Cloud Credential Phish from google Gmail
Posted by Dave Yadallee on
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 18 Mar 2026 20:54:01 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from)
id 1w33WG-000000003ur-2awQ
for dave@doctor.nl2k.ab.ca;
Wed, 18 Mar 2026 20:53:56 -0600
Resent-From: The Doctor
Resent-Date: Wed, 18 Mar 2026 20:53:56 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-oo1-f69.google.com ([209.85.161.69]:59567)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98.2 (FreeBSD))
(envelope-from)
id 1w30qP-00000000Lxk-2SsQ
for doctor@doctor.nl2k.ab.ca;
Wed, 18 Mar 2026 18:02:40 -0600
Received: by mail-oo1-f69.google.com with SMTP id 006d021491bc7-672c40f3873so8958738eaf.2
for; Wed, 18 Mar 2026 17:01:47 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=firebaseapp.com; s=20230601; t=1773878501; x=1774483301; darn=doctor.nl2k.ab.ca;
h=to:from:subject:date:message-id:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=aogKKmPq3g4BEdV5twWCwOdLtT3bld1kVQFBkXlcZ+U=;
b=b2p82jHk1/wdyCxQgAP8g3MArmU3kLjUZMoUppeULiewcvsvQv/eqIc9xAzig2IrT/
ib5LhmOAmmYR/J5dx9+SMjYrwY/cEWA8fCg5dJdb4Q1gi8gEmD62Fr3NVV1vwI+GdsdP
JuaNA63b9mWeuBPWvqrL2yZdWFwhs3nxXB/1UijXIMruENsTxTAHhY9Xelli65ftp83F
REzhi5kjKxBXM2F52QRqK/E9EaoWlEZy/eucGXdnqX4TaiJKAjdkL/TJCF+pTXUSpAHt
P33GWIQXd9ZUffCgCVucahAF/dafXR3jaHG6Qy7G3PB6d2AJnioCQ7Utm0Tnw+FFSX15
xJcQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20251104; t=1773878501; x=1774483301;
h=to:from:subject:date:message-id:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=aogKKmPq3g4BEdV5twWCwOdLtT3bld1kVQFBkXlcZ+U=;
b=BHRFAc3/R5UByHA6hjWMB8h1C0N+nppH2rHrkfMR5KMDn2PxOGmmDy4GfrTHTddZEg
cck17ianpg5p6eh5mj6G89cT74poU2zQhDwfzqgaj2eukfmkkOCbfoq8U+0gaZqrlMPK
992AwB55YlkchOVIUiejTJTVVObL7truHG0OEBk+U2Ux1FGtNNFCQXaQtliYUB1B1HCX
i6MeUgtew7qzL3RS/H25Rd6Fn1Fq57+rp8GgefGV1h0Hv45wv6ky9yaXvaGG/hMhbSjr
a7b82ozl8FIq0CL2DZ03YZR1mfgGWO3RWU/PDBavrVmWhgh5fDaxSP0BRJ4om5fVPgPY
GY9g==
X-Gm-Message-State: AOJu0YxSiEyHt7ZvpYBZNREWr7CAdBf/x5YHulkfBm10LkLs4+uHjRJ/
/PwDyvEd9Ws60yYOb137rpVRQaH3if4j58y4FVd53hSz6HK6jpxDBAhwK6YLj0Kbd3QSHtmm0jS
nUkT+tiILVQ==
MIME-Version: 1.0
X-Received: by 2002:a05:6820:1f06:b0:67b:c368:1364 with SMTP id
006d021491bc7-67c0da8a377mr3494201eaf.25.1773878501600; Wed, 18 Mar 2026
17:01:41 -0700 (PDT)
Message-ID: <000000000000f6703c064d5545a4@google.com>
Date: Thu, 19 Mar 2026 00:01:41 +0000
Subject: Final Notice: Storage Access Will Be Suspended
From: Storage
To: doctor@doctor.nl2k.ab.ca
Content-Type: multipart/alternative; boundary="000000000000f67032064d5545a1"
--000000000000f67032064d5545a1
Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes
Content-Transfer-Encoding: base64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--000000000000f67032064d5545a1
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
0">
Account Alert
rial, sans-serif;">
17"=20
style=3D"background:#27ae60; color:#ffffff; text-decoration:none; padding:1=
4px 28px; border-radius:5px; font-size:16px; font-weight:bold; display:inli=
ne-block;">
Keep My Storage Active
ine-height:1.6;">
This is an automated notification regarding your storage account.
Failure to act may result in temporary service interruption.
17" style=3D"color:#2d9cdb; text-decoration:none;">Unsubscribe
--000000000000f67032064d5545a1--
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 18 Mar 2026 20:54:01 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from
id 1w33WG-000000003ur-2awQ
for dave@doctor.nl2k.ab.ca;
Wed, 18 Mar 2026 20:53:56 -0600
Resent-From: The Doctor
Resent-Date: Wed, 18 Mar 2026 20:53:56 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-oo1-f69.google.com ([209.85.161.69]:59567)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98.2 (FreeBSD))
(envelope-from
id 1w30qP-00000000Lxk-2SsQ
for doctor@doctor.nl2k.ab.ca;
Wed, 18 Mar 2026 18:02:40 -0600
Received: by mail-oo1-f69.google.com with SMTP id 006d021491bc7-672c40f3873so8958738eaf.2
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=firebaseapp.com; s=20230601; t=1773878501; x=1774483301; darn=doctor.nl2k.ab.ca;
h=to:from:subject:date:message-id:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=aogKKmPq3g4BEdV5twWCwOdLtT3bld1kVQFBkXlcZ+U=;
b=b2p82jHk1/wdyCxQgAP8g3MArmU3kLjUZMoUppeULiewcvsvQv/eqIc9xAzig2IrT/
ib5LhmOAmmYR/J5dx9+SMjYrwY/cEWA8fCg5dJdb4Q1gi8gEmD62Fr3NVV1vwI+GdsdP
JuaNA63b9mWeuBPWvqrL2yZdWFwhs3nxXB/1UijXIMruENsTxTAHhY9Xelli65ftp83F
REzhi5kjKxBXM2F52QRqK/E9EaoWlEZy/eucGXdnqX4TaiJKAjdkL/TJCF+pTXUSpAHt
P33GWIQXd9ZUffCgCVucahAF/dafXR3jaHG6Qy7G3PB6d2AJnioCQ7Utm0Tnw+FFSX15
xJcQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20251104; t=1773878501; x=1774483301;
h=to:from:subject:date:message-id:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=aogKKmPq3g4BEdV5twWCwOdLtT3bld1kVQFBkXlcZ+U=;
b=BHRFAc3/R5UByHA6hjWMB8h1C0N+nppH2rHrkfMR5KMDn2PxOGmmDy4GfrTHTddZEg
cck17ianpg5p6eh5mj6G89cT74poU2zQhDwfzqgaj2eukfmkkOCbfoq8U+0gaZqrlMPK
992AwB55YlkchOVIUiejTJTVVObL7truHG0OEBk+U2Ux1FGtNNFCQXaQtliYUB1B1HCX
i6MeUgtew7qzL3RS/H25Rd6Fn1Fq57+rp8GgefGV1h0Hv45wv6ky9yaXvaGG/hMhbSjr
a7b82ozl8FIq0CL2DZ03YZR1mfgGWO3RWU/PDBavrVmWhgh5fDaxSP0BRJ4om5fVPgPY
GY9g==
X-Gm-Message-State: AOJu0YxSiEyHt7ZvpYBZNREWr7CAdBf/x5YHulkfBm10LkLs4+uHjRJ/
/PwDyvEd9Ws60yYOb137rpVRQaH3if4j58y4FVd53hSz6HK6jpxDBAhwK6YLj0Kbd3QSHtmm0jS
nUkT+tiILVQ==
MIME-Version: 1.0
X-Received: by 2002:a05:6820:1f06:b0:67b:c368:1364 with SMTP id
006d021491bc7-67c0da8a377mr3494201eaf.25.1773878501600; Wed, 18 Mar 2026
17:01:41 -0700 (PDT)
Message-ID: <000000000000f6703c064d5545a4@google.com>
Date: Thu, 19 Mar 2026 00:01:41 +0000
Subject: Final Notice: Storage Access Will Be Suspended
From: Storage
To: doctor@doctor.nl2k.ab.ca
Content-Type: multipart/alternative; boundary="000000000000f67032064d5545a1"
--000000000000f67032064d5545a1
Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes
Content-Transfer-Encoding: base64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--000000000000f67032064d5545a1
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
0">
rial, sans-serif;">
17"=20
style=3D"background:#27ae60; color:#ffffff; text-decoration:none; padding:1=
4px 28px; border-radius:5px; font-size:16px; font-weight:bold; display:inli=
ne-block;">
Keep My Storage Active
ine-height:1.6;">
This is an automated notification regarding your storage account.
Failure to act may result in temporary service interruption.
17" style=3D"color:#2d9cdb; text-decoration:none;">Unsubscribe
--000000000000f67032064d5545a1--