Our Blog

Latest news and updates from flathost

Falske Nordea Mails

Posted by Bregnedal Systems on 22 09 2020. 0 Comments

Her er den rå mail:

X-Assp-ID: asgard.bregnedalsystems.dk id-73995-05601
X-Assp-Session: CEE28C8 (mail 1)
X-Assp-Detected-RIP: 213.78.70.193, 2a01:111:e400:7e08:0:0:0:130,
2a01:111:e400:7e08:0:0:0:40, 2a01:111:e400:7e08:0:0:0:489, 2a01:111:e400:7e08:0:0:0:4b,
2a01:111:f400:fe09:0:0:0:829
X-Assp-Source-IP: 213.78.70.193
X-Assp-Envelope-From: sylviamclachlan@hotmail.com
X-Assp-Intended-For: spam-eater@bregnedalsystems.dk
X-Assp-Original-Subject: RE: NemID deaktiveret
X-Assp-Version: 2.6.4(20224) on asgard.bregnedalsystems.dk
X-Assp-Client-TLS: yes
X-Assp-Server-TLS: yes
X-Assp-Message-Score: -2 (SSL-TLS-connection-OK)
X-Assp-IP-Score: -2 (SSL-TLS-connection-OK)
X-Assp-Delay: not delayed (spam-eater@bregnedalsystems.dk in noDelayAddresses);
22 Sep 2020 13:26:35 +0200
X-Assp-Message-Score: -40 (KnownGoodHelo)
X-Assp-IP-Score: -40 (KnownGoodHelo)
X-ASSP-DKIMidentity: @hotmail.com
X-Assp-Message-Score: -1 (SPF pass)
X-Assp-IP-Score: -1 (SPF pass)
X-Original-Authentication-Results: asgard.bregnedalsystems.dk; dkim=pass;
spf=pass; dmarc=pass
X-Assp-Re-bombSenderRe: PB 15: for hotmail.com
X-Assp-Re-bombSenderRe: PB 15: for outlook.com
X-Assp-Message-Score: 30 (BombSenderHelo ‘outlook.com’)
X-Assp-IP-Score: 30 (BombSenderHelo ‘outlook.com’)
X-Assp-Re-bombSuspiciousRe: PB 20: for hotmail.com
X-Assp-Message-Score: 20 (BombSuspicious: ‘hotmail.com’)
X-Assp-IP-Score: 20 (BombSuspicious: ‘hotmail.com’)
X-Assp-Detected-URI: fiubit.tk(1), calm.com(1), hotmail.com(5),
microsoft.com(3), outlook.com(3), w3.org(3)
X-Assp-Message-Score: 25 (URIBL: fail, fiubit.tk listed in dbl.spamhaus.org)
X-Assp-IP-Score: 25 (URIBL: fail, fiubit.tk listed in dbl.spamhaus.org)
X-Assp-URIBL: fail, fiubit.tk listed in dbl.spamhaus.org
X-Assp-Message-Score: -1 (Bayesian Probability: 0.00000)
X-Assp-DKIM: verified-OK
Received: from mail-ve1eur03olkn0829.outbound.protection.outlook.com
([2a01:111:f400:fe09::829] helo=EUR03-VE1-obe.outbound.protection.outlook.com)
by asgard.bregnedalsystems.dk with SMTPS(TLSv1_2 ECDHE-RSA-AES128-GCM-SHA256)
(2.6.4); 22 Sep 2020 13:26:34 +0200
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
b=Xy6RG9D5D5tckg/xqAGuMBuQRuwNLNMrpexlQq3q20AHMLnksBFEhSUY4WJWz13tuksODbr6N8j0k3QBhbAIG66XxQQOoobAJIB2hUDb6AOfM/pNIuTmPbfujggR5r7ioYpTgjsyd+cokU8/4qJudOj4spkpT/33eNN/pNTJr4e7kMl93GGQREPpi+4ZBHwUnzz1O4wqaL+ium/QkNGHFIJMWhBkogQ8mXTG5S53cSPN6MpSU9UbXMrvrA8rh0lz40TniOUlh2lV+OsZvryMw5IkNn3iHotQ1E79oWv76AYk4ti3NA4bx9hxedWMMabU0FCq+Pr4rGyZvKmMD/nLbg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=cYabaUPLviAjAFthYlIx0J3n887L4DLM4O6klW3VpAc=;
b=aY4knr5Bs0eSUe06GlHkQT0AOWWltiY9lKRfQJ21lX3GpZqOFbGmRix03muwcCKBmrfh4MpqLdfI+9HYnjvhVl+F9bG5jxwHFFsLca7liGuykWzuw2FgHP5WiCnNjyLbJQNU94GK+RVaT+5z3QbiCg8GD4HVLKfGIsHvKZVZhEh4eFFysWsxXXectIOvdGd8xkFN31FHKVyGolenQ1eomZdRk9t8pKq7DDEw4YtnG9eWYotdCPuCnC3EE+S+qP6yJJcFppJzYvuh2A4QLVsonx0qEcwU+O/UHMETvjdyQVQjxlDEACKRT+KYsPV8wz9DUstYNpYexyBIBY7OhcJaCg==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;
dkim=none; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;
s=selector1;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=cYabaUPLviAjAFthYlIx0J3n887L4DLM4O6klW3VpAc=;
b=BrEzM2Fnx3WJGwxXzFG8CqyPmHSaSwu/u4Y2wshux4AR4XnEL7qUD3W2ZB7ZYV2AxBemJjP1u3cEXnVuDE+m0bQFyt7eUDMpsuIkKE4XG7rZFuZlJOhc9b4wZz1SmzvzXjpFntVBtx/d+PEM/JZ+FYCL0SpnkFRtw5GuNCeYLY8a0wdGNiuu3KsTd0wyg8QfhnMBDM5YmY0F6w0Rm7hFdQLJm2/DVv4pVxrHtBBAOFRJXjSzVFkBtj0Z7Sm1lB1SfNdwB7NcwKYY8SRSM6bwQwYfUb27FdpRd6w528LJXT83bqmKt0GM5joWSm3LkP2R60SKFSNELy0C2vxi+Rks2A==
Received: from AM5EUR03FT014.eop-EUR03.prod.protection.outlook.com
(2a01:111:e400:7e08::4b) by
AM5EUR03HT023.eop-EUR03.prod.protection.outlook.com (2a01:111:e400:7e08::489)
with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3391.15; Tue, 22 Sep
2020 11:26:33 +0000
Received: from AM0PR09MB4257.eurprd09.prod.outlook.com
(2a01:111:e400:7e08::40) by AM5EUR03FT014.mail.protection.outlook.com
(2a01:111:e400:7e08::130) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3391.15 via Frontend
Transport; Tue, 22 Sep 2020 11:26:33 +0000
X-IncomingTopHeaderMarker:
OriginalChecksum:B9269CA5F28936484440467439B96E4C6708D26E2E28519AB7A6B680D4E56768;UpperCasedChecksum:BA83B1F84B414B022899047FEDF57EE4E78D440DEA6EBB042461A9E831B2E819;SizeAsReceived:8583;Count:45
Received: from AM0PR09MB4257.eurprd09.prod.outlook.com
([fe80::5c6a:1bb3:6e4c:3ecb]) by AM0PR09MB4257.eurprd09.prod.outlook.com
([fe80::5c6a:1bb3:6e4c:3ecb%9]) with mapi id 15.20.3391.027; Tue, 22 Sep 2020
11:26:33 +0000
From: “NORDEA” <sylviamclachlan@hotmail.com>
To: spam-eater@bregnedalsystems.dk
Subject: RE: NemID deaktiveret
Message-ID:
<AM0PR09MB42577885EA5787DD135A9383BC3B0@AM0PR09MB4257.eurprd09.prod.outlook.com>
Date: Tue, 22 Sep 2020 14:26:30 +0300
X-ClientProxiedBy: GV0P278CA0027.CHEP278.PROD.OUTLOOK.COM
(2603:10a6:710:28::14) To AM0PR09MB4257.eurprd09.prod.outlook.com
(2603:10a6:20b:16c::16)
Return-Path: sylviamclachlan@hotmail.com
X-Microsoft-Original-Message-ID: Message-ID:
<0A735633.ECC3D71A6D48E9AE@hotmail.com>
MIME-Version: 1.0
X-MS-Exchange-MessageSentRepresentingType: 1
Received: from mrcthfamjj (213.78.70.193) by GV0P278CA0027.CHEP278.PROD.OUTLOOK.COM (2603:10a6:710:28::14) with Microsoft SMTP Server (version=TLS1_0, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA) id 15.20.3391.26 via Frontend Transport; Tue, 22 Sep 2020 11:26:30 +0000
X-Microsoft-Original-Message-ID: Message-ID:
<0A735633.ECC3D71A6D48E9AE@hotmail.com>
X-TMN: [UG9VHAgt82B3GbGaW75zLmDJweqBhuX4]
X-MS-PublicTrafficType: Email
X-IncomingHeaderCount: 45
X-EOPAttributedMessage: 0
X-MS-Office365-Filtering-Correlation-Id: c1e7e878-76fc-4b8b-91c2-08d85eea5aed
X-MS-TrafficTypeDiagnostic: AM5EUR03HT023:
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info:
v3uugW8VVuEZzAUGL3d0koVV1gUAQ5dfgEIugePYRF9Bbl0RVnNr/Zptcs6wf4E9X9zQmzkgpyuOtWfh0XHGxscH+HuLHxqNsCg6dvG2v67ynO2FqSP18BtAV8lXQGlf5HhqU46kMdLdg3JXrLFFJRgw1hZy1tCr0hz51nApFqw43vG7Da99qmK89dKJYq1tRP7TX1IgXQ8VM2QFhoHh8VXAyRPgLsmmGSGrJPr267Mt2R3nu+mU4roL3ATtQZj+
X-MS-Exchange-AntiSpam-MessageData:
Gz9gkI1wVJ/MYoIx4OOjZOP4rQ7///eJ4f1xmMhnLvPy4M5LctAEFb2BgGxaKelv+JXy8Yr9PghQBRb0M2waNoaqX5bgQcTVCxZyMbUeu5x2UWoC6I/ol0kfzIlTGkBvF5u+WITpSKfByQM3lzSIWg==
X-OriginatorOrg: hotmail.com
X-MS-Exchange-CrossTenant-Network-Message-Id: c1e7e878-76fc-4b8b-91c2-08d85eea5aed
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 22 Sep 2020 11:26:31.8053
(UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-CrossTenant-AuthSource:
AM5EUR03FT014.eop-EUR03.prod.protection.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:
00000000-0000-0000-0000-000000000000
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM5EUR03HT023 ; 

Leave a Reply