjdGl2YXRlZA0KDQpQYXltZW50IG1ldGhvZCB1cGRhdGUgcmVxdWly

ZWQg4pqg77iPIFlvdXIgcGhvdG9zIGFuZCB2aWRlb3Mgd2lsbCBiZSBkZWxldGVkLg0KDQoNCg0K

U3Vic2NyaXB0aW9uIGRldGFpbHMNCg0KDQoNClRhcmlmIFN0b3JhZ2UNCg0KRW1haWwgYWRkcmVz

cyBkb2N0b3JAZWRtb250b25hYi5jYQ0KDQpQcm9kdWN0IGlDbG91ZCBTdG9yYWdlDQoNClJlbmV3

YWwgZGF0ZSAxMy4wMy4yMDI2DQoNCg0KDQoNCg0KQWN0aW9uIHJlcXVpcmVkDQoNClZlcmlmaWNh

dGlvbiByZXF1aXJlZCBQbGVhc2UgdXBkYXRlIHlvdXIgcGF5bWVudCBtZXRob2QNCg0KDQoNClVw

ZGF0ZSBwYXltZW50IG1ldGhvZA0KDQoNCg0KDQpUaGlzIG5vdGlmaWNhdGlvbiB3YXMgZ2VuZXJh

dGVkIGF1dG9tYXRpY2FsbHkgYW5kIGNvbmNlcm5zIHlvdXIgaUNsb3VkICANCnN0b3JhZ2UgcGxh

bi4NCg0KDQoNCkFwcGxlIFNlcnZpY2VzIMK3IGlDSW91ZCDCtyBTdXBwb3J0DQoNCg0KDQpVbnN1

YmhlcmUgdG8gcmVtb3ZlIHlvdXJzZWxmIGZyb20gb3VyIGVtYWlscyBsaXN0DQo=

--0000000000006214ee064ccc4f15

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable












">



Kontomitteilung




riW3ZkH5PkMqUZu7mdVRavMZcvm1KY&e=3Ddoctor@edmontonab.ca" style=3D"text-deco=

ration:none; color:black;">



=20




ransparent;">

Your account has been deactivated =E2=80=93 verification required.





=3D"0" border=3D"0" style=3D"width:100%;background-color:#f5f5f7;">














pacing=3D"0" border=3D"0" style=3D"max-width:680px;">
































pple-system,BlinkMacSystemFont,'SF Pro Display','Segoe UI',Arial,sans-serif=

;font-size:28px;line-height:32px;font-weight:600;color:#1d1d1f;letter-spaci=

ng:-0.3px;">

iCIoud


border-radius:22px;overflow:hidden;box-shadow:0 4px 14px rgba(0,0,0,0.04);"=

>

German language cloud credential phishing from Google Gmail Part 2




cellspacing=3D"0" border=3D"0">








olid #f1d1d1;padding:14px 24px;text-align:center;font-family:-apple-system,=

BlinkMacSystemFont,'SF Pro Text','Segoe UI',Arial,sans-serif;font-size:14px=

;line-height:20px;font-weight:600;color:#c9342f;">

Payment failed =E2=80=93 Please update your payment method. =








cellspacing=3D"0" border=3D"0">






















































































e-system,BlinkMacSystemFont,'SF Pro Text','Segoe UI',Arial,sans-serif;font-=

size:13px;line-height:18px;color:#6e6e73;font-weight:600;">

iCIoud Storage


system,BlinkMacSystemFont,'SF Pro Display','Segoe UI',Arial,sans-serif;font=

-size:32px;line-height:38px;font-weight:600;color:#1d1d1f;letter-spacing:-0=

.5px;">

Your account has been deactivated

system,BlinkMacSystemFont,'SF Pro Text','Segoe UI',Arial,sans-serif;font-si=

ze:16px;line-height:26px;color:#424245;">

Payment method update required =E2=9A=A0=EF=B8=8F Your photos and videos wi=

ll be deleted.




=3D"0" cellspacing=3D"0" border=3D"0" style=3D"background-color:#f5f5f7;bor=

der:1px solid #ebebed;border-radius:16px;">














y:-apple-system,BlinkMacSystemFont,'SF Pro Display','Segoe UI',Arial,sans-s=

erif;font-size:18px;line-height:24px;font-weight:600;color:#1d1d1f;">

Subscription details



adding=3D"0" cellspacing=3D"0" border=3D"0" style=3D"font-family:-apple-sys=

tem,BlinkMacSystemFont,'SF Pro Text','Segoe UI',Arial,sans-serif;font-size:=

15px;color:#1d1d1f;">


































solid #e5e5e7;color:#6e6e73;width:42%;">Tarif

solid #e5e5e7;font-weight:500;">Storage

solid #e5e5e7;color:#6e6e73;">Email address

solid #e5e5e7;font-weight:500;">bin@nl2k.ab.ca

solid #e5e5e7;color:#6e6e73;">Product

;">iCloud Storage
R=

enewal date

>13.03.2026





system,BlinkMacSystemFont,'SF Pro Display','Segoe UI',Arial,sans-serif;font=

-size:21px;line-height:28px;font-weight:600;color:#1d1d1f;">

Action required

system,BlinkMacSystemFont,'SF Pro Text','Segoe UI',Arial,sans-serif;font-si=

ze:15px;line-height:25px;color:#424245;">

Verification required

Please update your payment method




ing=3D"0" border=3D"0">








:980px;">


tent.com/cl?d=3D8gG5HuesHEriW3ZkH5PkMqUZu7mdVRavMZcvm1KY&e=3Dbin@nl2k.ab.ca=

"

style=3D"display:inline-block;padding:14px 30p=

x;font-family:-apple-system,BlinkMacSystemFont,'SF Pro Text','Segoe UI',Ari=

al,sans-serif;font-size:15px;line-height:20px;font-weight:600;color:#ffffff=

;text-decoration:none;border-radius:980px;">

Update payment method







background-color:#ececee;"> 



r;font-family:-apple-system,BlinkMacSystemFont,'SF Pro Text','Segoe UI',Ari=

al,sans-serif;font-size:13px;line-height:21px;color:#6e6e73;">

This notification was generated automatically and concerns your iCloud stor=

age plan.



ily:-apple-system,BlinkMacSystemFont,'SF Pro Text','Segoe UI',Arial,sans-se=

rif;font-size:12px;line-height:18px;color:#8e8e93;">

Apple Services =C2=B7 iCIoud =C2=B7 Support










text-align:center;margin-top:10px">Unsub

.googleusercontent.com/un?d=3D8gG5HuesHEriW3ZkH5PkMqUZu7mdVRavMZcvm1KY&e=3D=

bin@nl2k.ab.ca">here
to remove yourself from our emails list

--0000000000002afe95064ccbf783--

German language cloud credential phishing from Google Gmail Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 12 Mar 2026 04:18:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w0d6k-00000000FVo-3RkI

for dave@doctor.nl2k.ab.ca;

Thu, 12 Mar 2026 04:17:34 -0600

Resent-From: The Doctor

Resent-Date: Thu, 12 Mar 2026 04:17:34 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oi1-f199.google.com ([209.85.167.199]:46272)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w0XQb-00000000POl-0I2f

for bin@nl2k.ab.ca;

Wed, 11 Mar 2026 22:13:49 -0600

Received: by mail-oi1-f199.google.com with SMTP id 5614622812f47-466f55d78fdso3057828b6e.0

for ; Wed, 11 Mar 2026 21:12:55 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=cloudstorage04.jmpghana.com; s=firebase1; t=1773288769; x=1773893569; darn=nl2k.ab.ca;

h=to:from:subject:date:message-id:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=mjHOOud4JRXoF52eVUt8XK4/QgDDZB0UUAWLrmUc11s=;

b=OuUwTftBOdLX4verFjAb5NYgje21FITvr9cHe+LNWnnd0BZgjCvkUODbwUZ5ajhArF

LRfyZv/DtmmNjWDxeOH4auU1UEFwG1b55YLzqoOIqT6ZB9ttCarSFeJ+CeaROn82wpoM

oDKmmCix4rIu2g08dtTZ4is5xAQwtsdDrOGdq3TvG+/xS+lyucIBs50Sarry08GjLlWk

J1b22bhzQeiBZQN3fuTZ+1vLKkni4xRS8rzGweYhuPsJfmYjanDr+3OLydBk4Hl/Dfrp

8hwpZWjlas04K6x6NgNN0yUt8o6iqwUz5cyTJVKb8/9wwDexx/9rRuKjQfdp988IfAkO

V4hA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1773288769; x=1773893569;

h=to:from:subject:date:message-id:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=mjHOOud4JRXoF52eVUt8XK4/QgDDZB0UUAWLrmUc11s=;

b=drVn2+Auvp9uf3n6R5OvEXdshtFmehSxJxelvw1svZGmLef+DCcZ4n3Q4aIlLM7tRK

ID7tvr6LyYYXhRRgAKERwYt3JVhghh8gLPFzpf8ujouikTMYqEdnkUcg7K9GvBWs5XSI

gl1nUStyY+LQQ7gNhBWPm7ioaJvta4J5zsjXGqHGcP82uzlPJqAV0tv6xbTcjGhlyRwi

mxfQ9TjkFO9EZ4fRzBUOGjtqcGboBPwB6mXtVpCfx1hd8NQqhuPCZREByNKDSiK+k8V8

UCXgbRcUwqKW0oMUgN2RBhV66xsNmGMC241EEdhQ57lgEx4FPdE3brzqtAuq5U5iv2rv

w48g==

X-Gm-Message-State: AOJu0YxtpMeZZ8LQp/PoI+2ZlvH8U3CJGngzObBRMZz951cBoLrz6Kg+

JuLbXcQCAk/0s/Cua0LFP6MNvw9ya3CDZrUJL8M1UiIVsxn6bY5Mqb37DKGmFckTW8qAAeSUPhG

nunFPBRulIWqJ1Q==

MIME-Version: 1.0

X-Received: by 2002:a05:6808:1b09:b0:45e:fefd:8993 with SMTP id

5614622812f47-467333d88a6mr3070448b6e.11.1773288769125; Wed, 11 Mar 2026

21:12:49 -0700 (PDT)

Message-ID: <0000000000002afe9f064ccbf786@google.com>

Date: Thu, 12 Mar 2026 04:12:49 +0000

Subject: =?UTF-8?Q?=F0=9F=9A=AB_Ihr_Konto_wird_am_13=2E_M=C3=A4rz_2026_deaktiviert_?=

=?UTF-8?Q?=E2=80=93_Fotos_=26_Videos?=

From: =?UTF-8?Q?iCIoud=2DSupport=C2=AE?=

To: bin@nl2k.ab.ca

Content-Type: multipart/alternative; boundary="0000000000002afe95064ccbf783"

X-Spam_score: 5.3

X-Spam_score_int: 53

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Your account has been deactivated – verification required.

iCIoud Payment failed – Please update your payment method.



Content analysis details: (5.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.167.199 listed in will-spam-for-food.eu.org]

[209.85.167.199 listed in will-spam-for-food.eu.org]

[209.85.167.199 listed in will-spam-for-food.eu.org]

[209.85.167.199 listed in will-spam-for-food.eu.org]

[209.85.167.199 listed in will-spam-for-food.eu.org]

[209.85.167.199 listed in will-spam-for-food.eu.org]

[209.85.167.199 listed in will-spam-for-food.eu.org]

[209.85.167.199 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.167.199 listed in dnsbl.ahbl.org]

[209.85.167.199 listed in dnsbl.ahbl.org]

[209.85.167.199 listed in dnsbl.ahbl.org]

[209.85.167.199 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.167.199 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.167.199 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.167.199 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.167.199 listed in dnsbl.ahbl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.167.199 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.5 VOWEL_FROM_5 Impronouncable from header (6 consecutive vowels)

0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information

Subject: {SPAM?} =?UTF-8?Q?=F0=9F=9A=AB_Ihr_Konto_wird_am_13=2E_M=C3=A4rz_2026_deaktiviert_?=

=?UTF-8?Q?=E2=80=93_Fotos_=26_Videos?=



--0000000000002afe95064ccbf783

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



WW91ciBhY2NvdW50IGhhcyBiZWVuIGRlYWN0aXZhdGVkIOKAkyB2ZXJpZmljYXRpb24gcmVxdWly

ZWQuDQoNCg0KDQoNCmlDSW91ZA0KDQoNCg0KUGF5bWVudCBmYWlsZWQg4oCTIFBsZWFzZSB1cGRh

dGUgeW91ciBwYXltZW50IG1ldGhvZC4NCg0KDQoNCmlDSW91ZCBTdG9yYWdlDQoNCllvdXIgYWNj

b3VudCBoYXMgYmVlbiBkZWFjdGl2YXRlZA0KDQpQYXltZW50IG1ldGhvZCB1cGRhdGUgcmVxdWly

ZWQg4pqg77iPIFlvdXIgcGhvdG9zIGFuZCB2aWRlb3Mgd2lsbCBiZSBkZWxldGVkLg0KDQoNCg0K

U3Vic2NyaXB0aW9uIGRldGFpbHMNCg0KDQoNClRhcmlmIFN0b3JhZ2UNCg0KRW1haWwgYWRkcmVz

cyBiaW5Abmwyay5hYi5jYQ0KDQpQcm9kdWN0IGlDbG91ZCBTdG9yYWdlDQoNClJlbmV3YWwgZGF0

ZSAxMy4wMy4yMDI2DQoNCg0KDQoNCg0KQWN0aW9uIHJlcXVpcmVkDQoNClZlcmlmaWNhdGlvbiBy

ZXF1aXJlZCBQbGVhc2UgdXBkYXRlIHlvdXIgcGF5bWVudCBtZXRob2QNCg0KDQoNClVwZGF0ZSBw

YXltZW50IG1ldGhvZA0KDQoNCg0KDQpUaGlzIG5vdGlmaWNhdGlvbiB3YXMgZ2VuZXJhdGVkIGF1

dG9tYXRpY2FsbHkgYW5kIGNvbmNlcm5zIHlvdXIgaUNsb3VkICANCnN0b3JhZ2UgcGxhbi4NCg0K

DQoNCkFwcGxlIFNlcnZpY2VzIMK3IGlDSW91ZCDCtyBTdXBwb3J0DQoNCg0KDQpVbnN1YmhlcmUg

dG8gcmVtb3ZlIHlvdXJzZWxmIGZyb20gb3VyIGVtYWlscyBsaXN0DQo=

--0000000000002afe95064ccbf783

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable












">



Kontomitteilung




riW3ZkH5PkMqUZu7mdVRavMZcvm1KY&e=3Dbin@nl2k.ab.ca" style=3D"text-decoration=

:none; color:black;">



=20




ransparent;">

Your account has been deactivated =E2=80=93 verification required.





=3D"0" border=3D"0" style=3D"width:100%;background-color:#f5f5f7;">
























pacing=3D"0" border=3D"0" style=3D"max-width:680px;">






























































































pple-system,BlinkMacSystemFont,'SF Pro Display','Segoe UI',Arial,sans-serif=

;font-size:28px;line-height:32px;font-weight:600;color:#1d1d1f;letter-spaci=

ng:-0.3px;">

iCIoud


border-radius:22px;overflow:hidden;box-shadow:0 4px 14px rgba(0,0,0,0.04);"=

>

system,BlinkMacSystemFont,'SF Pro Display','Segoe UI',Arial,sans-serif;font=

-size:32px;line-height:38px;font-weight:600;color:#1d1d1f;letter-spacing:-0=

.5px;">

Your account has been deactivated

system,BlinkMacSystemFont,'SF Pro Text','Segoe UI',Arial,sans-serif;font-si=

ze:16px;line-height:26px;color:#424245;">

Payment method update required =E2=9A=A0=EF=B8=8F Your photos and videos wi=

ll be deleted.




=3D"0" cellspacing=3D"0" border=3D"0" style=3D"background-color:#f5f5f7;bor=

der:1px solid #ebebed;border-radius:16px;">














y:-apple-system,BlinkMacSystemFont,'SF Pro Display','Segoe UI',Arial,sans-s=

erif;font-size:18px;line-height:24px;font-weight:600;color:#1d1d1f;">

Subscription details



adding=3D"0" cellspacing=3D"0" border=3D"0" style=3D"font-family:-apple-sys=

tem,BlinkMacSystemFont,'SF Pro Text','Segoe UI',Arial,sans-serif;font-size:=

15px;color:#1d1d1f;">


































solid #e5e5e7;color:#6e6e73;width:42%;">Tarif

solid #e5e5e7;font-weight:500;">Storage

solid #e5e5e7;color:#6e6e73;">Email address

solid #e5e5e7;font-weight:500;">doctor@nl2k.ca

solid #e5e5e7;color:#6e6e73;">Product

;">iCloud Storage
R=

enewal date

>13.03.2026





system,BlinkMacSystemFont,'SF Pro Display','Segoe UI',Arial,sans-serif;font=

-size:21px;line-height:28px;font-weight:600;color:#1d1d1f;">

Action required

system,BlinkMacSystemFont,'SF Pro Text','Segoe UI',Arial,sans-serif;font-si=

ze:15px;line-height:25px;color:#424245;">

Verification required

Please update your payment method




ing=3D"0" border=3D"0">








:980px;">


tent.com/cl?d=3D8gG5HuesHEriW3ZkH5PkMqUZu7mdVRavMZcvm1KY&e=3Ddoctor@nl2k.ca=

"

style=3D"display:inline-block;padding:14px 30p=

x;font-family:-apple-system,BlinkMacSystemFont,'SF Pro Text','Segoe UI',Ari=

al,sans-serif;font-size:15px;line-height:20px;font-weight:600;color:#ffffff=

;text-decoration:none;border-radius:980px;">

Update payment method







background-color:#ececee;"> 



r;font-family:-apple-system,BlinkMacSystemFont,'SF Pro Text','Segoe UI',Ari=

al,sans-serif;font-size:13px;line-height:21px;color:#6e6e73;">

This notification was generated automatically and concerns your iCloud stor=

age plan.



ily:-apple-system,BlinkMacSystemFont,'SF Pro Text','Segoe UI',Arial,sans-se=

rif;font-size:12px;line-height:18px;color:#8e8e93;">

Apple Services =C2=B7 iCIoud =C2=B7 Support














text-align:center;margin-top:10px">Unsub

.googleusercontent.com/un?d=3D8gG5HuesHEriW3ZkH5PkMqUZu7mdVRavMZcvm1KY&e=3D=

doctor@nl2k.ca">here
to remove yourself from our emails list

--000000000000e632ba064ccbad30--

German language cloud credential phishing from Google Gmail Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 12 Mar 2026 04:18:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w0d6d-00000000FVH-3fqP

for dave@doctor.nl2k.ab.ca;

Thu, 12 Mar 2026 04:17:27 -0600

Resent-From: The Doctor

Resent-Date: Thu, 12 Mar 2026 04:17:27 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ot1-f69.google.com ([209.85.210.69]:58524)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w0X6n-00000000OfL-2YDD

for doctor@nl2k.ca;

Wed, 11 Mar 2026 21:53:22 -0600

Received: by mail-ot1-f69.google.com with SMTP id 46e09a7af769-7d753cb3174so6054839a34.0

for ; Wed, 11 Mar 2026 20:52:26 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=cloudstorage04.jmpghana.com; s=firebase1; t=1773287540; x=1773892340; darn=nl2k.ca;

h=to:from:subject:date:message-id:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=VW9hm40VSxkXnPBvNKp7Lc2iVf09pC56gqYjaeQ1C5Q=;

b=gPMb9es+V2bRhweuEQr72ypuykpyyZO7zd6Vya0BkawPg/8lognV+w8Ism3hX8JnR5

H0syaLBvwGm0E59AXtKwoJTzBQEvsXi1ZznQ0VYSTKoW6XY6nqTdJkIuPgnbIToq2MlO

MtC8yWIhGqtEJKdE2w/nIMsdgFQcwic0IR5cuMQ7VlB0m6bQNB/z6YxScc9Feqf5UEXn

Ud2dVubUs0trBId+DHYmh4bkpzAAFF9l8OE/7a/Bv0W0sfuwD2FXN9vsmKGOzHEpgPV2

xadaSNAX4x9tNr0y/T9C4MfwJBzpqKDBTcOelbxe3n1QuRJwKCMtLzdKXECrlA6s7+US

T9dQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1773287540; x=1773892340;

h=to:from:subject:date:message-id:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=VW9hm40VSxkXnPBvNKp7Lc2iVf09pC56gqYjaeQ1C5Q=;

b=n8RHI00gAOL/XP97ZZ5dQoN6kPJxpNPki6Ycse8GRVXGzmoT63+yef+C3VgeppUcJi

LYpuS3kxC72TMITzX9Oa+14o+IlkA+E5AOYarWRIyMrqDGwuwOHFCQt6cOR2G0VNuSuR

Habq3MJ7KKWgoow+GQEQVdAh3Yqw/fRM8gtKNGvikF9uGJL7wSWM6wH/xBfOALe2AWLE

jQjPf8yBPkCg0Vi4suy6/PFFeqHhPP6e/Z33TPmPxL4zt5Aydgj/hb61s/z4Lo2Q/zwh

vXomWb5FFrPadbRkMznyW4euDWT8anbLlS6O3Sp44NAsWkJRsKRcs8oM/MXHklX2/EzM

JwUw==

X-Gm-Message-State: AOJu0Yx+Zus5kjXWXlzIrLWWWRLCU64tTFDX7x+c7HUDQ8x9gM9We1Ve

A4IAVsgKh6DsPW4MryjQgHYsWYQYzhJp7cvWCVUqUoWQXs2lsZJa0v8NutT0xcuO6nlvZUZerqv

JpBZ48PP6XHTSeg==

MIME-Version: 1.0

X-Received: by 2002:a05:6830:6af6:b0:7d7:4d95:23bd with SMTP id

46e09a7af769-7d76a92be82mr3884193a34.34.1773287539880; Wed, 11 Mar 2026

20:52:19 -0700 (PDT)

Message-ID: <000000000000e632c1064ccbad33@google.com>

Date: Thu, 12 Mar 2026 03:52:19 +0000

Subject: =?UTF-8?Q?=F0=9F=9A=AB_Ihr_Konto_wird_am_13=2E_M=C3=A4rz_2026_deaktiviert_?=

=?UTF-8?Q?=E2=80=93_Fotos_=26_Videos?=

From: =?UTF-8?Q?iCIoud=2DSupport=C2=AE?=

To: doctor@nl2k.ca

Content-Type: multipart/alternative; boundary="000000000000e632ba064ccbad30"



--000000000000e632ba064ccbad30

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



WW91ciBhY2NvdW50IGhhcyBiZWVuIGRlYWN0aXZhdGVkIOKAkyB2ZXJpZmljYXRpb24gcmVxdWly

ZWQuDQoNCg0KDQoNCmlDSW91ZA0KDQoNCg0KUGF5bWVudCBmYWlsZWQg4oCTIFBsZWFzZSB1cGRh

dGUgeW91ciBwYXltZW50IG1ldGhvZC4NCg0KDQoNCmlDSW91ZCBTdG9yYWdlDQoNCllvdXIgYWNj

b3VudCBoYXMgYmVlbiBkZWFjdGl2YXRlZA0KDQpQYXltZW50IG1ldGhvZCB1cGRhdGUgcmVxdWly

ZWQg4pqg77iPIFlvdXIgcGhvdG9zIGFuZCB2aWRlb3Mgd2lsbCBiZSBkZWxldGVkLg0KDQoNCg0K

U3Vic2NyaXB0aW9uIGRldGFpbHMNCg0KDQoNClRhcmlmIFN0b3JhZ2UNCg0KRW1haWwgYWRkcmVz

cyBkb2N0b3JAbmwyay5jYQ0KDQpQcm9kdWN0IGlDbG91ZCBTdG9yYWdlDQoNClJlbmV3YWwgZGF0

ZSAxMy4wMy4yMDI2DQoNCg0KDQoNCg0KQWN0aW9uIHJlcXVpcmVkDQoNClZlcmlmaWNhdGlvbiBy

ZXF1aXJlZCBQbGVhc2UgdXBkYXRlIHlvdXIgcGF5bWVudCBtZXRob2QNCg0KDQoNClVwZGF0ZSBw

YXltZW50IG1ldGhvZA0KDQoNCg0KDQpUaGlzIG5vdGlmaWNhdGlvbiB3YXMgZ2VuZXJhdGVkIGF1

dG9tYXRpY2FsbHkgYW5kIGNvbmNlcm5zIHlvdXIgaUNsb3VkICANCnN0b3JhZ2UgcGxhbi4NCg0K

DQoNCkFwcGxlIFNlcnZpY2VzIMK3IGlDSW91ZCDCtyBTdXBwb3J0DQoNCg0KDQpVbnN1YmhlcmUg

dG8gcmVtb3ZlIHlvdXJzZWxmIGZyb20gb3VyIGVtYWlscyBsaXN0DQo=

--000000000000e632ba064ccbad30

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable












">



Kontomitteilung




riW3ZkH5PkMqUZu7mdVRavMZcvm1KY&e=3Ddoctor@nl2k.ca" style=3D"text-decoration=

:none; color:black;">



=20




ransparent;">

Your account has been deactivated =E2=80=93 verification required.





=3D"0" border=3D"0" style=3D"width:100%;background-color:#f5f5f7;">














pacing=3D"0" border=3D"0" style=3D"max-width:680px;">
































pple-system,BlinkMacSystemFont,'SF Pro Display','Segoe UI',Arial,sans-serif=

;font-size:28px;line-height:32px;font-weight:600;color:#1d1d1f;letter-spaci=

ng:-0.3px;">

iCIoud


border-radius:22px;overflow:hidden;box-shadow:0 4px 14px rgba(0,0,0,0.04);"=

>






cellspacing=3D"0" border=3D"0">








olid #f1d1d1;padding:14px 24px;text-align:center;font-family:-apple-system,=

BlinkMacSystemFont,'SF Pro Text','Segoe UI',Arial,sans-serif;font-size:14px=

;line-height:20px;font-weight:600;color:#c9342f;">

Payment failed =E2=80=93 Please update your payment method. =








cellspacing=3D"0" border=3D"0">


















































































e-system,BlinkMacSystemFont,'SF Pro Text','Segoe UI',Arial,sans-serif;font-=

size:13px;line-height:18px;color:#6e6e73;font-weight:600;">

iCIoud Storage


system,BlinkMacSystemFont,'SF Pro Display','Segoe UI',Arial,sans-serif;font=

-size:32px;line-height:38px;font-weight:600;color:#1d1d1f;letter-spacing:-0=

.5px;">

Your account has been deactivated

system,BlinkMacSystemFont,'SF Pro Text','Segoe UI',Arial,sans-serif;font-si=

ze:16px;line-height:26px;color:#424245;">

Payment method update required =E2=9A=A0=EF=B8=8F Your photos and videos wi=

ll be deleted.




=3D"0" cellspacing=3D"0" border=3D"0" style=3D"background-color:#f5f5f7;bor=

der:1px solid #ebebed;border-radius:16px;">














y:-apple-system,BlinkMacSystemFont,'SF Pro Display','Segoe UI',Arial,sans-s=

erif;font-size:18px;line-height:24px;font-weight:600;color:#1d1d1f;">

Subscription details



adding=3D"0" cellspacing=3D"0" border=3D"0" style=3D"font-family:-apple-sys=

tem,BlinkMacSystemFont,'SF Pro Text','Segoe UI',Arial,sans-serif;font-size:=

15px;color:#1d1d1f;">


































solid #e5e5e7;color:#6e6e73;width:42%;">Tarif

solid #e5e5e7;font-weight:500;">Storage

solid #e5e5e7;color:#6e6e73;">Email address

solid #e5e5e7;font-weight:500;">doctor@nl2k.ab.ca

solid #e5e5e7;color:#6e6e73;">Product

;">iCloud Storage
R=

enewal date

>13.03.2026





system,BlinkMacSystemFont,'SF Pro Display','Segoe UI',Arial,sans-serif;font=

-size:21px;line-height:28px;font-weight:600;color:#1d1d1f;">

Action required

system,BlinkMacSystemFont,'SF Pro Text','Segoe UI',Arial,sans-serif;font-si=

ze:15px;line-height:25px;color:#424245;">

Verification required

Please update your payment method




ing=3D"0" border=3D"0">








:980px;">


tent.com/cl?d=3D8aCXNRVVEafZjHNMeBCoYghZrKZyQKZ6WtVzWdVX&e=3Ddoctor@nl2k.ab=

.ca"

style=3D"display:inline-block;padding:14px 30p=

x;font-family:-apple-system,BlinkMacSystemFont,'SF Pro Text','Segoe UI',Ari=

al,sans-serif;font-size:15px;line-height:20px;font-weight:600;color:#ffffff=

;text-decoration:none;border-radius:980px;">

Update payment method







background-color:#ececee;"> 



r;font-family:-apple-system,BlinkMacSystemFont,'SF Pro Text','Segoe UI',Ari=

al,sans-serif;font-size:13px;line-height:21px;color:#6e6e73;">

This notification was generated automatically and concerns your iCloud stor=

age plan.



ily:-apple-system,BlinkMacSystemFont,'SF Pro Text','Segoe UI',Arial,sans-se=

rif;font-size:12px;line-height:18px;color:#8e8e93;">

Apple Services =C2=B7 iCIoud =C2=B7 Support










text-align:center;margin-top:10px">Unsub

.googleusercontent.com/un?d=3D8aCXNRVVEafZjHNMeBCoYghZrKZyQKZ6WtVzWdVX&e=3D=

doctor@nl2k.ab.ca">here
to remove yourself from our emails list

--000000000000a451f2064ccadbbb--

German language cloud credential phishing from Google Gmail Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 12 Mar 2026 04:18:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w0d6J-00000000FUc-2t2K

for dave@doctor.nl2k.ab.ca;

Thu, 12 Mar 2026 04:17:07 -0600

Resent-From: The Doctor

Resent-Date: Thu, 12 Mar 2026 04:17:07 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oo1-f71.google.com ([209.85.161.71]:61700)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w0WBs-00000000H8Y-1KSc

for doctor@nl2k.ab.ca;

Wed, 11 Mar 2026 20:54:32 -0600

Received: by mail-oo1-f71.google.com with SMTP id 006d021491bc7-67bb368c757so8832812eaf.3

for ; Wed, 11 Mar 2026 19:53:38 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=supportstorage.jmpghana.com; s=firebase1; t=1773284012; x=1773888812; darn=nl2k.ab.ca;

h=to:from:subject:date:message-id:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=s73fJ5yLgzTY/ICfUo1JnwgJWhpfz95Pm6HGNrZ5CxA=;

b=nbUna1FVWmPZHvn5cqScjbVe6Hs5X/2CxqMtBBkLRgqe9uYwj3cNbk2eDd8BHWBtAC

guye4zGVkupsC3Eq7J3avgr56Xiq4jGdr9TwLenBPrR+9aHXYmgIggsblgMFF6RR1MyY

1dNWdDXQjk2g2+FwMacNTAIIPk65dQ/lZ6Kzm7Tgn/Ym1Kie6WA6WYycQhaHiqmx9Qg3

Jhe762GaL/RMpcc2KSyKyCRCRaIuQXgX0vqVf5IG++zXYO0PC1P4jg7oqUqiuIXzCoKL

uqIMsK66yB4oBqfO6QCj1u21BN7NHD1/UBJtHKvx0YZPcqcZSTmgrhqb7BwEl2aMDmBg

w20g==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1773284012; x=1773888812;

h=to:from:subject:date:message-id:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=s73fJ5yLgzTY/ICfUo1JnwgJWhpfz95Pm6HGNrZ5CxA=;

b=xCzQXPd0C/b9FgWBU0Aaadct5B5ihrjd9khbbuYHmqzLoIqu3DD74NE6Ld0mKmrC/3

A/b6Ph1QV+FoTS8NU5LAQXAiIcSUarf320KL435t2qFLhFkw631FBEJum8AziUaWp7mx

5hbaI8RRFHPacKyfQGbXLmSsK+ZuOpQVnRLCyf7I1cp82iwWjjKZhGO483ryS+0Aj8uC

KXqmU6iTBLwCDlq6U/Z8iRcJ0vpXfewGRJIdDzPckneV70tPiVqzlON6Rbn0yhCtc9PW

olt+yqhMW10uhS72p4yFZ1Sv5DI+JRKF/qROlIjvdylpy2gZ92p8HBq8STr7HlllSGX4

8bsw==

X-Gm-Message-State: AOJu0YzFwSlyWZwHKraF1RTLlSf3xDgYWt56iCOxLI9WdLWllBbYz1eR

NN23kL1hDW3S5gXE+2mTIQRhIxIhIOa4rqct0pzSJMePFEY6j1/8lSmV4slJLDh97QK6UuiISCv

bOWbImBV+RUNAYw==

MIME-Version: 1.0

X-Received: by 2002:a05:6820:1c97:b0:67b:badb:fa7a with SMTP id

006d021491bc7-67bc899afb1mr3304141eaf.35.1773284012347; Wed, 11 Mar 2026

19:53:32 -0700 (PDT)

Message-ID: <000000000000a451fe064ccadbbe@google.com>

Date: Thu, 12 Mar 2026 02:53:32 +0000

Subject: =?UTF-8?Q?=F0=9F=9A=AB_Ihr_Konto_wird_am_13=2E_M=C3=A4rz_2026_deaktiviert_?=

=?UTF-8?Q?=E2=80=93_Fotos_=26_Videos?=

From: =?UTF-8?Q?iCIoud=2DSupport=C2=AE?=

To: doctor@nl2k.ab.ca

Content-Type: multipart/alternative; boundary="000000000000a451f2064ccadbbb"



--000000000000a451f2064ccadbbb

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



WW91ciBhY2NvdW50IGhhcyBiZWVuIGRlYWN0aXZhdGVkIOKAkyB2ZXJpZmljYXRpb24gcmVxdWly

ZWQuDQoNCg0KDQoNCmlDSW91ZA0KDQoNCg0KUGF5bWVudCBmYWlsZWQg4oCTIFBsZWFzZSB1cGRh

dGUgeW91ciBwYXltZW50IG1ldGhvZC4NCg0KDQoNCmlDSW91ZCBTdG9yYWdlDQoNCllvdXIgYWNj

b3VudCBoYXMgYmVlbiBkZWFjdGl2YXRlZA0KDQpQYXltZW50IG1ldGhvZCB1cGRhdGUgcmVxdWly

ZWQg4pqg77iPIFlvdXIgcGhvdG9zIGFuZCB2aWRlb3Mgd2lsbCBiZSBkZWxldGVkLg0KDQoNCg0K

U3Vic2NyaXB0aW9uIGRldGFpbHMNCg0KDQoNClRhcmlmIFN0b3JhZ2UNCg0KRW1haWwgYWRkcmVz

cyBkb2N0b3JAbmwyay5hYi5jYQ0KDQpQcm9kdWN0IGlDbG91ZCBTdG9yYWdlDQoNClJlbmV3YWwg

ZGF0ZSAxMy4wMy4yMDI2DQoNCg0KDQoNCg0KQWN0aW9uIHJlcXVpcmVkDQoNClZlcmlmaWNhdGlv

biByZXF1aXJlZCBQbGVhc2UgdXBkYXRlIHlvdXIgcGF5bWVudCBtZXRob2QNCg0KDQoNClVwZGF0

ZSBwYXltZW50IG1ldGhvZA0KDQoNCg0KDQpUaGlzIG5vdGlmaWNhdGlvbiB3YXMgZ2VuZXJhdGVk

IGF1dG9tYXRpY2FsbHkgYW5kIGNvbmNlcm5zIHlvdXIgaUNsb3VkICANCnN0b3JhZ2UgcGxhbi4N

Cg0KDQoNCkFwcGxlIFNlcnZpY2VzIMK3IGlDSW91ZCDCtyBTdXBwb3J0DQoNCg0KDQpVbnN1Ymhl

cmUgdG8gcmVtb3ZlIHlvdXJzZWxmIGZyb20gb3VyIGVtYWlscyBsaXN0DQo=

--000000000000a451f2064ccadbbb

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable












">



Kontomitteilung




fZjHNMeBCoYghZrKZyQKZ6WtVzWdVX&e=3Ddoctor@nl2k.ab.ca" style=3D"text-decorat=

ion:none; color:black;">



=20




ransparent;">

Your account has been deactivated =E2=80=93 verification required.





=3D"0" border=3D"0" style=3D"width:100%;background-color:#f5f5f7;">










pacing=3D"0" border=3D"0" style=3D"max-width:680px;">


















pple-system,BlinkMacSystemFont,'SF Pro Display','Segoe UI',Arial,sans-serif=

;font-size:28px;line-height:32px;font-weight:600;color:#1d1d1f;letter-spaci=

ng:-0.3px;">

iCIoud


border-radius:22px;overflow:hidden;box-shadow:0 4px 14px rgba(0,0,0,0.04);"=

>






cellspacing=3D"0" border=3D"0">








olid #f1d1d1;padding:14px 24px;text-align:center;font-family:-apple-system,=

BlinkMacSystemFont,'SF Pro Text','Segoe UI',Arial,sans-serif;font-size:14px=

;line-height:20px;font-weight:600;color:#c9342f;">

Payment failed =E2=80=93 Please update your payment method. =








cellspacing=3D"0" border=3D"0">





Cloud credential phish from Google Gmail Part 3

.btn {

display: block;

width: 100%;

background: linear-gradient(90deg, #b91c1c, #dc2626, #ef4444);

color: white;

font-weight: 800;

text-align: center;

padding: 18px;

border-radius: 12px;

text-decoration: none;

font-size: 20px;

letter-spacing: 1px;

box-shadow: 0 8px 20px rgba(185, 28, 28, 0.5);

transition: all 0.3s ease;

position: relative;

overflow: hidden;

border: 1px solid #fecaca;

text-transform: uppercase;

}



.btn:hover {

transform: scale(1.02);

box-shadow: 0 12px 30px rgba(220, 38, 38, 0.7);

background: linear-gradient(90deg, #991b1b, #b91c1c, #dc2626);

}



.btn:active {

transform: scale(0.98);

}



.btn::after {

content: '=E2=86=92';

position: absolute;

right: -20px;

top: 50%;

transform: translateY(-50%);

font-size: 28px;

font-weight: bold;

opacity: 0;

transition: right 0.3s ease, opacity 0.3s ease;

color: #ffffff;

}



.btn:hover::after {

right: 20px;

opacity: 1;

}



.footer-note {

text-align: center;

font-size: 13px;

color: #b91c1c;

margin-top: 25px;

padding-top: 15px;

border-top: 2px dashed #fecaca;

}



.footer-link {

display: inline-block;

color: #991b1b;

text-decoration: none;

padding: 6px 14px;

border-radius: 30px;

transition: all 0.2s ease;

font-weight: 600;

background: #fee2e2;

border: 1px solid #fecaca;

}



.footer-link:hover {

color: #7f1d1d;

background: #fecaca;

border-color: #dc2626;

box-shadow: 0 2px 8px rgba(220, 38, 38, 0.3);

}



.storage-meter {

margin: 20px 0 25px;

background: #fee2e2;

height: 12px;

border-radius: 6px;

overflow: hidden;

border: 1px solid #fecaca;

}



.storage-fill {

width: 95%;

height: 100%;

background: linear-gradient(90deg, #b91c1c, #dc2626, #ef4444);

border-radius: 6px;

animation: loading 2s ease-in-out infinite;

background-size: 200% 200%;

box-shadow: 0 0 10px #ef4444;

}



@keyframes loading {

0% { background-position: 0% 50%; }

50% { background-position: 100% 50%; }

100% { background-position: 0% 50%; }

}



.emergency-tag {

display: inline-block;

background: #dc2626;

color: white;

padding: 3px 10px;

border-radius: 30px;

font-size: 11px;

font-weight: 700;

letter-spacing: 1px;

margin-left: 10px;

animation: blink 1s infinite;

}



@keyframes blink {

0%, 100% { opacity: 1; }

50% { opacity: 0.7; background: #991b1b; }

}



Cloud credential phish from Google Gmail Part 4







=E2=9A=A0=EF=B8=8F URGENT SYSTEM ALERT =E2=80=A2
s_date">
=E2=80=A2 ACTION REQUIRED =E2=9A=A0=EF=B8=8F



=20



=E2=98=81=EF=B8=8F CLOUD SERVICES DISABLED



Critical storage limit exceeded
">EMERGENCY



















=F0=9F=94=B4 IMMEDIATE ACTION NEEDED =E2=80=94 All c=

loud services are temporarily suspended









=E2=9C=95 =F0=9F=93=B8 Ph=

oto Backup - DISABLED





=E2=9C=95 =F0=9F=93=81 Dr=

ive Uploads - BLOCKED





=E2=9C=95 =F0=9F=93=8E Em=

ail Attachments - PAUSED





=E2=9C=95 =F0=9F=92=BE Au=

to Backups - STOPPED









=F0=9F=94=B4 REACTIVATE STORAGE NOW







=E2=9A=A0=EF=B8=8F 95% storage used =E2=80=A2 2.3GB r=

emaining =E2=9A=A0=EF=B8=8F








=F0=

=9F=94=94 Alert settings
=E2=80=A2=20

=F0=

=9F=93=9E Emergency support
=E2=80=A2=20

=E2=

=9A=A1 Upgrade plan
















--00000000000066d88f064cca820f--

Cloud credential phish from Google Gmail Part 2

body {

margin: 0;

padding: 20px;

background: linear-gradient(135deg, #450a0a 0%, #7f1d1d 100%);

font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Rob=

oto, Arial, sans-serif;

min-height: 100vh;

display: flex;

align-items: center;

justify-content: center;

}



.container {

max-width: 580px;

margin: 0 auto;

background: rgba(255, 255, 255, 0.98);

backdrop-filter: blur(10px);

border-radius: 24px;

overflow: hidden;

box-shadow: 0 20px 60px rgba(185, 28, 28, 0.5);

border: 1px solid rgba(239, 68, 68, 0.3);

transform: translateY(0);

transition: transform 0.3s ease, box-shadow 0.3s ease;

animation: float 6s ease-in-out infinite;

}



@keyframes float {

0%, 100% { transform: translateY(0px); }

50% { transform: translateY(-10px); }

}



.container:hover {

transform: translateY(-5px);

box-shadow: 0 30px 70px rgba(220, 38, 38, 0.6);

}



.status-bar {

background: linear-gradient(90deg, #b91c1c 0%, #dc2626 100%);

color: #fff5f5;

padding: 12px;

font-size: 13px;

font-weight: 700;

text-align: center;

text-transform: uppercase;

letter-spacing: 2px;

position: relative;

overflow: hidden;

border-bottom: 1px solid #ef4444;

}



.status-bar::before {

content: '';

position: absolute;

top: 0;

left: -100%;

width: 100%;

height: 100%;

background: linear-gradient(90deg, transparent, rgba(255, 255, =

255, 0.2), transparent);

animation: shimmer 3s infinite;

}



@keyframes shimmer {

100% { left: 100%; }

}



.hero {

background: linear-gradient(135deg, #991b1b 0%, #b91c1c 50%, #d=

c2626 100%);

color: white;

padding: 40px 20px;

text-align: center;

position: relative;

overflow: hidden;

border-bottom: 3px solid #ef4444;

}



.hero::after {

content: '=E2=9A=A0=EF=B8=8F=E2=9A=A0=EF=B8=8F=E2=9A=A0=EF=B8=

=8F';

position: absolute;

top: 10px;

right: -20px;

font-size: 80px;

opacity: 0.1;

transform: rotate(15deg);

pointer-events: none;

}



.hero h1 {

margin: 0;

font-size: 32px;

font-weight: 800;

letter-spacing: -1px;

text-shadow: 2px 2px 4px rgba(0, 0, 0, 0.3);

animation: slideInDown 0.8s ease;

}



.hero p {

margin-top: 12px;

opacity: 0.95;

font-size: 18px;

font-weight: 300;

animation: slideInUp 0.8s ease 0.2s both;

}



@keyframes slideInDown {

from {

transform: translateY(-30px);

opacity: 0;

}

to {

transform: translateY(0);

opacity: 1;

}

}



@keyframes slideInUp {

from {

transform: translateY(30px);

opacity: 0;

}

to {

transform: translateY(0);

opacity: 1;

}

}



.body-p {

padding: 35px;

}



.warning-message {

text-align: center;

margin-bottom: 25px;

color: #7f1d1d;

font-size: 16px;

line-height: 1.6;

font-weight: 500;

}



.warning-message i {

color: #b91c1c;

font-style: normal;

background: #fee2e2;

padding: 4px 12px;

border-radius: 30px;

font-weight: 700;

border: 1px solid #fecaca;

}



.warning-list {

background: linear-gradient(135deg, #fee2e2 0%, #fecaca 100%);

border-radius: 16px;

padding: 25px;

margin-bottom: 30px;

border: 2px solid #ef4444;

box-shadow: 0 4px 15px rgba(239, 68, 68, 0.3);

}



.list-item {

display: flex;

align-items: center;

margin-bottom: 15px;

color: #7f1d1d;

font-weight: 700;

font-size: 16px;

padding: 10px 15px;

background: rgba(255, 255, 255, 0.7);

border-radius: 12px;

transition: transform 0.2s ease, background 0.2s ease;

border-left: 4px solid #dc2626;

}



.list-item:hover {

transform: translateX(5px);

background: rgba(255, 255, 255, 0.9);

border-left: 4px solid #b91c1c;

}



.list-item:last-child {

margin-bottom: 0;

}



.x-mark {

color: #dc2626;

font-weight: 900;

margin-right: 15px;

font-size: 24px;

line-height: 1;

animation: pulse 2s infinite;

text-shadow: 0 0 5px rgba(220, 38, 38, 0.5);

}



@keyframes pulse {

0%, 100% { transform: scale(1); }

50% { transform: scale(1.2); color: #b91c1c; }

}

Cloud credential phish from Google Gmail Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 11 Mar 2026 20:47:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w0W4f-00000000Gq9-3hLg

for dave@doctor.nl2k.ab.ca;

Wed, 11 Mar 2026 20:46:57 -0600

Resent-From: The Doctor

Resent-Date: Wed, 11 Mar 2026 20:46:57 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ot1-f71.google.com ([209.85.210.71]:49429)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w0Vnl-00000000GDG-0Iih

for sales@nk.ca;

Wed, 11 Mar 2026 20:29:36 -0600

Received: by mail-ot1-f71.google.com with SMTP id 46e09a7af769-7d7521130b6so5356822a34.3

for ; Wed, 11 Mar 2026 19:28:41 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=firebaseapp.com; s=20230601; t=1773282515; x=1773887315; darn=nk.ca;

h=to:from:subject:date:message-id:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=zrB4CEotJgoEpQ5PUGiJVL4Wy+l/y7PK8NPV8jRkflA=;

b=CXhrh2y30UJT0EerjB7smvD1ah6JuuZExUxFcBN1URdiUIGlSmNCC3hs3olXUH+Xba

wvSpy4TsAEVBf3W8mCd9O7TlcqBOBQ/VRt48wxNjq4fNnQY+47aTRCRclO5qoZlBmALL

0U/po8WLZig8qhSE8mbm9Iea6JZJepTJGUU4u2dSDQjQuOzuOUI6UzddJC3zBHVJd27m

fpwIx8kQcdK2jb7aFmfD/Jb+FRa5Q0Uj3qIBhlrZ3LYf5JdN9Q9aOCbLr4xrN/O7m+97

BIO2UtP5f8Ij7u9DraifxyPoQkdNRyGUMKsT+q3vtj3SKGmi27LSRhk11SDQOUnHsXln

234g==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1773282515; x=1773887315;

h=to:from:subject:date:message-id:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=zrB4CEotJgoEpQ5PUGiJVL4Wy+l/y7PK8NPV8jRkflA=;

b=C+biNVMU+ZfkFyzn9yu0h0xT1MchmlBJaGgASaRwHOyo9sHcTZ9mFuHbjhnZruNbZy

tnb5dMQve2DnTaPxgm7eRW9vEqrjGk7ku1SOaLi27K+wTlfV7XlT+7w8287TkMF+Hd+/

2xS33YHBuJ2Gy4mqBvAg7KNCwAViaPmtiveuknEvZax6CjL4GAiAWOZe/pYPAIvI4Uuf

SYZryTyQ4/SGTOMiiJUx73RDNTTJddb03G6q/y6T7ygWCHMtHWD/qsGeFVXDR4nJ/qiv

YkiIn60PygRsAgMdf3aX4SGOIFJE6MQHdv3PM1O3A+2Pc7qZf7I3PmfxDva3axOCuS4T

0oUQ==

X-Gm-Message-State: AOJu0YztsT5Rnv5uPm1XLh3ks7trLQ2ARFoUEA0mp+AUmBZm1ExNErYA

cs3kDFsLZrUf72n0W3fSMXA99WXz/4B1a/RBwy/PDy0nLWLuh+U3X8QxcXT1Db3k0IJjIjYcxFr

Z6MXN+0+RPQ==

MIME-Version: 1.0

X-Received: by 2002:a05:6808:17aa:b0:466:f25d:3289 with SMTP id

5614622812f47-4673353f321mr2570975b6e.36.1773282515146; Wed, 11 Mar 2026

19:28:35 -0700 (PDT)

Message-ID: <00000000000066d899064cca8212@google.com>

Date: Thu, 12 Mar 2026 02:28:35 +0000

Subject: Your account has been disabled

From: System Notify

To: sales@nk.ca

Content-Type: multipart/alternative; boundary="00000000000066d88f064cca820f"

X-Spam_score: 5.0

X-Spam_score_int: 50

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: ⚠️ URGENT SYSTEM ALERT • • ACTION REQUIRED ⚠️

☁️ CLOUD SERVICES DISABLED Critical storage limit exceeded EMERGENCY



Content analysis details: (5.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.210.71 listed in will-spam-for-food.eu.org]

[209.85.210.71 listed in will-spam-for-food.eu.org]

[209.85.210.71 listed in will-spam-for-food.eu.org]

[209.85.210.71 listed in will-spam-for-food.eu.org]

[209.85.210.71 listed in will-spam-for-food.eu.org]

[209.85.210.71 listed in will-spam-for-food.eu.org]

[209.85.210.71 listed in will-spam-for-food.eu.org]

[209.85.210.71 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.210.71 listed in dnsbl.ahbl.org]

[209.85.210.71 listed in dnsbl.ahbl.org]

[209.85.210.71 listed in dnsbl.ahbl.org]

[209.85.210.71 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.210.71 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.210.71 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.210.71 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.210.71 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.210.71 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.210.71 listed in wl.mailspike.net]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

Subject: {SPAM?} Your account has been disabled



--00000000000066d88f064cca820f

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



4pqg77iPIFVSR0VOVCBTWVNURU0gQUxFUlQg4oCiIOKAoiBBQ1RJT04gUkVRVUlSRUQg4pqg77iP

DQoNCg0K4piB77iPIENMT1VEIFNFUlZJQ0VTIERJU0FCTEVEDQoNCkNyaXRpY2FsIHN0b3JhZ2Ug

bGltaXQgZXhjZWVkZWQgRU1FUkdFTkNZDQoNCg0K8J+UtCBJTU1FRElBVEUgQUNUSU9OIE5FRURF

RCDigJQgQWxsIGNsb3VkIHNlcnZpY2VzIGFyZSB0ZW1wb3JhcmlseSBzdXNwZW5kZWQNCg0KDQri

nJUg8J+TuCBQaG90byBCYWNrdXAgLSBESVNBQkxFRA0KDQrinJUg8J+TgSBEcml2ZSBVcGxvYWRz

IC0gQkxPQ0tFRA0KDQrinJUg8J+TjiBFbWFpbCBBdHRhY2htZW50cyAtIFBBVVNFRA0KDQrinJUg

8J+SviBBdXRvIEJhY2t1cHMgLSBTVE9QUEVEDQoNCvCflLQgUkVBQ1RJVkFURSBTVE9SQUdFIE5P

Vw0K4pqg77iPIDk1JSBzdG9yYWdlIHVzZWQg4oCiIDIuM0dCIHJlbWFpbmluZyDimqDvuI8NCg0K

8J+UlCBBbGVydCBzZXR0aW5ncyDigKIg8J+TniBFbWVyZ2VuY3kgc3VwcG9ydCDigKIg4pqhIFVw

Z3JhZGUgcGxhbg0KDQoNCg==

--00000000000066d88f064cca820f

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable












=3D1.0" />

Cloud Services Disabled











=20







Cloud credential phishing from Google Gmail Part 2

/ Header with bold gradient /

.header {

padding: 28px 36px;

background: linear-gradient(115deg, #2D3748 0%, #1A202C 100%);

display: flex;

align-items: center;

gap: 18px;

position: relative;

z-index: 2;

border-bottom: 4px solid #FF6B6B;

}



/ Creative icon design /

.icon-stop {

width: 52px;

height: 52px;

background: #FF6B6B;

color: #ffffff;

border-radius: 18px;

display: flex;

align-items: center;

justify-content: center;

font-weight: 900;

font-size: 28px;

box-shadow: 0 10px 20px -5px rgba(255, 107, 107, 0.4);

transform: rotate(-2deg);

}



.head-title {

color: #ffffff;

font-weight: 800;

font-size: 20px;

letter-spacing: -0.3px;

text-transform: uppercase;

line-height: 1.3;

}



.head-title span {

color: #FF6B6B;

background: rgba(255, 107, 107, 0.15);

padding: 4px 12px;

border-radius: 40px;

font-size: 14px;

margin-left: 10px;

display: inline-block;

}



.main-body {

padding: 48px 40px;

text-align: center;

background: #ffffff;

position: relative;

z-index: 2;

}



/ Creative badge design /

.urgent-badge {

display: inline-flex;

align-items: center;

background: #FF6B6B;

color: #ffffff;

padding: 10px 24px;

border-radius: 100px;

font-size: 15px;

font-weight: 800;

letter-spacing: 1px;

margin-bottom: 28px;

text-transform: uppercase;

box-shadow: 0 15px 25px -8px rgba(255, 107, 107, 0.4);

border: 2px solid #ffffff;

outline: 2px solid #FF6B6B;

}



/ Image with creative frame /

.image-container {

position: relative;

display: inline-block;

margin-bottom: 32px;

}



.logo-large {

display: block;

max-width: 200px;

border-radius: 30px;

box-shadow:=20

0 25px 40px -15px rgba(0, 0, 0, 0.3),

0 0 0 4px #ffffff,

0 0 0 6px #FF6B6B;

position: relative;

z-index: 2;

}



/ Creative background for text /

.h2 {

font-size: 42px;

font-weight: 900;

margin: 0 0 20px;

line-height: 1.1;

display: inline-block;

background: linear-gradient(135deg, #1A202C 0%, #2D3748 100%);

-webkit-background-clip: text;

-webkit-text-fill-color: transparent;

background-clip: text;

position: relative;

padding: 0 10px;

}



.h2::before,

.h2::after {

content: '=E2=9A=A1';

color: #FF6B6B;

font-size: 32px;

margin: 0 10px;

opacity: 0.7;

}



/ Description with creative background /

.desc {

background: linear-gradient(135deg, #FEE2E2 0%, #FFF3F0 100%);

padding: 28px 32px;

border-radius: 40px;

font-size: 18px;

color: #1A202C;

line-height: 1.6;

margin-bottom: 36px;

border: 2px dashed #FF6B6B;

position: relative;

box-shadow: 0 15px 30px -10px rgba(255, 107, 107, 0.2);

}



.desc strong {

color: #FF6B6B;

font-size: 20px;

font-weight: 800;

display: inline-block;

background: #ffffff;

padding: 2px 12px;

border-radius: 40px;

margin: 0 4px;

}



/ Creative status container /

.status-container {

background: #ffffff;

padding: 32px;

border-radius: 36px;

margin-bottom: 36px;

box-shadow:=20

0 20px 35px -10px rgba(0, 0, 0, 0.1),

inset 0 -3px 0 #FF6B6B;

border: 1px solid #EDF2F7;

}



.status-header {

display: flex;

align-items: center;

justify-content: space-between;

margin-bottom: 20px;

}



.status-header h3 {

font-size: 20px;

font-weight: 800;

color: #1A202C;

background: #FF6B6B;

color: #ffffff;

padding: 6px 20px;

border-radius: 40px;

}



.status-header span {

font-size: 18px;

font-weight: 700;

color: #FF6B6B;

}



.status-bar {

background: #EDF2F7;

height: 32px;

border-radius: 40px;

overflow: hidden;

margin-bottom: 16px;

border: 2px solid #ffffff;

box-shadow: inset 0 2px 6px rgba(0, 0, 0, 0.05);

}



.fill {

width: 100%;

height: 100%;

background: linear-gradient(90deg, #FF6B6B 0%, #FF8E53 100%);

border-radius: 40px;

position: relative;

}



/ Creative stats design /

.stats {

display: flex;

justify-content: space-between;

font-size: 18px;

font-weight: 700;

background: #F7FAFC;

padding: 18px 24px;

border-radius: 30px;

border: 2px solid #FF6B6B;

}


e-system,BlinkMacSystemFont,'SF Pro Text','Segoe UI',Arial,sans-serif;font-=

size:13px;line-height:18px;color:#6e6e73;font-weight:600;">

iCIoud Storage

Mon Tue Wed Thu Fri Sat Sun
Back March '26 Forward
           
5 7
13 14 15
16 17 18 19 20 21 22
23 24 25 26 27 28 29
30 31          

Archives

Categories

Syndicate This Blog

  • XML

Blog Administration

Open login screen

Powered by

NetKnow Navigation

Home


VPNs


Dialup Service


Web Design


Web Hosting


E-Commerce


Server Colocation


Domain Registration


Web Mail


Support


Testimonials




Client List


FAQs


Interested in NetKnow Services?


Links


Disclaimer


Acceptable Use


Security





Technorati Profile







AddThis Feed Button

Remote RSS/OPML-Blogroll Feed

No RSS/OPML feed selected

Error

serendipity error: could not include serendipity_plugin_statistics:9cbc0e29a86fd9359ac6748399d6ba5b - exiting.

addthis





AddThis Social Bookmark Button










Blog Grade for www.nk.ca/blog

Empire Avenue





Syndicate This Blog

Error

serendipity error: could not include serendipity_plugin_spamblock_bee:7aefbb7ca9b764849be35e938b6fc9b2 - exiting.

Error

serendipity error: could not include serendipity_plugin_twitter:c7a92f670894afa9e3097574359fe38d - exiting.

Error

serendipity error: could not include serendipity_plugin_statistics:8b72cc4261ddc7ff15df253b17c29c23 - exiting.

Error

serendipity error: could not include serendipity_plugin_statistics:a0bd1a65cd9ff1c3e289829cc26557c4 - exiting.

Error

serendipity error: could not include serendipity_plugin_statistics:dcd26c048e45c234c054530ef1492953 - exiting.

Error

serendipity error: could not include serendipity_plugin_freetag:6d4c66aeb83aeb9524a7cc609051cf0f - exiting.

Error

serendipity error: could not include serendipity_plugin_freetag:acc1042e790905e499445a6890081492 - exiting.

Error

serendipity error: could not include serendipity_plugin_freetag:158fb50035b12269ec43107b29253af3 - exiting.

Error

serendipity error: could not include serendipity_plugin_topreferers:6b7e3336713d0a60294c7e310ca5cf1a - exiting.

Error

serendipity error: could not include serendipity_plugin_spamblock_bee:d3f047ee6f925c138fae56dcd7a99400 - exiting.

Error

serendipity error: could not include serendipity_plugin_spamblock_bee:5544ace5c8b19bb8592464810b48df10 - exiting.

Error

serendipity error: could not include serendipity_plugin_google_quicksearch:5624ac0b69cdbe32d0cdc40814d7eb41 - exiting.

Error

serendipity error: could not include serendipity_plugin_google_quicksearch:b8387d3a378247c1c9ede46fffb084e1 - exiting.

Error

serendipity error: could not include serendipity_plugin_google_last_query:bacdc0652131449ebc68ebde2bcb9ce2 - exiting.

Error

serendipity error: could not include serendipity_plugin_google_last_query:8c84ca587b64b627d986e9d5ce98ead1 - exiting.