In the first image you posted the links in the e-mail it looks like wor1d with a 1 in place of the l. Just my observations.