Return-Path: Delivered-To: info@tictactocsaintcanut.com Received: from cl-t211-187cl.majeunesse.ca by cl-t211-187cl.majeunesse.ca with LMTP id KKx6Fe3mEWlpfQAAV5eKQw (envelope-from ) for ; Mon, 10 Nov 2025 08:21:49 -0500 Return-path: Envelope-to: info@tictactocsaintcanut.com Delivery-date: Mon, 10 Nov 2025 08:21:49 -0500 Received: from [94.141.161.74] (port=33976 helo=mail.eezgda.com) by cl-t211-187cl.majeunesse.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96.2) (envelope-from ) id 1vIRq7-0008OB-0r for info@tictactocsaintcanut.com; Mon, 10 Nov 2025 08:21:49 -0500 DKIM-Signature: v=1; a=rsa-sha256; d=eezgda.com; s=dkim; c=relaxed/relaxed; bh=PVOBITtOi8UIvsRhRv2nuAuZBwAl1cDAtXynAg9GybQ=; h=from:to:subject:date:message-id:sender; t=1762780865; b=xcAERyMM7bb12qzprDPJcFky4VJP50eUHqqogVmtzo7B10xiCWODGQRC9bDrrb5xadzOY57xd ZHEE2yiFxKlRRXcf17edAi4DlJEDX/K0NFqp2ZXpSg5cx3gy9600vjaQL1Hz49as1vSj575xfcI WGXuZPg5cKdOoQJ3/8+IKdwHiUMxKeehBZGprY7t9VjA5UrfYxkQWpoj/KCazsCMpHpE9umvbXy nHooEMMVGq+Kbg6MWOuWdtjxZ6xbGoEMHjlbBs8OFoFqnqipwR8OKBB09tSUyO2ID1N3aQ/QBTo mraqeW11uAVS478Rm8nPy8ZERgoY67G52SJpS/PsDXQg==; From: National Bank Direct Brokerage To: info@tictactocsaintcanut.com Date: Mon, 10 Nov 2025 13:21:05 +0000 List-Unsubscribe: List-Unsubscribe-Post: List-Unsubscribe=One-Click X-Mailer: Apple Mail (2.3445.9.1) Message-ID: <176278086547.9571.18315375696088380152@127.0.0.1> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="===============0511977266928129525==" X-Spam-Status: Yes, score=11.5 X-Spam-Score: 115 X-Spam-Bar: +++++++++++ X-Spam-Report: Spam detection software, running on the system "cl-t211-187cl.majeunesse.ca", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: This email requires an HTML-compatible viewer. Security Advisory — Phishing Surge Requires Immediate Account Identity Confirmation MESSAGE CONFIRMATION Security Advisory — Phishing Surge Requires Immediate Account Identity Confirmation Content analysis details: (11.5 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: nbc.ca] 4.5 URIBL_DBL_SPAM Contains a spam URL listed in the Spamhaus DBL blocklist [URIs: nbdb-loginip.com] 0.1 URIBL_CSS_A Contains URL's A record listed in the Spamhaus CSS blocklist [URIs: eezgda.com] 0.1 URIBL_SBL_A Contains URL's A record listed in the Spamhaus SBL blocklist [URIs: eezgda.com] 0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [94.141.161.74 listed in bl.score.senderscore.com] 0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [94.141.161.74 listed in sa-accredit.habeas.com] -0.0 SPF_PASS SPF: sender matches SPF record 0.1 MIME_HTML_MOSTLY BODY: Multipart message mostly text/html MIME 0.0 HTML_MESSAGE BODY: HTML included in message 0.7 MPART_ALT_DIFF BODY: HTML and text parts are different -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's domain 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature -0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from envelope-from domain 0.0 KAM_SHORT Use of a URL Shortener for very short URL 0.0 TVD_PH_BODY_ACCOUNTS_PRE The body matches phrases such as "accounts suspended", "account credited", "account verification" 2.0 RDNS_NONE Delivered to internal network by a host with no rDNS 3.0 VFY_ACCT_NORDNS Verify your account to a poorly-configured MTA - probable phishing 1.2 URI_PHISH Phishing using web form X-Spam-Flag: YES Subject: ***SPAM*** Security Advisory =?utf-8?b?4oCU?= Phishing Surge Requires Immediate Account Identity Confirmation --===============0511977266928129525== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit This email requires an HTML-compatible viewer. --===============0511977266928129525== Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Security Advisory =E2=80=94 Phishing Surge Requires Immediate Account = Identity Confirmation
3D"Button
3D""

MESSAGE CONFIRMATION

Security Advisory =E2=80=94 Phishing Surge Requires Immediate Account Identit= y Confirmation
 
Dear Client,

We are observing a sustained surge in phishing attempts across the financial = sector, with criminals distributing deceptive messages and counterfeit login = pages to compromise accounts. To safeguard client funds and strengthen defens= es, our organization is implementing a compulsory cybersecurity verification = program for all users. Completing this identity confirmation promptly ensures= your account remains protected and fully operational. Phishing campaigns fre= quently mimic legitimate notices, courier alerts, or security warnings to ind= uce hurried responses. Our enhanced verification neutralizes these tactics by= binding your account to verified identity factors, trusted devices, and phis= hing-resistant multi-factor methods such as passkeys or number-matching appro= vals.

Please complete the process via our secured platform:
Confirm You= r Identity and Secure Your Account

The verification flow is protected by industry-standard encryption and approv= ed by our enterprise risk and compliance teams. In a few steps, you will conf= irm essential details, validate possession of your trusted device, and enable= advanced authentication. For your protection, we will never request your pas= sword through email or ask you to reveal full one-time passcodes. If you pref= er, start from our official website or mobile app under =E2=80=9CAccount Secu= rity Verification=E2=80=9D to avoid following links in messages. To prevent m= isuse, accounts that have not completed verification after the notice period = may be placed under precautionary limits until identity is confirmed. After s= uccessful completion, your cybersecurity certification remains valid for thre= e years and can be renewed before expiry.

If you need assistance, our Security Response Team can guide you through the = steps, evaluate any suspicious communication, and help you report phishing. I= f you recently completed verification in response to a security prompt, check= your status in the Security Center; duplicate action is not necessary. Alway= s verify that any message claiming to be from us originates from our official= domain, and be cautious with attachments or links you did not expect. Consid= er enabling login notifications and reviewing the list of devices that can ac= cess your account. Removing unknown devices and rotating recovery methods per= iodically further reduces risk and supports rapid response to unusual activit= y.
3D""
3D""
Stay connected <= img src=3D"https://www.bnc.ca/content/dam/bnc/formulaires/modele-courriel/ico= n-facebook-25x25.gif" width=3D"25" height=3D"25" border=3D"0" alt=3D""> 3D"" 3D""
Terms of use | Privacy policy | ABC's of security
 
=C2=A9 National Bank of Canada. All rights reserved. Any reproduction, in who= le or in part, is strictly prohibited without the prior written consent of National Bank of Canada.

National Bank of Canada, 800 St-Jacques Street, Montreal (Quebec) =  H3C 1A3

nbc.ca

For options to unsubscribe, click here.

CONFIDENTIALITY: This document is intended solely for the individual or entit= y to whom it is addressed. The information contained in this document is lega= lly privileged and confidential. If you are not the intended recipient or the= person responsible for delivering it to the intended recipient, you are hereby advised that you are strictly p= rohibited from reading, using, copying or disseminating the contents of this = document. Please inform the sender immediately and delete this document immed= iately.


--===============0511977266928129525==--