Advert.

Do NOT tell your scammer he is posted here, or report their accounts as it puts others at risk!

Nordea <gilmar@treslagoas.ms.gov.br>

DO NOT click on any links in these emails.

Nordea <gilmar@treslagoas.ms.gov.br>

Unread postby SlapHappy » Fri Mar 04, 2016 10:11 pm

* 94.79.78.49 Kibris Mobile Telekomunikasyon n/a Turkey

Return-Path: <gilmar@treslagoas.ms.gov.br>
Received: from mail.treslagoas.ms.gov.br (mail.treslagoas.ms.gov.br. [179.191.12.27])
by mx.google.com with ESMTPS id v10si2828980qge.63.2016.03.04.01.03.47
(version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Fri, 04 Mar 2016 01:03:51 -0800 (PST)
Received-SPF: pass (google.com: domain of gilmar@treslagoas.ms.gov.br designates
179.191.12.27 as permitted sender) client-ip=179.191.12.27;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of gilmar@treslagoas.ms.gov.br designates
179.191.12.27 as permitted sender) smtp.mailfrom=gilmar@treslagoas.ms.gov.br
Received: from localhost (localhost [127.0.0.1])
by mail.treslagoas.ms.gov.br (Postfix) with ESMTP id 7B6C71202C28;
Fri, 4 Mar 2016 05:19:43 -0400 (AMT)
Received: from mail.treslagoas.ms.gov.br ([127.0.0.1])
by localhost (mail.treslagoas.ms.gov.br [127.0.0.1]) (amavisd-new, port 10032)
with ESMTP id 7qWyIWkZ1ckG; Fri, 4 Mar 2016 05:19:43 -0400 (AMT)
Received: from localhost (localhost [127.0.0.1])
by mail.treslagoas.ms.gov.br (Postfix) with ESMTP id 4EEF21202CB6;
Fri, 4 Mar 2016 05:19:41 -0400 (AMT)
X-Virus-Scanned: amavisd-new at treslagoas.ms.gov.br
Received: from mail.treslagoas.ms.gov.br ([127.0.0.1])
by localhost (mail.treslagoas.ms.gov.br [127.0.0.1]) (amavisd-new, port 10026)
with ESMTP id 8wC5CNl8bSGv; Fri, 4 Mar 2016 05:19:41 -0400 (AMT)
Received: from mail.treslagoas.ms.gov.br (mail [172.20.2.5])
by mail.treslagoas.ms.gov.br (Postfix) with ESMTP id CAAE71201F12;
Fri, 4 Mar 2016 05:19:36 -0400 (AMT)
Date: Fri, 4 Mar 2016 05:19:36 -0400 (AMT)
From: Nordea <gilmar@treslagoas.ms.gov.br>
Message-ID: <2124073422.21920.1457083176354.JavaMail.zimbra@treslagoas.ms.gov.br>
Subject: Kære kunde, (Dear Customer,)
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_Part_21919_1164126621.1457083176352"
X-Originating-IP: [94.79.78.49]
X-Mailer: Zimbra 8.6.0_GA_1153 (zclient/8.6.0_GA_1153)
Thread-Topic: Kære kunde, (Dear Customer,)
Thread-Index: 7zV2rYqSuS9d6BSe1cOTEbrJMoQZaw==


Kære kunde,


Vi har registreret usædvanlige aktiviteter på din Nordea bank betalingskort og dit betalingskort er blevet midlertidigt blokeret.


Brug derfor nedenstående link for at gå videre og få adgang til din Nordea-bank betalingskort:


Click her
http: //ckbrazos.org/vkj/public_html/index.html

Når dine oplysninger er blevet verificeret og bekræftet, vil du få adgang til din betalingskort.



Nordea Bank er dedikeret til at give dig maksimal sikkerhed og tilfredshed.


Tak
fordi du valgte Nordea bank.

Med venlig hilsen

© 2016 Nordea
==
Dear Customer,


We've detected unusual activity on your Nordea bank debit card and your payment has been temporarily blocked.


Therefore, use the link below to proceed and access your Nordea bank cards:


Click here
http:/ /ckbrazos.org/vkj/public_html/index.html

Once your information has been verified and confirmed, you will get access to your credit card.



Nordea Bank is dedicated to giving you maximum safety and satisfaction.


Thanks
because you chose Nordea bank.

Yours sincerely

© 2016 Nordea
If anyone asks you for money on the Internet they are always a scammer, 100% of the time.
Blackmail Scammed? Go here: https://www.scamsurvivors.com/blackmail/#/
FAQ viewtopic.php?f=3&t=19
Victim of a scam? Go here: https://scamsurvivors.com/forum/viewtop ... =3&t=26504
User avatar
SlapHappy
Retired admin/co creator
 
Posts: 44968
Joined: Tue Apr 17, 2012 5:18 am
Location: Just a face in a magazine, watching you post your scammer's details.

Return to No clicky clicky. Sites that try to install a virus on your PC.

Who is online

Users browsing this forum: No registered users and 3 guests