German Language Cloud Credential Phish from Google Gmail Part 2






border-radius:22px;overflow:hidden;box-shadow:0 4px 14px rgba(0,0,0,0.04);"=

>






cellspacing=3D"0" border=3D"0">








olid #f1d1d1;padding:14px 24px;text-align:center;font-family:-apple-system,=

BlinkMacSystemFont,'SF Pro Text','Segoe UI',Arial,sans-serif;font-size:14px=

;line-height:20px;font-weight:600;color:#c9342f;">

Payment failed =E2=80=93 Please update your payment method. =








cellspacing=3D"0" border=3D"0">






















































































e-system,BlinkMacSystemFont,'SF Pro Text','Segoe UI',Arial,sans-serif;font-=

size:13px;line-height:18px;color:#6e6e73;font-weight:600;">

iCIoud Storage


system,BlinkMacSystemFont,'SF Pro Display','Segoe UI',Arial,sans-serif;font=

-size:32px;line-height:38px;font-weight:600;color:#1d1d1f;letter-spacing:-0=

.5px;">

Your account has been deactivated

system,BlinkMacSystemFont,'SF Pro Text','Segoe UI',Arial,sans-serif;font-si=

ze:16px;line-height:26px;color:#424245;">

Payment method update required =E2=9A=A0=EF=B8=8F Your photos and videos wi=

ll be deleted.




=3D"0" cellspacing=3D"0" border=3D"0" style=3D"background-color:#f5f5f7;bor=

der:1px solid #ebebed;border-radius:16px;">














y:-apple-system,BlinkMacSystemFont,'SF Pro Display','Segoe UI',Arial,sans-s=

erif;font-size:18px;line-height:24px;font-weight:600;color:#1d1d1f;">

Subscription details



adding=3D"0" cellspacing=3D"0" border=3D"0" style=3D"font-family:-apple-sys=

tem,BlinkMacSystemFont,'SF Pro Text','Segoe UI',Arial,sans-serif;font-size:=

15px;color:#1d1d1f;">


































solid #e5e5e7;color:#6e6e73;width:42%;">Tarif

solid #e5e5e7;font-weight:500;">Storage

solid #e5e5e7;color:#6e6e73;">Email address

solid #e5e5e7;font-weight:500;">doctor@nl2k.ab.ca

solid #e5e5e7;color:#6e6e73;">Product

;">iCloud Storage
R=

enewal date

>13.03.2026





system,BlinkMacSystemFont,'SF Pro Display','Segoe UI',Arial,sans-serif;font=

-size:21px;line-height:28px;font-weight:600;color:#1d1d1f;">

Action required

system,BlinkMacSystemFont,'SF Pro Text','Segoe UI',Arial,sans-serif;font-si=

ze:15px;line-height:25px;color:#424245;">

Verification required

Please update your payment method




ing=3D"0" border=3D"0">








:980px;">


KNAs8MXyWR29i9vkCRRS3r9QKdw&e=3Ddoctor@nl2k.ab.ca"

style=3D"display:inline-block;padding:14px 30p=

x;font-family:-apple-system,BlinkMacSystemFont,'SF Pro Text','Segoe UI',Ari=

al,sans-serif;font-size:15px;line-height:20px;font-weight:600;color:#ffffff=

;text-decoration:none;border-radius:980px;">

Update payment method







background-color:#ececee;"> 



r;font-family:-apple-system,BlinkMacSystemFont,'SF Pro Text','Segoe UI',Ari=

al,sans-serif;font-size:13px;line-height:21px;color:#6e6e73;">

This notification was generated automatically and concerns your iCloud stor=

age plan.













ily:-apple-system,BlinkMacSystemFont,'SF Pro Text','Segoe UI',Arial,sans-se=

rif;font-size:12px;line-height:18px;color:#8e8e93;">

Apple Services =C2=B7 iCIoud =C2=B7 Support


















text-align:center;margin-top:10px">Unsub
=3D9gRaLB643DNoaKNAs8MXyWR29i9vkCRRS3r9QKdw&e=3Ddoctor@nl2k.ab.ca">here
=

to remove yourself from our emails list


--000000000000b64de5064cd9c884--

German Language Cloud Credential Phish from Google Gmail Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 12 Mar 2026 15:38:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w0njB-00000000NmD-1bu6

for dave@doctor.nl2k.ab.ca;

Thu, 12 Mar 2026 15:37:57 -0600

Resent-From: The Doctor

Resent-Date: Thu, 12 Mar 2026 15:37:57 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-vk1-f197.google.com ([209.85.221.197]:55617)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w0mrr-00000000DXY-3lpZ

for doctor@nl2k.ab.ca;

Thu, 12 Mar 2026 14:43:00 -0600

Received: by mail-vk1-f197.google.com with SMTP id 71dfb90a1353d-56afd606ff0so3082939e0c.3

for ; Thu, 12 Mar 2026 13:42:05 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=cloudstorage08.jmpghana.com; s=firebase1; t=1773348119; x=1773952919; darn=nl2k.ab.ca;

h=to:from:subject:date:message-id:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=5tDYVof1qQhH4j308MUUcfHdJO/lYx01Dc/aJnXESIQ=;

b=TI3766DLHCXAqfcbWajY7NZJhOW0YC72EDLSdxoGzwTlFR9G1KMidlhvUhX7hKfgaR

nyJNQLmLWDUO3j6sacNtOdfraiSTvWzTcqPTvq0D/y+JqsWFDo7wfYBRlN9Nre6/pwh+

P7LpJCSAltrQr43W9PMDr4eLtkAsTKC+G7WYQGbZVXsO45YgSXJ0AlJw2fPKV9BQFkji

RidHKXi9qCEr1n4QAPn55XEcnKXu3qPy5v06ikVXjnjub6nMj/o+ynRSFbd39ISuvTq4

STSt7z9ln1eaFf+/KDTZpOIbqO5xqxGL531R8y9LV0rNLwB47s2RGZn7s9TceeEdFj6M

AZtA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1773348119; x=1773952919;

h=to:from:subject:date:message-id:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=5tDYVof1qQhH4j308MUUcfHdJO/lYx01Dc/aJnXESIQ=;

b=Tp3Z5M8iX/mvYz9gLGnjVmu9qnQ2XPzIxdtpUIZpt171rD7rKts4wrjIa4U+xDzRDV

gBrkPVu/kq4ZYq5LQohu5+QOKGe90vDcFDjsFQ2QBwu2RJT5aC2B1VEOO4y33afVRzha

cLw5pIZRUVMRDxEyXbna78W7YhXCoxBWpmQUoFU3kP98HzaTYX1QocKpraTcQB05Tn28

KoD3ihHzVnGeq5LEl9W7DZPieovTPHJy9RIrBMyX4tfA5FPWzaVKJcLUnIYROe4xI8c4

RSNXQFQHtTn2RgodgCkyhttV7SFtxDZy340QQrv8upjNhWk83xa3xrVrYD/Eu7BC9OoL

r5jw==

X-Gm-Message-State: AOJu0YzrCo2lcQPFHQLD9J/MdWAEaQh6K6Rm4yEiFE+A5pmYfNdLIDjx

FSfs/Ivfej6mLOZoTthE+Jen+jakKBp7ecPpckmVFjlH+UZBTrPdnDFqHfLdiB5AOuwr3RYMgTm

pFABPtuN/BQJyYw==

MIME-Version: 1.0

X-Received: by 2002:a05:6122:6286:b0:56b:931:2f2d with SMTP id

71dfb90a1353d-56b62a15113mr245972e0c.19.1773348119268; Thu, 12 Mar 2026

13:41:59 -0700 (PDT)

Message-ID: <000000000000b64df1064cd9c887@google.com>

Date: Thu, 12 Mar 2026 20:41:59 +0000

Subject: =?UTF-8?Q?=F0=9F=9A=AB_Ihr_Konto_wird_am_13=2E_M=C3=A4rz_2026_deaktiviert_?=

=?UTF-8?Q?=E2=80=93_Fotos_=26_Videos?=

From: =?UTF-8?Q?iCIoud=2DSupport=C2=AE?=

To: doctor@nl2k.ab.ca

Content-Type: multipart/alternative; boundary="000000000000b64de5064cd9c884"

X-Spam_score: 6.3

X-Spam_score_int: 63

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Your account has been deactivated – verification required.

iCIoud Payment failed – Please update your payment method.



Content analysis details: (6.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.221.197 listed in list.dnswl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.221.197 listed in will-spam-for-food.eu.org]

[209.85.221.197 listed in will-spam-for-food.eu.org]

[209.85.221.197 listed in will-spam-for-food.eu.org]

[209.85.221.197 listed in will-spam-for-food.eu.org]

[209.85.221.197 listed in will-spam-for-food.eu.org]

[209.85.221.197 listed in will-spam-for-food.eu.org]

[209.85.221.197 listed in will-spam-for-food.eu.org]

[209.85.221.197 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.221.197 listed in dnsbl.ahbl.org]

[209.85.221.197 listed in dnsbl.ahbl.org]

[209.85.221.197 listed in dnsbl.ahbl.org]

[209.85.221.197 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.221.197 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.221.197 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.221.197 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.221.197 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.221.197 listed in wl.mailspike.net]

0.0 NORMAL_HTTP_TO_IP URI: URI host has a public dotted-decimal IPv4

address

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.5 VOWEL_FROM_5 Impronouncable from header (6 consecutive vowels)

1.0 URI_HEX_IP URI with hex-encoded IP-address host

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information

Subject: {SPAM?} =?UTF-8?Q?=F0=9F=9A=AB_Ihr_Konto_wird_am_13=2E_M=C3=A4rz_2026_deaktiviert_?=

=?UTF-8?Q?=E2=80=93_Fotos_=26_Videos?=



--000000000000b64de5064cd9c884

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



WW91ciBhY2NvdW50IGhhcyBiZWVuIGRlYWN0aXZhdGVkIOKAkyB2ZXJpZmljYXRpb24gcmVxdWly

ZWQuDQoNCg0KDQoNCmlDSW91ZA0KDQoNCg0KUGF5bWVudCBmYWlsZWQg4oCTIFBsZWFzZSB1cGRh

dGUgeW91ciBwYXltZW50IG1ldGhvZC4NCg0KDQoNCmlDSW91ZCBTdG9yYWdlDQoNCllvdXIgYWNj

b3VudCBoYXMgYmVlbiBkZWFjdGl2YXRlZA0KDQpQYXltZW50IG1ldGhvZCB1cGRhdGUgcmVxdWly

ZWQg4pqg77iPIFlvdXIgcGhvdG9zIGFuZCB2aWRlb3Mgd2lsbCBiZSBkZWxldGVkLg0KDQoNCg0K

U3Vic2NyaXB0aW9uIGRldGFpbHMNCg0KDQoNClRhcmlmIFN0b3JhZ2UNCg0KRW1haWwgYWRkcmVz

cyBkb2N0b3JAbmwyay5hYi5jYQ0KDQpQcm9kdWN0IGlDbG91ZCBTdG9yYWdlDQoNClJlbmV3YWwg

ZGF0ZSAxMy4wMy4yMDI2DQoNCg0KDQoNCg0KQWN0aW9uIHJlcXVpcmVkDQoNClZlcmlmaWNhdGlv

biByZXF1aXJlZCBQbGVhc2UgdXBkYXRlIHlvdXIgcGF5bWVudCBtZXRob2QNCg0KDQoNClVwZGF0

ZSBwYXltZW50IG1ldGhvZA0KDQoNCg0KDQpUaGlzIG5vdGlmaWNhdGlvbiB3YXMgZ2VuZXJhdGVk

IGF1dG9tYXRpY2FsbHkgYW5kIGNvbmNlcm5zIHlvdXIgaUNsb3VkICANCnN0b3JhZ2UgcGxhbi4N

Cg0KDQoNCkFwcGxlIFNlcnZpY2VzIMK3IGlDSW91ZCDCtyBTdXBwb3J0DQoNCg0KDQpVbnN1Ymhl

cmUgdG8gcmVtb3ZlIHlvdXJzZWxmIGZyb20gb3VyIGVtYWlscyBsaXN0DQo=

--000000000000b64de5064cd9c884

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable












">



Kontomitteilung




w&e=3Ddoctor@nl2k.ab.ca" style=3D"text-decoration:none; color:black;">



=20




ransparent;">

Your account has been deactivated =E2=80=93 verification required.





=3D"0" border=3D"0" style=3D"width:100%;background-color:#f5f5f7;">
























pacing=3D"0" border=3D"0" style=3D"max-width:680px;">
























































































pple-system,BlinkMacSystemFont,'SF Pro Display','Segoe UI',Arial,sans-serif=

;font-size:28px;line-height:32px;font-weight:600;color:#1d1d1f;letter-spaci=

ng:-0.3px;">

iCIoud


system,BlinkMacSystemFont,'SF Pro Display','Segoe UI',Arial,sans-serif;font=

-size:32px;line-height:38px;font-weight:600;color:#1d1d1f;letter-spacing:-0=

.5px;">

Your account has been deactivated

system,BlinkMacSystemFont,'SF Pro Text','Segoe UI',Arial,sans-serif;font-si=

ze:16px;line-height:26px;color:#424245;">

Payment method update required =E2=9A=A0=EF=B8=8F Your photos and videos wi=

ll be deleted.




=3D"0" cellspacing=3D"0" border=3D"0" style=3D"background-color:#f5f5f7;bor=

der:1px solid #ebebed;border-radius:16px;">














y:-apple-system,BlinkMacSystemFont,'SF Pro Display','Segoe UI',Arial,sans-s=

erif;font-size:18px;line-height:24px;font-weight:600;color:#1d1d1f;">

Subscription details



adding=3D"0" cellspacing=3D"0" border=3D"0" style=3D"font-family:-apple-sys=

tem,BlinkMacSystemFont,'SF Pro Text','Segoe UI',Arial,sans-serif;font-size:=

15px;color:#1d1d1f;">


































solid #e5e5e7;color:#6e6e73;width:42%;">Tarif

solid #e5e5e7;font-weight:500;">Storage

solid #e5e5e7;color:#6e6e73;">Email address

solid #e5e5e7;font-weight:500;">doctor@nk.ca

solid #e5e5e7;color:#6e6e73;">Product

;">iCloud Storage
R=

enewal date

>13.03.2026





system,BlinkMacSystemFont,'SF Pro Display','Segoe UI',Arial,sans-serif;font=

-size:21px;line-height:28px;font-weight:600;color:#1d1d1f;">

Action required

system,BlinkMacSystemFont,'SF Pro Text','Segoe UI',Arial,sans-serif;font-si=

ze:15px;line-height:25px;color:#424245;">

Verification required

Please update your payment method




ing=3D"0" border=3D"0">








:980px;">


8YBk3fd21TcChGpTjexQ9vsHkqL&e=3Ddoctor@nk.ca"

style=3D"display:inline-block;padding:14px 30p=

x;font-family:-apple-system,BlinkMacSystemFont,'SF Pro Text','Segoe UI',Ari=

al,sans-serif;font-size:15px;line-height:20px;font-weight:600;color:#ffffff=

;text-decoration:none;border-radius:980px;">

Update payment method







background-color:#ececee;"> 



r;font-family:-apple-system,BlinkMacSystemFont,'SF Pro Text','Segoe UI',Ari=

al,sans-serif;font-size:13px;line-height:21px;color:#6e6e73;">

This notification was generated automatically and concerns your iCloud stor=

age plan.



ily:-apple-system,BlinkMacSystemFont,'SF Pro Text','Segoe UI',Arial,sans-se=

rif;font-size:12px;line-height:18px;color:#8e8e93;">

Apple Services =C2=B7 iCIoud =C2=B7 Support














text-align:center;margin-top:10px">Unsub

=3D9Xn4aiFCsmqaF8YBk3fd21TcChGpTjexQ9vsHkqL&e=3Ddoctor@nk.ca">here
to r=

emove yourself from our emails list

--0000000000001eccd6064cd9048e--

German Language Cloud Credential Phish from Google Gmail Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 12 Mar 2026 15:38:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w0nip-00000000Nc2-2Zn1

for dave@doctor.nl2k.ab.ca;

Thu, 12 Mar 2026 15:37:35 -0600

Resent-From: The Doctor

Resent-Date: Thu, 12 Mar 2026 15:37:35 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oa1-f70.google.com ([209.85.160.70]:39079)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w0m0e-00000000A1n-3RbK

for doctor@nk.ca;

Thu, 12 Mar 2026 13:48:00 -0600

Received: by mail-oa1-f70.google.com with SMTP id 586e51a60fabf-4179c6054e6so1009302fac.0

for ; Thu, 12 Mar 2026 12:47:07 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=cloudstorage10.jmpghana.com; s=firebase1; t=1773344821; x=1773949621; darn=nk.ca;

h=to:from:subject:date:message-id:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=WmBkBSfa6jlT2aUC9ZiPzVRYfYnMyHy0KclLuP0Zt5U=;

b=An+uo/DJZerlomVkeqrjD4Jde9nXyH4sHIlHhx30p9hB7Nb+zxajswUqUl1RLotgKv

ttNYPC7inKxLS8S/6awpL80JUZhV/xnm+nvMz35cWO6MIocllvXFRRHITpUwE2cJPyYo

B1RQSJZ8Kx271/g5iIR8/X/1h3qi98CA3OI2zSX3O1hT6yZajtv/Ub+7PS6ZrFneBm3w

L0ktcs/WPA21AsI+hEVaDc3jsadDbE209FBO/SDi3DKr7RWCXfeKBrUIlH7XxB3pbPQc

PhvrVX3jK7ygmBOI3P51WwLOHKVTdJ3r39YCUw2nEW3+Twl/aEcCsA/ew0X9V9/RJO9g

wt9A==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1773344821; x=1773949621;

h=to:from:subject:date:message-id:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=WmBkBSfa6jlT2aUC9ZiPzVRYfYnMyHy0KclLuP0Zt5U=;

b=c6Yl1kYBWgGSXyM8Zb/zw/AuWLUzV4YzqSNptbx0+rnMkSFk1dngNlM8T5A5BSMV9b

4DbbkHlPYliUThs/Vi0EeLcr8r2a14ap2TB7gIDRGPm71nDuJ+JvPFvAhz6uVvH2xrLq

FXdJ8HPawqAK0BG7gC0zsE5YhGOBdck9nVpLYi0BCo9qlFDMGVT8cnmeyk2/Xx+APzaG

oJjTauxEZ1hIAp9Q78a+yL4FGp+NUSCLuJFnE2N1qSYy4azqCKe3vMykyeKmDgrYSAEu

TVOn/PfEqb1bVJz871Y1HTwmjjL8Vm0nk5eKygA6MSEAa+/bUTgzGSSlKugk1SzoCdX+

+Whw==

X-Gm-Message-State: AOJu0YynWAgXbTXV9B+v5d6Vfg1pA5eDUtPqH88R+W0B0t+CuE1PHsWT

xFnkPxH61twSxaY5lIx9z29zEfj8xS7lYFE24RmvtT9X1rz1dWXuQ0X5G4pPAUuHgGvWaodROf3

Cs3rFRSfk6D1kQQ==

MIME-Version: 1.0

X-Received: by 2002:a05:6808:4f0e:b0:467:4505:a052 with SMTP id

5614622812f47-46757401457mr257520b6e.4.1773344821004; Thu, 12 Mar 2026

12:47:01 -0700 (PDT)

Message-ID: <0000000000001ecce3064cd90491@google.com>

Date: Thu, 12 Mar 2026 19:47:01 +0000

Subject: =?UTF-8?Q?=F0=9F=9A=AB_Ihr_Konto_wird_am_13=2E_M=C3=A4rz_2026_deaktiviert_?=

=?UTF-8?Q?=E2=80=93_Fotos_=26_Videos?=

From: =?UTF-8?Q?iCIoud=2DSupport=C2=AE?=

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="0000000000001eccd6064cd9048e"



--0000000000001eccd6064cd9048e

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



WW91ciBhY2NvdW50IGhhcyBiZWVuIGRlYWN0aXZhdGVkIOKAkyB2ZXJpZmljYXRpb24gcmVxdWly

ZWQuDQoNCg0KDQoNCmlDSW91ZA0KDQoNCg0KUGF5bWVudCBmYWlsZWQg4oCTIFBsZWFzZSB1cGRh

dGUgeW91ciBwYXltZW50IG1ldGhvZC4NCg0KDQoNCmlDSW91ZCBTdG9yYWdlDQoNCllvdXIgYWNj

b3VudCBoYXMgYmVlbiBkZWFjdGl2YXRlZA0KDQpQYXltZW50IG1ldGhvZCB1cGRhdGUgcmVxdWly

ZWQg4pqg77iPIFlvdXIgcGhvdG9zIGFuZCB2aWRlb3Mgd2lsbCBiZSBkZWxldGVkLg0KDQoNCg0K

U3Vic2NyaXB0aW9uIGRldGFpbHMNCg0KDQoNClRhcmlmIFN0b3JhZ2UNCg0KRW1haWwgYWRkcmVz

cyBkb2N0b3JAbmsuY2ENCg0KUHJvZHVjdCBpQ2xvdWQgU3RvcmFnZQ0KDQpSZW5ld2FsIGRhdGUg

MTMuMDMuMjAyNg0KDQoNCg0KDQoNCkFjdGlvbiByZXF1aXJlZA0KDQpWZXJpZmljYXRpb24gcmVx

dWlyZWQgUGxlYXNlIHVwZGF0ZSB5b3VyIHBheW1lbnQgbWV0aG9kDQoNCg0KDQpVcGRhdGUgcGF5

bWVudCBtZXRob2QNCg0KDQoNCg0KVGhpcyBub3RpZmljYXRpb24gd2FzIGdlbmVyYXRlZCBhdXRv

bWF0aWNhbGx5IGFuZCBjb25jZXJucyB5b3VyIGlDbG91ZCAgDQpzdG9yYWdlIHBsYW4uDQoNCg0K

DQpBcHBsZSBTZXJ2aWNlcyDCtyBpQ0lvdWQgwrcgU3VwcG9ydA0KDQoNCg0KVW5zdWJoZXJlIHRv

IHJlbW92ZSB5b3Vyc2VsZiBmcm9tIG91ciBlbWFpbHMgbGlzdA0K

--0000000000001eccd6064cd9048e

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable












">



Kontomitteilung




L&e=3Ddoctor@nk.ca" style=3D"text-decoration:none; color:black;">



=20




ransparent;">

Your account has been deactivated =E2=80=93 verification required.





=3D"0" border=3D"0" style=3D"width:100%;background-color:#f5f5f7;">
























pacing=3D"0" border=3D"0" style=3D"max-width:680px;">






















pple-system,BlinkMacSystemFont,'SF Pro Display','Segoe UI',Arial,sans-serif=

;font-size:28px;line-height:32px;font-weight:600;color:#1d1d1f;letter-spaci=

ng:-0.3px;">

iCIoud


border-radius:22px;overflow:hidden;box-shadow:0 4px 14px rgba(0,0,0,0.04);"=

>






cellspacing=3D"0" border=3D"0">








olid #f1d1d1;padding:14px 24px;text-align:center;font-family:-apple-system,=

BlinkMacSystemFont,'SF Pro Text','Segoe UI',Arial,sans-serif;font-size:14px=

;line-height:20px;font-weight:600;color:#c9342f;">

Payment failed =E2=80=93 Please update your payment method. =








cellspacing=3D"0" border=3D"0">






















e-system,BlinkMacSystemFont,'SF Pro Text','Segoe UI',Arial,sans-serif;font-=

size:13px;line-height:18px;color:#6e6e73;font-weight:600;">

iCIoud Storage


border-radius:22px;overflow:hidden;box-shadow:0 4px 14px rgba(0,0,0,0.04);"=

>






cellspacing=3D"0" border=3D"0">








olid #f1d1d1;padding:14px 24px;text-align:center;font-family:-apple-system,=

BlinkMacSystemFont,'SF Pro Text','Segoe UI',Arial,sans-serif;font-size:14px=

;line-height:20px;font-weight:600;color:#c9342f;">

Payment failed =E2=80=93 Please update your payment method. =








cellspacing=3D"0" border=3D"0">






















































































e-system,BlinkMacSystemFont,'SF Pro Text','Segoe UI',Arial,sans-serif;font-=

size:13px;line-height:18px;color:#6e6e73;font-weight:600;">

iCIoud Storage


system,BlinkMacSystemFont,'SF Pro Display','Segoe UI',Arial,sans-serif;font=

-size:32px;line-height:38px;font-weight:600;color:#1d1d1f;letter-spacing:-0=

.5px;">

Your account has been deactivated

system,BlinkMacSystemFont,'SF Pro Text','Segoe UI',Arial,sans-serif;font-si=

ze:16px;line-height:26px;color:#424245;">

Payment method update required =E2=9A=A0=EF=B8=8F Your photos and videos wi=

ll be deleted.




=3D"0" cellspacing=3D"0" border=3D"0" style=3D"background-color:#f5f5f7;bor=

der:1px solid #ebebed;border-radius:16px;">














y:-apple-system,BlinkMacSystemFont,'SF Pro Display','Segoe UI',Arial,sans-s=

erif;font-size:18px;line-height:24px;font-weight:600;color:#1d1d1f;">

Subscription details



adding=3D"0" cellspacing=3D"0" border=3D"0" style=3D"font-family:-apple-sys=

tem,BlinkMacSystemFont,'SF Pro Text','Segoe UI',Arial,sans-serif;font-size:=

15px;color:#1d1d1f;">


































solid #e5e5e7;color:#6e6e73;width:42%;">Tarif

solid #e5e5e7;font-weight:500;">Storage

solid #e5e5e7;color:#6e6e73;">Email address

solid #e5e5e7;font-weight:500;">doctor@edmontonab.ca

solid #e5e5e7;color:#6e6e73;">Product

;">iCloud Storage
R=

enewal date

>13.03.2026





system,BlinkMacSystemFont,'SF Pro Display','Segoe UI',Arial,sans-serif;font=

-size:21px;line-height:28px;font-weight:600;color:#1d1d1f;">

Action required

system,BlinkMacSystemFont,'SF Pro Text','Segoe UI',Arial,sans-serif;font-si=

ze:15px;line-height:25px;color:#424245;">

Verification required

Please update your payment method




ing=3D"0" border=3D"0">








:980px;">


HHjEb8FnWE9d9Asehh8yaMgb6CJ&e=3Ddoctor@edmontonab.ca"

style=3D"display:inline-block;padding:14px 30p=

x;font-family:-apple-system,BlinkMacSystemFont,'SF Pro Text','Segoe UI',Ari=

al,sans-serif;font-size:15px;line-height:20px;font-weight:600;color:#ffffff=

;text-decoration:none;border-radius:980px;">

Update payment method







background-color:#ececee;"> 



r;font-family:-apple-system,BlinkMacSystemFont,'SF Pro Text','Segoe UI',Ari=

al,sans-serif;font-size:13px;line-height:21px;color:#6e6e73;">

This notification was generated automatically and concerns your iCloud stor=

age plan.



ily:-apple-system,BlinkMacSystemFont,'SF Pro Text','Segoe UI',Arial,sans-se=

rif;font-size:12px;line-height:18px;color:#8e8e93;">

Apple Services =C2=B7 iCIoud =C2=B7 Support










text-align:center;margin-top:10px">Unsub
=3D8HFMMWySSP29QHHjEb8FnWE9d9Asehh8yaMgb6CJ&e=3Ddoctor@edmontonab.ca">here<=

/a> to remove yourself from our emails list


--0000000000008df18e064cd8a93d--

German Language Cloud Credential Phish from Google Gmail Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 12 Mar 2026 15:38:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w0nii-00000000NYs-013H

for dave@doctor.nl2k.ab.ca;

Thu, 12 Mar 2026 15:37:28 -0600

Resent-From: The Doctor

Resent-Date: Thu, 12 Mar 2026 15:37:27 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ua1-f69.google.com ([209.85.222.69]:57416)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w0lcD-000000008Fq-3hMR

for doctor@edmontonab.ca;

Thu, 12 Mar 2026 13:22:46 -0600

Received: by mail-ua1-f69.google.com with SMTP id a1e0cc1a2514c-94deb62ae32so13747948241.2

for ; Thu, 12 Mar 2026 12:21:50 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=cloudstorage11.jmpghana.com; s=firebase1; t=1773343302; x=1773948102; darn=edmontonab.ca;

h=to:from:subject:date:message-id:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=XEr380I19Ev5Vzpl2SNOmxrfanbFxVhNYwsxeVtBipE=;

b=Wu7xdqi7vUy4rFvIurAhBSKVxGcqEjyJ3bmF/Pl+tTp+QDbe069CCgkBiQejBCLIcp

Qt8u2JmamGAXsdSUl4JgWwor5Sr4bPDABOmxB4qu3OCssgcz3kxB5sknfku+NPW0n1OE

WK9Q1rfT4Z398l9ytW7difN2WrI/w/x6DeOV8iNAsJWc7TorgF7MNAAIpHTCjuV274sN

+uDStjyEC2CB9iN870FuF5dz0jXIcTRD50Wyq7djzZk2ehc4dM+M8VI1knHOAry3KSeU

BQu1SxGfqlvWiVR41LVDhfJEAjz6/7oWy4c0/Q43FEw/EtI9t8/tkHuzLWlDumIfokPR

Wxlg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1773343302; x=1773948102;

h=to:from:subject:date:message-id:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=XEr380I19Ev5Vzpl2SNOmxrfanbFxVhNYwsxeVtBipE=;

b=ZrZAxj61tL4uIQ5TmlJvm+Y74p7wFbnUo4+D71Xtv2URCPzxdTVeCQjJeyqbV+bM1u

FKt8e2wsCK9eNDb42XVEzE4Y2SSibNloa94q57CAj0E90hShsBE3i6YwASSYkqwLAtSg

5SjChfN1pHgTGIkeu9mwIXoZ0NrcXuemLqFdX3rPZ1jnpQHXTdhuhzGJOdOYZqk3veZJ

k5vOOSc4AOmKL0B0XZyqValvQuJi3RKA1T6qebKbfQ38mhWZ/u9KL7UlKfUEv/fncSr1

r0je3bhsbX15v5eJ4VPeI94c4AqAzn1qpQxE1+Z7Bth5Wo3Fe/Galol0htDySpw9P8cC

tb9w==

X-Gm-Message-State: AOJu0Yxc8vwDF+fttkwjSFT5BUYQ3iBIz+dGN2I7CsFv1c98q00RgnfF

L/4m90Q1kNCXW+fg493mzy+fbzRY/z7PUHcqN5rwEDNas0rIPdhnX1MIEOO5K8ieHFNMo9NNg5/

y1J23i0JcsS/ITw==

MIME-Version: 1.0

X-Received: by 2002:a05:6102:2ad4:b0:5ff:a8d6:b80c with SMTP id

ada2fe7eead31-6020e23b741mr304427137.17.1773343301562; Thu, 12 Mar 2026

12:21:41 -0700 (PDT)

Message-ID: <0000000000008df198064cd8a940@google.com>

Date: Thu, 12 Mar 2026 19:21:41 +0000

Subject: =?UTF-8?Q?=F0=9F=9A=AB_Ihr_Konto_wird_am_13=2E_M=C3=A4rz_2026_deaktiviert_?=

=?UTF-8?Q?=E2=80=93_Fotos_=26_Videos?=

From: =?UTF-8?Q?iCIoud=2DSupport=C2=AE?=

To: doctor@edmontonab.ca

Content-Type: multipart/alternative; boundary="0000000000008df18e064cd8a93d"

X-Spam_score: 6.3

X-Spam_score_int: 63

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Your account has been deactivated – verification required.

iCIoud Payment failed – Please update your payment method.



Content analysis details: (6.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.222.69 listed in list.dnswl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.222.69 listed in will-spam-for-food.eu.org]

[209.85.222.69 listed in will-spam-for-food.eu.org]

[209.85.222.69 listed in will-spam-for-food.eu.org]

[209.85.222.69 listed in will-spam-for-food.eu.org]

[209.85.222.69 listed in will-spam-for-food.eu.org]

[209.85.222.69 listed in will-spam-for-food.eu.org]

[209.85.222.69 listed in will-spam-for-food.eu.org]

[209.85.222.69 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.222.69 listed in dnsbl.ahbl.org]

[209.85.222.69 listed in dnsbl.ahbl.org]

[209.85.222.69 listed in dnsbl.ahbl.org]

[209.85.222.69 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.222.69 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.222.69 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.222.69 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.222.69 listed in dnsbl.ahbl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.222.69 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 NORMAL_HTTP_TO_IP URI: URI host has a public dotted-decimal IPv4

address

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.0 URI_HEX_IP URI with hex-encoded IP-address host

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.5 VOWEL_FROM_5 Impronouncable from header (6 consecutive vowels)

0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information

Subject: {SPAM?} =?UTF-8?Q?=F0=9F=9A=AB_Ihr_Konto_wird_am_13=2E_M=C3=A4rz_2026_deaktiviert_?=

=?UTF-8?Q?=E2=80=93_Fotos_=26_Videos?=



--0000000000008df18e064cd8a93d

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



WW91ciBhY2NvdW50IGhhcyBiZWVuIGRlYWN0aXZhdGVkIOKAkyB2ZXJpZmljYXRpb24gcmVxdWly

ZWQuDQoNCg0KDQoNCmlDSW91ZA0KDQoNCg0KUGF5bWVudCBmYWlsZWQg4oCTIFBsZWFzZSB1cGRh

dGUgeW91ciBwYXltZW50IG1ldGhvZC4NCg0KDQoNCmlDSW91ZCBTdG9yYWdlDQoNCllvdXIgYWNj

b3VudCBoYXMgYmVlbiBkZWFjdGl2YXRlZA0KDQpQYXltZW50IG1ldGhvZCB1cGRhdGUgcmVxdWly

ZWQg4pqg77iPIFlvdXIgcGhvdG9zIGFuZCB2aWRlb3Mgd2lsbCBiZSBkZWxldGVkLg0KDQoNCg0K

U3Vic2NyaXB0aW9uIGRldGFpbHMNCg0KDQoNClRhcmlmIFN0b3JhZ2UNCg0KRW1haWwgYWRkcmVz

cyBkb2N0b3JAZWRtb250b25hYi5jYQ0KDQpQcm9kdWN0IGlDbG91ZCBTdG9yYWdlDQoNClJlbmV3

YWwgZGF0ZSAxMy4wMy4yMDI2DQoNCg0KDQoNCg0KQWN0aW9uIHJlcXVpcmVkDQoNClZlcmlmaWNh

dGlvbiByZXF1aXJlZCBQbGVhc2UgdXBkYXRlIHlvdXIgcGF5bWVudCBtZXRob2QNCg0KDQoNClVw

ZGF0ZSBwYXltZW50IG1ldGhvZA0KDQoNCg0KDQpUaGlzIG5vdGlmaWNhdGlvbiB3YXMgZ2VuZXJh

dGVkIGF1dG9tYXRpY2FsbHkgYW5kIGNvbmNlcm5zIHlvdXIgaUNsb3VkICANCnN0b3JhZ2UgcGxh

bi4NCg0KDQoNCkFwcGxlIFNlcnZpY2VzIMK3IGlDSW91ZCDCtyBTdXBwb3J0DQoNCg0KDQpVbnN1

YmhlcmUgdG8gcmVtb3ZlIHlvdXJzZWxmIGZyb20gb3VyIGVtYWlscyBsaXN0DQo=

--0000000000008df18e064cd8a93d

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable












">



Kontomitteilung




J&e=3Ddoctor@edmontonab.ca" style=3D"text-decoration:none; color:black;">



=20




ransparent;">

Your account has been deactivated =E2=80=93 verification required.





=3D"0" border=3D"0" style=3D"width:100%;background-color:#f5f5f7;">














pacing=3D"0" border=3D"0" style=3D"max-width:680px;">


























pple-system,BlinkMacSystemFont,'SF Pro Display','Segoe UI',Arial,sans-serif=

;font-size:28px;line-height:32px;font-weight:600;color:#1d1d1f;letter-spaci=

ng:-0.3px;">

iCIoud


border-radius:22px;overflow:hidden;box-shadow:0 4px 14px rgba(0,0,0,0.04);"=

>






cellspacing=3D"0" border=3D"0">








olid #f1d1d1;padding:14px 24px;text-align:center;font-family:-apple-system,=

BlinkMacSystemFont,'SF Pro Text','Segoe UI',Arial,sans-serif;font-size:14px=

;line-height:20px;font-weight:600;color:#c9342f;">

Payment failed =E2=80=93 Please update your payment method. =








cellspacing=3D"0" border=3D"0">






















































































e-system,BlinkMacSystemFont,'SF Pro Text','Segoe UI',Arial,sans-serif;font-=

size:13px;line-height:18px;color:#6e6e73;font-weight:600;">

iCIoud Storage


system,BlinkMacSystemFont,'SF Pro Display','Segoe UI',Arial,sans-serif;font=

-size:32px;line-height:38px;font-weight:600;color:#1d1d1f;letter-spacing:-0=

.5px;">

Your account has been deactivated

system,BlinkMacSystemFont,'SF Pro Text','Segoe UI',Arial,sans-serif;font-si=

ze:16px;line-height:26px;color:#424245;">

Payment method update required =E2=9A=A0=EF=B8=8F Your photos and videos wi=

ll be deleted.




=3D"0" cellspacing=3D"0" border=3D"0" style=3D"background-color:#f5f5f7;bor=

der:1px solid #ebebed;border-radius:16px;">














y:-apple-system,BlinkMacSystemFont,'SF Pro Display','Segoe UI',Arial,sans-s=

erif;font-size:18px;line-height:24px;font-weight:600;color:#1d1d1f;">

Subscription details



adding=3D"0" cellspacing=3D"0" border=3D"0" style=3D"font-family:-apple-sys=

tem,BlinkMacSystemFont,'SF Pro Text','Segoe UI',Arial,sans-serif;font-size:=

15px;color:#1d1d1f;">


































solid #e5e5e7;color:#6e6e73;width:42%;">Tarif

solid #e5e5e7;font-weight:500;">Storage

solid #e5e5e7;color:#6e6e73;">Email address

solid #e5e5e7;font-weight:500;">bin@nl2k.ab.ca

solid #e5e5e7;color:#6e6e73;">Product

;">iCloud Storage
R=

enewal date

>13.03.2026





system,BlinkMacSystemFont,'SF Pro Display','Segoe UI',Arial,sans-serif;font=

-size:21px;line-height:28px;font-weight:600;color:#1d1d1f;">

Action required

system,BlinkMacSystemFont,'SF Pro Text','Segoe UI',Arial,sans-serif;font-si=

ze:15px;line-height:25px;color:#424245;">

Verification required

Please update your payment method




ing=3D"0" border=3D"0">








:980px;">


HHjEb8FnWE9d9Asehh8yaMgb6CJ&e=3Dbin@nl2k.ab.ca"

style=3D"display:inline-block;padding:14px 30p=

x;font-family:-apple-system,BlinkMacSystemFont,'SF Pro Text','Segoe UI',Ari=

al,sans-serif;font-size:15px;line-height:20px;font-weight:600;color:#ffffff=

;text-decoration:none;border-radius:980px;">

Update payment method







background-color:#ececee;"> 



r;font-family:-apple-system,BlinkMacSystemFont,'SF Pro Text','Segoe UI',Ari=

al,sans-serif;font-size:13px;line-height:21px;color:#6e6e73;">

This notification was generated automatically and concerns your iCloud stor=

age plan.



ily:-apple-system,BlinkMacSystemFont,'SF Pro Text','Segoe UI',Arial,sans-se=

rif;font-size:12px;line-height:18px;color:#8e8e93;">

Apple Services =C2=B7 iCIoud =C2=B7 Support










text-align:center;margin-top:10px">Unsub

=3D8HFMMWySSP29QHHjEb8FnWE9d9Asehh8yaMgb6CJ&e=3Dbin@nl2k.ab.ca">here
to=

remove yourself from our emails list

--000000000000be98c1064cd84448--

German language cloud credential phish from Google Gmail Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 12 Mar 2026 15:38:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w0niS-00000000NTp-1qC4

for dave@doctor.nl2k.ab.ca;

Thu, 12 Mar 2026 15:37:12 -0600

Resent-From: The Doctor

Resent-Date: Thu, 12 Mar 2026 15:37:12 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oo1-f71.google.com ([209.85.161.71]:47223)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w0lAt-000000006Nl-0EgN

for bin@nl2k.ab.ca;

Thu, 12 Mar 2026 12:54:31 -0600

Received: by mail-oo1-f71.google.com with SMTP id 006d021491bc7-67bb5dbf5bbso479750eaf.2

for ; Thu, 12 Mar 2026 11:53:36 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=cloudstorage11.jmpghana.com; s=firebase1; t=1773341610; x=1773946410; darn=nl2k.ab.ca;

h=to:from:subject:date:message-id:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=AL4UjmcbSU6luxnm/yB+NBcSr4Of0lzSkgeV4aCLAzU=;

b=iXjSyoxrSGcReqpZC0OtcwXtraYNKD2ROI1/+2s1NniH3xJSS9j9wt2S0rPXu4Y8Xp

tMCWySvgdQsy6Qa7CqzEW/nHino6qpcYxL1xq/UjuSzH5bUKPJCsoMn/RCzEYgbPzOJw

pP7tAp+Zb2gfmtacfeUDOfHfyPetfubr1u5ppSBsjvKE4Eij0VKHYRzHDCpcU/UidBmv

mhQh16l6ZXjirCeBnBROjL04wDz18BtlRrW1UkJI/4epSZA/lLvgy9MI0fguUNww0bqh

8vmSVygl2IGcpH5db+DkUh/q5TUFuMAu6kOnncTl0tVeF0ne4StCr6904mzP3fqqu78A

HszA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1773341610; x=1773946410;

h=to:from:subject:date:message-id:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=AL4UjmcbSU6luxnm/yB+NBcSr4Of0lzSkgeV4aCLAzU=;

b=hhw8NdwWw98flat8sjWEWpRErxAaqni6L0qa+rwgjRm3Uhr2A0Af6NbXTfG/ei5p0E

1TIJx3vLXzUpDFvh0y0KJgjVDglf7FSu4iSG9bDwcwxAgG8TEHwJzrD4hDwWRYHd9OvE

KpKUDXUqSfmFAHyWiArJ6Ej3dB+fmKd5x8ArdXmIKeipsV5boZB1D8bGsdd0PHBcjJRk

rKXdpAyI99FWcmAMS3TLysxNhDIIpWXkTNOB0ND7DcPonbPuXk6XkYKYWoSqm32o58qv

X07eXzD8PiB6+3rIRXAcUfbDWypr9XgCh1bwYEjRlW51ogq7RySXkr2anKZ4cxywnVBX

HFtQ==

X-Gm-Message-State: AOJu0YwN97iysd+Fn9DPcyKwBbKp59OLJP9mjxjaV3c3ZzlYAZrWfNt4

mdmBNEVMfzRj0srwXpXJyUXzW1QdMOUk3Y0K/cr0zDWpq3JbHg/iXOd3JfCxm7Mle0SwYzSTD/f

XGsfIW8anID/37g==

MIME-Version: 1.0

X-Received: by 2002:a05:6820:80c1:b0:67b:ba67:733e with SMTP id

006d021491bc7-67bda9df3b1mr266618eaf.33.1773341610251; Thu, 12 Mar 2026

11:53:30 -0700 (PDT)

Message-ID: <000000000000be98dd064cd8444b@google.com>

Date: Thu, 12 Mar 2026 18:53:30 +0000

Subject: =?UTF-8?Q?=F0=9F=9A=AB_Ihr_Konto_wird_am_13=2E_M=C3=A4rz_2026_deaktiviert_?=

=?UTF-8?Q?=E2=80=93_Fotos_=26_Videos?=

From: =?UTF-8?Q?iCIoud=2DSupport=C2=AE?=

To: bin@nl2k.ab.ca

Content-Type: multipart/alternative; boundary="000000000000be98c1064cd84448"

X-Spam_score: 6.5

X-Spam_score_int: 65

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Your account has been deactivated – verification required.

iCIoud Payment failed – Please update your payment method.



Content analysis details: (6.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.161.71 listed in will-spam-for-food.eu.org]

[209.85.161.71 listed in will-spam-for-food.eu.org]

[209.85.161.71 listed in will-spam-for-food.eu.org]

[209.85.161.71 listed in will-spam-for-food.eu.org]

[209.85.161.71 listed in will-spam-for-food.eu.org]

[209.85.161.71 listed in will-spam-for-food.eu.org]

[209.85.161.71 listed in will-spam-for-food.eu.org]

[209.85.161.71 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.161.71 listed in dnsbl.ahbl.org]

[209.85.161.71 listed in dnsbl.ahbl.org]

[209.85.161.71 listed in dnsbl.ahbl.org]

[209.85.161.71 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.161.71 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.161.71 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.161.71 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.161.71 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.161.71 listed in list.dnswl.org]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.161.71 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 NORMAL_HTTP_TO_IP URI: URI host has a public dotted-decimal IPv4

address

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.5 VOWEL_FROM_5 Impronouncable from header (6 consecutive vowels)

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 URI_HEX_IP URI with hex-encoded IP-address host

0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information

Subject: {SPAM?} =?UTF-8?Q?=F0=9F=9A=AB_Ihr_Konto_wird_am_13=2E_M=C3=A4rz_2026_deaktiviert_?=

=?UTF-8?Q?=E2=80=93_Fotos_=26_Videos?=



--000000000000be98c1064cd84448

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



WW91ciBhY2NvdW50IGhhcyBiZWVuIGRlYWN0aXZhdGVkIOKAkyB2ZXJpZmljYXRpb24gcmVxdWly

ZWQuDQoNCg0KDQoNCmlDSW91ZA0KDQoNCg0KUGF5bWVudCBmYWlsZWQg4oCTIFBsZWFzZSB1cGRh

dGUgeW91ciBwYXltZW50IG1ldGhvZC4NCg0KDQoNCmlDSW91ZCBTdG9yYWdlDQoNCllvdXIgYWNj

b3VudCBoYXMgYmVlbiBkZWFjdGl2YXRlZA0KDQpQYXltZW50IG1ldGhvZCB1cGRhdGUgcmVxdWly

ZWQg4pqg77iPIFlvdXIgcGhvdG9zIGFuZCB2aWRlb3Mgd2lsbCBiZSBkZWxldGVkLg0KDQoNCg0K

U3Vic2NyaXB0aW9uIGRldGFpbHMNCg0KDQoNClRhcmlmIFN0b3JhZ2UNCg0KRW1haWwgYWRkcmVz

cyBiaW5Abmwyay5hYi5jYQ0KDQpQcm9kdWN0IGlDbG91ZCBTdG9yYWdlDQoNClJlbmV3YWwgZGF0

ZSAxMy4wMy4yMDI2DQoNCg0KDQoNCg0KQWN0aW9uIHJlcXVpcmVkDQoNClZlcmlmaWNhdGlvbiBy

ZXF1aXJlZCBQbGVhc2UgdXBkYXRlIHlvdXIgcGF5bWVudCBtZXRob2QNCg0KDQoNClVwZGF0ZSBw

YXltZW50IG1ldGhvZA0KDQoNCg0KDQpUaGlzIG5vdGlmaWNhdGlvbiB3YXMgZ2VuZXJhdGVkIGF1

dG9tYXRpY2FsbHkgYW5kIGNvbmNlcm5zIHlvdXIgaUNsb3VkICANCnN0b3JhZ2UgcGxhbi4NCg0K

DQoNCkFwcGxlIFNlcnZpY2VzIMK3IGlDSW91ZCDCtyBTdXBwb3J0DQoNCg0KDQpVbnN1YmhlcmUg

dG8gcmVtb3ZlIHlvdXJzZWxmIGZyb20gb3VyIGVtYWlscyBsaXN0DQo=

--000000000000be98c1064cd84448

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable












">



Kontomitteilung




J&e=3Dbin@nl2k.ab.ca" style=3D"text-decoration:none; color:black;">



=20




ransparent;">

Your account has been deactivated =E2=80=93 verification required.





=3D"0" border=3D"0" style=3D"width:100%;background-color:#f5f5f7;">






















































































pacing=3D"0" border=3D"0" style=3D"max-width:680px;">









German language cloud credential phish from Google Gmail Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 12 Mar 2026 15:37:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w0ni2-00000000NMn-3CPZ

for dave@doctor.nl2k.ab.ca;

Thu, 12 Mar 2026 15:36:46 -0600

Resent-From: The Doctor

Resent-Date: Thu, 12 Mar 2026 15:36:46 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oa1-f71.google.com ([209.85.160.71]:58373)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w0ko4-000000004j8-3q5U

for doctor@nl2k.ca;

Thu, 12 Mar 2026 12:30:57 -0600

Received: by mail-oa1-f71.google.com with SMTP id 586e51a60fabf-417765eb13cso11231883fac.0

for ; Thu, 12 Mar 2026 11:30:02 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=cloudstorage11.jmpghana.com; s=firebase1; t=1773340195; x=1773944995; darn=nl2k.ca;

h=to:from:subject:date:message-id:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=5Cbnb6KEfVHABR02leCZX9Vw/AAW9//eWEIncSBJPbw=;

b=l0Yz41KMMw+DbUhH8a9teFVjbPpWdo+BVw2oCiDThSAC4Tbv3TVxtZ/oEqe4iM3y6U

qkZ7wSTt1XC4+/2fG4HwNep7+FlKf8fN5ecSvzyer5pqxRQZ0KLJgmCTcn59501M+Be+

E5AlSJZ0VdimJUkPVO4Ve/xmYhM5E1A1tpmTlPyxIcTc6K8u+OG+hGkh5oE6sPsYYhUG

XaYpsSety7ViuJoqmEwS65BMNsWfj0lOr1NrDoV5NVJZcgWRGpuk4nxJw0qCWUFWE5gQ

iqZoJvzCwMBzBB6Ag6B4N//JUy0fHnaOnPUGnUHDCJqrmWp1mwQvMsmFO8OyR26xlDbS

3Pig==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1773340195; x=1773944995;

h=to:from:subject:date:message-id:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=5Cbnb6KEfVHABR02leCZX9Vw/AAW9//eWEIncSBJPbw=;

b=JduJybmYLjcYR7ixmWuFlJvTnasoZdESyvNu9I9ted2XTI/nrB17pIABrOmFq7gWKR

aA22TplD60p8qAdV6qUZFN/sJ8IEDnJHUPTsLk1r1WwnLm5Apykx10S1gqon1pNfOCGV

6lITwfCRAIgQj3j57sNd5eXuOT//b6/+wkgccG8HoqwxDDPN/ZL4gE8sAdiAIzcIu3js

6dzCKSNrCJvOZODVzXDNCLo4FFopyfOFV/0IOh5tDB5U513xO4BjhaI57V3PwY1i9mvG

8ESrfyN2dCukD/7PpVpSRojghWNLEPKi91oP4u5WHG7m+YJpb3nHtRKnbVy7+RokOcA7

NVqQ==

X-Gm-Message-State: AOJu0YyAK90aNSQnaBopS7MpX8GG0+HMjXwru60U3BF3lJR6ku1C5Wf7

pioTqv8STuWqh3pCvS2xXuwy17NJ0GFUbgE3LXAhNHVxqp91mMpd3RR9gNCr6p+24a2+r/3yA1t

nhh0LNguZ7PzUzA==

MIME-Version: 1.0

X-Received: by 2002:a05:6820:169e:b0:67b:baca:a49b with SMTP id

006d021491bc7-67bdaa9000bmr261050eaf.67.1773340195580; Thu, 12 Mar 2026

11:29:55 -0700 (PDT)

Message-ID: <0000000000006c6e72064cd7f037@google.com>

Date: Thu, 12 Mar 2026 18:29:55 +0000

Subject: =?UTF-8?Q?=F0=9F=9A=AB_Ihr_Konto_wird_am_13=2E_M=C3=A4rz_2026_deaktiviert_?=

=?UTF-8?Q?=E2=80=93_Fotos_=26_Videos?=

From: =?UTF-8?Q?iCIoud=2DSupport=C2=AE?=

To: doctor@nl2k.ca

Content-Type: multipart/alternative; boundary="0000000000006c6e64064cd7f034"



--0000000000006c6e64064cd7f034

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



WW91ciBhY2NvdW50IGhhcyBiZWVuIGRlYWN0aXZhdGVkIOKAkyB2ZXJpZmljYXRpb24gcmVxdWly

ZWQuDQoNCg0KDQoNCmlDSW91ZA0KDQoNCg0KUGF5bWVudCBmYWlsZWQg4oCTIFBsZWFzZSB1cGRh

dGUgeW91ciBwYXltZW50IG1ldGhvZC4NCg0KDQoNCmlDSW91ZCBTdG9yYWdlDQoNCllvdXIgYWNj

b3VudCBoYXMgYmVlbiBkZWFjdGl2YXRlZA0KDQpQYXltZW50IG1ldGhvZCB1cGRhdGUgcmVxdWly

ZWQg4pqg77iPIFlvdXIgcGhvdG9zIGFuZCB2aWRlb3Mgd2lsbCBiZSBkZWxldGVkLg0KDQoNCg0K

U3Vic2NyaXB0aW9uIGRldGFpbHMNCg0KDQoNClRhcmlmIFN0b3JhZ2UNCg0KRW1haWwgYWRkcmVz

cyBkb2N0b3JAbmwyay5jYQ0KDQpQcm9kdWN0IGlDbG91ZCBTdG9yYWdlDQoNClJlbmV3YWwgZGF0

ZSAxMy4wMy4yMDI2DQoNCg0KDQoNCg0KQWN0aW9uIHJlcXVpcmVkDQoNClZlcmlmaWNhdGlvbiBy

ZXF1aXJlZCBQbGVhc2UgdXBkYXRlIHlvdXIgcGF5bWVudCBtZXRob2QNCg0KDQoNClVwZGF0ZSBw

YXltZW50IG1ldGhvZA0KDQoNCg0KDQpUaGlzIG5vdGlmaWNhdGlvbiB3YXMgZ2VuZXJhdGVkIGF1

dG9tYXRpY2FsbHkgYW5kIGNvbmNlcm5zIHlvdXIgaUNsb3VkICANCnN0b3JhZ2UgcGxhbi4NCg0K

DQoNCkFwcGxlIFNlcnZpY2VzIMK3IGlDSW91ZCDCtyBTdXBwb3J0DQoNCg0KDQpVbnN1YmhlcmUg

dG8gcmVtb3ZlIHlvdXJzZWxmIGZyb20gb3VyIGVtYWlscyBsaXN0DQo=

--0000000000006c6e64064cd7f034

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable












">



Kontomitteilung




J&e=3Ddoctor@nl2k.ca" style=3D"text-decoration:none; color:black;">



=20




ransparent;">

Your account has been deactivated =E2=80=93 verification required.





pple-system,BlinkMacSystemFont,'SF Pro Display','Segoe UI',Arial,sans-serif=

;font-size:28px;line-height:32px;font-weight:600;color:#1d1d1f;letter-spaci=

ng:-0.3px;">

iCIoud


=3D"0" border=3D"0" style=3D"width:100%;background-color:#f5f5f7;">














pacing=3D"0" border=3D"0" style=3D"max-width:680px;">
































pple-system,BlinkMacSystemFont,'SF Pro Display','Segoe UI',Arial,sans-serif=

;font-size:28px;line-height:32px;font-weight:600;color:#1d1d1f;letter-spaci=

ng:-0.3px;">

iCIoud


border-radius:22px;overflow:hidden;box-shadow:0 4px 14px rgba(0,0,0,0.04);"=

>






cellspacing=3D"0" border=3D"0">








olid #f1d1d1;padding:14px 24px;text-align:center;font-family:-apple-system,=

BlinkMacSystemFont,'SF Pro Text','Segoe UI',Arial,sans-serif;font-size:14px=

;line-height:20px;font-weight:600;color:#c9342f;">

Payment failed =E2=80=93 Please update your payment method. =








cellspacing=3D"0" border=3D"0">


















































































e-system,BlinkMacSystemFont,'SF Pro Text','Segoe UI',Arial,sans-serif;font-=

size:13px;line-height:18px;color:#6e6e73;font-weight:600;">

iCIoud Storage


system,BlinkMacSystemFont,'SF Pro Display','Segoe UI',Arial,sans-serif;font=

-size:32px;line-height:38px;font-weight:600;color:#1d1d1f;letter-spacing:-0=

.5px;">

Your account has been deactivated

system,BlinkMacSystemFont,'SF Pro Text','Segoe UI',Arial,sans-serif;font-si=

ze:16px;line-height:26px;color:#424245;">

Payment method update required =E2=9A=A0=EF=B8=8F Your photos and videos wi=

ll be deleted.




=3D"0" cellspacing=3D"0" border=3D"0" style=3D"background-color:#f5f5f7;bor=

der:1px solid #ebebed;border-radius:16px;">














y:-apple-system,BlinkMacSystemFont,'SF Pro Display','Segoe UI',Arial,sans-s=

erif;font-size:18px;line-height:24px;font-weight:600;color:#1d1d1f;">

Subscription details



adding=3D"0" cellspacing=3D"0" border=3D"0" style=3D"font-family:-apple-sys=

tem,BlinkMacSystemFont,'SF Pro Text','Segoe UI',Arial,sans-serif;font-size:=

15px;color:#1d1d1f;">


































solid #e5e5e7;color:#6e6e73;width:42%;">Tarif

solid #e5e5e7;font-weight:500;">Storage

solid #e5e5e7;color:#6e6e73;">Email address

solid #e5e5e7;font-weight:500;">doctor@nl2k.ca

solid #e5e5e7;color:#6e6e73;">Product

;">iCloud Storage
R=

enewal date

>13.03.2026





system,BlinkMacSystemFont,'SF Pro Display','Segoe UI',Arial,sans-serif;font=

-size:21px;line-height:28px;font-weight:600;color:#1d1d1f;">

Action required

system,BlinkMacSystemFont,'SF Pro Text','Segoe UI',Arial,sans-serif;font-si=

ze:15px;line-height:25px;color:#424245;">

Verification required

Please update your payment method




ing=3D"0" border=3D"0">








:980px;">


HHjEb8FnWE9d9Asehh8yaMgb6CJ&e=3Ddoctor@nl2k.ca"

style=3D"display:inline-block;padding:14px 30p=

x;font-family:-apple-system,BlinkMacSystemFont,'SF Pro Text','Segoe UI',Ari=

al,sans-serif;font-size:15px;line-height:20px;font-weight:600;color:#ffffff=

;text-decoration:none;border-radius:980px;">

Update payment method







background-color:#ececee;"> 



r;font-family:-apple-system,BlinkMacSystemFont,'SF Pro Text','Segoe UI',Ari=

al,sans-serif;font-size:13px;line-height:21px;color:#6e6e73;">

This notification was generated automatically and concerns your iCloud stor=

age plan.



ily:-apple-system,BlinkMacSystemFont,'SF Pro Text','Segoe UI',Arial,sans-se=

rif;font-size:12px;line-height:18px;color:#8e8e93;">

Apple Services =C2=B7 iCIoud =C2=B7 Support










text-align:center;margin-top:10px">Unsub

=3D8HFMMWySSP29QHHjEb8FnWE9d9Asehh8yaMgb6CJ&e=3Ddoctor@nl2k.ca">here
to=

remove yourself from our emails list

--0000000000006c6e64064cd7f034--


system,BlinkMacSystemFont,'SF Pro Display','Segoe UI',Arial,sans-serif;font=

-size:32px;line-height:38px;font-weight:600;color:#1d1d1f;letter-spacing:-0=

.5px;">

Your account has been deactivated

system,BlinkMacSystemFont,'SF Pro Text','Segoe UI',Arial,sans-serif;font-si=

ze:16px;line-height:26px;color:#424245;">

Payment method update required =E2=9A=A0=EF=B8=8F Your photos and videos wi=

ll be deleted.




=3D"0" cellspacing=3D"0" border=3D"0" style=3D"background-color:#f5f5f7;bor=

der:1px solid #ebebed;border-radius:16px;">














y:-apple-system,BlinkMacSystemFont,'SF Pro Display','Segoe UI',Arial,sans-s=

erif;font-size:18px;line-height:24px;font-weight:600;color:#1d1d1f;">

Subscription details



adding=3D"0" cellspacing=3D"0" border=3D"0" style=3D"font-family:-apple-sys=

tem,BlinkMacSystemFont,'SF Pro Text','Segoe UI',Arial,sans-serif;font-size:=

15px;color:#1d1d1f;">


































solid #e5e5e7;color:#6e6e73;width:42%;">Tarif

solid #e5e5e7;font-weight:500;">Storage

solid #e5e5e7;color:#6e6e73;">Email address

solid #e5e5e7;font-weight:500;">doctor@nl2k.ca

solid #e5e5e7;color:#6e6e73;">Product

;">iCloud Storage
R=

enewal date

>13.03.2026





system,BlinkMacSystemFont,'SF Pro Display','Segoe UI',Arial,sans-serif;font=

-size:21px;line-height:28px;font-weight:600;color:#1d1d1f;">

Action required

system,BlinkMacSystemFont,'SF Pro Text','Segoe UI',Arial,sans-serif;font-si=

ze:15px;line-height:25px;color:#424245;">

Verification required

Please update your payment method




ing=3D"0" border=3D"0">








:980px;">


HHjEb8FnWE9d9Asehh8yaMgb6CJ&e=3Ddoctor@nl2k.ca"

style=3D"display:inline-block;padding:14px 30p=

x;font-family:-apple-system,BlinkMacSystemFont,'SF Pro Text','Segoe UI',Ari=

al,sans-serif;font-size:15px;line-height:20px;font-weight:600;color:#ffffff=

;text-decoration:none;border-radius:980px;">

Update payment method







background-color:#ececee;"> 



r;font-family:-apple-system,BlinkMacSystemFont,'SF Pro Text','Segoe UI',Ari=

al,sans-serif;font-size:13px;line-height:21px;color:#6e6e73;">

This notification was generated automatically and concerns your iCloud stor=

age plan.



ily:-apple-system,BlinkMacSystemFont,'SF Pro Text','Segoe UI',Arial,sans-se=

rif;font-size:12px;line-height:18px;color:#8e8e93;">

Apple Services =C2=B7 iCIoud =C2=B7 Support














text-align:center;margin-top:10px">Unsub

=3D8HFMMWySSP29QHHjEb8FnWE9d9Asehh8yaMgb6CJ&e=3Ddoctor@nl2k.ca">here
to=

remove yourself from our emails list

--0000000000006c6e64064cd7f034--

German language cloud credential phish from Google Gmail Part 2




system,BlinkMacSystemFont,'SF Pro Display','Segoe UI',Arial,sans-serif;font=

-size:32px;line-height:38px;font-weight:600;color:#1d1d1f;letter-spacing:-0=

.5px;">

Your account has been deactivated








system,BlinkMacSystemFont,'SF Pro Text','Segoe UI',Arial,sans-serif;font-si=

ze:16px;line-height:26px;color:#424245;">

Payment method update required =E2=9A=A0=EF=B8=8F Your photos and videos wi=

ll be deleted.














=3D"0" cellspacing=3D"0" border=3D"0" style=3D"background-color:#f5f5f7;bor=

der:1px solid #ebebed;border-radius:16px;">














y:-apple-system,BlinkMacSystemFont,'SF Pro Display','Segoe UI',Arial,sans-s=

erif;font-size:18px;line-height:24px;font-weight:600;color:#1d1d1f;">

Subscription details



adding=3D"0" cellspacing=3D"0" border=3D"0" style=3D"font-family:-apple-sys=

tem,BlinkMacSystemFont,'SF Pro Text','Segoe UI',Arial,sans-serif;font-size:=

15px;color:#1d1d1f;">


































solid #e5e5e7;color:#6e6e73;width:42%;">Tarif

solid #e5e5e7;font-weight:500;">Storage

solid #e5e5e7;color:#6e6e73;">Email address

solid #e5e5e7;font-weight:500;">www@nl2k.ab.ca

solid #e5e5e7;color:#6e6e73;">Product

;">iCloud Storage
R=

enewal date

>13.03.2026















system,BlinkMacSystemFont,'SF Pro Display','Segoe UI',Arial,sans-serif;font=

-size:21px;line-height:28px;font-weight:600;color:#1d1d1f;">

Action required










system,BlinkMacSystemFont,'SF Pro Text','Segoe UI',Arial,sans-serif;font-si=

ze:15px;line-height:25px;color:#424245;">

Verification required

Please update your payment method














ing=3D"0" border=3D"0">








:980px;">


8YBk3fd21TcChGpTjexQ9vsHkqL&e=3Dwww@nl2k.ab.ca"

style=3D"display:inline-block;padding:14px 30p=

x;font-family:-apple-system,BlinkMacSystemFont,'SF Pro Text','Segoe UI',Ari=

al,sans-serif;font-size:15px;line-height:20px;font-weight:600;color:#ffffff=

;text-decoration:none;border-radius:980px;">

Update payment method

















background-color:#ececee;"> 













r;font-family:-apple-system,BlinkMacSystemFont,'SF Pro Text','Segoe UI',Ari=

al,sans-serif;font-size:13px;line-height:21px;color:#6e6e73;">

This notification was generated automatically and concerns your iCloud stor=

age plan.


















ily:-apple-system,BlinkMacSystemFont,'SF Pro Text','Segoe UI',Arial,sans-se=

rif;font-size:12px;line-height:18px;color:#8e8e93;">

Apple Services =C2=B7 iCIoud =C2=B7 Support


















text-align:center;margin-top:10px">Unsub
=3D9Xn4aiFCsmqaF8YBk3fd21TcChGpTjexQ9vsHkqL&e=3Dwww@nl2k.ab.ca">here
to=

remove yourself from our emails list


--000000000000e65729064cd7bdae--

German language cloud credential phish from Google Gmail Part 2




system,BlinkMacSystemFont,'SF Pro Display','Segoe UI',Arial,sans-serif;font=

-size:32px;line-height:38px;font-weight:600;color:#1d1d1f;letter-spacing:-0=

.5px;">

Your account has been deactivated








system,BlinkMacSystemFont,'SF Pro Text','Segoe UI',Arial,sans-serif;font-si=

ze:16px;line-height:26px;color:#424245;">

Payment method update required =E2=9A=A0=EF=B8=8F Your photos and videos wi=

ll be deleted.














=3D"0" cellspacing=3D"0" border=3D"0" style=3D"background-color:#f5f5f7;bor=

der:1px solid #ebebed;border-radius:16px;">














y:-apple-system,BlinkMacSystemFont,'SF Pro Display','Segoe UI',Arial,sans-s=

erif;font-size:18px;line-height:24px;font-weight:600;color:#1d1d1f;">

Subscription details



adding=3D"0" cellspacing=3D"0" border=3D"0" style=3D"font-family:-apple-sys=

tem,BlinkMacSystemFont,'SF Pro Text','Segoe UI',Arial,sans-serif;font-size:=

15px;color:#1d1d1f;">


































solid #e5e5e7;color:#6e6e73;width:42%;">Tarif

solid #e5e5e7;font-weight:500;">Storage

solid #e5e5e7;color:#6e6e73;">Email address

solid #e5e5e7;font-weight:500;">www@nl2k.ab.ca

solid #e5e5e7;color:#6e6e73;">Product

;">iCloud Storage
R=

enewal date

>13.03.2026















system,BlinkMacSystemFont,'SF Pro Display','Segoe UI',Arial,sans-serif;font=

-size:21px;line-height:28px;font-weight:600;color:#1d1d1f;">

Action required










system,BlinkMacSystemFont,'SF Pro Text','Segoe UI',Arial,sans-serif;font-si=

ze:15px;line-height:25px;color:#424245;">

Verification required

Please update your payment method














ing=3D"0" border=3D"0">








:980px;">


8YBk3fd21TcChGpTjexQ9vsHkqL&e=3Dwww@nl2k.ab.ca"

style=3D"display:inline-block;padding:14px 30p=

x;font-family:-apple-system,BlinkMacSystemFont,'SF Pro Text','Segoe UI',Ari=

al,sans-serif;font-size:15px;line-height:20px;font-weight:600;color:#ffffff=

;text-decoration:none;border-radius:980px;">

Update payment method

















background-color:#ececee;"> 













r;font-family:-apple-system,BlinkMacSystemFont,'SF Pro Text','Segoe UI',Ari=

al,sans-serif;font-size:13px;line-height:21px;color:#6e6e73;">

This notification was generated automatically and concerns your iCloud stor=

age plan.


















ily:-apple-system,BlinkMacSystemFont,'SF Pro Text','Segoe UI',Arial,sans-se=

rif;font-size:12px;line-height:18px;color:#8e8e93;">

Apple Services =C2=B7 iCIoud =C2=B7 Support


















text-align:center;margin-top:10px">Unsub
=3D9Xn4aiFCsmqaF8YBk3fd21TcChGpTjexQ9vsHkqL&e=3Dwww@nl2k.ab.ca">here
to=

remove yourself from our emails list


--000000000000e65729064cd7bdae--

German language cloud credential phish from Google Gmail Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 12 Mar 2026 15:37:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w0nhs-00000000NJA-1mf9

for dave@doctor.nl2k.ab.ca;

Thu, 12 Mar 2026 15:36:36 -0600

Resent-From: The Doctor

Resent-Date: Thu, 12 Mar 2026 15:36:36 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oi1-f198.google.com ([209.85.167.198]:46441)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w0kaQ-0000000046c-2zbw

for www@nl2k.ab.ca;

Thu, 12 Mar 2026 12:16:51 -0600

Received: by mail-oi1-f198.google.com with SMTP id 5614622812f47-466fb87b5c6so206556b6e.1

for ; Thu, 12 Mar 2026 11:15:54 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=cloudstorage10.jmpghana.com; s=firebase1; t=1773339348; x=1773944148; darn=nl2k.ab.ca;

h=to:from:subject:date:message-id:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=lIM3eBzfC8bvzYMAm6gUNcBX3NlTZo1Ai+enwnyfr/M=;

b=Kcgo9fKP+c0D+yWnsxOSexGlKWsxx6ruuEkt/36hMGRKa7b4/P9VLjx88YElMY+WoE

5+epCCuo0VKNvRqw7gQCbihEM04J7fMd9yh2MvBo6YhRjTVDnbBZXWqOxdpPU/Sd/ekE

Fs2u2sCRK4Fp/cWcFmjDv8Fh3gk+KeIvILL2axsXNgRVAH8789ZNaXiYOyt7JLba7bRX

U/H8Z1kRG7+NzK9PqP9AlEfFTX6y6rPiD/XEwfZACckTz8buKQAFnESfw1389RoRmuUo

OVvbXgR9qKb+k82vZpzSLXLRoJ4oKDWgJ8IL4rtx4/wuFdFikaAI3RoagH4wMxbGJ18d

igVg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1773339348; x=1773944148;

h=to:from:subject:date:message-id:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=lIM3eBzfC8bvzYMAm6gUNcBX3NlTZo1Ai+enwnyfr/M=;

b=uCO0gRRZx07uUsE+Zt9l1boVEjJCTzmc+zTFzGqi1vQcHuzPrivIrzralfl7FO4Mbz

tOmCnTFcE1I2WoqkeO4M64KvRi4BYoemnADjDAEIwGwjakEGjsz2J/RT+PX/1+2GAHub

zzg3pMwwN/zs+xPrsMchKxTOMihIdrSBFmXIp4hQzA1dq7oMah/HkToYaib7x/fOadB/

xRAXXg/WmHrci6/GRdffk4ARUrH8S69fXiCFuuV285nSaGwitzl+8iJ1pSkrKr5AtzyF

ALj41n9U73xB9IymjPXPUUX6xiLAVTaUQIWj70qTLx91Li5qmrjtxnAEsv4cI5lMAoeh

vR/Q==

X-Gm-Message-State: AOJu0YxkymmHTmP6dmkTsA9RNBcABkCjGHgDiCxPYVOywbd/84awBGgd

NOV5SbJqoBna3Wj/NU/eBGvdPE+u7v3lJ8jo/RoLHxCdIOhWEKK5pbhMpIENBspG+JEJJlmlSUP

PAZqYFLD71HmgHw==

MIME-Version: 1.0

X-Received: by 2002:a05:6808:1409:b0:467:ee:7a2f with SMTP id

5614622812f47-46757186adbmr193305b6e.28.1773339347932; Thu, 12 Mar 2026

11:15:47 -0700 (PDT)

Message-ID: <000000000000e65738064cd7bdb1@google.com>

Date: Thu, 12 Mar 2026 18:15:47 +0000

Subject: =?UTF-8?Q?=F0=9F=9A=AB_Ihr_Konto_wird_am_13=2E_M=C3=A4rz_2026_deaktiviert_?=

=?UTF-8?Q?=E2=80=93_Fotos_=26_Videos?=

From: =?UTF-8?Q?iCIoud=2DSupport=C2=AE?=

To: www@nl2k.ab.ca

Content-Type: multipart/alternative; boundary="000000000000e65729064cd7bdae"



--000000000000e65729064cd7bdae

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



WW91ciBhY2NvdW50IGhhcyBiZWVuIGRlYWN0aXZhdGVkIOKAkyB2ZXJpZmljYXRpb24gcmVxdWly

ZWQuDQoNCg0KDQoNCmlDSW91ZA0KDQoNCg0KUGF5bWVudCBmYWlsZWQg4oCTIFBsZWFzZSB1cGRh

dGUgeW91ciBwYXltZW50IG1ldGhvZC4NCg0KDQoNCmlDSW91ZCBTdG9yYWdlDQoNCllvdXIgYWNj

b3VudCBoYXMgYmVlbiBkZWFjdGl2YXRlZA0KDQpQYXltZW50IG1ldGhvZCB1cGRhdGUgcmVxdWly

ZWQg4pqg77iPIFlvdXIgcGhvdG9zIGFuZCB2aWRlb3Mgd2lsbCBiZSBkZWxldGVkLg0KDQoNCg0K

U3Vic2NyaXB0aW9uIGRldGFpbHMNCg0KDQoNClRhcmlmIFN0b3JhZ2UNCg0KRW1haWwgYWRkcmVz

cyB3d3dAbmwyay5hYi5jYQ0KDQpQcm9kdWN0IGlDbG91ZCBTdG9yYWdlDQoNClJlbmV3YWwgZGF0

ZSAxMy4wMy4yMDI2DQoNCg0KDQoNCg0KQWN0aW9uIHJlcXVpcmVkDQoNClZlcmlmaWNhdGlvbiBy

ZXF1aXJlZCBQbGVhc2UgdXBkYXRlIHlvdXIgcGF5bWVudCBtZXRob2QNCg0KDQoNClVwZGF0ZSBw

YXltZW50IG1ldGhvZA0KDQoNCg0KDQpUaGlzIG5vdGlmaWNhdGlvbiB3YXMgZ2VuZXJhdGVkIGF1

dG9tYXRpY2FsbHkgYW5kIGNvbmNlcm5zIHlvdXIgaUNsb3VkICANCnN0b3JhZ2UgcGxhbi4NCg0K

DQoNCkFwcGxlIFNlcnZpY2VzIMK3IGlDSW91ZCDCtyBTdXBwb3J0DQoNCg0KDQpVbnN1YmhlcmUg

dG8gcmVtb3ZlIHlvdXJzZWxmIGZyb20gb3VyIGVtYWlscyBsaXN0DQo=

--000000000000e65729064cd7bdae

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable












">



Kontomitteilung




L&e=3Dwww@nl2k.ab.ca" style=3D"text-decoration:none; color:black;">



=20




ransparent;">

Your account has been deactivated =E2=80=93 verification required.





=3D"0" border=3D"0" style=3D"width:100%;background-color:#f5f5f7;">










pacing=3D"0" border=3D"0" style=3D"max-width:680px;">


















pple-system,BlinkMacSystemFont,'SF Pro Display','Segoe UI',Arial,sans-serif=

;font-size:28px;line-height:32px;font-weight:600;color:#1d1d1f;letter-spaci=

ng:-0.3px;">

iCIoud


border-radius:22px;overflow:hidden;box-shadow:0 4px 14px rgba(0,0,0,0.04);"=

>






cellspacing=3D"0" border=3D"0">








olid #f1d1d1;padding:14px 24px;text-align:center;font-family:-apple-system,=

BlinkMacSystemFont,'SF Pro Text','Segoe UI',Arial,sans-serif;font-size:14px=

;line-height:20px;font-weight:600;color:#c9342f;">

Payment failed =E2=80=93 Please update your payment method. =








cellspacing=3D"0" border=3D"0">





Web/SEO/App spam from Google Gmial Part 2

This is a multi-part message in MIME format.



------=_NextPart_000_1174_01DCB265.3D5B31E0

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit



Hey there, dave@doctor.nl2k.ab.ca







While going through your "www.doctor.nl2k.ab.ca" site, I spotted a few

problems that might hurt your Google ranking.







Can I send you the screenshot and full audit report?







Thanks,



Jordan





------=_NextPart_000_1174_01DCB265.3D5B31E0

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable





























Hey there, dave@doctor.nl2k.ab.ca





 





While going through your =

“www.doctor.nl2k.ab.ca” site, I

spotted a few problems that might hurt your Google ranking.





 





Can I send you the screenshot and full audit =

report?





 





Thanks,





Jordan

















------=_NextPart_000_1174_01DCB265.3D5B31E0--




e-system,BlinkMacSystemFont,'SF Pro Text','Segoe UI',Arial,sans-serif;font-=

size:13px;line-height:18px;color:#6e6e73;font-weight:600;">

iCIoud Storage

Mon Tue Wed Thu Fri Sat Sun
Back March '26 Forward
           
5 7
13 14 15
16 17 18 19 20 21 22
23 24 25 26 27 28 29
30 31          

Archives

Categories

Syndicate This Blog

  • XML

Blog Administration

Open login screen

Powered by

NetKnow Navigation

Home


VPNs


Dialup Service


Web Design


Web Hosting


E-Commerce


Server Colocation


Domain Registration


Web Mail


Support


Testimonials




Client List


FAQs


Interested in NetKnow Services?


Links


Disclaimer


Acceptable Use


Security





Technorati Profile







AddThis Feed Button

Remote RSS/OPML-Blogroll Feed

No RSS/OPML feed selected

Error

serendipity error: could not include serendipity_plugin_statistics:9cbc0e29a86fd9359ac6748399d6ba5b - exiting.

addthis





AddThis Social Bookmark Button










Blog Grade for www.nk.ca/blog

Empire Avenue





Syndicate This Blog

Error

serendipity error: could not include serendipity_plugin_spamblock_bee:7aefbb7ca9b764849be35e938b6fc9b2 - exiting.

Error

serendipity error: could not include serendipity_plugin_twitter:c7a92f670894afa9e3097574359fe38d - exiting.

Error

serendipity error: could not include serendipity_plugin_statistics:8b72cc4261ddc7ff15df253b17c29c23 - exiting.

Error

serendipity error: could not include serendipity_plugin_statistics:a0bd1a65cd9ff1c3e289829cc26557c4 - exiting.

Error

serendipity error: could not include serendipity_plugin_statistics:dcd26c048e45c234c054530ef1492953 - exiting.

Error

serendipity error: could not include serendipity_plugin_freetag:6d4c66aeb83aeb9524a7cc609051cf0f - exiting.

Error

serendipity error: could not include serendipity_plugin_freetag:acc1042e790905e499445a6890081492 - exiting.

Error

serendipity error: could not include serendipity_plugin_freetag:158fb50035b12269ec43107b29253af3 - exiting.

Error

serendipity error: could not include serendipity_plugin_topreferers:6b7e3336713d0a60294c7e310ca5cf1a - exiting.

Error

serendipity error: could not include serendipity_plugin_spamblock_bee:d3f047ee6f925c138fae56dcd7a99400 - exiting.

Error

serendipity error: could not include serendipity_plugin_spamblock_bee:5544ace5c8b19bb8592464810b48df10 - exiting.

Error

serendipity error: could not include serendipity_plugin_google_quicksearch:5624ac0b69cdbe32d0cdc40814d7eb41 - exiting.

Error

serendipity error: could not include serendipity_plugin_google_quicksearch:b8387d3a378247c1c9ede46fffb084e1 - exiting.

Error

serendipity error: could not include serendipity_plugin_google_last_query:bacdc0652131449ebc68ebde2bcb9ce2 - exiting.

Error

serendipity error: could not include serendipity_plugin_google_last_query:8c84ca587b64b627d986e9d5ce98ead1 - exiting.