Investment spam from OVH
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 07 May 2025 14:40:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from)
id 1uClYI-00000000JnS-3BNj
for dave@doctor.nl2k.ab.ca;
Wed, 07 May 2025 14:39:38 -0600
Resent-From: The Doctor
Resent-Date: Wed, 7 May 2025 14:39:38 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from m188.ico-media-news.nl ([51.89.253.188]:34421)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.98.2 (FreeBSD))
(envelope-from)
id 1uClT2-00000000IZ0-34FS
for sales@nk.ca;
Wed, 07 May 2025 14:34:20 -0600
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ico-media-news.nl;
s=202500; t=1746649929;
bh=JUPU5HckLXMoQrFNQws91dUd3+iDautMaDDX/j/aivE=;
h=Subject:From:To:List-Unsubscribe:Date:From;
b=asbkP30IuE1tCBeVgifXsXddud559BRzlCNJcxQGR1EE/TOnUvsD671JqW+K1h9um
mVFXQC/oMyGTi2PEKUQ794SyyDBjVeQ0IiSvXUj6Dkjji80gj8YXF/X1DOB4kQeP5k
LqCxK54rVxiisYTVjZYieeA+uYNY0rRzXfx3FPCUBKdtvk3GCwZuIwwfWdxBFqpvvz
CfEnztH3WeLzHYSgvPOTXIRHp9IEUVXqJYvfrLTwvrCrGbG3Mzhtdu1yXEnR0av/UZ
Pq3VOqNAdRwBdMvfAHDhP9POPr6Oq82X2wfnKFYDhG8RYXJEBcpRZa73vLOE9qm/tD
0iC9/gbd4Pbmg==
Subject: Massive Growth Ahead =?utf-8?Q?=E2=80=93?= Invest in the Future
Today
From: Luessen Technology Group
To: "sales@nk.ca"
List-Unsubscribe:
List-Unsubscribe-Post: List-Unsubscribe=One-Click
X-Report-Abuse: https://app.ico-media-group.com/campaigns/rz0311861bf2b/report-abuse/vp751maaea122/kk185ewlcg472
X-EBS: https://app.ico-media-group.com/lists/block-address
Feedback-ID: rz0311861bf2b:regular:vp751maaea122:es652z9yw8fef
Message-ID:
MIME-Version: 1.0
Date: Wed, 07 May 2025 20:32:09 +0000
Content-Type: multipart/alternative; boundary=iOB9wEbl
X-Spam_score: 17.2
X-Spam_score_int: 172
X-Spam_bar: +++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Instant 100% Gain at Listing: Your Entry to a High-Growth,
Sustainable Future MENTIONED IN:
Content analysis details: (17.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[51.89.253.188 listed in dnsbl.ahbl.org]
[51.89.253.188 listed in dnsbl.ahbl.org]
[51.89.253.188 listed in dnsbl.ahbl.org]
[51.89.253.188 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[51.89.253.188 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[51.89.253.188 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[51.89.253.188 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[51.89.253.188 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[51.89.253.188 listed in will-spam-for-food.eu.org]
[51.89.253.188 listed in will-spam-for-food.eu.org]
[51.89.253.188 listed in will-spam-for-food.eu.org]
[51.89.253.188 listed in will-spam-for-food.eu.org]
[51.89.253.188 listed in will-spam-for-food.eu.org]
[51.89.253.188 listed in will-spam-for-food.eu.org]
[51.89.253.188 listed in will-spam-for-food.eu.org]
[51.89.253.188 listed in will-spam-for-food.eu.org]
4.5 URIBL_AB_SURBL Contains an URL listed in the AB SURBL blocklist
[URI: ico-media-group.com]
2.3 URIBL_CT_SURBL Contains an URL listed in the CT SURBL blocklist
[URI: app.ico-media-group.com]
2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist
[URI: ico-media-group.com]
[URI: ico-media-news.nl]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |]
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[51.89.253.188 listed in sa-accredit.habeas.com]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[51.89.253.188 listed in sa-trusted.bondedsender.org]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[51.89.253.188 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[51.89.253.188 listed in bl.score.senderscore.com]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
0.3 LONGWORD BODY: Uses overlong words
2.4 ACT_NOW_CAPS BODY: Talks about 'acting now' with capitals
1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist
[URI: ico-media-news.nl]
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.5 IMPRONONCABLE_2 Too much mixed numbers and lower-case letters
Subject: {SPAM?} Massive Growth Ahead =?utf-8?Q?=E2=80=93?= Invest in the Future
Today
--iOB9wEbl
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Instant=20
100% Gain at Listing:=20
Your Entry to a High-Growth, Sustain=
able Future=20
MENTIONED IN:=20
=C2=A0=20
Early investors always win.=
Will you be one of them?=20
DOUBLE YOUR INVESTMENT TODAY!=20
INVEST NO=
W
[https://app.ico-media-group.com/campaigns/rz0311861bf2b/track-url/kk18=
5ewlcg472/c2ee9c5257ad398cdb1889f2cc1450789ddc397e]
=09=09=C2=
=A0
LAST CHANCE TO LOCK IN your GAINS!=20
Instant 100% Gain at List=
ing:
When Luessen Token (LTE) launches on ZBX Exchange, your tokens will=
double in value immediately. Yes =E2=80=93 you read that right: invest a=
t
our 50% pre-sale discount now, and on day one, your investment is
alr=
eady 100% higher.=20
=09=09=C2=A0
=09=09=C2=A0
Why Act Now? =
Time is running out! The Luessen Token (LTE) pre-sale is nearing its=
end, and this is your last chance to invest at a massive 50% discount.=
Once we hit the exchange, the price immediately doubles =E2=80=94 don=
=E2=80=99t be
the one watching from the sidelines!=20
50% Discount in =
Pre-Sale=20
Get in now at half the listing price. The moment we go live =
on ZBX,
the value instantly doubles.=20
Real-World Utility=20
Backe=
d by cutting-edge nano technology, LTE is a project with real
impact=
=E2=80=94not just speculation.=20
Massive Growth Potential=20
A 100% =
increase at listing is guaranteed, and with adoption growing
fast, multip=
le 100% gains could follow.=20
=09=09=C2=A0
Follow us=20
=09=
=09 [/x.com/luessenTech]
=09=09 [/www.luessen-group.net]
With ou=
r innovative and globally unique nano-technology, we are
setting new stan=
dards in heating technology.=20
Unsubscribe
[https://app.ico-media-gro=
up.com/campaigns/rz0311861bf2b/track-url/kk185ewlcg472/7d81e8e6f2b09ea01395=
b147ea67ab53d6933218]
--iOB9wEbl
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: quoted-printable
hemas-microsoft-com:vml">
=3D"text/html; charset=3Dutf-8" />
"X-UA-Compatible" content=3D"IE=3Dedge" />
wport" content=3D"width=3Ddevice-width, initial-scale=3D1.0" />
=3D"format-detection" content=3D"telephone=3Dno, date=3Dno, address=3Dno, e=
mail=3Dno" />
=09
ght@0,100;0,400;0,400" rel=3D"stylesheet" />
=09Massive Growth Ahead =E2=80=93 Invest in the Future Today
=09
=09
=09
=09
=09
=09
=09
=09
important; min-height: 100% !important; margin: 0 !important; padding: 0 !i=
mportant; font-weight: normal; color: #2D3A41; mso-line-height-rule: exactl=
y; -webkit-font-smoothing: antialiased; -webkit-text-size-adjust: 100%; -ms=
-text-size-adjust: 100%; font-variant-ligatures: normal; text-rendering: op=
timizeLegibility; -moz-osx-font-smoothing: grayscale; background-color: #d2=
e7f6;">
class=3D"pc-project-body" role=3D"presentation" style=3D"table-layout: fix=
ed; width: 100%; min-width: 600px; background-color: #d2e7f6;">
=09
=09=09
=09=09=09
=09=09
=09
![](3D"https://app.ico-media-group.com/campai=<br)
gns/rz0311861bf2b/track-opening/kk185ewlcg472" alt=3D"" />
--iOB9wEbl--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 07 May 2025 14:40:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from
id 1uClYI-00000000JnS-3BNj
for dave@doctor.nl2k.ab.ca;
Wed, 07 May 2025 14:39:38 -0600
Resent-From: The Doctor
Resent-Date: Wed, 7 May 2025 14:39:38 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from m188.ico-media-news.nl ([51.89.253.188]:34421)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.98.2 (FreeBSD))
(envelope-from
id 1uClT2-00000000IZ0-34FS
for sales@nk.ca;
Wed, 07 May 2025 14:34:20 -0600
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ico-media-news.nl;
s=202500; t=1746649929;
bh=JUPU5HckLXMoQrFNQws91dUd3+iDautMaDDX/j/aivE=;
h=Subject:From:To:List-Unsubscribe:Date:From;
b=asbkP30IuE1tCBeVgifXsXddud559BRzlCNJcxQGR1EE/TOnUvsD671JqW+K1h9um
mVFXQC/oMyGTi2PEKUQ794SyyDBjVeQ0IiSvXUj6Dkjji80gj8YXF/X1DOB4kQeP5k
LqCxK54rVxiisYTVjZYieeA+uYNY0rRzXfx3FPCUBKdtvk3GCwZuIwwfWdxBFqpvvz
CfEnztH3WeLzHYSgvPOTXIRHp9IEUVXqJYvfrLTwvrCrGbG3Mzhtdu1yXEnR0av/UZ
Pq3VOqNAdRwBdMvfAHDhP9POPr6Oq82X2wfnKFYDhG8RYXJEBcpRZa73vLOE9qm/tD
0iC9/gbd4Pbmg==
Subject: Massive Growth Ahead =?utf-8?Q?=E2=80=93?= Invest in the Future
Today
From: Luessen Technology Group
To: "sales@nk.ca"
List-Unsubscribe:
List-Unsubscribe-Post: List-Unsubscribe=One-Click
X-Report-Abuse: https://app.ico-media-group.com/campaigns/rz0311861bf2b/report-abuse/vp751maaea122/kk185ewlcg472
X-EBS: https://app.ico-media-group.com/lists/block-address
Feedback-ID: rz0311861bf2b:regular:vp751maaea122:es652z9yw8fef
Message-ID:
MIME-Version: 1.0
Date: Wed, 07 May 2025 20:32:09 +0000
Content-Type: multipart/alternative; boundary=iOB9wEbl
X-Spam_score: 17.2
X-Spam_score_int: 172
X-Spam_bar: +++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Instant 100% Gain at Listing: Your Entry to a High-Growth,
Sustainable Future MENTIONED IN:
Content analysis details: (17.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[51.89.253.188 listed in dnsbl.ahbl.org]
[51.89.253.188 listed in dnsbl.ahbl.org]
[51.89.253.188 listed in dnsbl.ahbl.org]
[51.89.253.188 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[51.89.253.188 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[51.89.253.188 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[51.89.253.188 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[51.89.253.188 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[51.89.253.188 listed in will-spam-for-food.eu.org]
[51.89.253.188 listed in will-spam-for-food.eu.org]
[51.89.253.188 listed in will-spam-for-food.eu.org]
[51.89.253.188 listed in will-spam-for-food.eu.org]
[51.89.253.188 listed in will-spam-for-food.eu.org]
[51.89.253.188 listed in will-spam-for-food.eu.org]
[51.89.253.188 listed in will-spam-for-food.eu.org]
[51.89.253.188 listed in will-spam-for-food.eu.org]
4.5 URIBL_AB_SURBL Contains an URL listed in the AB SURBL blocklist
[URI: ico-media-group.com]
2.3 URIBL_CT_SURBL Contains an URL listed in the CT SURBL blocklist
[URI: app.ico-media-group.com]
2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist
[URI: ico-media-group.com]
[URI: ico-media-news.nl]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[51.89.253.188 listed in sa-accredit.habeas.com]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[51.89.253.188 listed in sa-trusted.bondedsender.org]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[51.89.253.188 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[51.89.253.188 listed in bl.score.senderscore.com]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
0.3 LONGWORD BODY: Uses overlong words
2.4 ACT_NOW_CAPS BODY: Talks about 'acting now' with capitals
1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist
[URI: ico-media-news.nl]
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.5 IMPRONONCABLE_2 Too much mixed numbers and lower-case letters
Subject: {SPAM?} Massive Growth Ahead =?utf-8?Q?=E2=80=93?= Invest in the Future
Today
--iOB9wEbl
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Instant=20
100% Gain at Listing:=20
Your Entry to a High-Growth, Sustain=
able Future=20
MENTIONED IN:=20
=C2=A0=20
Early investors always win.=
Will you be one of them?=20
DOUBLE YOUR INVESTMENT TODAY!=20
INVEST NO=
W
[https://app.ico-media-group.com/campaigns/rz0311861bf2b/track-url/kk18=
5ewlcg472/c2ee9c5257ad398cdb1889f2cc1450789ddc397e]
=09=09=C2=
=A0
LAST CHANCE TO LOCK IN your GAINS!=20
Instant 100% Gain at List=
ing:
When Luessen Token (LTE) launches on ZBX Exchange, your tokens will=
double in value immediately. Yes =E2=80=93 you read that right: invest a=
t
our 50% pre-sale discount now, and on day one, your investment is
alr=
eady 100% higher.=20
=09=09=C2=A0
=09=09=C2=A0
Why Act Now? =
Time is running out! The Luessen Token (LTE) pre-sale is nearing its=
end, and this is your last chance to invest at a massive 50% discount.=
Once we hit the exchange, the price immediately doubles =E2=80=94 don=
=E2=80=99t be
the one watching from the sidelines!=20
50% Discount in =
Pre-Sale=20
Get in now at half the listing price. The moment we go live =
on ZBX,
the value instantly doubles.=20
Real-World Utility=20
Backe=
d by cutting-edge nano technology, LTE is a project with real
impact=
=E2=80=94not just speculation.=20
Massive Growth Potential=20
A 100% =
increase at listing is guaranteed, and with adoption growing
fast, multip=
le 100% gains could follow.=20
=09=09=C2=A0
Follow us=20
=09=
=09 [/x.com/luessenTech]
=09=09 [/www.luessen-group.net]
With ou=
r innovative and globally unique nano-technology, we are
setting new stan=
dards in heating technology.=20
Unsubscribe
[https://app.ico-media-gro=
up.com/campaigns/rz0311861bf2b/track-url/kk185ewlcg472/7d81e8e6f2b09ea01395=
b147ea67ab53d6933218]
--iOB9wEbl
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: quoted-printable
hemas-microsoft-com:vml">
=3D"text/html; charset=3Dutf-8" />
"X-UA-Compatible" content=3D"IE=3Dedge" />
wport" content=3D"width=3Ddevice-width, initial-scale=3D1.0" />
=3D"format-detection" content=3D"telephone=3Dno, date=3Dno, address=3Dno, e=
mail=3Dno" />
=09
ght@0,100;0,400;0,400" rel=3D"stylesheet" />
=09
=09
=09
=09
=09
=09
=09
=09
=09
important; min-height: 100% !important; margin: 0 !important; padding: 0 !i=
mportant; font-weight: normal; color: #2D3A41; mso-line-height-rule: exactl=
y; -webkit-font-smoothing: antialiased; -webkit-text-size-adjust: 100%; -ms=
-text-size-adjust: 100%; font-variant-ligatures: normal; text-rendering: op=
timizeLegibility; -moz-osx-font-smoothing: grayscale; background-color: #d2=
e7f6;">
class=3D"pc-project-body" role=3D"presentation" style=3D"table-layout: fix=
ed; width: 100%; min-width: 600px; background-color: #d2e7f6;">
=09
=09=09
=09=09=09
=09=09
=09
=09=09=09 =3D"0" class=3D"pc-project-container" role=3D"presentation" style=3D"width:= 600px; max-width: 600px;"> =09=09=09=09 =09=09=09=09=09 =09=09=09=09=09=09 =09=09=09=09=09 =09=09=09=09 =09=09=09
=09=09=09 |
gns/rz0311861bf2b/track-opening/kk185ewlcg472" alt=3D"" />
--iOB9wEbl--