Intelcom phish
Posted by Dave Yadallee on
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sat, 01 Aug 2026 13:38:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))
(envelope-from)
id 1wqFWB-000000000ML-1bme
for dave@doctor.nl2k.ab.ca;
Sat, 01 Aug 2026 13:37:11 -0600
Resent-From: The Doctor
Resent-Date: Sat, 1 Aug 2026 13:37:11 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from [89.252.152.6] (port=33943 helo=srv.nacarmedya.com)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.99.5 (FreeBSD))
(envelope-from)
id 1wqEZB-00000000G1X-1Gev
for sales@nk.ca;
Sat, 01 Aug 2026 12:36:27 -0600
Received: from 127.0.0.1 (unknown [196.119.82.25])
by srv.nacarmedya.com (Postfix) with ESMTPSA id 2F298FD02E
for; Sat, 1 Aug 2026 21:35:19 +0300 (+03)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=turkishtextilefair.com; s=default; t=1785609319;
bh=BMeKhh3uavkl3EspmkRPqYO/28ljPtAiWf6AkJlY7WE=; h=To:From:Subject;
b=APT8MFP8UAUpFiQke72BPOX87fucdzyeHu0EG4t3+kNWw4n4WvImm8upQgWwAyhSN
LtxEeElp9jETQBRTIxMJdV9lCJbEtjtNTZB3Bpq1hcLooyK3lkPARtvDkXXgd5hXQZ
0uAgu87xSs+3uGBcvxioL5LGrgGs/J9WWNaOzrCV5ztPDzyI8jzPOPJoGoD7uuJ38N
OO8DeMFlaq1cC6WN4bgT6SuGkW4mkRa5QjYKgI9d6+rS/BuNZoJokcq8INcdn3YBGJ
JmL5s4GS2iayH+oWCasV3Y1Ka49xYDRhu+O1Zw1K+7OIdK3N9BGgM+lhba2bMnZs/l
lsXr88xHfUhVw==
Authentication-Results: srv.nacarmedya.com;
spf=pass (sender IP is 196.119.82.25) smtp.mailfrom=info@turkishtextilefair.com smtp.helo=127.0.0.1
Received-SPF: pass (srv.nacarmedya.com: connection is authenticated)
Date: Sat, 1 Aug 2026 20:31:19 +0200
To: sales@nk.ca
From: Intelcom
Subject: Intelcom Delivery Notification
Message-ID:
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="1bd6ebef3ffcd552acf3b71a20a4e7727"
Content-Transfer-Encoding: 8bit
X-Spam_score: 7.9
X-Spam_score_int: 79
X-Spam_bar: +++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Intelcom – Delivery Notification { margin: 0; padding:
0; box-sizing: border-box; } body { background: #f4f4f4; font-family: 'Helvetica
Neue', Helvetica, Arial, sans-serif; padding: 30px 15px; } .email-container
{ max-width: 600px [...]
Content analysis details: (7.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[196.119.82.25 listed in will-spam-for-food.eu.org]
[196.119.82.25 listed in will-spam-for-food.eu.org]
[196.119.82.25 listed in will-spam-for-food.eu.org]
[196.119.82.25 listed in will-spam-for-food.eu.org]
[196.119.82.25 listed in will-spam-for-food.eu.org]
[196.119.82.25 listed in will-spam-for-food.eu.org]
[196.119.82.25 listed in will-spam-for-food.eu.org]
[196.119.82.25 listed in will-spam-for-food.eu.org]
[89.252.152.6 listed in will-spam-for-food.eu.org]
[89.252.152.6 listed in will-spam-for-food.eu.org]
[89.252.152.6 listed in will-spam-for-food.eu.org]
[89.252.152.6 listed in will-spam-for-food.eu.org]
[89.252.152.6 listed in will-spam-for-food.eu.org]
[89.252.152.6 listed in will-spam-for-food.eu.org]
[89.252.152.6 listed in will-spam-for-food.eu.org]
[89.252.152.6 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[89.252.152.6 listed in dnsbl.ahbl.org]
[89.252.152.6 listed in dnsbl.ahbl.org]
[89.252.152.6 listed in dnsbl.ahbl.org]
[89.252.152.6 listed in dnsbl.ahbl.org]
[196.119.82.25 listed in dnsbl.ahbl.org]
[196.119.82.25 listed in dnsbl.ahbl.org]
[196.119.82.25 listed in dnsbl.ahbl.org]
[196.119.82.25 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[89.252.152.6 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[89.252.152.6 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[89.252.152.6 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[89.252.152.6 listed in dnsbl.ahbl.org]
0.0 T_SPF_TEMPERROR SPF: test of record failed (temperror)
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)
0.9 RCVD_NUMERIC_HELO Received: contains an IP address used for HELO
1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL
[196.119.82.25 listed in sbl-xbl.spamhaus.org]
1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org
[Listed by XBL, see]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[89.252.152.6 listed in bl.score.senderscore.com]
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
Subject: {SPAM?} Intelcom Delivery Notification
This is a multi-part message in MIME format.
--1bd6ebef3ffcd552acf3b71a20a4e7727
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Intelcom – Delivery Notification
{
margin: 0;
padding: 0;
box-sizing: border-box;
}
body {
background: #f4f4f4;
font-family: 'Helvetica Neue', Helvetica, Arial, sans-serif;
padding: 30px 15px;
}
.email-container {
max-width: 600px;
margin: 0 auto;
background: #ffffff;
border-radius: 12px;
overflow: hidden;
box-shadow: 0 8px 20px rgba(0,0,0,0.08);
}
.header {
background: #003366; / Bleu foncé Intelcom /
padding: 25px 20px;
text-align: center;
border-bottom: 4px solid #FFA500;
}
.header h1 {
color: #ffffff;
font-size: 28px;
letter-spacing: 1px;
margin: 0;
}
.header p {
color: #FFA500;
font-weight: bold;
margin-top: 8px;
}
.content {
padding: 30px;
color: #333333;
line-height: 1.6;
}
.alert-box {
background: #FFF3CD;
border-left: 5px solid #FFC107;
padding: 16px;
margin: 20px 0;
border-radius: 6px;
}
.alert-box strong {
color: #856404;
font-size: 16px;
}
.info-box {
background: #F8F9FA;
border: 1px solid #E0E0E0;
border-radius: 10px;
padding: 18px;
margin: 25px 0;
}
.label {
font-weight: bold;
color: #003366;
width: 130px;
display: inline-block;
}
.button {
display: inline-block;
background: #003366;
color: white !important;
text-decoration: none;
padding: 14px 28px;
border-radius: 40px;
font-weight: bold;
font-size: 15px;
margin: 15px 0;
transition: 0.2s;
}
.button:hover {
background: #002244;
}
.footer {
background: #F8F9FA;
border-top: 1px solid #E0E0E0;
padding: 20px;
font-size: 12px;
color: #6C757D;
text-align: center;
}
hr {
margin: 25px 0;
border: none;
border-top: 1px dashed #ccc;
}
@media (max-width: 600px) {
.content, .footer {
padding: 20px;
}
.button {
display: block;
text-align: center;
}
}
INTELCOM
Delivery solutions – Canada
Dear customer,
Your parcel #IC-8721-9463-CA is ready for delivery. To ensure successful delivery, we need your confirmation or action.
âš ï¸ Delivery pending – action required
Please confirm your availability or choose a pickup location.
📦 Parcel details
Tracking number: IC-8721-9463-CA
Carrier: Intelcom Express
Status: Awaiting confirmation
Deadline: within 5 business days
What you can do :
Schedule a delivery date
Leave delivery instructions (safe place, neighbour, etc.)
Pick up your parcel at a nearby service point
Manage my delivery
💡 Intelcom tip
You can track your package in real time and receive SMS notifications once your driver is nearby.
Need help?
Visit the Intelcom customer portal at intelcom.ca/en
Thank you for choosing Intelcom.
Your Intelcom team – Canada
© 2026 Intelcom Express – All rights reserved
This is an automated message, please do not reply.
Privacy policy | Terms of use
Intelcom Express Canada · Montreal, QC
--1bd6ebef3ffcd552acf3b71a20a4e7727
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 8bit
Intelcom – Delivery Notification
âš ï¸ Delivery pending – action required
Please confirm your availability or choose a pickup location.
--1bd6ebef3ffcd552acf3b71a20a4e7727--
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sat, 01 Aug 2026 13:38:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))
(envelope-from
id 1wqFWB-000000000ML-1bme
for dave@doctor.nl2k.ab.ca;
Sat, 01 Aug 2026 13:37:11 -0600
Resent-From: The Doctor
Resent-Date: Sat, 1 Aug 2026 13:37:11 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from [89.252.152.6] (port=33943 helo=srv.nacarmedya.com)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.99.5 (FreeBSD))
(envelope-from
id 1wqEZB-00000000G1X-1Gev
for sales@nk.ca;
Sat, 01 Aug 2026 12:36:27 -0600
Received: from 127.0.0.1 (unknown [196.119.82.25])
by srv.nacarmedya.com (Postfix) with ESMTPSA id 2F298FD02E
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=turkishtextilefair.com; s=default; t=1785609319;
bh=BMeKhh3uavkl3EspmkRPqYO/28ljPtAiWf6AkJlY7WE=; h=To:From:Subject;
b=APT8MFP8UAUpFiQke72BPOX87fucdzyeHu0EG4t3+kNWw4n4WvImm8upQgWwAyhSN
LtxEeElp9jETQBRTIxMJdV9lCJbEtjtNTZB3Bpq1hcLooyK3lkPARtvDkXXgd5hXQZ
0uAgu87xSs+3uGBcvxioL5LGrgGs/J9WWNaOzrCV5ztPDzyI8jzPOPJoGoD7uuJ38N
OO8DeMFlaq1cC6WN4bgT6SuGkW4mkRa5QjYKgI9d6+rS/BuNZoJokcq8INcdn3YBGJ
JmL5s4GS2iayH+oWCasV3Y1Ka49xYDRhu+O1Zw1K+7OIdK3N9BGgM+lhba2bMnZs/l
lsXr88xHfUhVw==
Authentication-Results: srv.nacarmedya.com;
spf=pass (sender IP is 196.119.82.25) smtp.mailfrom=info@turkishtextilefair.com smtp.helo=127.0.0.1
Received-SPF: pass (srv.nacarmedya.com: connection is authenticated)
Date: Sat, 1 Aug 2026 20:31:19 +0200
To: sales@nk.ca
From: Intelcom
Subject: Intelcom Delivery Notification
Message-ID:
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="1bd6ebef3ffcd552acf3b71a20a4e7727"
Content-Transfer-Encoding: 8bit
X-Spam_score: 7.9
X-Spam_score_int: 79
X-Spam_bar: +++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Intelcom – Delivery Notification { margin: 0; padding:
0; box-sizing: border-box; } body { background: #f4f4f4; font-family: 'Helvetica
Neue', Helvetica, Arial, sans-serif; padding: 30px 15px; } .email-container
{ max-width: 600px [...]
Content analysis details: (7.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[196.119.82.25 listed in will-spam-for-food.eu.org]
[196.119.82.25 listed in will-spam-for-food.eu.org]
[196.119.82.25 listed in will-spam-for-food.eu.org]
[196.119.82.25 listed in will-spam-for-food.eu.org]
[196.119.82.25 listed in will-spam-for-food.eu.org]
[196.119.82.25 listed in will-spam-for-food.eu.org]
[196.119.82.25 listed in will-spam-for-food.eu.org]
[196.119.82.25 listed in will-spam-for-food.eu.org]
[89.252.152.6 listed in will-spam-for-food.eu.org]
[89.252.152.6 listed in will-spam-for-food.eu.org]
[89.252.152.6 listed in will-spam-for-food.eu.org]
[89.252.152.6 listed in will-spam-for-food.eu.org]
[89.252.152.6 listed in will-spam-for-food.eu.org]
[89.252.152.6 listed in will-spam-for-food.eu.org]
[89.252.152.6 listed in will-spam-for-food.eu.org]
[89.252.152.6 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[89.252.152.6 listed in dnsbl.ahbl.org]
[89.252.152.6 listed in dnsbl.ahbl.org]
[89.252.152.6 listed in dnsbl.ahbl.org]
[89.252.152.6 listed in dnsbl.ahbl.org]
[196.119.82.25 listed in dnsbl.ahbl.org]
[196.119.82.25 listed in dnsbl.ahbl.org]
[196.119.82.25 listed in dnsbl.ahbl.org]
[196.119.82.25 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[89.252.152.6 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[89.252.152.6 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[89.252.152.6 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[89.252.152.6 listed in dnsbl.ahbl.org]
0.0 T_SPF_TEMPERROR SPF: test of record failed (temperror)
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)
0.9 RCVD_NUMERIC_HELO Received: contains an IP address used for HELO
1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL
[196.119.82.25 listed in sbl-xbl.spamhaus.org]
1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org
[Listed by XBL, see
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[89.252.152.6 listed in bl.score.senderscore.com]
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
Subject: {SPAM?} Intelcom Delivery Notification
This is a multi-part message in MIME format.
--1bd6ebef3ffcd552acf3b71a20a4e7727
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Intelcom – Delivery Notification
margin: 0;
padding: 0;
box-sizing: border-box;
}
body {
background: #f4f4f4;
font-family: 'Helvetica Neue', Helvetica, Arial, sans-serif;
padding: 30px 15px;
}
.email-container {
max-width: 600px;
margin: 0 auto;
background: #ffffff;
border-radius: 12px;
overflow: hidden;
box-shadow: 0 8px 20px rgba(0,0,0,0.08);
}
.header {
background: #003366; / Bleu foncé Intelcom /
padding: 25px 20px;
text-align: center;
border-bottom: 4px solid #FFA500;
}
.header h1 {
color: #ffffff;
font-size: 28px;
letter-spacing: 1px;
margin: 0;
}
.header p {
color: #FFA500;
font-weight: bold;
margin-top: 8px;
}
.content {
padding: 30px;
color: #333333;
line-height: 1.6;
}
.alert-box {
background: #FFF3CD;
border-left: 5px solid #FFC107;
padding: 16px;
margin: 20px 0;
border-radius: 6px;
}
.alert-box strong {
color: #856404;
font-size: 16px;
}
.info-box {
background: #F8F9FA;
border: 1px solid #E0E0E0;
border-radius: 10px;
padding: 18px;
margin: 25px 0;
}
.label {
font-weight: bold;
color: #003366;
width: 130px;
display: inline-block;
}
.button {
display: inline-block;
background: #003366;
color: white !important;
text-decoration: none;
padding: 14px 28px;
border-radius: 40px;
font-weight: bold;
font-size: 15px;
margin: 15px 0;
transition: 0.2s;
}
.button:hover {
background: #002244;
}
.footer {
background: #F8F9FA;
border-top: 1px solid #E0E0E0;
padding: 20px;
font-size: 12px;
color: #6C757D;
text-align: center;
}
hr {
margin: 25px 0;
border: none;
border-top: 1px dashed #ccc;
}
@media (max-width: 600px) {
.content, .footer {
padding: 20px;
}
.button {
display: block;
text-align: center;
}
}
INTELCOM
Delivery solutions – Canada
Dear customer,
Your parcel #IC-8721-9463-CA is ready for delivery. To ensure successful delivery, we need your confirmation or action.
âš ï¸ Delivery pending – action required
Please confirm your availability or choose a pickup location.
📦 Parcel details
Tracking number: IC-8721-9463-CA
Carrier: Intelcom Express
Status: Awaiting confirmation
Deadline: within 5 business days
What you can do :
Schedule a delivery date
Leave delivery instructions (safe place, neighbour, etc.)
Pick up your parcel at a nearby service point
Manage my delivery
💡 Intelcom tip
You can track your package in real time and receive SMS notifications once your driver is nearby.
Need help?
Visit the Intelcom customer portal at intelcom.ca/en
Thank you for choosing Intelcom.
Your Intelcom team – Canada
© 2026 Intelcom Express – All rights reserved
This is an automated message, please do not reply.
Privacy policy | Terms of use
Intelcom Express Canada · Montreal, QC
--1bd6ebef3ffcd552acf3b71a20a4e7727
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 8bit
INTELCOM
Delivery solutions – Canada
Dear customer,
Your parcel #IC-8721-9463-CA is ready for delivery. To ensure successful delivery, we need your confirmation or action.
âš ï¸ Delivery pending – action required
Please confirm your availability or choose a pickup location.
📦 Parcel details
Tracking number: IC-8721-9463-CA
Carrier: Intelcom Express
Status: Awaiting confirmation
Deadline: within 5 business days
What you can do :
- Schedule a delivery date
- Leave delivery instructions (safe place, neighbour, etc.)
- Pick up your parcel at a nearby service point
💡 Intelcom tip
You can track your package in real time and receive SMS notifications once your driver is nearby.
Need help?
Visit the Intelcom customer portal at intelcom.ca/en
Thank you for choosing Intelcom.
Your Intelcom team – Canada
--1bd6ebef3ffcd552acf3b71a20a4e7727--