Crypto phishing
Posted by Dave Yadallee onX-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 18 Sep 2026 21:25:35 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))
(envelope-from
id 1x7lhk-00000000AAZ-1Hd4
for dave@doctor.nl2k.ab.ca;
Fri, 18 Sep 2026 21:25:32 -0600
Resent-From: The Doctor
Resent-Date: Fri, 18 Sep 2026 21:25:32 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from rspmtadfw-02.alchemer.com ([50.56.130.220]:48973)
by doctor.nl2k.ab.ca with esmtp (Exim 4.100 (FreeBSD))
(envelope-from
id 1x7jT3-00000000KCL-3paO
for doctor@nk.ca;
Fri, 18 Sep 2026 19:02:22 -0600
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=key1; d=alchemer.com;
h=Date:To:From:Reply-to:Subject:Message-ID:List-Unsubscribe:
List-Unsubscribe-Post:MIME-Version:Content-Type; i=noreply@alchemer.com;
bh=PFOrIut2wF2hu0oLJ4YgHq8n3l2k6DnbvhlMSpR1F5w=;
b=SaKscMD5/pzme+UHGIFxAba2h3NkRzkMsl2OPpCQov2fiZ5ZhE9u0mGGQpp1055NDrqJne5y2Rvy
bqJhGEcPFR93ljVTUK/U7PH2tASA0976emueljNxDtGaLb9FHs4y7Nycifl9WGZfbIQ/te1jAuEY
0EdAb+HWzmvO6IHufaE=
Received: by rspmtadfw-02.alchemer.com id hlnfe03cjrs9 for
x-errors-to: mailerrors@alchemer.com
errors-to: mailerrors@alchemer.com
Date: Fri, 18 Sep 2026 21:01:18 -0400
To: mail@update.ledger.live
From: Ledger
Reply-to: "noreply@alchemer.com"
Subject: =?UTF-8?B?VXJnZW50IERldmljZSBVcGRhdGUgTmVlZGVk?=
Message-ID: <1aa5c9516040eea.ef6e978712d0415b8129f104465d0d60@alchemer.com>
X-Priority: 3
X-Mailer: Alchemer
X-Complaints-To: abuse@alchemer.com
List-Unsubscribe:
List-Unsubscribe-Post: List-Unsubscribe=One-Click
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="b1_1aa5c9516040eea.ef6e978712d0415b8129f104465d0d60"
X-Spam_score: 7.8
X-Spam_score_int: 78
X-Spam_bar: +++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: / Reset & base styles for all email clients / { margin:
0; padding: 0; font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI',
'Inter', 'SF Pro Text', Roboto, Helvetica, Arial, sans-serif; lin [...]
Content analysis details: (7.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[50.56.130.220 listed in will-spam-for-food.eu.org]
[50.56.130.220 listed in will-spam-for-food.eu.org]
[50.56.130.220 listed in will-spam-for-food.eu.org]
[50.56.130.220 listed in will-spam-for-food.eu.org]
[50.56.130.220 listed in will-spam-for-food.eu.org]
[50.56.130.220 listed in will-spam-for-food.eu.org]
[50.56.130.220 listed in will-spam-for-food.eu.org]
[50.56.130.220 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[50.56.130.220 listed in dnsbl.ahbl.org]
[50.56.130.220 listed in dnsbl.ahbl.org]
[50.56.130.220 listed in dnsbl.ahbl.org]
[50.56.130.220 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[50.56.130.220 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[50.56.130.220 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[50.56.130.220 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[50.56.130.220 listed in dnsbl.ahbl.org]
2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist
[URI: sync-auth.at]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |
0.0 URIBL_RED Contains an URL listed in the URIBL redlist
[URI: sync-auth.at]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[50.56.130.220 listed in bl.score.senderscore.com]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
0.0 HTML_MESSAGE BODY: HTML included in message
1.5 MPART_ALT_DIFF_COUNT BODY: HTML and text parts are different
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
2.5 WIKI_IMG Image from wikipedia
0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Subject: {SPAM?} =?UTF-8?B?VXJnZW50IERldmljZSBVcGRhdGUgTmVlZGVk?=
--b1_1aa5c9516040eea.ef6e978712d0415b8129f104465d0d60
Content-Type: text/plain; charset = "utf-8"
Content-Transfer-Encoding: 8bit
/
{
margin: 0;
padding: 0;
font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', 'Inter', 'SF Pro Text', Roboto, Helvetica, Arial, sans-serif;
line-height: 1.4;
}
body {
background-color: #f0f2f5;
margin: 0;
padding: 24px 0;
}
/ Main container /
.email-wrapper {
max-width: 600px;
width: 100%;
margin: 0 auto;
background-color: #ffffff;
border-radius: 32px;
overflow: hidden;
box-shadow: 0 20px 35px -12px rgba(0, 0, 0, 0.08), 0 1px 2px rgba(0, 0, 0, 0.02);
}
/ Premium header with gradient accent /
.brand-header {
background: linear-gradient(135deg, #0A0F1C 0%, #0B1426 100%);
padding: 32px 32px 28px 32px;
text-align: center;
border-bottom: 1px solid rgba(255, 255, 255, 0.08);
}
.logo-container {
display: inline-block;
max-width: 220px;
width: 85%;
margin: 0 auto;
}
.logo-svg {
width: 100%;
height: auto;
display: block;
filter: brightness(0) invert(1);
}
/ Hero badge /
.update-badge {
display: inline-block;
background: rgba(255, 255, 255, 0.12);
backdrop-filter: blur(4px);
border-radius: 60px;
padding: 6px 14px;
font-size: 12px;
font-weight: 500;
letter-spacing: 0.3px;
color: #E9F0FF;
margin-bottom: 20px;
border: 0.5px solid rgba(255,255,255,0.2);
}
/ Content area /
.content-area {
padding: 40px 36px 44px 36px;
background: #FFFFFF;
}
/ Typography refined /
h1 {
font-size: 32px;
font-weight: 700;
color: #0A0F1C;
margin-bottom: 18px;
line-height: 1.25;
letter-spacing: -0.3px;
}
.highlight-text {
background: linear-gradient(120deg, #F5F9FF 0%, #EFF3FC 100%);
padding: 2px 8px;
border-radius: 12px;
font-weight: 600;
}
p {
font-size: 16px;
color: #2C3A4B;
line-height: 1.55;
margin-bottom: 20px;
font-weight: 400;
}
/ RED DEADLINE SECTION - NEW ADDITION /
.deadline-red {
background-color: #fff0f0;
border-left: 4px solid #e53e3e;
padding: 14px 18px;
border-radius: 12px;
margin: 24px 0 28px 0;
text-align: center;
}
.deadline-red p {
margin: 0;
font-size: 15px;
font-weight: 600;
color: #b91c1c;
letter-spacing: 0.2px;
}
.deadline-red .deadline-date {
font-weight: 800;
background: rgba(229, 62, 62, 0.1);
display: inline-block;
padding: 0 4px;
border-radius: 6px;
}
.security-note {
background: #F8FAFE;
border-left: 3px solid #1A5D7D;
padding: 16px 20px;
border-radius: 16px;
margin: 28px 0 24px 0;
}
.security-note p {
margin-bottom: 0;
font-size: 14px;
color: #1F3A4F;
font-weight: 500;
}
/ CTA button - NEW: centered, smaller, 10% rounded /
.button-wrapper {
margin: 32px 0 16px 0;
text-align: center;
}
.btn-update {
display: inline-block;
background: #0B1426;
color: #FFFFFF;
text-decoration: none;
font-weight: 600;
font-size: 14px;
padding: 10px 24px;
border-radius: 10%; / 10% rounded as requested /
text-align: center;
transition: all 0.2s ease;
border: none;
box-shadow: 0 2px 6px rgba(11, 20, 38, 0.15);
letter-spacing: 0.3px;
}
.btn-update:hover {
background: #1A2C3E;
transform: translateY(-1px);
box-shadow: 0 6px 14px rgba(11, 20, 38, 0.2);
}
/ Feature grid (brand touches) /
.feature-grid {
display: flex;
gap: 20px;
margin: 32px 0 24px;
flex-wrap: wrap;
}
.feature-item {
flex: 1;
display: flex;
align-items: center;
gap: 12px;
background: #F9FBFE;
padding: 12px 16px;
border-radius: 20px;
min-width: 130px;
}
.feature-icon {
font-size: 24px;
}
.feature-text {
font-size: 13px;
font-weight: 500;
color: #1F3A4F;
}
/ Divider /
.soft-divider {
height: 1px;
background: linear-gradient(90deg, #E2E8F0 0%, #CBD5E1 50%, #E2E8F0 100%);
margin: 32px 0 24px;
}
/ Footer brand /
.footer-brand {
background: #FCFDFF;
padding: 28px 32px 32px;
text-align: center;
border-top: 1px solid #EDF2F7;
}
.footer-links {
display: flex;
justify-content: center;
gap: 28px;
flex-wrap: wrap;
margin-bottom: 20px;
}
.footer-links a {
color: #4A6A85;
text-decoration: none;
font-size: 13px;
font-weight: 500;
transition: color 0.2s;
}
.footer-links a:hover {
color: #0B1426;
}
.copyright {
font-size: 11px;
color: #7C8F9F;
margin-top: 16px;
line-height: 1.4;
}
.ledger-tagline {
font-size: 10px;
letter-spacing: 0.5px;
text-transform: uppercase;
color: #9AAEBF;
margin-bottom: 12px;
font-weight: 500;
}
/ Responsive /
@media only screen and (max-width: 560px) {
.content-area {
padding: 28px 24px 36px 24px;
}
.brand-header {
padding: 28px 24px 24px 24px;
}
h1 {
font-size: 28px;
}
.btn-update {
padding: 9px 22px;
font-size: 13px;
width: auto;
display: inline-block;
}
.feature-grid {
flex-direction: column;
gap: 12px;
}
.feature-item {
width: 100%;
}
.footer-links {
gap: 18px;
}
.deadline-red p {
font-size: 14px;
}
}
@media only screen and (max-width: 420px) {
.btn-update {
display: inline-block;
width: auto;
text-align: center;
box-sizing: border-box;
}
.content-area {
padding: 24px 20px 32px 20px;
}
h1 {
font-size: 26px;
}
.security-note {
padding: 14px 16px;
}
}
/ Dark mode compatibility /
@media (prefers-color-scheme: dark) {
body {
background-color: #12161F;
}
.email-wrapper {
background-color: #181E2A;
}
.content-area {
background-color: #181E2A;
}
h1 {
color: #F0F3F9;
}
p {
color: #C9DAEC;
}
.deadline-red {
background-color: #2a1818;
border-left-color: #e53e3e;
}
.deadline-red p {
color: #fbb6b6;
}
.security-note {
background: #1F2A36;
border-left-color: #3E7B9B;
}
.security-note p {
color: #E2EDF7;
}
.feature-item {
background: #212C39;
}
.feature-text {
color: #D9E6F5;
}
.soft-divider {
background: linear-gradient(90deg, #2A3745 0%, #3F4E60 50%, #2A3745 100%);
}
.footer-brand {
background-color: #141B25;
border-top-color: #252F3B;
}
.footer-links a {
color: #9CB4CC;
}
.footer-links a:hover {
color: #FFFFFF;
}
.copyright {
color: #7A91A8;
}
.ledger-tagline {
color: #6C879F;
}
.btn-update {
background: #2C4B6E;
box-shadow: 0 2px 10px rgba(0,0,0,0.2);
}
.btn-update:hover {
background: #3F628A;
}
}
/ Outlook / legacy fixes /
.ExternalClass, .ReadMsgBody {
width: 100%;
}
table {
border-collapse: collapse;
}
img {
border: 0;
height: auto;
line-height: 100%;
outline: none;
text-decoration: none;
-ms-interpolation-mode: bicubic;
}
Your device cannot complete the latest system upgrade. Without this update, you risk losing access to your wallet.
Your hardware wallet remains secure, but completing this update is important to maintain reliable access and benefit from the latest system improvements.
âš ï¸ Deadline: September 30, 2026
Failure to update your device by this date may result in restricted access to your portfolio and increased vulnerability to security risks.
ðŸ›¡ï¸ Ledger security architecture: your private keys never leave the device. Update reinforces protection layers.
âš¡
Faster sync & performance
🔒
Enhanced security patches
ðŸŒ
Latest blockchain support
Install update now
â±ï¸ Installation takes 2–3 minutes. Connect via Ledger Live or USB.
Â
✨ Improved user experience — with every update, we refine device reliability and interface fluidity.
THE LEADER IN CRYPTO SECURITY
Help Center Security Blog Ledger Live Manage preferences
© 2026 Ledger SAS. All rights reserved.
1, rue du Mail, 75002 Paris, France.
This is an essential service notification regarding your device security and performance.
Â
--b1_1aa5c9516040eea.ef6e978712d0415b8129f104465d0d60
Content-Type: text/html; charset = "utf-8"
Content-Transfer-Encoding: 8bit
--b1_1aa5c9516040eea.ef6e978712d0415b8129f104465d0d60--