JezK
Edit File: 1593071005.M527576P4134079.mocha3025.mochahost.com,S=11878,W=12035:2,S
Return-Path: <account-security-noreply@accountprotection.microsoft.com> Delivered-To: mirzaee@jack.ngo Received: from mocha3025.mochahost.com by mocha3025.mochahost.com with LMTP id sKBeHp1V9F6/FD8AaMJ/gg (envelope-from <account-security-noreply@accountprotection.microsoft.com>) for <mirzaee@jack.ngo>; Thu, 25 Jun 2020 03:43:25 -0400 Return-path: <account-security-noreply@accountprotection.microsoft.com> Envelope-to: mirzaee@jack.ngo Delivery-date: Thu, 25 Jun 2020 03:43:25 -0400 Received: from mail-eopbgr760082.outbound.protection.outlook.com ([40.107.76.82]:46841 helo=NAM02-CY1-obe.outbound.protection.outlook.com) by mocha3025.mochahost.com with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256) (Exim 4.92) (envelope-from <account-security-noreply@accountprotection.microsoft.com>) id 1joMXd-00HNoe-Ah for mirzaee@jack.ngo; Thu, 25 Jun 2020 03:43:25 -0400 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=bz+8c0LPThVe3scwt3AvefUQgRapgQpHvQjXAugjuVlvtZCdb91PorUvYrmXjfIIlYkY/gO0tgbBGOFSjl5MyaEvlJ07oEKkeaIRqIwLTNu2GSPLSDetZMT8LjGakJAJU2ASz+5FoCc5JmI8MZCfPV+0mKnYcL5+bCmGVyiy682EH/SdpMfEiaEK+eG5AEKOT6iUfXkj+amIe0YBlU3JRO3l/4SN6PQ0JS8upP0B56VlA/E7fQuyDe2S/sBHaSsaBieprt/iLTqbjCxIipigD5VRD6JeO0tjbFxFGEaHeSe9J2AuaanHodyocr+29TtcscN40ECKNkFVxhrQsJkxbg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=N+/J7Q3pkFiXhDv1/Bj+oIn2ad8yxP+WZt7U03UORek=; b=i3G1Du8aZu6G2E6FskeRMxRJ0m1x9e6qkb9FGVjzP/bntb2ugNeWb/Nc59+AXMZcdfAU2miujyssymchYIRR3pxbnHL+iEy15d8/vdhR7NYnEYk4iweIfxOISREGHXM9SgZzTkMYRFh3EyayE1xOkOn70lhyJHAloREfvsiUjtrxfLxYjZgeZombtOFG1zWbqpAAIMJT6rliNccZxRDflY/Fm0VZm252oQYjoNqrvD4jFucF+csmEB7959hpFZEtdIlfuQsl38UzrU0dQYyPRVIcSwxrZ9CoZ6ZdPp36AHkNzImURVM3uaWjli/6waj5MX8kPHQq8dx2YYDBoCk6Sg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass (sender ip is 65.52.110.208) smtp.rcpttodomain=jack.ngo smtp.mailfrom=accountprotection.microsoft.com; dmarc=pass (p=reject sp=reject pct=100) action=none header.from=accountprotection.microsoft.com; dkim=none (message not signed); arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=accountprotection.microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=N+/J7Q3pkFiXhDv1/Bj+oIn2ad8yxP+WZt7U03UORek=; b=rzJut5Bo03oq+cxnA7rytG7sZB/czHHVpINHM0hMR8hNVpjli4UOLomxEj1elKpHTwu+Z/+iS95ty+sk1QN5ka0IXd9p6vG3/Eki5a9fk98xAmsxcgIsmYmHNL/iPkOukAKxY6hJaShHX7nK9vnGM13GeIENyxrR3EPkAFaVPaw= Received: from CO2PR04CA0006.namprd04.prod.outlook.com (2603:10b6:102:1::16) by SN6PR16MB3968.namprd16.prod.outlook.com (2603:10b6:805:56::28) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3109.21; Thu, 25 Jun 2020 07:42:40 +0000 Received: from CO1NAM11FT047.eop-nam11.prod.protection.outlook.com (2603:10b6:102:1:cafe::b8) by CO2PR04CA0006.outlook.office365.com (2603:10b6:102:1::16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3131.21 via Frontend Transport; Thu, 25 Jun 2020 07:42:39 +0000 X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 65.52.110.208) smtp.mailfrom=accountprotection.microsoft.com; jack.ngo; dkim=none (message not signed) header.d=none;jack.ngo; dmarc=pass action=none header.from=accountprotection.microsoft.com; Received-SPF: Pass (protection.outlook.com: domain of accountprotection.microsoft.com designates 65.52.110.208 as permitted sender) receiver=protection.outlook.com; client-ip=65.52.110.208; helo=accountprotection.microsoft.com; Received: from accountprotection.microsoft.com (65.52.110.208) by CO1NAM11FT047.mail.protection.outlook.com (10.13.174.132) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3131.20 via Frontend Transport; Thu, 25 Jun 2020 07:42:39 +0000 From: Microsoft account team <account-security-noreply@accountprotection.microsoft.com> Date: Thu, 25 Jun 2020 00:42:39 -0700 Subject: Microsoft account unusual sign-in activity To: mirzaee@jack.ngo X-Priority: 3 X-MSAPipeline: MessageDispatcherEOP Message-ID: <5O4BU8M6ZAU4.F0WBGR6EAD5T1@BN3SCH030020241> X-Partner-Original-IP: 25.127.109.64 X-SystemMessage: true X-MSAMetaData: =?us-ascii?q?DcinocQBam3I12mwLnYFJ1BzJlV1x8nWGB!FyBFXn88zBG09dSwKEPn7mZCfO?= =?us-ascii?q?IjK5bOSGiRNQGdC5pu7*AYfAj!uJEWgiPECy8KgkRZM3A5t*XX9msQ7rs7NmK?= =?us-ascii?q?Ss5FiHcA$$?= MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="=-oHKcKNGixZBLVlBpgDU+vw==" X-EOPAttributedMessage: 0 X-Forefront-Antispam-Report: CIP:65.52.110.208;CTRY:US;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:accountprotection.microsoft.com;PTR:msnbot-65-52-110-208.search.msn.com;CAT:NONE;SFTY:;SFS:(7916004)(396003)(376002)(346002)(136003)(34036004)(39860400002)(47530400004)(47690400004)(33656002)(10290500003)(81166007)(86362001)(82310400002)(6916009)(2906002)(52230400001)(166002)(956004)(316002)(36736006)(508600001)(966005)(26005)(186003)(5660300002)(356005)(15650500001)(6486002)(336012)(33716001)(83380400001)(8936002)(70206006)(70586007)(66574015)(121820200001)(118246002)(6512007)(574094003)(9686003)(8676002)(435084004);DIR:OUT;SFP:1101; X-MS-PublicTrafficType: Email X-MS-Office365-Filtering-Correlation-Id: 27729d74-5509-47be-0a1b-08d818db5635 X-MS-TrafficTypeDiagnostic: SN6PR16MB3968: X-Microsoft-Antispam-PRVS: <SN6PR16MB3968CE0C299965493C5403C589920@SN6PR16MB3968.namprd16.prod.outlook.com> X-MS-Oob-TLC-OOBClassifiers: OLM:1303; X-Forefront-PRVS: 0445A82F82 X-MS-Exchange-SenderADCheck: 1 X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: gC35xu5Junj2r7af6Kf7AAdsrANgxETLEJfODE6/Hpmdy+f114pkvi4YIx/QnmidkkQm1bAhw0xjTE1SHB19uAjXGyOG76MJ13Q4IqhkEAC0n3XL6qrcEvdGeiVQ5bVVwGXGmYOISiXBMtCO/qyzrcfJT9confBSjDPP3dNe3zPic1c9/P/6gaowSrlP0Ml+mxDcEFUc1oE0QRu/eV042mg7LMVFrk0FAP3wR4AVy5D2AgYKvchXR4MCYzNzAGHpQK05mQ7yP8eTBCxtYUnL1dq6odM+Zeol+bh8Jo+jj9sL9hZ2VwqzQdLR2UjowOlkb2jghol9w+Gn7VWuEvxCjK74EvCjKDyLiquXhLGXLCBc/UG0oqNCR5yECxhGLsbEilB5FO180pVl3xr3yduTfQmbfgBCN9qA1ei/3hxWnoC0GeQNK+SS+bfWU87K68dm X-OriginatorOrg: accountprotection.microsoft.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 25 Jun 2020 07:42:39.3537 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 27729d74-5509-47be-0a1b-08d818db5635 X-MS-Exchange-CrossTenant-Id: 5ba90553-c2cd-460e-b5fd-ab93ad9155c7 X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=5ba90553-c2cd-460e-b5fd-ab93ad9155c7;Ip=[65.52.110.208];Helo=[accountprotection.microsoft.com] X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN6PR16MB3968 --=-oHKcKNGixZBLVlBpgDU+vw== Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 7bit We detected something unusual about a recent sign-in to the Microsoft account mi*****@jack.ngo. Sign-in details Country/region: United States IP address: 196.52.70.34 Date: 6/25/2020 7:42 AM (GMT) Platform: Windows Browser: Chrome Please go to your recent activity page to let us know whether or not this was you. If this wasn't you, we'll help you secure your account. If this was you, we'll trust similar activity in the future. Review recent activity https://account.microsoft.com/activity. To opt out or change where you receive security notifications, click here https://account.live.com/SecurityNotifications/Update. Thanks, The Microsoft account team --=-oHKcKNGixZBLVlBpgDU+vw== Content-Type: text/html; charset=windows-1252 Content-Transfer-Encoding: 7bit <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html xmlns="http://www.w3.org/1999/xhtml" dir="ltr"> <head> <style type="text/css"> .link:link, .link:active, .link:visited { color:#2672ec !important; text-decoration:none !important; } .link:hover { color:#4284ee !important; text-decoration:none !important; } </style> <title></title> </head> <body> <table dir="ltr"> <tr><td id="i1" style="padding:0; font-family:'Segoe UI Semibold', 'Segoe UI Bold', 'Segoe UI', 'Helvetica Neue Medium', Arial, sans-serif; font-size:17px; color:#707070;">Microsoft account</td></tr> <tr><td id="i2" style="padding:0; font-family:'Segoe UI Light', 'Segoe UI', 'Helvetica Neue Medium', Arial, sans-serif; font-size:41px; color:#2672ec;">Unusual sign-in activity</td></tr> <tr><td id="i3" style="padding:0; padding-top:25px; font-size:15pt; font-family:'Segoe UI', Tahoma, Verdana, Arial, sans-serif; font-size:14px; color:#2a2a2a;">We detected something unusual about a recent sign-in to the Microsoft account <a dir="ltr" id="iAccount" class="link" style="color:#2672ec; text-decoration:none" href="mailto:mi*****@jack.ngo">mi*****@jack.ngo</a>.</td></tr> <tr><td id="i4" style="padding:0; padding-top:25px; font-family:'Segoe UI Bold', 'Segoe UI Semibold', 'Segoe UI', 'Helvetica Neue Medium', Arial, sans-serif; font-size:14px; font-weight:bold; color:#2a2a2a;">Sign-in details</td></tr> <tr><td id="i5" style="padding:0; padding-top:6px; font-family:'Segoe UI', Tahoma, Verdana, Arial, sans-serif; font-size:14px; color:#2a2a2a;">Country/region: United States</td></tr> <tr><td id="i6" style="padding:0; padding-top:6px; font-family:'Segoe UI', Tahoma, Verdana, Arial, sans-serif; font-size:14px; color:#2a2a2a;">IP address: 196.52.70.34</td></tr> <tr><td id="i7" style="padding:0; padding-top:6px; font-family:'Segoe UI', Tahoma, Verdana, Arial, sans-serif; font-size:14px; color:#2a2a2a;">Date: 6/25/2020 7:42 AM (GMT)</td></tr> <tr><td id="i8" style="padding:0; padding-top:6px; font-family:'Segoe UI', Tahoma, Verdana, Arial, sans-serif; font-size:14px; color:#2a2a2a;">Platform: Windows</td></tr> <tr><td id="i9" style="padding:0; padding-top:6px; font-family:'Segoe UI', Tahoma, Verdana, Arial, sans-serif; font-size:14px; color:#2a2a2a;">Browser: Chrome</td></tr> <tr><td id="i10" style="padding:0; padding-top:25px; font-family:'Segoe UI', Tahoma, Verdana, Arial, sans-serif; font-size:14px; color:#2a2a2a;">Please go to your recent activity page to let us know whether or not this was you. If this wasn't you, we'll help you secure your account. If this was you, we'll trust similar activity in the future.</td></tr> <tr><td style="padding:0; padding-top:25px; font-family:'Segoe UI', Tahoma, Verdana, Arial, sans-serif; font-size:14px; color:#2a2a2a;"> <table border="0" cellspacing="0"><tr><td bgcolor="#2672ec" style="background-color:#2672ec; padding-top: 5px; padding-right: 20px; padding-bottom: 5px; padding-left: 20px; min-width:50px;"><a id="i11" style="font-family: 'Segoe UI Semibold', 'Segoe UI Bold', 'Segoe UI', 'Helvetica Neue Medium', Arial, sans-serif; font-size:14px; text-align:center; text-decoration:none; font-weight:600; letter-spacing:0.02em; color:#fff;" href="https://account.microsoft.com/activity">Review recent activity</a></td></tr></table> </td></tr> <tr><td id="i12" style="padding:0; padding-top:25px; font-family:'Segoe UI', Tahoma, Verdana, Arial, sans-serif; font-size:14px; color:#2a2a2a;">To opt out or change where you receive security notifications, <a id="iLink5" class="link" style="color:#2672ec; text-decoration:none" href="https://account.live.com/SecurityNotifications/Update">click here</a>.</td></tr> <tr><td id="i13" style="padding:0; padding-top:25px; font-family:'Segoe UI', Tahoma, Verdana, Arial, sans-serif; font-size:14px; color:#2a2a2a;">Thanks,</td></tr> <tr><td id="i14" style="padding:0; font-family:'Segoe UI', Tahoma, Verdana, Arial, sans-serif; font-size:14px; color:#2a2a2a;">The Microsoft account team</td></tr> </table> </body> </html> --=-oHKcKNGixZBLVlBpgDU+vw==--