National Bank Phish from Sendgrid
Posted by Dave Yadallee on
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 08 Sep 2026 14:26:59 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))
(envelope-from)
id 1x42Og-00000000OQf-05cq
for dave@doctor.nl2k.ab.ca;
Tue, 08 Sep 2026 14:26:26 -0600
Resent-From: The Doctor
Resent-Date: Tue, 8 Sep 2026 14:26:25 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from s.wrqvtzvf.outbound-mail.sendgrid.net ([149.72.126.143]:29594)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.100 (FreeBSD))
(envelope-from)
id 1x3ylw-000000003Rs-1wJ6
for doctor@doctor.nl2k.ab.ca;
Tue, 08 Sep 2026 10:34:20 -0600
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=jilqxb.com;
h=from:subject:date:mime-version:to:content-type:cc:content-type:date:
from:subject:to;
s=s1; t=1788885199;
bh=9K/sc8b+56Pbee7xZtQJ2tG5Q+WWlv4v3ihjBLvvNsw=;
b=ragHee1ztg1uLOhK2rN8CCSrI5sLS79NEJ+mTMLjOuDk/sxKQX45Q9Ai2NYxpWlGcJzx
3QnAYKKcBrPOMq2WgeHm2fTI65s1EXuFaZeuEzTO1A6QNs/dvmgPC12Su20HRfbOiYDffZ
ODxm/mexKMpZVhzD5Bzt4EqRfU7FIOaQGtmBDIOWY57v5R7HH3y+PPzIKCskhiovTzDWqA
ll8u+zLdZAnkXTnilUhtM8d8NRP+fcTLCg00/TMMTkIXR/fUaQvS8nFzerlCJ1NkgyLxWr
nSC1GVv8mIOuguj/sKhJoNbN9PJvHTg3x/E5Dr69+HAWe+szxw78ev1dda641BFQ==
Received: by recvd-7d6cf44bfb-6fgpx with SMTP id recvd-7d6cf44bfb-6fgpx-1-6AA038CF-38
2026-09-08 16:33:19.232496568 +0000 UTC m=+3620573.217802008
Received: from pronadis.es (unknown)
by geopod-ismtpd-2 (SG) with ESMTP
id BWcAopTlTq65a5ewc92Nlw
for;
Tue, 08 Sep 2026 16:33:19.143 +0000 (UTC)
Message-Id: <1e950d0db72e71ecffad495821c33d80@jilqxb.com>
From: NBDB-invest
Subject: Action Needed: Review Your Account Details
Date: Tue, 08 Sep 2026 16:33:19 +0000 (UTC)
X-Priority: 3
X-Mailer: GZYKG 239.97829
Mime-Version: 1.0
X-SG-EID:
=?us-ascii?Q?u001=2Eq4BY9U0kS4KYQvUTPtQW5Bjj602jNKXbmRkUZ49uvaCcU5h5zaoiD1DmW?=
=?us-ascii?Q?73TPoHnSyXNVOMtEQOKQ5+f+4N6=2F7Tdd9DxTXie?=
=?us-ascii?Q?ZaYoCX+57d9pX3Bzru7syxkzLkyvj5GpzPTGsZG?=
=?us-ascii?Q?qxHKPs30bclKdj63Q8geF18eSJ7Au7ullvrgNMI?=
=?us-ascii?Q?sAoRXQpnKsPYyE=2F6QoLSyn7hPqBC1bpQGI3NYtC?=
=?us-ascii?Q?EzhUxCyKLgbh1VjB0M2UKHXG9DEN3JuP5u24wQ6?= =?us-ascii?Q?RPah?=
To: "doctor@doctor.nl2k.ab.ca"
X-Entity-ID: u001.AupW45kBWXFWlFhvy7e7Gg==
Content-Type: multipart/alternative; boundary="153c7821522390a412546d0f00064081"
X-Spam_score: 23.1
X-Spam_score_int: 231
X-Spam_bar: +++++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Action Needed: Review Your Account Details MESSAGE CONFIRMATION
Action Needed: Review Your Account DetailsDear Client,We are currently reviewing
the information associated with your account and requir [...]
Content analysis details: (23.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[149.72.126.143 listed in will-spam-for-food.eu.org]
[149.72.126.143 listed in will-spam-for-food.eu.org]
[149.72.126.143 listed in will-spam-for-food.eu.org]
[149.72.126.143 listed in will-spam-for-food.eu.org]
[149.72.126.143 listed in will-spam-for-food.eu.org]
[149.72.126.143 listed in will-spam-for-food.eu.org]
[149.72.126.143 listed in will-spam-for-food.eu.org]
[149.72.126.143 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[149.72.126.143 listed in dnsbl.ahbl.org]
[149.72.126.143 listed in dnsbl.ahbl.org]
[149.72.126.143 listed in dnsbl.ahbl.org]
[149.72.126.143 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[149.72.126.143 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[149.72.126.143 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[149.72.126.143 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[149.72.126.143 listed in dnsbl.ahbl.org]
2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist
[URI: jilqxb.com]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[149.72.126.143 listed in wl.mailspike.net]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[149.72.126.143 listed in bl.score.senderscore.com]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
15 GR_DOMAIN_SENDGR1 Received contains spammer id (sendgr)
0.6 J_CHICKENPOX_63 BODY: 6alpha-pock-3alpha
0.6 J_CHICKENPOX_62 BODY: 6alpha-pock-2alpha
0.6 J_CHICKENPOX_37 BODY: 3alpha-pock-7alpha
1.5 MR_STRANGE_QUESTION URI: No description available.
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.0 XPRIO Has X-Priority header
Subject: {SPAM?} Action Needed: Review Your Account Details
This is a multi-part message in MIME format.
--153c7821522390a412546d0f00064081
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Action Needed: Review Your Account Details MESSAGE CONFIRMATION Action Nee=
ded: Review Your Account DetailsDear Client,We are currently reviewing the =
information associated with your account and require you to confirm or upda=
te certain customer details.This review helps us ensure that your account i=
nformation remains complete, accurate, and compliant with applicable custom=
er identification requirements.Please check the details currently registere=
d on your account and update any information that is missing or no longer c=
urrent.To complete this review, log in using the official online banking pl=
atform or mobile app and submit the necessary updates: Review Account Detai=
ls.Your information will be reviewed after submission. You will be notified=
once the account review has been completed.Until the required information =
has been verified, some account functions or services may be temporarily li=
mited.For further support, please use the bank=E2=80=99s official customer =
service channels. Stay connectedTerms of use|Privacy policy|ABC's of securi=
ty=C2=A9 National Bank of Canada. All rights reserved. Any reproduction, in=
whole or in part, is strictly prohibited without the prior written consent=
of National Bank of Canada. National Bank of Canada, 800 St-Jacques Street=
, Montreal (Quebec)H3C 1A3nbc.caFor options to unsubscribe, click here. CON=
FIDENTIALIT=C3=89 : Ce document est destin=C3=A9 uniquement =C3=A0 la perso=
nne ou =C3=A0 l'entit=C3=A9 =C3=A0 qui il est adress=C3=A9. L'information a=
pparaissant dans ce document est de nature l=C3=A9galement privil=C3=A9gi=
=C3=A9e et confidentielle. Si vous n'=C3=AAtes pas le destinataire vis=C3=
=A9 ou la personne charg=C3=A9e de le remettre =C3=A0 son destinataire, vou=
s =C3=AAtes, par la pr=C3=A9sente, avis=C3=A9 que toute lecture, usage, cop=
ie ou communication du contenu de ce document est strictement interdit. De =
plus, vous =C3=AAtes pri=C3=A9 de communiquer avec l'exp=C3=A9diteur sans d=
=C3=A9lai et de d=C3=A9truire ce document imm=C3=A9diatement. CONFIDENTIALI=
TY: This document is intended solely for the individual or entity to whom i=
t is addressed. The information contained in this document is legally privi=
leged and confidential. If you are not the intended recipient or the person=
responsible for delivering it to the intended recipient, you are hereby ad=
vised that you are strictly prohibited from reading, using, copying or diss=
eminating the contents of this document. Please inform the sender immediate=
ly and delete this document immediately.=20=
--153c7821522390a412546d0f00064081
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Action Needed: Review Your Account Details
0>
style=3D"FONT-SIZE: 11px; FONT-FAMILY: Arial,sans-serif,'Open Sans'; CO=
LOR: #666666; PADDING-BOTTOM: 45px; LINE-HEIGHT: 12px"=20
vAlign=3Dtop width=3D600 align=3Dleft>
style=3D"TEXT-DECORATION: underline; COLOR: #666666"=20
href=3D"https://x3f7q0m9b2v6k1z8rd.live" target=3D_blank>
style=3D"DISPLAY: block" border=3D0 alt=3D"Button to the BNC website"=
=20
src=3D"https://www.bnc.ca/content/dam/bnc/formulaires/picto/NB_2D_RGB=
.jpg"=20
width=3D217>
der=3D0>
E>
der=3D0>
align=3Dcenter>
gn=3Dcenter=20
border=3D0>
style=3D"FONT-SIZE: 14px; FONT-FAMILY: Arial,sans-serif,'Open San=
s'; COLOR: #333333; LINE-HEIGHT: 19px"=20
vAlign=3Dtop width=3D600 align=3Dleft>
0>
align=3Dleft>![3D""=20<br]()
src=3D"https://www.bnc.ca/content/dam/bnc/formulaires/mod=
ele-courriel/icon-confirm-84x44.gif"=20
width=3D42 height=3D22>
style=3D"FONT-SIZE: 14px; FONT-FAMILY: Arial,sans-serif; =
FONT-WEIGHT: bold; COLOR: #ffffff; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; P=
ADDING-LEFT: 0px; MARGIN: 0px; LINE-HEIGHT: 19px; PADDING-RIGHT: 0px">MESSA=
GE=20
CONFIRMATION=20
Y>
der=3D0>
der=3D0>
style=3D"FONT-SIZE: 14px; FONT-FAMILY: Arial,sans-serif,'Open San=
s'; COLOR: #333333; LINE-HEIGHT: 19px"=20
vAlign=3Dtop align=3Dleft>
style=3D"FONT-SIZE: 20px; FONT-FAMILY: Arial,sans-serif; FONT-W=
EIGHT: normal; COLOR: #00334d; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDI=
NG-LEFT: 0px; MARGIN: 0px; LINE-HEIGHT: 24px; PADDING-RIGHT: 0px">Action=20
Needed: Review Your Account Details
style=3D"FONT-SIZE: 10px; HEIGHT: 10px; LINE-HEIGHT: 10px">
V>Dear=20
Client,
We are currently reviewing the information assoc=
iated=20
with your account and require you to confirm or update certain=20
customer details.
This review helps us ensure that your=20
account information remains complete, accurate, and compliant w=
ith=20
applicable customer identification requirements.
Please =
check=20
the details currently registered on your account and update any=
=20
information that is missing or no longer current.
To com=
plete=20
this review, log in using the official online banking platform =
or=20
mobile app and submit the necessary updates:
href=3D"https://x3f7q0m9b2v6k1z8rd.live">Review Account=20
Details.
Your information will be reviewed after=20
submission. You will be notified once the account review has be=
en=20
completed.
Until the required information has been verif=
ied,=20
some account functions or services may be temporarily=20
limited.
For further support, please use the bank=E2=80=
=99s official=20
customer service channels.
der=3D0>
align=3Dcenter>
der=3D0>
der=3D0>
style=3D"BORDER-TOP: #a6a6a6 1px solid; BORDER-BOTTOM: #a6a6a6 1px soli=
d; PADDING-BOTTOM: 12px; PADDING-TOP: 12px"=20
vAlign=3Dtop align=3Dcenter>
R>
er=20
border=3D0>
=3Dcenter=20
border=3D0>
height=3D1>
style=3D"WIDTH: 600px; MIN-WIDTH: 600px; MIN-HEIGHT=
: 1px; DISPLAY: block; MAX-HEIGHT: 1px"=20
alt=3D""=20
src=3D"https://www.bnc.ca/content/dam/bnc/formulair=
es/modele-courriel/spacer-social-media-1x1.gif"=20
width=3D600 height=3D1>
TD>
er=3D0>
style=3D"FONT-SIZE: 11px; FONT-FAMILY: Arial,sans-ser=
if,'Open Sans'; COLOR: #000000; LINE-HEIGHT: 15px; PADDING-RIGHT: 4px"=20
vAlign=3Dmiddle align=3Dright>Stay connected
style=3D"FONT-SIZE: 11px; FONT-FAMILY: Arial,sans-ser=
if,'Open Sans'; COLOR: #000000; PADDING-LEFT: 6px; LINE-HEIGHT: 15px"=20
vAlign=3Dmiddle width=3D25 align=3Dleft>
href=3D"https://www.facebook.com/nationalbanknetwor=
ks"=20
target=3D_blank>![3D""=20<br]()
src=3D"https://www.bnc.ca/content/dam/bnc/formulair=
es/modele-courriel/icon-facebook-25x25.gif"=20
width=3D25 height=3D25>
style=3D"FONT-SIZE: 11px; FONT-FAMILY: Arial,sans-ser=
if,'Open Sans'; COLOR: #000000; PADDING-LEFT: 6px; LINE-HEIGHT: 15px"=20
vAlign=3Dmiddle width=3D25 align=3Dleft>
href=3D"https://twitter.com/nationalbank/"=20
target=3D_blank>![3D""=20<br]()
src=3D"https://www.bnc.ca/content/dam/bnc/formulair=
es/modele-courriel/icon-twitter-25x25.gif"=20
width=3D25 height=3D25>
style=3D"FONT-SIZE: 11px; FONT-FAMILY: Arial,sans-ser=
if,'Open Sans'; COLOR: #000000; PADDING-LEFT: 6px; LINE-HEIGHT: 15px"=20
vAlign=3Dmiddle width=3D25 align=3Dleft>
href=3D"https://www.youtube.com/user/nationalbankne=
tworks"=20
target=3D_blank>![3D""=20<br]()
src=3D"https://www.bnc.ca/content/dam/bnc/formulair=
es/modele-courriel/icon-youtube-25x25.gif"=20
width=3D25 height=3D25>
style=3D"FONT-SIZE: 11px; FONT-FAMILY: Arial,sans-ser=
if,'Open Sans'; COLOR: #000000; PADDING-LEFT: 6px; LINE-HEIGHT: 15px"=20
vAlign=3Dmiddle width=3D25 align=3Dleft>
href=3D"https://www.linkedin.com/company/national-b=
ank-of-canada/"=20
target=3D_blank>![3D""=20<br]()
src=3D"https://www.bnc.ca/content/dam/bnc/formulair=
es/modele-courriel/icon-linkedin-25x25.gif"=20
width=3D25=20
height=3D25>
ABLE>
der=3D0>
der=3D0>
style=3D"FONT-SIZE: 11px; FONT-FAMILY: Arial,sans-serif,'Open San=
s'; COLOR: #686868; PADDING-BOTTOM: 30px; PADDING-TOP: 30px; LINE-HEIGHT: 1=
5px"=20
vAlign=3Dtop align=3Dleft>
style=3D"FONT-SIZE: 15px; HEIGHT: 15px; LINE-HEIGHT: 15px">
V>
style=3D"FONT-SIZE: 8px; VERTICAL-ALIGN: 5px; LINE-HEIGHT: 0">=
=C2=A9=20
National Ba=
nk of=20
Canada. All rights reserved. Any reproduction, in whole or in p=
art,=20
is strictly prohibited without the prior written consent of
AN=20
style=3D"WHITE-SPACE: nowrap">National Bank of Cana=
da.=20
National Bank of Canada, 800 St-Jacques Street,=20
Montreal (Quebec)
style=3D"WHITE-SPACE: nowrap">H3C 1A3
>
style=3D"TEXT-DECORATION: underline; COLOR: #686868"=20
href=3D"https://www.nbc.ca?utm_campaign=3Dacq_credit-card_aem-f=
orms-email_en&utm_medium=3Demail&utm_source=3Depush-bnc&utm_con=
tent=3Dconfirmation&utm_term=3D"=20
target=3D_blank>
style=3D"COLOR: #686868">nbc.ca
For options t=
o=20
unsubscribe,
6868"=20
href=3D"https://www.nbc.ca/forms/communications/withdraw-consen=
t.html"=20
target=3D_blank>click here
>.=20
DY>
style=3D"FONT-SIZE: 8pt; FONT-FAMILY: 'Cambria','times roman',serif; LINE-H=
EIGHT: 10pt">
CONFIDENTIALIT=C3=89=20
: Ce document est destin=C3=A9 uniquement =C3=A0 la personne ou =C3=A0 l'en=
tit=C3=A9 =C3=A0 qui il est=20
adress=C3=A9. L'information apparaissant dans ce document est de nature l=
=C3=A9galement=20
privil=C3=A9gi=C3=A9e et confidentielle. Si vous n'=C3=AAtes pas le destina=
taire vis=C3=A9 ou la=20
personne charg=C3=A9e de le remettre =C3=A0 son destinataire, vous =C3=AAte=
s, par la pr=C3=A9sente,=20
avis=C3=A9 que toute lecture, usage, copie ou communication du contenu de c=
e document=20
est strictement interdit. De plus, vous =C3=AAtes pri=C3=A9 de communiquer =
avec=20
l'exp=C3=A9diteur sans d=C3=A9lai et de d=C3=A9truire ce document imm=C3=A9=
diatement.=20
CONFIDENTIALITY: This document is intended solely for the individual or=
=20
entity to whom it is addressed. The information contained in this document =
is=20
legally privileged and confidential. If you are not the intended recipient =
or=20
the person responsible for delivering it to the intended recipient, you are=
=20
hereby advised that you are strictly prohibited from reading, using, copyin=
g or=20
disseminating the contents of this document. Please inform the sender=20
immediately and delete this document immediately.
--153c7821522390a412546d0f00064081--
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 08 Sep 2026 14:26:59 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))
(envelope-from
id 1x42Og-00000000OQf-05cq
for dave@doctor.nl2k.ab.ca;
Tue, 08 Sep 2026 14:26:26 -0600
Resent-From: The Doctor
Resent-Date: Tue, 8 Sep 2026 14:26:25 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from s.wrqvtzvf.outbound-mail.sendgrid.net ([149.72.126.143]:29594)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.100 (FreeBSD))
(envelope-from
id 1x3ylw-000000003Rs-1wJ6
for doctor@doctor.nl2k.ab.ca;
Tue, 08 Sep 2026 10:34:20 -0600
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=jilqxb.com;
h=from:subject:date:mime-version:to:content-type:cc:content-type:date:
from:subject:to;
s=s1; t=1788885199;
bh=9K/sc8b+56Pbee7xZtQJ2tG5Q+WWlv4v3ihjBLvvNsw=;
b=ragHee1ztg1uLOhK2rN8CCSrI5sLS79NEJ+mTMLjOuDk/sxKQX45Q9Ai2NYxpWlGcJzx
3QnAYKKcBrPOMq2WgeHm2fTI65s1EXuFaZeuEzTO1A6QNs/dvmgPC12Su20HRfbOiYDffZ
ODxm/mexKMpZVhzD5Bzt4EqRfU7FIOaQGtmBDIOWY57v5R7HH3y+PPzIKCskhiovTzDWqA
ll8u+zLdZAnkXTnilUhtM8d8NRP+fcTLCg00/TMMTkIXR/fUaQvS8nFzerlCJ1NkgyLxWr
nSC1GVv8mIOuguj/sKhJoNbN9PJvHTg3x/E5Dr69+HAWe+szxw78ev1dda641BFQ==
Received: by recvd-7d6cf44bfb-6fgpx with SMTP id recvd-7d6cf44bfb-6fgpx-1-6AA038CF-38
2026-09-08 16:33:19.232496568 +0000 UTC m=+3620573.217802008
Received: from pronadis.es (unknown)
by geopod-ismtpd-2 (SG) with ESMTP
id BWcAopTlTq65a5ewc92Nlw
for
Tue, 08 Sep 2026 16:33:19.143 +0000 (UTC)
Message-Id: <1e950d0db72e71ecffad495821c33d80@jilqxb.com>
From: NBDB-invest
Subject: Action Needed: Review Your Account Details
Date: Tue, 08 Sep 2026 16:33:19 +0000 (UTC)
X-Priority: 3
X-Mailer: GZYKG 239.97829
Mime-Version: 1.0
X-SG-EID:
=?us-ascii?Q?u001=2Eq4BY9U0kS4KYQvUTPtQW5Bjj602jNKXbmRkUZ49uvaCcU5h5zaoiD1DmW?=
=?us-ascii?Q?73TPoHnSyXNVOMtEQOKQ5+f+4N6=2F7Tdd9DxTXie?=
=?us-ascii?Q?ZaYoCX+57d9pX3Bzru7syxkzLkyvj5GpzPTGsZG?=
=?us-ascii?Q?qxHKPs30bclKdj63Q8geF18eSJ7Au7ullvrgNMI?=
=?us-ascii?Q?sAoRXQpnKsPYyE=2F6QoLSyn7hPqBC1bpQGI3NYtC?=
=?us-ascii?Q?EzhUxCyKLgbh1VjB0M2UKHXG9DEN3JuP5u24wQ6?= =?us-ascii?Q?RPah?=
To: "doctor@doctor.nl2k.ab.ca"
X-Entity-ID: u001.AupW45kBWXFWlFhvy7e7Gg==
Content-Type: multipart/alternative; boundary="153c7821522390a412546d0f00064081"
X-Spam_score: 23.1
X-Spam_score_int: 231
X-Spam_bar: +++++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Action Needed: Review Your Account Details MESSAGE CONFIRMATION
Action Needed: Review Your Account DetailsDear Client,We are currently reviewing
the information associated with your account and requir [...]
Content analysis details: (23.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[149.72.126.143 listed in will-spam-for-food.eu.org]
[149.72.126.143 listed in will-spam-for-food.eu.org]
[149.72.126.143 listed in will-spam-for-food.eu.org]
[149.72.126.143 listed in will-spam-for-food.eu.org]
[149.72.126.143 listed in will-spam-for-food.eu.org]
[149.72.126.143 listed in will-spam-for-food.eu.org]
[149.72.126.143 listed in will-spam-for-food.eu.org]
[149.72.126.143 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[149.72.126.143 listed in dnsbl.ahbl.org]
[149.72.126.143 listed in dnsbl.ahbl.org]
[149.72.126.143 listed in dnsbl.ahbl.org]
[149.72.126.143 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[149.72.126.143 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[149.72.126.143 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[149.72.126.143 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[149.72.126.143 listed in dnsbl.ahbl.org]
2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist
[URI: jilqxb.com]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[149.72.126.143 listed in wl.mailspike.net]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[149.72.126.143 listed in bl.score.senderscore.com]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
15 GR_DOMAIN_SENDGR1 Received contains spammer id (sendgr)
0.6 J_CHICKENPOX_63 BODY: 6alpha-pock-3alpha
0.6 J_CHICKENPOX_62 BODY: 6alpha-pock-2alpha
0.6 J_CHICKENPOX_37 BODY: 3alpha-pock-7alpha
1.5 MR_STRANGE_QUESTION URI: No description available.
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.0 XPRIO Has X-Priority header
Subject: {SPAM?} Action Needed: Review Your Account Details
This is a multi-part message in MIME format.
--153c7821522390a412546d0f00064081
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Action Needed: Review Your Account Details MESSAGE CONFIRMATION Action Nee=
ded: Review Your Account DetailsDear Client,We are currently reviewing the =
information associated with your account and require you to confirm or upda=
te certain customer details.This review helps us ensure that your account i=
nformation remains complete, accurate, and compliant with applicable custom=
er identification requirements.Please check the details currently registere=
d on your account and update any information that is missing or no longer c=
urrent.To complete this review, log in using the official online banking pl=
atform or mobile app and submit the necessary updates: Review Account Detai=
ls.Your information will be reviewed after submission. You will be notified=
once the account review has been completed.Until the required information =
has been verified, some account functions or services may be temporarily li=
mited.For further support, please use the bank=E2=80=99s official customer =
service channels. Stay connectedTerms of use|Privacy policy|ABC's of securi=
ty=C2=A9 National Bank of Canada. All rights reserved. Any reproduction, in=
whole or in part, is strictly prohibited without the prior written consent=
of National Bank of Canada. National Bank of Canada, 800 St-Jacques Street=
, Montreal (Quebec)H3C 1A3nbc.caFor options to unsubscribe, click here. CON=
FIDENTIALIT=C3=89 : Ce document est destin=C3=A9 uniquement =C3=A0 la perso=
nne ou =C3=A0 l'entit=C3=A9 =C3=A0 qui il est adress=C3=A9. L'information a=
pparaissant dans ce document est de nature l=C3=A9galement privil=C3=A9gi=
=C3=A9e et confidentielle. Si vous n'=C3=AAtes pas le destinataire vis=C3=
=A9 ou la personne charg=C3=A9e de le remettre =C3=A0 son destinataire, vou=
s =C3=AAtes, par la pr=C3=A9sente, avis=C3=A9 que toute lecture, usage, cop=
ie ou communication du contenu de ce document est strictement interdit. De =
plus, vous =C3=AAtes pri=C3=A9 de communiquer avec l'exp=C3=A9diteur sans d=
=C3=A9lai et de d=C3=A9truire ce document imm=C3=A9diatement. CONFIDENTIALI=
TY: This document is intended solely for the individual or entity to whom i=
t is addressed. The information contained in this document is legally privi=
leged and confidential. If you are not the intended recipient or the person=
responsible for delivering it to the intended recipient, you are hereby ad=
vised that you are strictly prohibited from reading, using, copying or diss=
eminating the contents of this document. Please inform the sender immediate=
ly and delete this document immediately.=20=
--153c7821522390a412546d0f00064081
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: quoted-printable
0>
style=3D"FONT-SIZE: 11px; FONT-FAMILY: Arial,sans-serif,'Open Sans'; CO=
LOR: #666666; PADDING-BOTTOM: 45px; LINE-HEIGHT: 12px"=20
vAlign=3Dtop width=3D600 align=3Dleft>
style=3D"TEXT-DECORATION: underline; COLOR: #666666"=20
href=3D"https://x3f7q0m9b2v6k1z8rd.live" target=3D_blank>
style=3D"DISPLAY: block" border=3D0 alt=3D"Button to the BNC website"=
=20
src=3D"https://www.bnc.ca/content/dam/bnc/formulaires/picto/NB_2D_RGB=
.jpg"=20
width=3D217>
der=3D0>
E>
der=3D0>
align=3Dcenter>
gn=3Dcenter=20
border=3D0>
style=3D"FONT-SIZE: 14px; FONT-FAMILY: Arial,sans-serif,'Open San=
s'; COLOR: #333333; LINE-HEIGHT: 19px"=20
vAlign=3Dtop width=3D600 align=3Dleft>
0>
align=3Dleft>
src=3D"https://www.bnc.ca/content/dam/bnc/formulaires/mod=
ele-courriel/icon-confirm-84x44.gif"=20
width=3D42 height=3D22>
style=3D"FONT-SIZE: 14px; FONT-FAMILY: Arial,sans-serif; =
FONT-WEIGHT: bold; COLOR: #ffffff; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; P=
ADDING-LEFT: 0px; MARGIN: 0px; LINE-HEIGHT: 19px; PADDING-RIGHT: 0px">MESSA=
GE=20
CONFIRMATION=20
Y>
der=3D0>
der=3D0>
style=3D"FONT-SIZE: 14px; FONT-FAMILY: Arial,sans-serif,'Open San=
s'; COLOR: #333333; LINE-HEIGHT: 19px"=20
vAlign=3Dtop align=3Dleft>
style=3D"FONT-SIZE: 20px; FONT-FAMILY: Arial,sans-serif; FONT-W=
EIGHT: normal; COLOR: #00334d; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDI=
NG-LEFT: 0px; MARGIN: 0px; LINE-HEIGHT: 24px; PADDING-RIGHT: 0px">Action=20
Needed: Review Your Account Details
style=3D"FONT-SIZE: 10px; HEIGHT: 10px; LINE-HEIGHT: 10px">
V>Dear=20
Client,
We are currently reviewing the information assoc=
iated=20
with your account and require you to confirm or update certain=20
customer details.
This review helps us ensure that your=20
account information remains complete, accurate, and compliant w=
ith=20
applicable customer identification requirements.
Please =
check=20
the details currently registered on your account and update any=
=20
information that is missing or no longer current.
To com=
plete=20
this review, log in using the official online banking platform =
or=20
mobile app and submit the necessary updates:
href=3D"https://x3f7q0m9b2v6k1z8rd.live">Review Account=20
Details.
Your information will be reviewed after=20
submission. You will be notified once the account review has be=
en=20
completed.
Until the required information has been verif=
ied,=20
some account functions or services may be temporarily=20
limited.
For further support, please use the bank=E2=80=
=99s official=20
customer service channels.
der=3D0>
align=3Dcenter>
der=3D0>
der=3D0>
style=3D"BORDER-TOP: #a6a6a6 1px solid; BORDER-BOTTOM: #a6a6a6 1px soli=
d; PADDING-BOTTOM: 12px; PADDING-TOP: 12px"=20
vAlign=3Dtop align=3Dcenter>
er=20 border=3D0> |
R>
er=20
border=3D0>
=3Dcenter=20
border=3D0>
height=3D1>
style=3D"WIDTH: 600px; MIN-WIDTH: 600px; MIN-HEIGHT=
: 1px; DISPLAY: block; MAX-HEIGHT: 1px"=20
alt=3D""=20
src=3D"https://www.bnc.ca/content/dam/bnc/formulair=
es/modele-courriel/spacer-social-media-1x1.gif"=20
width=3D600 height=3D1>
TD>
er=3D0>
style=3D"FONT-SIZE: 11px; FONT-FAMILY: Arial,sans-ser=
if,'Open Sans'; COLOR: #000000; LINE-HEIGHT: 15px; PADDING-RIGHT: 4px"=20
vAlign=3Dmiddle align=3Dright>Stay connected
style=3D"FONT-SIZE: 11px; FONT-FAMILY: Arial,sans-ser=
if,'Open Sans'; COLOR: #000000; PADDING-LEFT: 6px; LINE-HEIGHT: 15px"=20
vAlign=3Dmiddle width=3D25 align=3Dleft>
href=3D"https://www.facebook.com/nationalbanknetwor=
ks"=20
target=3D_blank>
src=3D"https://www.bnc.ca/content/dam/bnc/formulair=
es/modele-courriel/icon-facebook-25x25.gif"=20
width=3D25 height=3D25>
style=3D"FONT-SIZE: 11px; FONT-FAMILY: Arial,sans-ser=
if,'Open Sans'; COLOR: #000000; PADDING-LEFT: 6px; LINE-HEIGHT: 15px"=20
vAlign=3Dmiddle width=3D25 align=3Dleft>
href=3D"https://twitter.com/nationalbank/"=20
target=3D_blank>
src=3D"https://www.bnc.ca/content/dam/bnc/formulair=
es/modele-courriel/icon-twitter-25x25.gif"=20
width=3D25 height=3D25>
style=3D"FONT-SIZE: 11px; FONT-FAMILY: Arial,sans-ser=
if,'Open Sans'; COLOR: #000000; PADDING-LEFT: 6px; LINE-HEIGHT: 15px"=20
vAlign=3Dmiddle width=3D25 align=3Dleft>
href=3D"https://www.youtube.com/user/nationalbankne=
tworks"=20
target=3D_blank>
src=3D"https://www.bnc.ca/content/dam/bnc/formulair=
es/modele-courriel/icon-youtube-25x25.gif"=20
width=3D25 height=3D25>
style=3D"FONT-SIZE: 11px; FONT-FAMILY: Arial,sans-ser=
if,'Open Sans'; COLOR: #000000; PADDING-LEFT: 6px; LINE-HEIGHT: 15px"=20
vAlign=3Dmiddle width=3D25 align=3Dleft>
href=3D"https://www.linkedin.com/company/national-b=
ank-of-canada/"=20
target=3D_blank>
src=3D"https://www.bnc.ca/content/dam/bnc/formulair=
es/modele-courriel/icon-linkedin-25x25.gif"=20
width=3D25=20
height=3D25>
ABLE>
der=3D0>
der=3D0>
style=3D"FONT-SIZE: 11px; FONT-FAMILY: Arial,sans-serif,'Open San=
s'; COLOR: #686868; PADDING-BOTTOM: 30px; PADDING-TOP: 30px; LINE-HEIGHT: 1=
5px"=20
vAlign=3Dtop align=3Dleft>
style=3D"FONT-SIZE: 15px; HEIGHT: 15px; LINE-HEIGHT: 15px">
V>
style=3D"FONT-SIZE: 8px; VERTICAL-ALIGN: 5px; LINE-HEIGHT: 0">=
=C2=A9=20
National Ba=
nk of=20
Canada. All rights reserved. Any reproduction, in whole or in p=
art,=20
is strictly prohibited without the prior written consent of
AN=20
style=3D"WHITE-SPACE: nowrap">National Bank of Cana=
da.=20
National Bank of Canada, 800 St-Jacques Street,=20
Montreal (Quebec)
style=3D"WHITE-SPACE: nowrap">H3C 1A3
>
style=3D"TEXT-DECORATION: underline; COLOR: #686868"=20
href=3D"https://www.nbc.ca?utm_campaign=3Dacq_credit-card_aem-f=
orms-email_en&utm_medium=3Demail&utm_source=3Depush-bnc&utm_con=
tent=3Dconfirmation&utm_term=3D"=20
target=3D_blank>
style=3D"COLOR: #686868">nbc.ca
For options t=
o=20
unsubscribe,
6868"=20
href=3D"https://www.nbc.ca/forms/communications/withdraw-consen=
t.html"=20
target=3D_blank>click here
>.=20
DY>
style=3D"FONT-SIZE: 8pt; FONT-FAMILY: 'Cambria','times roman',serif; LINE-H=
EIGHT: 10pt">
CONFIDENTIALIT=C3=89=20
: Ce document est destin=C3=A9 uniquement =C3=A0 la personne ou =C3=A0 l'en=
tit=C3=A9 =C3=A0 qui il est=20
adress=C3=A9. L'information apparaissant dans ce document est de nature l=
=C3=A9galement=20
privil=C3=A9gi=C3=A9e et confidentielle. Si vous n'=C3=AAtes pas le destina=
taire vis=C3=A9 ou la=20
personne charg=C3=A9e de le remettre =C3=A0 son destinataire, vous =C3=AAte=
s, par la pr=C3=A9sente,=20
avis=C3=A9 que toute lecture, usage, copie ou communication du contenu de c=
e document=20
est strictement interdit. De plus, vous =C3=AAtes pri=C3=A9 de communiquer =
avec=20
l'exp=C3=A9diteur sans d=C3=A9lai et de d=C3=A9truire ce document imm=C3=A9=
diatement.=20
CONFIDENTIALITY: This document is intended solely for the individual or=
=20
entity to whom it is addressed. The information contained in this document =
is=20
legally privileged and confidential. If you are not the intended recipient =
or=20
the person responsible for delivering it to the intended recipient, you are=
=20
hereby advised that you are strictly prohibited from reading, using, copyin=
g or=20
disseminating the contents of this document. Please inform the sender=20
immediately and delete this document immediately.
--153c7821522390a412546d0f00064081--