Intelcom Phish Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 03 Feb 2026 12:32:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vnM76-00000000DJq-0gT1

for dave@doctor.nl2k.ab.ca;

Tue, 03 Feb 2026 12:31:04 -0700

Resent-From: The Doctor

Resent-Date: Tue, 3 Feb 2026 12:31:04 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [83.167.253.232] (port=52992 helo=rentstorage.ca)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vnK3J-000000007aL-2Ll3

for root@nl2k.ab.ca;

Tue, 03 Feb 2026 10:19:08 -0700

Received: by rentstorage.ca (Postfix, from userid 33)

id A0E9910C744; Tue, 3 Feb 2026 16:26:45 +0000 (UTC)

To: root@nl2k.ab.ca

Subject: Last update: Confirm your delivery before it expires and returned to the sender.

Date: Tue, 3 Feb 2026 16:25:08 +0000

From: =?UTF-8?Q?Intelcom=C2=AE?=

Message-ID:

List-Unsubscribe: mailto:bounce763-yhDF0a8lGhnQ7T9@rentstorage.ca?subject=list-unsubscribe

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="18ff0224a4567a77bac59cdbf3ae3d7c0"

Content-Transfer-Encoding: 8bit

X-Spam_score: 13.5

X-Spam_score_int: 135

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: intelcom-dragonfly@intelcom.ca | Hello,



Content analysis details: (13.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[83.167.253.232 listed in will-spam-for-food.eu.org]

[83.167.253.232 listed in will-spam-for-food.eu.org]

[83.167.253.232 listed in will-spam-for-food.eu.org]

[83.167.253.232 listed in will-spam-for-food.eu.org]

[83.167.253.232 listed in will-spam-for-food.eu.org]

[83.167.253.232 listed in will-spam-for-food.eu.org]

[83.167.253.232 listed in will-spam-for-food.eu.org]

[83.167.253.232 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[83.167.253.232 listed in dnsbl.ahbl.org]

[83.167.253.232 listed in dnsbl.ahbl.org]

[83.167.253.232 listed in dnsbl.ahbl.org]

[83.167.253.232 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[83.167.253.232 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[83.167.253.232 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[83.167.253.232 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[83.167.253.232 listed in dnsbl.ahbl.org]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: ctmsapp.com]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: ctmsapp.com]

0.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist

[URI: jii.li]

2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist

[URI: jii.li]

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.8 A_HREF_NOWHERE A link tag with empty href

0.0 HREF_EMPTY_NORDNS Empty href + no rDNS

0.0 GOOG_REDIR_NORDNS Google redirect to obscure spamvertised website +

no rDNS

Subject: {SPAM?} Last update: Confirm your delivery before it expires and returned to the sender.



This is a multi-part message in MIME format.



--18ff0224a4567a77bac59cdbf3ae3d7c0

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit













intelcom-dragonfly@intelcom.ca |











Hello,



⚠️ We need you to confirm your delivery before it expires and returned to the sender !



































Â















Â





Â















Please be advised that international mail entering Canada is subject to examination by the Canada Border Services Agency (CBSA). The CBSA determines whether goods are admissible into Canada and whether duties and taxes are applicable.



However, you have a package awaiting delivery due to non-payment of customs fees, taxes and brokerage to which it is subject in accordance with the terms and conditions of the Canada Border Services Agency in the amount of CA$ 2.29 payable via our secure form below:



Confirm my delivery



Intelcom - Dragonfly, as a delivery company, is responsible for collecting duties and taxes prior to delivering a mail item to the recipient, but the taxes and duties themselves are imposed by the Canada Border Services Agency (CBSA).



Have a great day!















Â























Â













Intelcom Phish Part 2







This is an automated email, please do not reply.











Â





















--198f005bbbca4ffa554f83c7632a8ba40

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: 8bit































Hello,





⚠️ We need you to confirm your delivery before it expires and returned to the sender !





































Â


































Â
Â
















Please be advised that international mail entering Canada is subject to examination by the Canada Border Services Agency (CBSA). The CBSA determines whether goods are admissible into Canada and whether duties and taxes are applicable.





However, you have a package awaiting delivery due to non-payment of customs fees, taxes and brokerage to which it is subject in accordance with the terms and conditions of the Canada Border Services Agency in the amount of CA$ 2.29 payable via our secure form below:





Confirm my delivery





Intelcom - Dragonfly, as a delivery company, is responsible for collecting duties and taxes prior to delivering a mail item to the recipient, but the taxes and duties themselves are imposed by the Canada Border Services Agency (CBSA).





Have a great day!





Â


































Â





















This is an automated email, please do not reply.





Â














--198f005bbbca4ffa554f83c7632a8ba40--



Intelcom Phish Part 2





This is an automated email, please do not reply.











Â





















--1bb154b3ef2deeca2c8b097de34df38b5

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: 8bit































Hello,





⚠️ We need you to confirm your delivery before it expires and returned to the sender !





































Â


































Â
Â
















Please be advised that international mail entering Canada is subject to examination by the Canada Border Services Agency (CBSA). The CBSA determines whether goods are admissible into Canada and whether duties and taxes are applicable.





However, you have a package awaiting delivery due to non-payment of customs fees, taxes and brokerage to which it is subject in accordance with the terms and conditions of the Canada Border Services Agency in the amount of CA$ 2.29 payable via our secure form below:





Confirm my delivery





Intelcom - Dragonfly, as a delivery company, is responsible for collecting duties and taxes prior to delivering a mail item to the recipient, but the taxes and duties themselves are imposed by the Canada Border Services Agency (CBSA).





Have a great day!





Â


































Â





















This is an automated email, please do not reply.





Â














--1bb154b3ef2deeca2c8b097de34df38b5--



Intelcom Phish Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 03 Feb 2026 12:31:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vnM6w-00000000CXk-1LIF

for dave@doctor.nl2k.ab.ca;

Tue, 03 Feb 2026 12:30:54 -0700

Resent-From: The Doctor

Resent-Date: Tue, 3 Feb 2026 12:30:54 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [178.238.43.10] (port=59134 helo=umnatural.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vnL6I-000000005bu-2zxc

for games@nl2k.ab.ca;

Tue, 03 Feb 2026 11:26:18 -0700

Received: by umnatural.com (Postfix, from userid 33)

id 6DB4510B30E; Tue, 3 Feb 2026 16:27:37 +0000 (UTC)

To: games@nl2k.ab.ca

Subject: Last update: Confirm your delivery before it expires and returned to the sender.

Date: Tue, 3 Feb 2026 16:23:06 +0000

From: =?UTF-8?Q?Intelcom=C2=AE?=

Message-ID: <42bbf3d3a536287d5170b077b4c0dda2@umnatural.com>

List-Unsubscribe: mailto:bounce322-FokhhsZ61fmDQha@umnatural.com?subject=list-unsubscribe

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="198f005bbbca4ffa554f83c7632a8ba40"

Content-Transfer-Encoding: 8bit

X-Spam_score: 16.2

X-Spam_score_int: 162

X-Spam_bar: ++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: intelcom-dragonfly@intelcom.ca | Hello,



Content analysis details: (16.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[178.238.43.10 listed in will-spam-for-food.eu.org]

[178.238.43.10 listed in will-spam-for-food.eu.org]

[178.238.43.10 listed in will-spam-for-food.eu.org]

[178.238.43.10 listed in will-spam-for-food.eu.org]

[178.238.43.10 listed in will-spam-for-food.eu.org]

[178.238.43.10 listed in will-spam-for-food.eu.org]

[178.238.43.10 listed in will-spam-for-food.eu.org]

[178.238.43.10 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[178.238.43.10 listed in dnsbl.ahbl.org]

[178.238.43.10 listed in dnsbl.ahbl.org]

[178.238.43.10 listed in dnsbl.ahbl.org]

[178.238.43.10 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[178.238.43.10 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[178.238.43.10 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[178.238.43.10 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[178.238.43.10 listed in dnsbl.ahbl.org]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist

[URI: jii.li]

0.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist

[URI: jii.li]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: ctmsapp.com]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: ctmsapp.com]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: ctmsapp.com]

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.8 A_HREF_NOWHERE A link tag with empty href

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 HREF_EMPTY_NORDNS Empty href + no rDNS

0.0 GOOG_REDIR_NORDNS Google redirect to obscure spamvertised website +

no rDNS

Subject: {SPAM?} Last update: Confirm your delivery before it expires and returned to the sender.



This is a multi-part message in MIME format.



--198f005bbbca4ffa554f83c7632a8ba40

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit













intelcom-dragonfly@intelcom.ca |











Hello,



⚠️ We need you to confirm your delivery before it expires and returned to the sender !



































Â















Â





Â















Please be advised that international mail entering Canada is subject to examination by the Canada Border Services Agency (CBSA). The CBSA determines whether goods are admissible into Canada and whether duties and taxes are applicable.



However, you have a package awaiting delivery due to non-payment of customs fees, taxes and brokerage to which it is subject in accordance with the terms and conditions of the Canada Border Services Agency in the amount of CA$ 2.29 payable via our secure form below:



Confirm my delivery



Intelcom - Dragonfly, as a delivery company, is responsible for collecting duties and taxes prior to delivering a mail item to the recipient, but the taxes and duties themselves are imposed by the Canada Border Services Agency (CBSA).



Have a great day!















Â























Â











Intelcom Phish Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 03 Feb 2026 12:31:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vnM6h-00000000BDL-3rSE

for dave@doctor.nl2k.ab.ca;

Tue, 03 Feb 2026 12:30:39 -0700

Resent-From: The Doctor

Resent-Date: Tue, 3 Feb 2026 12:30:39 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [83.167.253.232] (port=36164 helo=rentstorage.ca)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vnJkW-000000002RZ-28QD

for doctor@nl2k.ab.ca;

Tue, 03 Feb 2026 09:59:43 -0700

Received: by rentstorage.ca (Postfix, from userid 33)

id A55E26F1B2; Tue, 3 Feb 2026 15:53:31 +0000 (UTC)

To: doctor@nl2k.ab.ca

Subject: Last update: Confirm your delivery before it expires and returned to the sender.

Date: Tue, 3 Feb 2026 15:51:06 +0000

From: =?UTF-8?Q?Intelcom=C2=AE?=

Message-ID: <9bd3218577630f37b3f6f8376d12113d@rentstorage.ca>

List-Unsubscribe: mailto:bounce248-u6lUoVZeJKUClC9@rentstorage.ca?subject=list-unsubscribe

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="1bb154b3ef2deeca2c8b097de34df38b5"

Content-Transfer-Encoding: 8bit

X-Spam_score: 13.5

X-Spam_score_int: 135

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: intelcom-dragonfly@intelcom.ca | Hello,



Content analysis details: (13.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[83.167.253.232 listed in will-spam-for-food.eu.org]

[83.167.253.232 listed in will-spam-for-food.eu.org]

[83.167.253.232 listed in will-spam-for-food.eu.org]

[83.167.253.232 listed in will-spam-for-food.eu.org]

[83.167.253.232 listed in will-spam-for-food.eu.org]

[83.167.253.232 listed in will-spam-for-food.eu.org]

[83.167.253.232 listed in will-spam-for-food.eu.org]

[83.167.253.232 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[83.167.253.232 listed in dnsbl.ahbl.org]

[83.167.253.232 listed in dnsbl.ahbl.org]

[83.167.253.232 listed in dnsbl.ahbl.org]

[83.167.253.232 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[83.167.253.232 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[83.167.253.232 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[83.167.253.232 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[83.167.253.232 listed in dnsbl.ahbl.org]

2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist

[URI: jii.li]

0.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist

[URI: jii.li]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: ctmsapp.com]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: ctmsapp.com]

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.8 A_HREF_NOWHERE A link tag with empty href

0.0 GOOG_REDIR_NORDNS Google redirect to obscure spamvertised website +

no rDNS

0.0 HREF_EMPTY_NORDNS Empty href + no rDNS

Subject: {SPAM?} Last update: Confirm your delivery before it expires and returned to the sender.



This is a multi-part message in MIME format.



--1bb154b3ef2deeca2c8b097de34df38b5

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit













intelcom-dragonfly@intelcom.ca |











Hello,



⚠️ We need you to confirm your delivery before it expires and returned to the sender !



































Â















Â





Â















Please be advised that international mail entering Canada is subject to examination by the Canada Border Services Agency (CBSA). The CBSA determines whether goods are admissible into Canada and whether duties and taxes are applicable.



However, you have a package awaiting delivery due to non-payment of customs fees, taxes and brokerage to which it is subject in accordance with the terms and conditions of the Canada Border Services Agency in the amount of CA$ 2.29 payable via our secure form below:



Confirm my delivery



Intelcom - Dragonfly, as a delivery company, is responsible for collecting duties and taxes prior to delivering a mail item to the recipient, but the taxes and duties themselves are imposed by the Canada Border Services Agency (CBSA).



Have a great day!















Â























Â













Intelcom Phish Part 3

Â





Â















Please be advised that international mail entering Canada is subject to examination by the Canada Border Services Agency (CBSA). The CBSA determines whether goods are admissible into Canada and whether duties and taxes are applicable.



However, you have a package awaiting delivery due to non-payment of customs fees, taxes and brokerage to which it is subject in accordance with the terms and conditions of the Canada Border Services Agency in the amount of CA$ 2.29 payable via our secure form below:



Confirm my delivery



Intelcom - Dragonfly, as a delivery company, is responsible for collecting duties and taxes prior to delivering a mail item to the recipient, but the taxes and duties themselves are imposed by the Canada Border Services Agency (CBSA).



Have a great day!















Â























Â

















This is an automated email, please do not reply.











Â





















--1bb154b3ef2deeca2c8b097de34df38b5

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: 8bit































Hello,





⚠️ We need you to confirm your delivery before it expires and returned to the sender !





































Â


































Â
Â
















Please be advised that international mail entering Canada is subject to examination by the Canada Border Services Agency (CBSA). The CBSA determines whether goods are admissible into Canada and whether duties and taxes are applicable.





However, you have a package awaiting delivery due to non-payment of customs fees, taxes and brokerage to which it is subject in accordance with the terms and conditions of the Canada Border Services Agency in the amount of CA$ 2.29 payable via our secure form below:





Confirm my delivery





Intelcom - Dragonfly, as a delivery company, is responsible for collecting duties and taxes prior to delivering a mail item to the recipient, but the taxes and duties themselves are imposed by the Canada Border Services Agency (CBSA).





Have a great day!





Â


































Â





















This is an automated email, please do not reply.





Â














--1bb154b3ef2deeca2c8b097de34df38b5--



Intelcom Phish Part 2



This is a multi-part message in MIME format.



--1bb154b3ef2deeca2c8b097de34df38b5

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit













intelcom-dragonfly@intelcom.ca |











Hello,



⚠️ We need you to confirm your delivery before it expires and returned to the sender !



































Â















Intelcom Phish Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 03 Feb 2026 12:31:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vnM6h-00000000BDL-3rSE

for dave@doctor.nl2k.ab.ca;

Tue, 03 Feb 2026 12:30:39 -0700

Resent-From: The Doctor

Resent-Date: Tue, 3 Feb 2026 12:30:39 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [83.167.253.232] (port=36164 helo=rentstorage.ca)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vnJkW-000000002RZ-28QD

for doctor@nl2k.ab.ca;

Tue, 03 Feb 2026 09:59:43 -0700

Received: by rentstorage.ca (Postfix, from userid 33)

id A55E26F1B2; Tue, 3 Feb 2026 15:53:31 +0000 (UTC)

To: doctor@nl2k.ab.ca

Subject: Last update: Confirm your delivery before it expires and returned to the sender.

Date: Tue, 3 Feb 2026 15:51:06 +0000

From: =?UTF-8?Q?Intelcom=C2=AE?=

Message-ID: <9bd3218577630f37b3f6f8376d12113d@rentstorage.ca>

List-Unsubscribe: mailto:bounce248-u6lUoVZeJKUClC9@rentstorage.ca?subject=list-unsubscribe

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="1bb154b3ef2deeca2c8b097de34df38b5"

Content-Transfer-Encoding: 8bit

X-Spam_score: 13.5

X-Spam_score_int: 135

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: intelcom-dragonfly@intelcom.ca | Hello,



Content analysis details: (13.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[83.167.253.232 listed in will-spam-for-food.eu.org]

[83.167.253.232 listed in will-spam-for-food.eu.org]

[83.167.253.232 listed in will-spam-for-food.eu.org]

[83.167.253.232 listed in will-spam-for-food.eu.org]

[83.167.253.232 listed in will-spam-for-food.eu.org]

[83.167.253.232 listed in will-spam-for-food.eu.org]

[83.167.253.232 listed in will-spam-for-food.eu.org]

[83.167.253.232 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[83.167.253.232 listed in dnsbl.ahbl.org]

[83.167.253.232 listed in dnsbl.ahbl.org]

[83.167.253.232 listed in dnsbl.ahbl.org]

[83.167.253.232 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[83.167.253.232 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[83.167.253.232 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[83.167.253.232 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[83.167.253.232 listed in dnsbl.ahbl.org]

2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist

[URI: jii.li]

0.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist

[URI: jii.li]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: ctmsapp.com]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: ctmsapp.com]

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.8 A_HREF_NOWHERE A link tag with empty href

0.0 GOOG_REDIR_NORDNS Google redirect to obscure spamvertised website +

no rDNS

0.0 HREF_EMPTY_NORDNS Empty href + no rDNS

Subject: {SPAM?} Last update: Confirm your delivery before it expires and returned to the sender.

Intelcom Phish Part 2



--11c55e8fb77d2b9f5d7618c58b3c8a804

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: 8bit































Hello,





⚠️ We need you to confirm your delivery before it expires and returned to the sender !





































Â


































Â
Â
















Please be advised that international mail entering Canada is subject to examination by the Canada Border Services Agency (CBSA). The CBSA determines whether goods are admissible into Canada and whether duties and taxes are applicable.





However, you have a package awaiting delivery due to non-payment of customs fees, taxes and brokerage to which it is subject in accordance with the terms and conditions of the Canada Border Services Agency in the amount of CA$ 2.29 payable via our secure form below:





Confirm my delivery





Intelcom - Dragonfly, as a delivery company, is responsible for collecting duties and taxes prior to delivering a mail item to the recipient, but the taxes and duties themselves are imposed by the Canada Border Services Agency (CBSA).





Have a great day!





Â


































Â





















This is an automated email, please do not reply.





Â














--11c55e8fb77d2b9f5d7618c58b3c8a804--



Intelcom Phish Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 03 Feb 2026 10:47:00 -0700

Received: from [83.167.253.232] (port=42158 helo=rentstorage.ca)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vnKUA-000000002E0-32zL

for dave@doctor.nl2k.ab.ca;

Tue, 03 Feb 2026 10:46:55 -0700

Received: by rentstorage.ca (Postfix, from userid 33)

id 13800142773; Tue, 3 Feb 2026 16:46:24 +0000 (UTC)

To: dave@doctor.nl2k.ab.ca

Subject: Last update: Confirm your delivery before it expires and returned to the sender.

Date: Tue, 3 Feb 2026 16:40:17 +0000

From: =?UTF-8?Q?Intelcom=C2=AE?=

Message-ID: <6e8970c9460926b3923f2252b2d97b4f@rentstorage.ca>

List-Unsubscribe: mailto:bounce660-GPWeAHI6CSVIiRY@rentstorage.ca?subject=list-unsubscribe

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="11c55e8fb77d2b9f5d7618c58b3c8a804"

Content-Transfer-Encoding: 8bit

X-Spam_score: 13.5

X-Spam_score_int: 135

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: intelcom-dragonfly@intelcom.ca | Hello,



Content analysis details: (13.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[83.167.253.232 listed in will-spam-for-food.eu.org]

[83.167.253.232 listed in will-spam-for-food.eu.org]

[83.167.253.232 listed in will-spam-for-food.eu.org]

[83.167.253.232 listed in will-spam-for-food.eu.org]

[83.167.253.232 listed in will-spam-for-food.eu.org]

[83.167.253.232 listed in will-spam-for-food.eu.org]

[83.167.253.232 listed in will-spam-for-food.eu.org]

[83.167.253.232 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[83.167.253.232 listed in dnsbl.ahbl.org]

[83.167.253.232 listed in dnsbl.ahbl.org]

[83.167.253.232 listed in dnsbl.ahbl.org]

[83.167.253.232 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[83.167.253.232 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[83.167.253.232 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[83.167.253.232 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[83.167.253.232 listed in dnsbl.ahbl.org]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: ctmsapp.com]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: ctmsapp.com]

0.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist

[URI: jii.li]

2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist

[URI: jii.li]

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.8 A_HREF_NOWHERE A link tag with empty href

0.0 GOOG_REDIR_NORDNS Google redirect to obscure spamvertised website +

no rDNS

0.0 HREF_EMPTY_NORDNS Empty href + no rDNS

Subject: {SPAM?} Last update: Confirm your delivery before it expires and returned to the sender.



This is a multi-part message in MIME format.



--11c55e8fb77d2b9f5d7618c58b3c8a804

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit













intelcom-dragonfly@intelcom.ca |











Hello,



⚠️ We need you to confirm your delivery before it expires and returned to the sender !



































Â















Â





Â















Please be advised that international mail entering Canada is subject to examination by the Canada Border Services Agency (CBSA). The CBSA determines whether goods are admissible into Canada and whether duties and taxes are applicable.



However, you have a package awaiting delivery due to non-payment of customs fees, taxes and brokerage to which it is subject in accordance with the terms and conditions of the Canada Border Services Agency in the amount of CA$ 2.29 payable via our secure form below:



Confirm my delivery



Intelcom - Dragonfly, as a delivery company, is responsible for collecting duties and taxes prior to delivering a mail item to the recipient, but the taxes and duties themselves are imposed by the Canada Border Services Agency (CBSA).



Have a great day!















Â























Â

















This is an automated email, please do not reply.











Â



















Intelcom Phish Part 2

Â





















--1dd5794931b3b08e3fba2b9a5ba92d059

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: 8bit































Hello,





⚠️ We need you to confirm your delivery before it expires and returned to the sender !





































Â


































Â
Â
















Please be advised that international mail entering Canada is subject to examination by the Canada Border Services Agency (CBSA). The CBSA determines whether goods are admissible into Canada and whether duties and taxes are applicable.





However, you have a package awaiting delivery due to non-payment of customs fees, taxes and brokerage to which it is subject in accordance with the terms and conditions of the Canada Border Services Agency in the amount of CA$ 2.29 payable via our secure form below:





Confirm my delivery





Intelcom - Dragonfly, as a delivery company, is responsible for collecting duties and taxes prior to delivering a mail item to the recipient, but the taxes and duties themselves are imposed by the Canada Border Services Agency (CBSA).





Have a great day!





Â


































Â





















This is an automated email, please do not reply.





Â














--1dd5794931b3b08e3fba2b9a5ba92d059--



Intelcom Phish Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 03 Feb 2026 09:37:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vnJOY-000000000wv-06Kc

for dave@doctor.nl2k.ab.ca;

Tue, 03 Feb 2026 09:36:54 -0700

Resent-From: The Doctor

Resent-Date: Tue, 3 Feb 2026 09:36:53 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [83.167.253.232] (port=37812 helo=rentstorage.ca)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vnJEg-00000000NvG-3mUb

for doctor@doctor.nl2k.ab.ca;

Tue, 03 Feb 2026 09:26:50 -0700

Received: by rentstorage.ca (Postfix, from userid 33)

id 88FD076D41; Tue, 3 Feb 2026 16:08:59 +0000 (UTC)

To: doctor@doctor.nl2k.ab.ca

Subject: Last update: Confirm your delivery before it expires and returned to the sender.

Date: Tue, 3 Feb 2026 16:02:49 +0000

From: =?UTF-8?Q?Intelcom=C2=AE?=

Message-ID: <813f3d2a7a0be6952982142dcb5a0762@rentstorage.ca>

List-Unsubscribe: mailto:bounce933-wLL4tjETTmU9f59@rentstorage.ca?subject=list-unsubscribe

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="1dd5794931b3b08e3fba2b9a5ba92d059"

Content-Transfer-Encoding: 8bit

X-Spam_score: 9.6

X-Spam_score_int: 96

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: intelcom-dragonfly@intelcom.ca | Hello,



Content analysis details: (9.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[83.167.253.232 listed in will-spam-for-food.eu.org]

[83.167.253.232 listed in will-spam-for-food.eu.org]

[83.167.253.232 listed in will-spam-for-food.eu.org]

[83.167.253.232 listed in will-spam-for-food.eu.org]

[83.167.253.232 listed in will-spam-for-food.eu.org]

[83.167.253.232 listed in will-spam-for-food.eu.org]

[83.167.253.232 listed in will-spam-for-food.eu.org]

[83.167.253.232 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[83.167.253.232 listed in dnsbl.ahbl.org]

[83.167.253.232 listed in dnsbl.ahbl.org]

[83.167.253.232 listed in dnsbl.ahbl.org]

[83.167.253.232 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[83.167.253.232 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[83.167.253.232 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[83.167.253.232 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[83.167.253.232 listed in dnsbl.ahbl.org]

0.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist

[URI: jii.li]

0.0 T_SPF_HELO_TEMPERROR SPF: test of HELO record failed (temperror)

0.0 T_SPF_TEMPERROR SPF: test of record failed (temperror)

2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist

[URI: jii.li]

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.8 A_HREF_NOWHERE A link tag with empty href

0.0 GOOG_REDIR_NORDNS Google redirect to obscure spamvertised website +

no rDNS

0.0 HREF_EMPTY_NORDNS Empty href + no rDNS

Subject: {SPAM?} Last update: Confirm your delivery before it expires and returned to the sender.



This is a multi-part message in MIME format.



--1dd5794931b3b08e3fba2b9a5ba92d059

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit













intelcom-dragonfly@intelcom.ca |











Hello,



⚠️ We need you to confirm your delivery before it expires and returned to the sender !



































Â















Â





Â















Please be advised that international mail entering Canada is subject to examination by the Canada Border Services Agency (CBSA). The CBSA determines whether goods are admissible into Canada and whether duties and taxes are applicable.



However, you have a package awaiting delivery due to non-payment of customs fees, taxes and brokerage to which it is subject in accordance with the terms and conditions of the Canada Border Services Agency in the amount of CA$ 2.29 payable via our secure form below:



Confirm my delivery



Intelcom - Dragonfly, as a delivery company, is responsible for collecting duties and taxes prior to delivering a mail item to the recipient, but the taxes and duties themselves are imposed by the Canada Border Services Agency (CBSA).



Have a great day!















Â























Â

















This is an automated email, please do not reply.

Webroot Phish from Google Gmail Part 3

@font-face {

font-family: 'Google Sans';

font-style: normal;

font-weight: 700;

src: url(//fonts.gstatic.com/s/googlesans/v14/4UabrENHsxJlGDuGo1OIlLV154t=

zCwM.ttf) format('truetype');

}





=20



=20



=20



=20


















/InformAction">
emtype=3D"http://schema.org/EmailMessage">
ntent=3D"Nishi Kodele: Thank you: Your Bill is moving to dispatch"/>
=


eta itemprop=3D"eventStatus" content=3D"http://schema.org/EventScheduled"/>=


zation">

temprop=3D"eventId/googleCalendar" content=3D"iZywEL9TFN6agMbq7nr3pYvBek"/>=


; height: 0; max-height: 0; width: 0; max-width: 0; opacity: 0; overflow: h=

idden;" itemprop=3D"name">Thank you: Your Bill is moving to dispatch
=


=3D"presentation" align=3D"center" style=3D"width:100%;" class=3D"body-cont=

ainer">

"height:16px;" aria-hidden=3D"true">  

"0" role=3D"presentation" align=3D"center" style=3D"width:100%;" class=3D""=

>

pe=3D"http://schema.org/EmailMessage">

Thank you=

: Your Bill is moving to dispatch


e border=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"presentation" al=

ign=3D"center" style=3D"width:100%;" class=3D"">

der: solid 1px #dadce0; border-radius: 8px; direction: rtl; font-size: 0; p=

adding: 24px 32px; text-align: left; vertical-align: top;" class=3D"main-co=

ntainer-inner">

=3D"font-size: 13px; text-align: left; direction: ltr; display: inline-bloc=

k; vertical-align: top; width: 100%;overflow: hidden; word-wrap: break-word=

;">
tion" width=3D"100%" class=3D"main-column-table-ltr" style=3D"padding-right=

: 32px; padding-left: 0;;table-layout: fixed;">

-column-td" style=3D"padding:0; vertical-align:top;">
llpadding=3D"0" cellspacing=3D"0" role=3D"presentation" width=3D"100%" styl=

e=3D"table-layout: fixed;"><=

td style=3D"font-size: 0; padding: 0; text-align: left; word-break: break-w=

ord;;padding-bottom:24px;">

nt-style: normal; font-weight: 400; font-size: 14px; line-height: 20px; let=

ter-spacing: 0.2px;color: #3c4043; text-decoration: none;" class=3D"primary=

-text" role=3D"presentation">

align: left; word-break: break-word;;padding-bottom:2px;">

t-family: 'Google Sans', Roboto, sans-serif;font-weight: 400; font-=

size: 22px; line-height: 28px;color: #3c4043; text-decoration: none;" class=

=3D"primary-text" role=3D"presentation">Thank you: =

Your Bill is moving to dispatch

-size: 0; padding: 0; text-align: left; word-break: break-word;;padding-bot=

tom:24px;">

; font-weight: 400; font-size: 14px; line-height: 20px; letter-spacing: 0.2=

px;color: #3c4043; text-decoration: none;" class=3D"primary-text" role=3D"p=

resentation">Tuesday Feb 3, 2026 =E2=8B=85 8:39pm (Paci=

fic Time - Los Angeles)

; padding: 0; text-align: left; word-break: break-word;;padding-bottom:24px=

;">

eight: 400; font-size: 14px; line-height: 20px; letter-spacing: 0.2px;color=

: #3c4043; text-decoration: none;" class=3D"primary-text" role=3D"presentat=

ion">

Webroot
Bill no: 1304-BUZT-GHW
Bill Date: Tuesda=

y, 03 February 2026
Phone Assistance Service - +1 (816)-210-1862

C=

overage extended successfully.

Thank you,

Your Webroot subscrip=

tion renewal has been completed successfully. The amount of USD332.33 has b=

een duly credited for your 48 Months subscription duration.

Current B=

illing Overview:
=E2=80=A2 Plan: Membership support
=E2=80=A2 Referen=

ce Code: 5368a55f-6c63-4b4d-8045-6eb42eb76afe
=E2=80=A2 Term: 48 Months<=

br>=E2=80=A2 Quantity: x5
=E2=80=A2 Total Amount: USD332.33

For an=

y inquiries, please do not hesitate to contact 1{808} 219-4388.

Best=

wishes to you,,
Webroot, powered by McAfee


description" content=3D"WebrootBill no: 1304-BUZT-GHWBill Date: Tuesday, 03=

February 2026Phone Assistance Service - +1 (816)-210-1862Coverage extended=

successfully.Thank you,Your Webroot subscription renewal has been complete=

d successfully. The amount of USD332.33 has been duly credited for your 48 =

Months subscription duration.Current Billing Overview:&bull; Plan: Memb=

ership support&bull; Reference Code: 5368a55f-6c63-4b4d-8045-6eb42eb76a=

fe&bull; Term: 48 Months&bull; Quantity: x5&bull; Total Amount:=

USD332.33For any inquiries, please do not hesitate to contact 1{808} 219-=

4388.Best wishes to you,,Webroot, powered by McAfee"/>

ing=3D"0" role=3D"presentation" style=3D"padding-bottom: 4px;">


class=3D"primary-text" style=3D"font-size: 14px;color: #3c4043; text-decora=

tion: none;font-weight: 700;-webkit-font-smoothing: antialiased;margin: 0; =

padding: 0;">Guests

(Guest list has been hidden at or=

ganizer's request)
<=

!--[if mso | IE]>
tr>

--00000000000029b1850649ed404e--

Webroot Phish from Google Gmail Part 2