I just received two emails from Google. The first one tells me that my password was changed, the second one tells me, that a windows device logged in to my account.
All the links in the emails point to a google domain (*.google.com) and they use my correct first and surname.
But what really confuses me, is that the warning is for a non-Google email address (***@gmx.de), I cannot log in to Google with this email address and I'm using 2FA.
Is this spam? What's the point if they don't trick me to give out my password?
Here are the screenshots of the emails. I received the emails from firstname.lastname@example.org
Hello Alexander, The password for your Google Account *****@gmx.de has been changed recently.
This activity is unknown to you? Learn more about restoring your account here.
Someone signed in to your Google Account through a new Windows device. You have received this email because we want to make sure that this is you.