Phishing origination against Nordea Bank (Nordic countries)

Received: from cloud-623403.managed-vps.net (cloud-623403.managed-vps.net [188.166.94.138])
by x (Postfix) with ESMTPS id x
for <x>; Thu, 18 Nov 2021 ##:##:## +0100 (CET)
Received: from [185.212.81.49] (port=52990)
by cloud-623403.managed-vps.net with esmtpsa (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.94.2)
(envelope-from <service@nordea.caixaapproval.com>)
id x
for x; Thu, 18 Nov 2021 ##:##:## +0200
From: «Nordea» <service@nordea.caixaapproval.com>

or

Received: from cloud-b023e2.managed-vps.net (cloud-b023e2.managed-vps.net [206.189.1.229])
by x (Postfix) with ESMTPS id x
Received: from [208.78.36.145] (port=64903)
by cloud-b023e2.managed-vps.net with esmtpsa (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.94.2)
(envelope-from <alert@caixaverificacion.com>)
id x
for x; Thu, 18 Nov 2021 ##:##:## +0200
From: «Nordea» <alert@caixaverificacion.com>

To: x
Subject: Varning! Loggad från Herrljunga,Sverige (IP-adress: 217.210.32.205)
Date: 18 Nov 2021 ##:##:## +0000
MIME-Version: 1.0
Content-Type: multipart/related;
boundary=»—-=_NextPart_000_0012_x.x»
X-Authenticated-Sender: service@nordea.caixaapproval.com
Message-ID: <20211118######.x@nordea.caixaapproval.com>

Logo
Ny inloggning från en enhet vi inte känner igen!

( Loggad från Herrljunga,Sverige Ip-adress: 217.210.32.205 )

Vi har tillfälligt blockerat transaktioner från ditt konto tills du verifierar din identitet.

Klicka på verifieringsknappen och fyll i nödvändig information.
Kontrollera!

© Nordea 2021 Denna anslutning är krypterad
Besök oss

Integritetspolicy

Villkor

Добавить комментарий

Ваш адрес email не будет опубликован. Обязательные поля помечены *