Cloud Credential Phish from Google Gmail Part 2

body{

margin: 0;

padding: 0;

}



a[x-apple-data-detectors] {

color: inherit !important;

text-decoration: inherit !important;

}



#MessageViewBody a {

color: inherit;

text-decoration: none;

}



p{

line-height: inherit

}



.desktop_hide,

.desktop_hide table{

mso-hide: all;

display: none;

max-height: 0px;

overflow: hidden;

}



.image_block img + div{

display: none;

}



sup, sub {

font-size: 75%;

line-height: 0;

}

@media (max-width:670px) {

.desktop_hide table.icons-inner {

display: inline-block!important;

}



.icons-inner {

text-align: center;

}



.icons-inner td {

margin: 0 auto;

}



.mobile_hide {

display: none;

}



.row-content {

width: 100%!important;

}



.stack .column {

width: 100%;

display: block;

}



.mobile_hide {

min-height: 0;

max-height: 0;

max-width: 0;

overflow: hidden;

font-size: 0px;

}



.desktop_hide,

.desktop_hide table {

display: table!important;

max-height: none!important;

}

}


d>
ng: 0; -webkit-text-size-adjust: none; text-size-adjust: none;">
s=3D"nl-container" width=3D"100%" border=3D"0" cellpadding=3D"0" cellspacin=

g=3D"0" role=3D"presentation" style=3D"mso-table-lspace: 0pt; mso-table-rsp=

ace: 0pt; background-color: #FFFFFF;">

w-1" align=3D"center" width=3D"100%" border=3D"0" cellpadding=3D"0" cellspa=

cing=3D"0" role=3D"presentation" style=3D"mso-table-lspace: 0pt; mso-table-=

rspace: 0pt;">

nter" border=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"presentation=

" style=3D"mso-table-lspace: 0pt; mso-table-rspace: 0pt; color: #000000; wi=

dth: 650px; margin: 0 auto;" width=3D"650"><=

/tbody>

olumn-1" width=3D"100%" style=3D"mso-table-lspace: 0pt; mso-table-rspace: 0=

pt; font-weight: 400; text-align: left; padding-bottom: 5px; padding-top: 5=

px; vertical-align: top;">
"100%" border=3D"0" cellpadding=3D"10" cellspacing=3D"0" role=3D"presentati=

on" style=3D"mso-table-lspace: 0pt; mso-table-rspace: 0pt; word-break: brea=

k-word;">

r;font-family:'Open Sans', 'Helvetica Neue', Helvetica, Arial, sans-serif;f=

ont-size:12px;font-weight:400;letter-spacing:0px;line-height:1.2;text-align=

:center;mso-line-height-alt:14px;">

Can't see images=

,
F-2BzqiGw3CIXpbHrtYHfLDtAIsYdtG4g9hue17UWvLxDlhB9MvwdyvvF_A3nRQoop3xGTTNLdb=

AlLJcD2sfZwkYwAzGLsVwWWgkysJsC7wSRYpipBhGB05ZVytHg8U4lxnVQgLrb1mKX9FHel3RYz=

kuQ7bb8o4coPfiWKjZDGo6Z0DBH1SeyI2OiHiqR3fSrdjspwxa3iA2RqQj2jfq8L0ZOtCDc5dkD=

Hj-2FwXnoF-2BUUa0PE-2Booxrda4CNAx2EiuPMQTHrtj-2FZm6SW272kk0wBNv9k6cAFyt8uAN=

gVW8qSQ9XKsAWirdUzxtxEG0KUI-2B97SyfFGF51msV9kWfeL2GTkiaeExWuwpOewY-2F6pBK-2=

Fz4pJCQGdykynS2zW8rTBgEWV7g83klyBDJJ57MOMMeuRXeNIz74IiUzHVTOYrZJtRmzG0-2Bw-=

2F1ES0iuz8KY2yQjhcIDGWfPwswtOop5A3CSCplrqBUuxiGDUWwUqHuXPeU-2FS9hFJdcE1XuV3=

c" target=3D"_blank" style=3D"text-decoration: underline; color: #000;" rel=

=3D"noopener">Click here


s=3D"image_block block-2" width=3D"100%" border=3D"0" cellpadding=3D"0" cel=

lspacing=3D"0" role=3D"presentation" style=3D"mso-table-lspace: 0pt; mso-ta=

ble-rspace: 0pt;">

lass=3D"alignment" align=3D"center">

f=3D"https://click.suprsend.com/ls/click?upn=3Du001.i-2BRQJxtL1ha3gF-2BzqiG=

w3CIXpbHrtYHfLDtAIsYdtG4g9hue17UWvLxDlhB9MvwdyvvF_A3nRQoop3xGTTNLdbAlLJcD2s=

fZwkYwAzGLsVwWWgkysJsC7wSRYpipBhGB05ZVytHg8U4lxnVQgLrb1mKX9FHel3RYzkuQ7bb8o=

4coPfiWKjZDGo6Z0DBH1SeyI2OiHiqR3fSrdjspwxa3iA2RqQj2jfq8L0ZOtCDc5dkDHj-2FwXn=

oF-2BUUa0PE-2Booxrda4CNAx2EiuPMQTHrtj-2FZm6SW272kk0wBNv9k6cAFyt8uANgVW8qSQ9=

XKsAWirdUzxtxEG0KUI-2B97SyfFGF51msV9kWfeL2GTkiaeExWuwpOewY-2F6pBK-2Fz4pJCQG=

dykynS2zW8rTBgEWV7g83klyBDJJ57MOMMeuRXeNIz74IiUzHVTOYrZJtRmzG0-2Bw-2F1ES0iu=

z8KY2yQjhcIDGWfPwswtOop5A3CSCplrqBUuxiGDUWwUqHuXPeU-2FS9hFJdcE1XuV3c" targe=

t=3D"_blank">
e21b58ba9a8f420e4bd0/69be358ac01d5abad40427dd/164422049fb905b52bf34e9c3aaf4=

cbd.original.jpeg" style=3D"display: block; height: auto; border: 0; width:=

100%;" width=3D"650" alt=3D"" title=3D"" height=3D"auto">
<=

/td>

" border=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"presentation" st=

yle=3D"mso-table-lspace: 0pt; mso-table-rspace: 0pt;">

=3D"pad" style=3D"width:100%;">

=3D"center" width=3D"100%" border=3D"0" cellpadding=3D"0" cellspacing=3D"0"=

role=3D"presentation" style=3D"mso-table-lspace: 0pt; mso-table-rspace: 0p=

t; background-color: #ffffff;">

tack" align=3D"center" border=3D"0" cellpadding=3D"0" cellspacing=3D"0" rol=

e=3D"presentation" style=3D"mso-table-lspace: 0pt; mso-table-rspace: 0pt; c=

olor: #000000; background-color: #ffffff; width: 650px; margin: 0 auto;" wi=

dth=3D"650">=


=3D"mso-table-lspace: 0pt; mso-table-rspace: 0pt; font-weight: 400; text-al=

ign: left; padding-bottom: 5px; padding-top: 5px; vertical-align: top;">
ble class=3D"icons_block block-1" width=3D"100%" border=3D"0" cellpadding=

=3D"0" cellspacing=3D"0" role=3D"presentation" style=3D"mso-table-lspace: 0=

pt; mso-table-rspace: 0pt; text-align: center; line-height: 0;">

ily: 'Inter', sans-serif; font-size: 15px; padding-bottom: 5px; padding-top=

: 5px; text-align: center;">



--00000000000070b2a1064d853d0e--

Cloud Credential Phish from Google Gmail Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 21 Mar 2026 06:43:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w3vek-00000000KJz-46Cg

for dave@doctor.nl2k.ab.ca;

Sat, 21 Mar 2026 06:42:18 -0600

Resent-From: The Doctor

Resent-Date: Sat, 21 Mar 2026 06:42:18 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oo1-f70.google.com ([209.85.161.70]:52262)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w3sRH-00000000Lx1-0j5g

for sales@nk.ca;

Sat, 21 Mar 2026 03:16:18 -0600

Received: by mail-oo1-f70.google.com with SMTP id 006d021491bc7-67c211a0a07so20106053eaf.0

for ; Sat, 21 Mar 2026 02:15:23 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=firebaseapp.com; s=20230601; t=1774084517; x=1774689317; darn=nk.ca;

h=to:from:subject:date:message-id:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=QCCLJEE8Jj27I0uDer01V16qjB+btrYczeMorgKFgh0=;

b=SJHiY7YCW+K9Uw43aT3XU5TwNY+z370D8QSCH5M4QGe3uTDwK2j34vgMXCcyk53Mt7

Wij8hg+YR/TKIHsCSXqDFVgVfrtGNNy8TTcaASpr93jMnZHh/daEpZyXWvPxHcjHZiuS

ellfDIMd+XjnaDsONK4OS/A5jccximtqcwGeBs9FlsA6TqmoIgZFvLWceoSInwtsgnsF

9KmcriPWnL/JY+fvgROxBvhJRWFiXVpopput93ZDs5JCqVsE3lSpfh28ui5XaELsLniJ

OmPEczk7RyMaoJMQ5SthBabAtnytNz5oVoxxLIX4Qfnm3E4C32wFOws5R53PsL0vDqYh

A+Ew==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1774084517; x=1774689317;

h=to:from:subject:date:message-id:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=QCCLJEE8Jj27I0uDer01V16qjB+btrYczeMorgKFgh0=;

b=O0kbz+nR4MxiB//NP2ZgmIsTzyamJvC9qt+DtWSWmTURAFNfbSZPu+y/C2KqSplA4V

VCJgAB/6Us6dlgcayydmbB3oFQerw4K8grtpES8sYXsdAmj+IOKq8szDNuNe+g43jqPO

U0EBpnsc9Mz99XOnIpK58OD9ETNo4xkdxUIoH5D4MSZIlHt76f6m965KsTsqPNQg9GmR

7UQHFfjt84kkQIMKas5zDnqTFELVkD3TwmCddIWlZOyuIC8D73tEgAfHWZeXhaiMIxGo

PwUcxSf4h1tDp6BD5GfvQx+/SnDtqGhUEjl2oX2Bt1OEFnC/Eh2LBzR77FS2xwcAfYTC

xTlQ==

X-Gm-Message-State: AOJu0YwdI5Phdz8kUrsahJ5MAs8PONgPn/4U4pxuedshC9dYgjzJQGab

qgHHPzp1uxtnNtKKGFFgkyKxF/Crf5wdT0byBe3jzuA49xlTXfeuB0DBdPJC/3DJUvL9UPATQ8m

IkdmSptNZDw==

MIME-Version: 1.0

X-Received: by 2002:a05:6820:4de9:b0:67b:e4a1:9e5a with SMTP id

006d021491bc7-67c22ef420bmr4541204eaf.19.1774084517048; Sat, 21 Mar 2026

02:15:17 -0700 (PDT)

Reply-To: cloudsystemnotification@yopmail.com

Message-ID: <00000000000070b2b2064d853d11@google.com>

Date: Sat, 21 Mar 2026 09:15:17 +0000

Subject: =?UTF-8?Q?=E2=9A=A0=EF=B8=8F_Important_Alert=3A_Uploads_temporarily_paused_=2D?=

=?UTF-8?Q?_storage_limit_reached?=

From: Cloud System Notification

To: sales@nk.ca

Content-Type: multipart/alternative; boundary="00000000000070b2a1064d853d0e"

X-Spam_score: 6.8

X-Spam_score_int: 68

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Can't see images, Click here Can't see images, Click here



Content analysis details: (6.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.161.70 listed in will-spam-for-food.eu.org]

[209.85.161.70 listed in will-spam-for-food.eu.org]

[209.85.161.70 listed in will-spam-for-food.eu.org]

[209.85.161.70 listed in will-spam-for-food.eu.org]

[209.85.161.70 listed in will-spam-for-food.eu.org]

[209.85.161.70 listed in will-spam-for-food.eu.org]

[209.85.161.70 listed in will-spam-for-food.eu.org]

[209.85.161.70 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.161.70 listed in dnsbl.ahbl.org]

[209.85.161.70 listed in dnsbl.ahbl.org]

[209.85.161.70 listed in dnsbl.ahbl.org]

[209.85.161.70 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.161.70 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.161.70 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.161.70 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.161.70 listed in dnsbl.ahbl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.1 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.161.70 listed in sa-trusted.bondedsender.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.7 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.161.70 listed in sa-accredit.habeas.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.161.70 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.4 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.161.70 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.161.70 listed in bl.score.senderscore.com]

0.0 MIME_HTML_MOSTLY BODY: Multipart message mostly text/html MIME

0.8 HTML_IMAGE_RATIO_02 BODY: HTML has a low ratio of text to image area

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} =?UTF-8?Q?=E2=9A=A0=EF=B8=8F_Important_Alert=3A_Uploads_temporarily_paused_=2D?=

=?UTF-8?Q?_storage_limit_reached?=



--00000000000070b2a1064d853d0e

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes



Can't see images, Click here









--00000000000070b2a1064d853d0e

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




osoft-com:office:office" lang=3D"en">
=3D"Content-Type" content=3D"text/html; charset=3Dutf-8">
port" content=3D"width=3Ddevice-width, initial-scale=3D1.0">
ss2?family=3DOpen+Sans:wght@100;200;300;400;500;600;700;800;900" rel=3D"sty=

lesheet" type=3D"text/css">

class=3DWordSection1>


style=3D'font-size:11.5pt'>Hi,


class=3DMsoNoSpacing> 


style=3D'font-size:11.5pt'>Do you need a new Website or want to improve =

your current one? I am a graphic designer / web developer from India, =

ready to provide customized solutions for your business.


class=3DMsoNoSpacing>
style=3D'font-size:11.5pt'> 


class=3DMsoNoSpacing>I’d love to =

share my portfolio and work with you to create something that fits your =

needs perfectly. Share your ideas, or let me know your phone number for =

quick communication.


style=3D'font-size:11.5pt'> 


class=3DMsoNoSpacing>Looking forward to =

connecting with you!


style=3D'font-size:11.5pt'> 


class=3DMsoNoSpacing>Best =

regards,


style=3D'font-size:11.5pt'>Rishab


class=3DMsoNoSpacing> 


style=3D'font-size:11.5pt'>P.S.: If you'd prefer not to receive further =

emails from me, simply reply with "NO" in the subject =

line.



------=_NextPart_000_3C76D_01DCB8B5.294177E0--



WEb/SEo/App spam from Google Gmail Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 20 Mar 2026 17:23:01 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w3jAM-00000000H17-31Bt

for dave@doctor.nl2k.ab.ca;

Fri, 20 Mar 2026 17:22:06 -0600

Resent-From: The Doctor

Resent-Date: Fri, 20 Mar 2026 17:22:06 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pg1-f196.google.com ([209.85.215.196]:52388)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w3cmy-00000000NuX-1oGQ

for sales@nk.ca;

Fri, 20 Mar 2026 10:33:42 -0600

Received: by mail-pg1-f196.google.com with SMTP id 41be03b00d2f7-c742882d2a4so355454a12.0

for ; Fri, 20 Mar 2026 09:32:01 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=hiredevpros-com.20230601.gappssmtp.com; s=20230601; t=1774024316; x=1774629116; darn=nk.ca;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:from:to:cc:subject:date:message-id:reply-to;

bh=4lD9gmeQm3DWR8FYwYt4wa1YRj2YaT0OV4OBbwWCtKk=;

b=Ro2K+Tu1yM++Nrg+WdIztXJ/BivQcHzCOG819I48MdmfOGZjt6zCYLqbchRbacSDlz

nCWZDPhxTpU/pYBG+0q8wTNzXGJtGYB20Ku9ics4e7wIX4aQAIwUTMFMylMGXNS0sLRJ

qy2TsRsyzMNIm6LF3hJAqmrp55lLN9EkA4K3z7gEk0qpPmthBb9KQHWRb4ieV1znlvrQ

dzu/R2Wns1Hrk54/7ksFwgbhFRV9asWoYO7W3BfJejzfoRCPEMLQuKRgS3Hvf7MtIT1y

jfpv2y6UKq6QMzoe6rMWL6wWT12YFO1zr/qhD+oJFeGm3DAHp+lADUrMdfKTTOfRORE3

d0Pg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1774024316; x=1774629116;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to;

bh=4lD9gmeQm3DWR8FYwYt4wa1YRj2YaT0OV4OBbwWCtKk=;

b=sPpuL1wl93/ekEV6BS5XLzaRcwBtoRL03nN6XS04DAowzzlPWNh3u4+8HcH7SSCcLX

OWbOENYHGDdlPX+CmGm7OVbVv8a9PfsRp55/to1V6Ts2L1LOG1BfMOodQAGt9CFkSjFC

2utZtCVZaAEXhP4YfOfSQUZ3zXCcpJxagafhDBu9LTbT5uIW3K7O/I06xZAiy6uVc+sC

40d7TcxwfMyXmpxToE+91kgi0P4jOX5BLJNxGbRUKJHZRjPJihYcqbjn7O8TuaMZmK95

VgbZiwc0F6dsmmP2EIm8+81uVSCksv0F2lzr4bsOYTOH4S4f0Fi1KsI/VWq6uG397O/u

cipA==

X-Gm-Message-State: AOJu0YxuSfq23CS2GYwS3t599RAgeY5yyVvtWZWVs8Vt71D7zNdEMQA6

ppomU/u4hIbljFAr9D4uHmvo6TZaT6Kgf+RIhMbF+Ssmg3WE8QOoraO0MyZJkAa1Oel2NJRnPl4

eW+8Zzzg=

X-Gm-Gg: ATEYQzy4KjxLQB/NcSvGVcZWbZsODry2JSBzNdbTQ4UNwGNWHHvK/V+Y8Pyxnn/6szn

Rin7fSgYTXvg9B0BXy76eebMejU2kWlYyqotoFWTRnEj0gS1suMJS5u8uONQjLKHGNoqZPDP8H9

uEu8Sz+sllax+/IFJonPfOjw00VL4dZbZSkyKkSxBKIuQCpdF1ajohucNyBoc0QdEqo22+NFJHk

uV1hTofY1/4HKInwWxTgrR1BmutcoyY8AFEx1uuNSZVxLQPsxW8xYqWe57BpRQcR3Gl3pmT+Vx/

hH41VVUQFPOKm57H7NjwA6hQHjm39DlWyTSmZn05v7MuBibn3Tw8ZQwzmnre+I9UnN4hos5RuFc

htrJ25Njejc6PWQFaMtUuePYylQylWksmUAOWetx4+rT+/d+HKzX+hqbtGKucudU2XMWgVhFkKu

9q4PTkcBfQk9GI9vu4DGvgIKBaQ7rM/HX9KyPt4pVcQ0w+Lw==

X-Received: by 2002:a05:6a20:9189:b0:398:8071:da9b with SMTP id adf61e73a8af0-39bcea2c4a7mr3238347637.23.1774024315560;

Fri, 20 Mar 2026 09:31:55 -0700 (PDT)

Received: from DESKTOPNPADQ8A ([103.248.121.118])

by smtp.gmail.com with ESMTPSA id 41be03b00d2f7-c74443cc9edsm2210479a12.23.2026.03.20.09.31.52

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Fri, 20 Mar 2026 09:31:55 -0700 (PDT)

From: "Rishab"

To:

Subject: website Redesign

Date: Fri, 20 Mar 2026 21:54:44 +0530

Message-ID: <3c76c01dcb887$0f893be0$2e9bb3a0$@com>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_3C76D_01DCB8B5.294177E0"

X-Mailer: Microsoft Office Outlook 12.0

Thread-Index: Ady4XXvJwjB/R0s7Qo+hamCtctVB1Q==

Content-Language: en-us

X-Spam_score: 7.2

X-Spam_score_int: 72

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, Do you need a new Website or want to improve your current

one? I am a graphic designer / web developer from India, ready to provide

customized solutions for your business. I'd love to share my portfolio and

work with you to create something that fits your needs perfectly. Share your

ideas, or let me know your phone number for quick communication.



Content analysis details: (7.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[103.248.121.118 listed in will-spam-for-food.eu.org]

[103.248.121.118 listed in will-spam-for-food.eu.org]

[103.248.121.118 listed in will-spam-for-food.eu.org]

[103.248.121.118 listed in will-spam-for-food.eu.org]

[103.248.121.118 listed in will-spam-for-food.eu.org]

[103.248.121.118 listed in will-spam-for-food.eu.org]

[103.248.121.118 listed in will-spam-for-food.eu.org]

[103.248.121.118 listed in will-spam-for-food.eu.org]

[209.85.215.196 listed in will-spam-for-food.eu.org]

[209.85.215.196 listed in will-spam-for-food.eu.org]

[209.85.215.196 listed in will-spam-for-food.eu.org]

[209.85.215.196 listed in will-spam-for-food.eu.org]

[209.85.215.196 listed in will-spam-for-food.eu.org]

[209.85.215.196 listed in will-spam-for-food.eu.org]

[209.85.215.196 listed in will-spam-for-food.eu.org]

[209.85.215.196 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.215.196 listed in dnsbl.ahbl.org]

[209.85.215.196 listed in dnsbl.ahbl.org]

[209.85.215.196 listed in dnsbl.ahbl.org]

[209.85.215.196 listed in dnsbl.ahbl.org]

[103.248.121.118 listed in dnsbl.ahbl.org]

[103.248.121.118 listed in dnsbl.ahbl.org]

[103.248.121.118 listed in dnsbl.ahbl.org]

[103.248.121.118 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.215.196 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.215.196 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.215.196 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.215.196 listed in dnsbl.ahbl.org]

google Seller Acount spam from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 20 Mar 2026 17:22:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w3jAE-00000000GxG-104j

for dave@doctor.nl2k.ab.ca;

Fri, 20 Mar 2026 17:21:58 -0600

Resent-From: The Doctor

Resent-Date: Fri, 20 Mar 2026 17:21:58 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yw1-f178.google.com ([209.85.128.178]:55361)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w3cRW-000000003u7-1bwT

for sales@nk.ca;

Fri, 20 Mar 2026 10:11:30 -0600

Received: by mail-yw1-f178.google.com with SMTP id 00721157ae682-7947cf097c1so8100557b3.2

for ; Fri, 20 Mar 2026 09:09:58 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1774022991; cv=none;

d=google.com; s=arc-20240605;

b=BFMafQ2ie825KRWxu5DfSZmv7vzzi2izrvbPFRLzs4HfYNp3dAoowCggNhWgXooPYA

rDMBUOkDv4Bt3/KQfJYa7DdXiW0RlR/0ECIgBFY0qUYsRf3/1mEftZUyhmlji7D4tknE

H28W9cZ2L806CglLQQnXjmQHLLDeTAt+4ANZO6ATRWnxSiYeIUnQn+rWfx7ekEpwokKL

6ZSEVBaVrnl+VvFr7Olvyai/wvdIiIUxIh43o9DGPhjF3cBU0/pKL2dhBpR4SLQZJJhg

z6wg2MjI7UthiWgi0flcvtmecAlSDGxaSFpItCKuMd+RAzq8T90sYUv2DlyH6OO1Y827

Igaw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=ETREsmtwLYBt+yDBKDMdY8vuzfu+PkIDhKrqtJZDZtk=;

fh=C4vsnDG7cTH8aa/8f7sygxKSfblX4MPDg6mph8A3jUw=;

b=Tb6XHO+mSHKs3gy6gUFY5wMTaAkRlQC/U1ZSfSbBBodrI3l9e6L7bvi+mrD/TCm6dy

/BzZ83XHYKlT1EUKyomeBwojaH5uHl5AfMt2bxEFlLvWaOH8wPQA0xsseSqQiPfXBTHU

9X0x53JDhgZOkWFC8fBynTLhLpqeLDv8zw1axiC5B0YMNYnwJ4fPY/dcIatzbXz0er/M

eFOPb5K6Ta76HxoHdnczn5kh0yLFG5CJ13fcR4nAe0wtFrW2tQRGPOqzn5tAte0qViom

m/AbBlCdSkOzci1EnFBcWjd1PxF+JGUPjyxw4NgiG/vL9onpe/2c1W82NxYsPdiyPh0J

RdiQ==;

darn=nk.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1774022991; x=1774627791; darn=nk.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=ETREsmtwLYBt+yDBKDMdY8vuzfu+PkIDhKrqtJZDZtk=;

b=PZ86MUW+aqd/DZKn7KPf321qFmBo2+oQg0BkWOaywGc7FsPicQ6eKWLgdg/VE5GDfa

JZvU6sDpcukocO1BY15i4XlZYuE9GGdj6hWLvsDnGJshuDgBNdd4Q62fSrmp5TR7+5o4

YM2y1rC86MUVAOc+0k7nUxjxh0MQ+uCtbENgcp+wx0zk6aR52OigOWJZhHrN4gs1aeUl

j+vMvPS0SIWTVt+0lKQ20LfSePH4DyjfhRjsiq1NOxy3s4+x7y3WpI1cudfYg2UDsPQZ

jT9wjDu+ZiW/QICMUD5xdUZxVkOgLa6oiK3u8ZsMUsXvDVWqhxARjWODo8deOuWMgtNd

ARQA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1774022991; x=1774627791;

h=to:subject:message-id:date:from:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=ETREsmtwLYBt+yDBKDMdY8vuzfu+PkIDhKrqtJZDZtk=;

b=FP4KR54YORlgSjMuO0k4SwguI3QY8cMsO4wxees5oaAHp8FrRtaUitg8pde7YXRyLt

ZlezJC7CIj9whZAZ13Yl7oTOsxImk+APiXhn94O8Tpm/4rATal07tPk6hwupUfC1DzH0

GLueEcEfyEH7H+23seeV7VFsceP+rwcYHao18l6qSHdcm/+5RkPTl8Kfw9gJgfdjzhWG

hp+ZXNa98hD6J+RQdU8fiNFn5VDPzNqVyF6zNeptOdB56aoSfHMtqDQFagigsyuaFoRQ

hoBVyL9c7MDx/gqYqsV9i9CCLN13b9bCDpuW16mvbr/gqtXDmFRk2IEoeSz+aFxtnlbV

jA6g==

X-Gm-Message-State: AOJu0Yyc638fVVUWEWBqZFnZMCD+5Rv/Z4TeDcAAIALoi+M/b38/s442

o4LLwsvV8MY3TI0d9Jc/UVxXUJ8HgaM/3q4app2+AOoQJ6r6oqXrDpU6BZYVp0E1kmKNhljaqlm

Xzv8cQnhUwV51p13z97O12qgWaaoUosZqcQ==

X-Gm-Gg: ATEYQzwuChfdr3ORZPH+XjdGuw9AJW4OW14UqPaLryU+SJTqOt3T3jilmb7OBoRDETl

sFbPYgGhr0QwpPzCFrmDeNT6Xum4QzIYxAFyIantGhYG56dxXVFB95xtrsHALonTb1wL/6HJW2s

Eec+G4n2YboZv4ambcLf4oJgI/ZAoknQegRwWNt2mjINiv7HZfLn04MbLL3tFbwTqZD6x1oybXf

mng5a8kyacZ833zI8OJqAqh+VZF9F5CkswHaL+4IqnpJZgFGH70lsDL1dLcy00VXP8pOUxzTXqE

eFK77Aozoblk

X-Received: by 2002:a05:690e:16d8:b0:646:7a21:f03c with SMTP id

956f58d0204a3-64eaa8b88demr2623551d50.81.1774022578023; Fri, 20 Mar 2026

09:02:58 -0700 (PDT)

MIME-Version: 1.0

From: Konok Ray

Date: Fri, 20 Mar 2026 22:02:47 +0600

X-Gm-Features: AaiRm53gPnT1qyK1jeuUiUJg0Fq0d2QIJ-rWN3_qZvdV2rbcCR7Z1xo40pMP_H8

Message-ID:

Subject: google seller

To: sales@nk.ca

Content-Type: multipart/alternative; boundary="0000000000009633dd064d76d101"

X-Spam_score: 5.1

X-Spam_score_int: 51

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Now available all digital accounts. please replay or whatsapp

me https://wa.me/+88001857150041 Now available all digital accounts. please

replay or whatsapp me https://wa.me/+88001857150041



Content analysis details: (5.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.128.178 listed in will-spam-for-food.eu.org]

[209.85.128.178 listed in will-spam-for-food.eu.org]

[209.85.128.178 listed in will-spam-for-food.eu.org]

[209.85.128.178 listed in will-spam-for-food.eu.org]

[209.85.128.178 listed in will-spam-for-food.eu.org]

[209.85.128.178 listed in will-spam-for-food.eu.org]

[209.85.128.178 listed in will-spam-for-food.eu.org]

[209.85.128.178 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.128.178 listed in dnsbl.ahbl.org]

[209.85.128.178 listed in dnsbl.ahbl.org]

[209.85.128.178 listed in dnsbl.ahbl.org]

[209.85.128.178 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.128.178 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.128.178 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.128.178 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.128.178 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.128.178 listed in list.dnswl.org]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[konokrayk1(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[konokrayk1(at)gmail.com]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.178 listed in wl.mailspike.net]

Subject: {SPAM?} google seller



--0000000000009633dd064d76d101

Content-Type: text/plain; charset="UTF-8"



Now available all digital accounts. please replay or whatsapp me

https://wa.me/+88001857150041



--0000000000009633dd064d76d101

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Now available=C2=A0all digital=C2=A0accounts. please repla=

y or whatsapp me https://wa.me/+8=

8001857150041




--0000000000009633dd064d76d101--