Enforcing all these CSS rules could therefore mean a phishing email is sent without the alert warning the victim. At the other end of the spectrum, Certitude also discovered adding more HTML code ...