McAfee Phish from Google Gmail
Posted by Dave Yadallee on
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 02 Apr 2026 13:49:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from)
id 1w8O1V-00000000Kkq-0Q66
for dave@doctor.nl2k.ab.ca;
Thu, 02 Apr 2026 13:48:13 -0600
Resent-From: The Doctor
Resent-Date: Thu, 2 Apr 2026 13:48:12 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-oo1-f74.google.com ([209.85.161.74]:56774)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98.2 (FreeBSD))
(envelope-from)
id 1w8KeY-00000000P0a-3xgP
for doctor@nl2k.ab.ca;
Thu, 02 Apr 2026 10:12:29 -0600
Received: by mail-oo1-f74.google.com with SMTP id 006d021491bc7-67e4258e5b7so3249236eaf.1
for; Thu, 02 Apr 2026 09:11:32 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=google.com; s=20251104; t=1775146286; x=1775751086; darn=nl2k.ab.ca;
h=to:from:subject:date:message-id:sender:reply-to:mime-version:from
:to:cc:subject:date:message-id:reply-to;
bh=mM0cVmXXgoszdUsiSkuGUWjrkhs0q5kkcmsVT+WyNFU=;
b=HhBM/fDa/g03tOqae93PTJl8dcn8YwT+ZVEJeWlr2ulYCZkbC+cbgpGe8b5N95al4Q
JYWZAO/7gLrzXQHXELSOFb07/WYSkLXmmyY0E/IhZcV63Zorh5TXIQx1t9KzBUjrQ4rJ
Xvqywprld2UyrXvqh675STfs9RmMM7ACboDQW7EkNitbS/qHYl3KKjwmtgCZuXqeBHTA
3M+sJeEZWZBYfVIZLJ2GeajMSFCGmVVIwMQNezwNZgJSIoRyP8x254aYlts6VCy27f5m
GYVIRc/H1tUt4VsUmc/lp4zRqC95EvAk4IR4Rfz7Ogyg9V7RY8QnWEttHegzjEQ1NmGK
icbA==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=invlites-com.20230601.gappssmtp.com; s=20230601; t=1775146286; x=1775751086; darn=nl2k.ab.ca;
h=to:from:subject:date:message-id:sender:reply-to:mime-version:from
:to:cc:subject:date:message-id:reply-to;
bh=mM0cVmXXgoszdUsiSkuGUWjrkhs0q5kkcmsVT+WyNFU=;
b=PITlZ3SBiCjGUq5kvHfAqoCVpTOZrG2okChwd5llbU4VpfLXtOleb0HnjOOMkePrm5
G8K+bzbmqYq7Bd2J5QSjVFTDwbmFMwpUwaRGIKXJKyF3ZImA4/1Ur23UydxksVvu+d7d
Ivfq+FCxPIjSbaHU290S2qsTVwzq3aY6vucNI/MKUlTgJEM30yXxaqUdYIF+BhWG5m9S
PM7v947wrLvcTc4re0Oq2m/uBn3SXFXTP4P2Pq6aZ3Dm0nVmD8h1Y5DHSWsLNULvNvYk
6vmdg7Obo7HmItPQYoEGB2eBT4374OapIlpAqEGrr8PGU6tFy8hohYT6qKzB0TmWV5/l
mKgA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20251104; t=1775146286; x=1775751086;
h=to:from:subject:date:message-id:sender:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=mM0cVmXXgoszdUsiSkuGUWjrkhs0q5kkcmsVT+WyNFU=;
b=MfDos1kJHqh1XKv3b0Vu5VKKfwPPo/Zg1vF9yFYYIwnw6qrXIJUZ/sfsXecKNqdxwx
8Ht0veqbf31B9H6uknoxxZOpK1Wayrpe7sWPMMwRGEIEfYwzGt4AXmcZI73N30ASkimC
2H5vduKVwOH5sCTHiUKEtz3/CEPGb7u8nQyizvf1VEGa9uX6TD+VujviK0lQt1N6vq0e
d+6o8+SJ6gbjg4coYEeL8brgqYNlx/iekg2kFZzRj46eCaHOuf0HyUT6mG3IQus/DypS
F6prM3OlEEnpDSiauf3mCCwArrqkLi6JH3R0jQ0nFaScejl4RDmMUTZyAhjYvTdLW6T0
kV8A==
X-Gm-Message-State: AOJu0YxEq3S23ycpfveJsIjG2X4GC4CngKIEiRQKudficQq/lvVtTytl
yTh6otc4Sbb4ZUGrqxXdYKBhS6c1m9FC5NxQotIUU2w4UMe0QkctfGjbDKuV4sC3aWhDXabsYVn
SPgZjXFakHaZeerX2CaHvUcSA2Q6bX5X9IVXbakjodqq5iQrkp/0eHk0F
MIME-Version: 1.0
X-Received: by 2002:a05:6820:160e:b0:67c:250c:ac4c with SMTP id
006d021491bc7-67fabcbb84amr4172367eaf.31.1775146285999; Thu, 02 Apr 2026
09:11:25 -0700 (PDT)
Reply-To: Accelerated Zuern
Sender: Google Calendar
Message-ID:
Date: Thu, 02 Apr 2026 16:11:26 +0000
Subject: Invitation: Action Needed: Check Your Plan Before Renewal @ Thu Apr
2, 2026 10:11pm (GMT-7) (doctor@nl2k.ab.ca)
From: Accelerated Zuern
To: doctor@nl2k.ab.ca
Content-Type: multipart/mixed; boundary="000000000000cd3714064e7c7377"
X-Spam_score: 10.0
X-Spam_score_int: 100
X-Spam_bar: ++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Action Needed: Check Your Plan Before Renewal Thursday Apr
2, 2026 â‹… 10:11pm Pacific Time - Los Angeles Invoice date: Friday, 03 April
2026 Membership Renewal Activity Notice
Content analysis details: (10.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.161.74 listed in list.dnswl.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.161.74 listed in dnsbl.ahbl.org]
[209.85.161.74 listed in dnsbl.ahbl.org]
[209.85.161.74 listed in dnsbl.ahbl.org]
[209.85.161.74 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.161.74 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.161.74 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.161.74 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.161.74 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.161.74 listed in will-spam-for-food.eu.org]
[209.85.161.74 listed in will-spam-for-food.eu.org]
[209.85.161.74 listed in will-spam-for-food.eu.org]
[209.85.161.74 listed in will-spam-for-food.eu.org]
[209.85.161.74 listed in will-spam-for-food.eu.org]
[209.85.161.74 listed in will-spam-for-food.eu.org]
[209.85.161.74 listed in will-spam-for-food.eu.org]
[209.85.161.74 listed in will-spam-for-food.eu.org]
0.3 LONGWORD BODY: Uses overlong words
0.6 MEGALONGWORD BODY: Uses really overlong words
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.161.74 listed in wl.mailspike.net]
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 HTML_MESSAGE BODY: HTML included in message
1.5 IMPRONONCABLE_2 Too much mixed numbers and lower-case letters
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars
0.6 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?
Subject: {SPAM?} Invitation: Action Needed: Check Your Plan Before Renewal @ Thu Apr
2, 2026 10:11pm (GMT-7) (doctor@nl2k.ab.ca)
Accelerated Zuern has invited you to Action Needed: Check Your Plan Before Renewal
Title: Action Needed: Check Your Plan Before Renewal
When: Thursday, April 2, 2026 at 23:11
Organizer:
Accelerated Zuern
Description: Invoice date: Friday, 03 April 2026
Membership Renewal Activity Notice
Thank you,
We would like to notify you that your membership renewal with McAfee will be processed today. The total amount of $321.21 will be billed accordingly. For support, contact 828 259 7385.
Invoice Tracking Center:
Service Provider: McAfee
Invoice receipt: ORD4623931
Add-on Service: DigitalCore Guard
Validity: Two Years
Total Payable: $321.21
For any assistance regarding your account, please contact 828 259 7385.
With sincere respect,
Genesis Medina
McAfee, Inc.
2026 Company. All Rights Reserved.
Activation Code: 4a824056-a2f3-406b-b750-3032652549e1
Attendees:
doctor@nl2k.ab.ca
Invoice date: Friday, 03 April 2026
Membership Renewal Activity Notice
Thank you,
We would like to notify you that your membership renewal with McAfee will be processed today. The total amount of $321.21 will be billed accordingly. For support, contact 828 259 7385.
Invoice Tracking Center:
Service Provider: McAfee
Invoice receipt: ORD4623931
Add-on Service: DigitalCore Guard
Validity: Two Years
Total Payable: $321.21
For any assistance regarding your account, please contact 828 259 7385.
With sincere respect,
Genesis Medina
McAfee, Inc.
2026 Company. All Rights Reserved.
Activation Code: 4a824056-a2f3-406b-b750-3032652549e1
When
Thursday Apr 2, 2026 ⋅ 10:11pm (Pacific Time - Los Angeles)
Organizer
Accelerated Zuern
acceleratedzuern@invlites.com
Guests
(Guest list has been hidden at organizer's request)
Reply for doctor@nl2k.ab.ca
Yes
No
Maybe
More options
Invitation from Google Calendar
You are receiving this email because you are an attendee on the event.
Forwarding this invitation could allow any recipient to send a response to the organizer, be added to the guest list, invite others regardless of their own invitation status, or modify your RSVP. Learn more
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 02 Apr 2026 13:49:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from
id 1w8O1V-00000000Kkq-0Q66
for dave@doctor.nl2k.ab.ca;
Thu, 02 Apr 2026 13:48:13 -0600
Resent-From: The Doctor
Resent-Date: Thu, 2 Apr 2026 13:48:12 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-oo1-f74.google.com ([209.85.161.74]:56774)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98.2 (FreeBSD))
(envelope-from
id 1w8KeY-00000000P0a-3xgP
for doctor@nl2k.ab.ca;
Thu, 02 Apr 2026 10:12:29 -0600
Received: by mail-oo1-f74.google.com with SMTP id 006d021491bc7-67e4258e5b7so3249236eaf.1
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=google.com; s=20251104; t=1775146286; x=1775751086; darn=nl2k.ab.ca;
h=to:from:subject:date:message-id:sender:reply-to:mime-version:from
:to:cc:subject:date:message-id:reply-to;
bh=mM0cVmXXgoszdUsiSkuGUWjrkhs0q5kkcmsVT+WyNFU=;
b=HhBM/fDa/g03tOqae93PTJl8dcn8YwT+ZVEJeWlr2ulYCZkbC+cbgpGe8b5N95al4Q
JYWZAO/7gLrzXQHXELSOFb07/WYSkLXmmyY0E/IhZcV63Zorh5TXIQx1t9KzBUjrQ4rJ
Xvqywprld2UyrXvqh675STfs9RmMM7ACboDQW7EkNitbS/qHYl3KKjwmtgCZuXqeBHTA
3M+sJeEZWZBYfVIZLJ2GeajMSFCGmVVIwMQNezwNZgJSIoRyP8x254aYlts6VCy27f5m
GYVIRc/H1tUt4VsUmc/lp4zRqC95EvAk4IR4Rfz7Ogyg9V7RY8QnWEttHegzjEQ1NmGK
icbA==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=invlites-com.20230601.gappssmtp.com; s=20230601; t=1775146286; x=1775751086; darn=nl2k.ab.ca;
h=to:from:subject:date:message-id:sender:reply-to:mime-version:from
:to:cc:subject:date:message-id:reply-to;
bh=mM0cVmXXgoszdUsiSkuGUWjrkhs0q5kkcmsVT+WyNFU=;
b=PITlZ3SBiCjGUq5kvHfAqoCVpTOZrG2okChwd5llbU4VpfLXtOleb0HnjOOMkePrm5
G8K+bzbmqYq7Bd2J5QSjVFTDwbmFMwpUwaRGIKXJKyF3ZImA4/1Ur23UydxksVvu+d7d
Ivfq+FCxPIjSbaHU290S2qsTVwzq3aY6vucNI/MKUlTgJEM30yXxaqUdYIF+BhWG5m9S
PM7v947wrLvcTc4re0Oq2m/uBn3SXFXTP4P2Pq6aZ3Dm0nVmD8h1Y5DHSWsLNULvNvYk
6vmdg7Obo7HmItPQYoEGB2eBT4374OapIlpAqEGrr8PGU6tFy8hohYT6qKzB0TmWV5/l
mKgA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20251104; t=1775146286; x=1775751086;
h=to:from:subject:date:message-id:sender:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=mM0cVmXXgoszdUsiSkuGUWjrkhs0q5kkcmsVT+WyNFU=;
b=MfDos1kJHqh1XKv3b0Vu5VKKfwPPo/Zg1vF9yFYYIwnw6qrXIJUZ/sfsXecKNqdxwx
8Ht0veqbf31B9H6uknoxxZOpK1Wayrpe7sWPMMwRGEIEfYwzGt4AXmcZI73N30ASkimC
2H5vduKVwOH5sCTHiUKEtz3/CEPGb7u8nQyizvf1VEGa9uX6TD+VujviK0lQt1N6vq0e
d+6o8+SJ6gbjg4coYEeL8brgqYNlx/iekg2kFZzRj46eCaHOuf0HyUT6mG3IQus/DypS
F6prM3OlEEnpDSiauf3mCCwArrqkLi6JH3R0jQ0nFaScejl4RDmMUTZyAhjYvTdLW6T0
kV8A==
X-Gm-Message-State: AOJu0YxEq3S23ycpfveJsIjG2X4GC4CngKIEiRQKudficQq/lvVtTytl
yTh6otc4Sbb4ZUGrqxXdYKBhS6c1m9FC5NxQotIUU2w4UMe0QkctfGjbDKuV4sC3aWhDXabsYVn
SPgZjXFakHaZeerX2CaHvUcSA2Q6bX5X9IVXbakjodqq5iQrkp/0eHk0F
MIME-Version: 1.0
X-Received: by 2002:a05:6820:160e:b0:67c:250c:ac4c with SMTP id
006d021491bc7-67fabcbb84amr4172367eaf.31.1775146285999; Thu, 02 Apr 2026
09:11:25 -0700 (PDT)
Reply-To: Accelerated Zuern
Sender: Google Calendar
Message-ID:
Date: Thu, 02 Apr 2026 16:11:26 +0000
Subject: Invitation: Action Needed: Check Your Plan Before Renewal @ Thu Apr
2, 2026 10:11pm (GMT-7) (doctor@nl2k.ab.ca)
From: Accelerated Zuern
To: doctor@nl2k.ab.ca
Content-Type: multipart/mixed; boundary="000000000000cd3714064e7c7377"
X-Spam_score: 10.0
X-Spam_score_int: 100
X-Spam_bar: ++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Action Needed: Check Your Plan Before Renewal Thursday Apr
2, 2026 â‹… 10:11pm Pacific Time - Los Angeles Invoice date: Friday, 03 April
2026 Membership Renewal Activity Notice
Content analysis details: (10.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.161.74 listed in list.dnswl.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.161.74 listed in dnsbl.ahbl.org]
[209.85.161.74 listed in dnsbl.ahbl.org]
[209.85.161.74 listed in dnsbl.ahbl.org]
[209.85.161.74 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.161.74 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.161.74 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.161.74 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.161.74 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.161.74 listed in will-spam-for-food.eu.org]
[209.85.161.74 listed in will-spam-for-food.eu.org]
[209.85.161.74 listed in will-spam-for-food.eu.org]
[209.85.161.74 listed in will-spam-for-food.eu.org]
[209.85.161.74 listed in will-spam-for-food.eu.org]
[209.85.161.74 listed in will-spam-for-food.eu.org]
[209.85.161.74 listed in will-spam-for-food.eu.org]
[209.85.161.74 listed in will-spam-for-food.eu.org]
0.3 LONGWORD BODY: Uses overlong words
0.6 MEGALONGWORD BODY: Uses really overlong words
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.161.74 listed in wl.mailspike.net]
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 HTML_MESSAGE BODY: HTML included in message
1.5 IMPRONONCABLE_2 Too much mixed numbers and lower-case letters
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars
0.6 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?
Subject: {SPAM?} Invitation: Action Needed: Check Your Plan Before Renewal @ Thu Apr
2, 2026 10:11pm (GMT-7) (doctor@nl2k.ab.ca)
Accelerated Zuern has invited you to Action Needed: Check Your Plan Before Renewal
Title: Action Needed: Check Your Plan Before Renewal
When: Thursday, April 2, 2026 at 23:11
Organizer:
Accelerated Zuern
Description: Invoice date: Friday, 03 April 2026
Membership Renewal Activity Notice
Thank you,
We would like to notify you that your membership renewal with McAfee will be processed today. The total amount of $321.21 will be billed accordingly. For support, contact 828 259 7385.
Invoice Tracking Center:
Service Provider: McAfee
Invoice receipt: ORD4623931
Add-on Service: DigitalCore Guard
Validity: Two Years
Total Payable: $321.21
For any assistance regarding your account, please contact 828 259 7385.
With sincere respect,
Genesis Medina
McAfee, Inc.
2026 Company. All Rights Reserved.
Activation Code: 4a824056-a2f3-406b-b750-3032652549e1
Attendees:
doctor@nl2k.ab.ca
Invoice date: Friday, 03 April 2026
Membership Renewal Activity Notice
Thank you,
We would like to notify you that your membership renewal with McAfee will be processed today. The total amount of $321.21 will be billed accordingly. For support, contact 828 259 7385.
Invoice Tracking Center:
Service Provider: McAfee
Invoice receipt: ORD4623931
Add-on Service: DigitalCore Guard
Validity: Two Years
Total Payable: $321.21
For any assistance regarding your account, please contact 828 259 7385.
With sincere respect,
Genesis Medina
McAfee, Inc.
2026 Company. All Rights Reserved.
Activation Code: 4a824056-a2f3-406b-b750-3032652549e1
When
Thursday Apr 2, 2026 ⋅ 10:11pm (Pacific Time - Los Angeles)
Organizer
Accelerated Zuern
acceleratedzuern@invlites.com
Guests
(Guest list has been hidden at organizer's request)
Reply for doctor@nl2k.ab.ca
Yes
No
Maybe
More options
Invitation from Google Calendar
You are receiving this email because you are an attendee on the event.
Forwarding this invitation could allow any recipient to send a response to the organizer, be added to the guest list, invite others regardless of their own invitation status, or modify your RSVP. Learn more