Royal Bank of Canada Phish from Google Cloud User
Posted by Dave Yadallee onX-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 30 Jul 2026 15:29:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))
(envelope-from
id 1wpYIP-000000001yU-2jPq
for dave@doctor.nl2k.ab.ca;
Thu, 30 Jul 2026 15:28:05 -0600
Resent-From: The Doctor
Resent-Date: Thu, 30 Jul 2026 15:28:05 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from ccrdzcoa.com ([35.212.117.171]:52329 helo=magazine.ccrdzcoa.com)
by doctor.nl2k.ab.ca with esmtp (Exim 4.99.5 (FreeBSD))
(envelope-from
id 1wpTxk-00000000Oi2-3fc9
for doctor@nl2k.ab.ca;
Thu, 30 Jul 2026 10:50:36 -0600
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=default; d=magazine.ccrdzcoa.com;
h=Content-Type:MIME-Version:From:To:Subject:Date:Message-ID;
i=career@sonakv.magazine.ccrdzcoa.com;
bh=Jl2VNvDpwCRwczNmnr1FjyerQhyMRsXPkQyNgkIGOgI=;
b=5exBrGbgfiFAUJH2bKNfSlpc3U950RcqoBF46Jw10WnktSkBqSY6rBNatYtlKG9PPgbY29PZtWSM
cR9785h25d8cjWKeyR6C5AphsUqnltX0arMEcOQ2pnMe1QV3DuM7/seg+4lHZf/CdFP+JEr05MRB
q9aft2FX9Gf0lBwd4F6Sv3judOSD8gtsqVxn1t64ezZzNZBdadp9F/sGvVv11412w0BKGYhrSmg1
iH9EEJ83RI244nxDEJ+1OLvVddx8iNBEswVPRKFwjKqSwl27NfM9IviI9r2hzYZ532Sh9aN3WKiE
9CGuOT/PJA23tRtaWUNaMDc/8Z7N8PoVs9ICmA==
Content-Type: multipart/alternative;
boundary="===============6801360122020058581=="
MIME-Version: 1.0
From: =?utf-8?b?UuKAi0LigItD?=
To: doctor@nl2k.ab.ca
Subject: Strengthen Your Account Protection - Renforcez la protection de votre
compte
Date: Thu, 30 Jul 2026 12:49:36 -0400
Message-ID:
<178543017647.3455.14106694721540413709@sonakv.magazine.ccrdzcoa.com>
X-Spam_score: 20.8
X-Spam_score_int: 208
X-Spam_bar: ++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: [RBC Direct Investing] Strengthen Your Account Protection
| Renforcez la protection de votre compte doctor, RBC Direct Investing is
continuously strengthening its security infrastructure to protect client portfolios.
As part of this commitment, we are introducing an enhanced authentication
option for your a [...]
Content analysis details: (20.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[35.212.117.171 listed in will-spam-for-food.eu.org]
[35.212.117.171 listed in will-spam-for-food.eu.org]
[35.212.117.171 listed in will-spam-for-food.eu.org]
[35.212.117.171 listed in will-spam-for-food.eu.org]
[35.212.117.171 listed in will-spam-for-food.eu.org]
[35.212.117.171 listed in will-spam-for-food.eu.org]
[35.212.117.171 listed in will-spam-for-food.eu.org]
[35.212.117.171 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[35.212.117.171 listed in dnsbl.ahbl.org]
[35.212.117.171 listed in dnsbl.ahbl.org]
[35.212.117.171 listed in dnsbl.ahbl.org]
[35.212.117.171 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[35.212.117.171 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[35.212.117.171 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[35.212.117.171 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[35.212.117.171 listed in dnsbl.ahbl.org]
2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist
[URI: ccrdzcoa.com]
1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist
[URI: ccrdzcoa.com]
1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
[URI: yishouziyuanku.com]
1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist
[URI: www.yishouziyuanku.com]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.0 SPF_PASS SPF: sender matches SPF record
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
1.5 TVD_PH_SEC BODY: Message includes a phrase commonly used in phishing
mails
2.3 MANGLED_ACTION BODY: mangled action
2.3 MANGLED_ACCNT BODY: mangled account(s)
2.3 MANGLED_YOUR BODY: mangled your
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[35.212.117.171 listed in bl.score.senderscore.com]
1.5 MR_STRANGE_QUESTION URI: No description available.
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 HTML_MESSAGE BODY: HTML included in message
1.5 VOWEL_FROM_6 Impronouncable from header (6 consecutive vowels)
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Subject: {SPAM?} Strengthen Your Account Protection - Renforcez la protection de votre
compte
●
Account Security Upgrade
Strengthen Your Account Protection
With Enhanced Authentication
doctor,
RBC Direct Investing is continuously strengthening its security infrastructure to protect client portfolios. As part of this commitment, we are introducing an enhanced authentication option for your account — an additional layer of verification designed to safeguard your equities, ETFs, options, and registered accounts against unauthorized access.
Many Canadian self-directed investors are activating enhanced authentication to add an extra barrier between their portfolios and potential threats. This upgrade is voluntary but strongly recommended — it represents the current standard in investment account protection and aligns with CIRO guidance on safeguarding client assets.
What Enhanced Authentication Provides
✓Secondary verification at every login — A one-time code or biometric confirmation is required in addition to your password, ensuring that even if your password is compromised, your account remains protected.
✓Real-time login alerts — Receive immediate notification whenever a login occurs on your account, including the device type, approximate location, and time of access.
✓Device trust management — Register trusted devices for streamlined access while maintaining strict verification for unrecognized devices or locations.
✓Full trading continuity — Accounts with enhanced authentication enabled maintain uninterrupted trading, withdrawal, and account management privileges.
Trading Access Without Enhanced Authentication
While enhanced authentication is currently optional, RBC Direct Investing's security framework will progressively require it for full trading functionality. Accounts that have not activated an enhanced authentication method may experience limitations on order entry, external transfers, and new account openings in future phases. Activating now ensures uninterrupted access and positions your account at the forefront of investment security.
Setup takes approximately three minutes. Your investments remain fully protected under the Canadian Investor Protection Fund (CIPF) throughout. You may choose between app-based authentication, SMS verification, or email-based codes. RBC Direct Investing will never contact you to request your authentication codes.
Activate Enhanced Security
This notice is issued as part of RBC Direct Investing's ongoing security enhancement program. RBC Direct Investing is a business name used by RBC Direct Investing Inc., a Dealer Member of the Canadian Investment Regulatory Organization (CIRO) and a Member of the Canadian Investor Protection Fund (CIPF). Do not reply to this email with authentication codes or personal information. For assistance, contact RBC Direct Investing Client Services through the Secure Message Centre upon login.
Sincerely,
RBC Direct Investing
Information Security Division
doctor,
RBC Direct Investing renforce continuellement son infrastructure de sécurité pour protéger les portefeuilles de ses clients. Dans le cadre de cet engagement, nous proposons une option d'authentification renforcée pour votre compte — un niveau supplémentaire de vérification conçu pour protéger vos actions, FNB, options et comptes enregistrés contre les accès non autorisés.
De nombreux investisseurs autonomes canadiens activent l'authentification renforcée pour ajouter une barrière supplémentaire entre leurs portefeuilles et les menaces potentielles. Cette mise à niveau est volontaire, mais fortement recommandée — elle représente la norme actuelle en matière de protection des comptes de placement et s'aligne sur les orientations de l'OCRI concernant la protection des actifs des clients.
Ce que l'authentification renforcée offre
✓Vérification secondaire à chaque connexion — Un code à usage unique ou une confirmation biométrique est exigé en plus de votre mot de passe, garantissant que même si votre mot de passe est compromis, votre compte demeure protégé.
✓Alertes de connexion en temps réel — Recevez une notification immédiate chaque fois qu'une connexion a lieu sur votre compte, incluant le type d'appareil, l'emplacement approximatif et l'heure d'accès.
✓Gestion des appareils de confiance — Enregistrez les appareils de confiance pour un accès simplifié tout en maintenant une vérification stricte pour les appareils ou les emplacements non reconnus.
✓Continuité de trading complète — Les comptes avec authentification renforcée activée conservent leurs privilèges de trading, de retrait et de gestion de compte sans interruption.
Accès au trading sans authentification renforcée
Bien que l'authentification renforcée soit actuellement facultative, le cadre de sécurité de RBC Direct Investing l'exigera progressivement pour la fonctionnalité de trading complète. Les comptes qui n'ont pas activé une méthode d'authentification renforcée pourraient subir des limitations sur la saisie d'ordres, les transferts externes et l'ouverture de nouveaux comptes lors des phases ultérieures. L'activation maintenant garantit un accès ininterrompu et positionne votre compte à l'avant-garde de la sécurité des placements.
La configuration prend environ trois minutes. Vos placements demeurent entièrement protégés par le Fonds canadien de protection des investisseurs (FCPI) en tout temps. Vous pouvez choisir entre l'authentification par application, la vérification par SMS ou les codes par courriel. RBC Direct Investing ne communiquera jamais avec vous pour vous demander vos codes d'authentification.
Activer la sécurité renforcée
Le présent avis est émis dans le cadre du programme d'amélioration continue de la sécurité de RBC Direct Investing. RBC Direct Investing est une dénomination commerciale utilisée par RBC Direct Investing Inc., un courtier membre de l'Organisme canadien de réglementation des investissements (OCRI) et un membre du Fonds canadien de protection des investisseurs (FCPI). Ne répondez pas à ce courriel en fournissant des codes d'authentification ou des renseignements personnels. Pour obtenir de l'aide, communiquez avec les Services aux clients de RBC Direct Investing par l'entremise du Centre de messagerie sécurisé lors de la connexion.
Sincères salutations,
RBC Direct Investing
Division de la sécurité de l'information
RBC Direct Investing is a business name used by RBC Direct Investing Inc. Member — Canadian Investor Protection Fund. Dealer Member — Canadian Investment Regulatory Organization.
This is an automated security notification. Please direct all inquiries through the Secure Message Centre within your RBC Direct Investing account.
© 2026 RBC Direct Investing Inc. All rights reserved.
RBC Direct Investing est une dénomination commerciale utilisée par RBC Direct Investing Inc. Membre — Fonds canadien de protection des investisseurs. Courtier membre — Organisme canadien de réglementation des investissements.
Ceci est une notification de sécurité automatisée. Veuillez adresser toute demande par l'entremise du Centre de messagerie sécurisé dans votre compte RBC Direct Investing.
© 2026 RBC Direct Investing Inc. Tous droits réservés.