Urgent business spam from Google Gmail
Posted by Dave Yadallee onX-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 20 Apr 2026 23:05:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from
id 1wF3I5-000000001Me-2GWI
for dave@doctor.nl2k.ab.ca;
Mon, 20 Apr 2026 23:04:53 -0600
Resent-From: The Doctor
Resent-Date: Mon, 20 Apr 2026 23:04:53 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-wr1-f46.google.com ([209.85.221.46]:45313)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98.2 (FreeBSD))
(envelope-from
id 1wF0sM-00000000KiV-1su3
for doctor@doctor.nl2k.ab.ca;
Mon, 20 Apr 2026 20:30:20 -0600
Received: by mail-wr1-f46.google.com with SMTP id ffacd0b85a97d-43d03db7f87so2409242f8f.3
for
ARC-Seal: i=1; a=rsa-sha256; t=1776738556; cv=none;
d=google.com; s=arc-20240605;
b=JyBguyQ06EMfdZncPPufZ+WKGOWWcFLNcITdm2LXTRyN5r94PblwBA5vTOs7gNFOmw
Zycx5cYVddDjWMkkOIiZkCVGl6hrOWa1xu3H6N2RTYuq/oGHKCuRaN8xM+z7H7Gefn30
gLW41Z5EFbutR3hK1KPXIMzjpJ0SDydRWvOJyv/uFPQJM8KMZDbXwaP/jWzX4lMCL56I
d6SOJX6743wn4D++OqsyWrDdhk3qpaZPXCYAh0E0QJlJY+qbPP1zuGej7P9Lmf18s91i
Yc5oexeeNwWB3KC8OAesqX1cyBXB3dRgLCfZF+EcAODEFz0PigFSDB147c/rl/2WTd73
w7fA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;
h=to:subject:message-id:date:from:mime-version:dkim-signature;
bh=h4QsZStzQmUyiqVMhO2m1zMbasj9Ltws6HjtPbpkHlk=;
fh=IE7o8KeN0MwSyca2OoHIxrMC/YPf8OyEP8e/YyvoSX4=;
b=dYmejy9und9dwp897PyOyiMZQXOXxZdHuL9oqo2U86O4oypViQZbB4Sgbkw7xEdBqB
SIWiDY8kseS4Ovf6Dn4WTXaTXmumnLQCH3M3JTUxAL3HrQY5FR3Ohx2N/KsoVee39rUV
z/O0uYbxhcWC5k/XaNG2WSrebdxuIKGSgT/z7iY9uyNQ3hZn60hgUcKl06wJ165KqFnr
0IsAmijm6lr/Wq9tcv2vGK+Z+D2WXrcKPGWm1iNsP7B6QKo2HyHh7fNTWQNVcaieuM3z
DbgWmv5U3e2ih3w/rUcH6kYBM7wvEf3zQpQ/Mqp45Dbh+1de8Ml5lu7TnjiD1dDRFYrJ
izKQ==;
darn=doctor.nl2k.ab.ca
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20251104; t=1776738556; x=1777343356; darn=doctor.nl2k.ab.ca;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=h4QsZStzQmUyiqVMhO2m1zMbasj9Ltws6HjtPbpkHlk=;
b=DhI+KXnoWIxnn9BjPQppb2eLXKuD7wqs02hMeyQOXfK5TKJL0O7YBqaqOwszqca9fW
6UDFvRR3YBX/wEwS64RWIxvjpOv35/1uBtPXrrWzWM/mYd4Fy2UyAIzs/8Har4SiApcJ
9YqbbOUcrslbqL1un5LTkjdyayLECNA+vBo50mGQzP3FbkBxf3Vilzc2KWZHN87hRn+Z
f4iC4aCFs9hNJu8cqeijUtAxVRYmY7Bb1rwogTMTjTXlU5xrt6ksccDPnqovjF4NzydZ
bQDO7j3g6ciDQ/HwZoK87YzlbYylQ5xP9Q/DGylyp7BMELXlYZt4XdcbQQ1SPrD8wphW
VarA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20251104; t=1776738556; x=1777343356;
h=to:subject:message-id:date:from:mime-version:x-gm-gg
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=h4QsZStzQmUyiqVMhO2m1zMbasj9Ltws6HjtPbpkHlk=;
b=KBvBgix+GXyMA6QAyBtvnSTyhL01UyjKoIGGUkJB9lV7wsLpIK+5g9XF9t8BMfKOWN
LZXw+3x7xRlhM1wYfWQh+3NsBmjaaM6xeKDG59OsJN/aEZwul7YeavWfHdIAQWTYga+Q
yvXJoq3ItI9H0sodbivHzrEJFApdYjotwqFuPFHjNfQlu9SX7phLHJuhcrRI6XLUzhVN
BnryDIi4jtWl+NDdzbac0n57XZF+YzsfVlLpPSxCJPfgj+Lo5dX7YqgTxZXl8HdN7le9
Z8zvPX6xJBeuXffx+ZY6lTazN4nM6lhnro5SSfnlp9xCbAcaXYfiWCuI6KHf/ko+lZwG
eg0g==
X-Forwarded-Encrypted: i=1; AFNElJ+2xByvgtybrNXUT1K/eaFUIXUV/7WF34Ne6spe2AOCXJxpK/jZICkbaeoZrMqequOEHkS1R8s=@doctor.nl2k.ab.ca
X-Gm-Message-State: AOJu0YxyJiYiS2KSMVYDy02clFlIXDka8IUxkKhR9pLSyLZ9dTNlbSwb
pzpD9+AleUP3rMoOiIdJp7Gzu3W4khy1RF/PL2vn0Go0IoKbsCrOGsyxRaOIMuYvscs0ho/rwbW
puh0i1Ar/CDlM2bk15GqrsKhlklk74tk=
X-Gm-Gg: AeBDietItlj4QSEmWS3nh5v66CrGtKB1xbX0NluakQcFOWnSJMsZ3GX4nI8+rJLrZdo
/mo6Mti0Adyxu+jOKJXQxN+30qQbvZjePzR16H0LeXGPRyOpxf9CgqXz6Hv9nEFw1+WGbE07aSF
DWBO+riMu8maS4pqMiD/agnrOUwJd3Cgc2e8rhJpC/erJnxv5WqGWf/3RGJX1wUqQ9OxoBNNzva
Z33/qWnVph3ieH3zomeiBpRpioUOWNCuaXrx6N8Rwb62g9WEcJCSeMbK1asyhlNYbYfh1YvBbAE
63izJoNnDPaUecvW8Ar1HL9YKuY+F9NN8sMooDDuEf/PvTrFwFjXer/YkCY66n5OofV9ogyYUmX
UbDADJvVYlOV5iY3yCzdkSQ==
X-Received: by 2002:a05:6000:4283:b0:43f:e211:1090 with SMTP id
ffacd0b85a97d-43fe3db3c62mr23697172f8f.1.1776738555837; Mon, 20 Apr 2026
19:29:15 -0700 (PDT)
MIME-Version: 1.0
From: Patrick Grog
Date: Mon, 20 Apr 2026 19:29:03 -0700
X-Gm-Features: AQROBzBtzJIRkkiAZtHnb_v-HSzrAIaP3IXKQZFNnB18hC-zmDtG1lARhx3H1vk
Message-ID:
Subject: Very important
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000007ac110064fef2eb5"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 7.5
X-Spam_score_int: 75
X-Spam_bar: +++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hello Dear, Please I have a business I want you to partner
with me and handle in, your country., Awaiting your urgent reply, Yours truly
Patrick George
Content analysis details: (7.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.221.46 listed in dnsbl.ahbl.org]
[209.85.221.46 listed in dnsbl.ahbl.org]
[209.85.221.46 listed in dnsbl.ahbl.org]
[209.85.221.46 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.221.46 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.221.46 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.221.46 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.221.46 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.221.46 listed in will-spam-for-food.eu.org]
[209.85.221.46 listed in will-spam-for-food.eu.org]
[209.85.221.46 listed in will-spam-for-food.eu.org]
[209.85.221.46 listed in will-spam-for-food.eu.org]
[209.85.221.46 listed in will-spam-for-food.eu.org]
[209.85.221.46 listed in will-spam-for-food.eu.org]
[209.85.221.46 listed in will-spam-for-food.eu.org]
[209.85.221.46 listed in will-spam-for-food.eu.org]
-0.0 SPF_PASS SPF: sender matches SPF record
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.221.46 listed in list.dnswl.org]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[patrickgrog5(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[patrickgrog5(at)gmail.com]
0.9 URG_BIZ BODY: Contains urgent matter
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.221.46 listed in wl.mailspike.net]
Subject: {SPAM?} Very important
--0000000000007ac110064fef2eb5
Content-Type: text/plain; charset="UTF-8"
Hello Dear,
Please I have a business I want you to partner with me and handle in, your
country., Awaiting your urgent reply,
Yours truly
Patrick George
--0000000000007ac110064fef2eb5
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Please =C2=A0I have a business I want y=
ou to partner with me and handle in, your country., Awaiting your urgent re=
ply,
Yours truly
--0000000000007ac110064fef2eb5--