Received: from mx.example.org (mx.example.org [192.0.2.10])
	by mail.example.org with ESMTP id ABC123
	for <alicejones@example.org>; Tue, 08 Sep 2026 09:15:00 +0000
Received: from sender.invalid (sender.invalid [203.0.113.55])
	by mx.example.org with ESMTP id DEF456
	for <alicejones@example.org>; Tue, 08 Sep 2026 09:14:58 +0000
From: Account Security <noreply@sender.invalid>
To: alicejones@example.org
Subject: alicejones, your account has been suspended
Date: Tue, 08 Sep 2026 09:14:55 +0000
Message-ID: <case-two@sender.invalid>
Content-Type: text/plain; charset=us-ascii

Verify at http://phish.sender.invalid/verify