JezK
Edit File: 1608704746.M663877P2329283.mocha3025.mochahost.com,S=13800,W=13991:2,S
Return-Path: <account-security-noreply@accountprotection.microsoft.com> Delivered-To: mirzaee@jack.ngo Received: from mocha3025.mochahost.com by mocha3025.mochahost.com with LMTP id oJgOJ+ri4l/DiiMAaMJ/gg (envelope-from <account-security-noreply@accountprotection.microsoft.com>) for <mirzaee@jack.ngo>; Wed, 23 Dec 2020 01:25:46 -0500 Return-path: <account-security-noreply@accountprotection.microsoft.com> Envelope-to: mirzaee@jack.ngo Delivery-date: Wed, 23 Dec 2020 01:25:46 -0500 Received: from mail-mw2nam12on2048.outbound.protection.outlook.com ([40.107.244.48]:18017 helo=NAM12-MW2-obe.outbound.protection.outlook.com) by mocha3025.mochahost.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.93) (envelope-from <account-security-noreply@accountprotection.microsoft.com>) id 1krxaf-009mTz-HW for mirzaee@jack.ngo; Wed, 23 Dec 2020 01:25:46 -0500 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=icRdUN85aBwUN7yjzu1fOAsQ8Szxy/8+MC9rOy3bNk8KN48Mvy9CdVet8YLn8rtua9QeGnULAgVVufwtdDtpEb+nTp5gFEXC7VbVgCBFdArp7JpLR6NjmrwnPPxt8M2xwg1r1/aKHClxTIOvlUCCZhBO1NWQ+hG7aD1vSwmtiUNwv8Z1ByfnT4UMuC+OPpH6GHN4o0Lu+4Zhsj98P24JrNWExJA8LxRq7ZJRsVHGcBlHPp9uZXw/0JEZ2IHPypkyXBqxCRsKZOH8h0/jdjrXQ5sWTSJeUpamF0RNXXZpzF9AiCqKWc+HyeNnjH3DBxN4QTvZYI+sgOZ5WlJKuOMv3w== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=+Jy64hxcVtXNE9ZZt5xZL+DLomeJbwmFPf9Jk/v9Pho=; b=TOomhQ/AQxXqfl61FerjIYUMO6WNGYwR+U0imSgS/E1xusOy1JKJ7XV08tHnGHs/ZliYSVunE/e7hmogIAyp7b+mqJG2yXrk0QmFa04fdI+6QGVF9bmnu9kyyL+kcPB2OaJWD8FVRByCYFsgpuLcXqpaiZWTr4HO6yAlTcWjaVEynW26XnoH7LxQQtHuTVTUez6sVUui8t19srbRiJqWcw4Z4ZHP+/vEqp95zIaeisHN6jA8JB8JlSk1Qjnn9lJrBosLZC1g87Sosfryx1VgZaWQJrTJK5jQkyGhCL543/1yGFJ47Cjhgnh3XTPYcF3sZKVPu2Co9gI7YBCfEl80XA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none action=none header.from=accountprotection.microsoft.com; dkim=none (message not signed); arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=accountprotection.microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=+Jy64hxcVtXNE9ZZt5xZL+DLomeJbwmFPf9Jk/v9Pho=; b=Bu17d2CdkdmA4pQkM2XfFk/+CZ0RXZq/ISVGCfgok3ZMnF6uspiyp2Gt+JjLmwm1GcVYCcfxFFQBAT43ytwohfXcZ5XiLuP0lmlTZbrnxmulFuWRdwHgWAqOkVl1mTTDVSlqF4NTQQ1omL24v24QmPuaY6PyHc/VJEMs3iF3yKY= Received: from MW4PR03CA0158.namprd03.prod.outlook.com (2603:10b6:303:8d::13) by SN6PR16MB2638.namprd16.prod.outlook.com (2603:10b6:805:d8::13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3676.33; Wed, 23 Dec 2020 06:24:59 +0000 Received: from CO1NAM11FT057.eop-nam11.prod.protection.outlook.com (2603:10b6:303:8d:cafe::1a) by MW4PR03CA0158.outlook.office365.com (2603:10b6:303:8d::13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3700.27 via Frontend Transport; Wed, 23 Dec 2020 06:24:59 +0000 X-MS-Exchange-Authentication-Results: spf=none (sender IP is 52.188.222.33) smtp.mailfrom=accountprotection.microsoft.com; jack.ngo; dkim=none (message not signed) header.d=none;jack.ngo; dmarc=none action=none header.from=accountprotection.microsoft.com; Received: from accountprotection.microsoft.com (52.188.222.33) by CO1NAM11FT057.mail.protection.outlook.com (10.13.174.205) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3676.25 via Frontend Transport; Wed, 23 Dec 2020 06:24:59 +0000 From: Microsoft account team <account-security-noreply@accountprotection.microsoft.com> Date: Tue, 22 Dec 2020 22:24:59 -0800 Subject: Microsoft account password change To: mirzaee@jack.ngo X-Priority: 3 X-MSAPipeline: MessageDispatcherEOP Message-ID: <M0D3846LICU4.V9INCF7LN79X@BL02EPF00001955> X-MSAMetaData: =?us-ascii?q?DXZIcofHWGpCv73*8ok3I6RMbPqcmSBjXIMkpx9Wzz3B9CuItAEzAfWrvYSG2?= =?us-ascii?q?UTfnaJfKMsfapc9vBLR6DNDGJoREPOD1*tMYR56H*EGILZIcQP0gKErnBwzYE?= =?us-ascii?q?BfypC0uw$$?= MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="=-Bd0JQAbW5sPh1kPNoW037g==" X-MS-PublicTrafficType: Email X-MS-Office365-Filtering-Correlation-Id: cadf3103-1083-4ed6-155d-08d8a70b795d X-MS-TrafficTypeDiagnostic: SN6PR16MB2638:FirstParty-MicrosoftAccount-System X-Microsoft-Antispam-PRVS: <SN6PR16MB26381E9DD0A2C639BD05706A89DE0@SN6PR16MB2638.namprd16.prod.outlook.com> X-MS-Oob-TLC-OOBClassifiers: OLM:792; X-MS-Exchange-SenderADCheck: 1 X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:52.188.222.33;CTRY:US;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:accountprotection.microsoft.com;PTR:InfoDomainNonexistent;CAT:NONE;SFS:;DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData: PnAPpmWx5/NF7iar+uvfPptOKXPRy4i/MRMJWLnDkOeXieE+IBI8vL8IeLahSht9H0gQClXYkhLdobffE1UktUHNHobNXXnOl5CcGrLsliKTIeMcR3qN8NQKCGIdZMr7XZOX3ka1Una0QXVh+9ZPeGodLisDK2AulRjYuVGDoa3os+0hTmgrOLoND7R40XvLfuLkKXXiuPWnt7+j8KHmexlIEpYX2puKBej5nJIH4j9aFmIk1VYUrQkIKR/btDve X-OriginatorOrg: accountprotection.microsoft.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 23 Dec 2020 06:24:59.3198 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: cadf3103-1083-4ed6-155d-08d8a70b795d X-MS-Exchange-CrossTenant-Id: 5ba90553-c2cd-460e-b5fd-ab93ad9155c7 X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=5ba90553-c2cd-460e-b5fd-ab93ad9155c7;Ip=[52.188.222.33];Helo=[accountprotection.microsoft.com] X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: TreatMessagesAsInternal-CO1NAM11FT057.eop-nam11.prod.protection.outlook.com X-MS-Exchange-CrossTenant-FromEntityHeader: Internet X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN6PR16MB2638 X-Spam-Status: No, score=-15.6 X-Spam-Score: -155 X-Spam-Bar: --------------- X-Ham-Report: Spam detection software, running on the system "mocha3025.mochahost.com", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Your password for the Microsoft account mi*****@jack.ngo was changed on 12/23/2020 6:24 AM (GMT). Security info used: mirzaee@jack.ngo Country/region: Afghanistan Platform: Windows Browser: Chrome IP address: 103.119.27.121 Content analysis details: (-15.6 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: live.com] -0.0 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2) [40.107.244.48 listed in wl.mailspike.net] -7.5 USER_IN_DEF_SPF_WL From: address is in the default SPF white-list -7.5 USER_IN_DEF_DKIM_WL From: address is in the default DKIM white-list -0.0 SPF_PASS SPF: sender matches SPF record -0.0 SPF_HELO_PASS SPF: HELO matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's domain -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid -0.5 ENV_AND_HDR_SPF_MATCH Env and Hdr From used in default SPF WL Match X-Spam-Flag: NO --=-Bd0JQAbW5sPh1kPNoW037g== Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 7bit Your password for the Microsoft account mi*****@jack.ngo was changed on 12/23/2020 6:24 AM (GMT). Security info used: mirzaee@jack.ngo Country/region: Afghanistan Platform: Windows Browser: Chrome IP address: 103.119.27.121 If this was you, then you can safely ignore this email. If this wasn't you, then your account has been compromised. Please follow these steps: 1. Reset your password https://account.live.com/pw. 2. Review your security info https://account.live.com/Proofs/Manage. 3. Learn how to make your account more secure http://go.microsoft.com/fwlink/?LinkID=324395. You can also opt out or change where you receive security notifications https://account.live.com/SecurityNotifications/Update. Thanks, The Microsoft account team --=-Bd0JQAbW5sPh1kPNoW037g== Content-Type: text/html; charset=windows-1252 Content-Transfer-Encoding: 7bit <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html xmlns="http://www.w3.org/1999/xhtml" dir="ltr"> <head> <style type="text/css"> .link:link, .link:active, .link:visited { color:#2672ec !important; text-decoration:none !important; } .link:hover { color:#4284ee !important; text-decoration:none !important; } </style> <title></title> </head> <body> <table dir="ltr"> <tr><td id="i1" style="padding:0; font-family:'Segoe UI Semibold', 'Segoe UI Bold', 'Segoe UI', 'Helvetica Neue Medium', Arial, sans-serif; font-size:17px; color:#707070;">Microsoft account</td></tr> <tr><td id="i2" style="padding:0; font-family:'Segoe UI Light', 'Segoe UI', 'Helvetica Neue Medium', Arial, sans-serif; font-size:41px; color:#2672ec;">Your password changed</td></tr> <tr><td id="i3" style="padding:0; padding-top:25px; font-family:'Segoe UI', Tahoma, Verdana, Arial, sans-serif; font-size:14px; color:#2a2a2a;">Your password for the Microsoft account <a dir="ltr" id="iAccount" class="link" style="color:#2672ec; text-decoration:none" href="mailto:mi*****@jack.ngo">mi*****@jack.ngo</a> was changed on 12/23/2020 6:24 AM (GMT).</td></tr> <tr><td id="i4" style="padding:0; padding-top:25px; font-family:'Segoe UI', Tahoma, Verdana, Arial, sans-serif; font-size:14px; color:#2a2a2a;">If this was you, then you can safely ignore this email.</td></tr> <tr><td id="i5" style="padding:0; padding-top:25px; font-family:'Segoe UI', Tahoma, Verdana, Arial, sans-serif; font-size:14px; color:#2a2a2a;">Security info used: mirzaee@jack.ngo</td></tr> <tr><td id="i6" style="padding:0; padding-top:6px; font-family:'Segoe UI', Tahoma, Verdana, Arial, sans-serif; font-size:14px; color:#2a2a2a;">Country/region: Afghanistan</td></tr> <tr><td id="i7" style="padding:0; padding-top:6px; font-family:'Segoe UI', Tahoma, Verdana, Arial, sans-serif; font-size:14px; color:#2a2a2a;">Platform: Windows</td></tr> <tr><td id="i8" style="padding:0; padding-top:6px; font-family:'Segoe UI', Tahoma, Verdana, Arial, sans-serif; font-size:14px; color:#2a2a2a;">Browser: Chrome</td></tr> <tr><td id="i9" style="padding:0; padding-top:6px; font-family:'Segoe UI', Tahoma, Verdana, Arial, sans-serif; font-size:14px; color:#2a2a2a;">IP address: 103.119.27.121</td></tr> <tr><td id="i10" style="padding:0; padding-top:25px; font-family:'Segoe UI', Tahoma, Verdana, Arial, sans-serif; font-size:14px; color:#2a2a2a;">If this wasn't you, your account has been compromised. Please follow these steps:</td></tr> <tr><td id="i11" style="padding:0; padding-top:6px; font-family:'Segoe UI', Tahoma, Verdana, Arial, sans-serif; font-size:14px; color:#2a2a2a;"><a id="iLink1" class="link" style="color:#2672ec; text-decoration:none" href="https://account.live.com/pw">1. Reset your password.</a></td></tr> <tr><td id="i12" style="padding:0; padding-top:6px; font-family:'Segoe UI', Tahoma, Verdana, Arial, sans-serif; font-size:14px; color:#2a2a2a;"><a id="iLink4" class="link" style="color:#2672ec; text-decoration:none" href="https://account.live.com/Proofs/Manage">2. Review your security info.</a></td></tr> <tr><td id="i13" style="padding:0; padding-top:6px; font-family:'Segoe UI', Tahoma, Verdana, Arial, sans-serif; font-size:14px; color:#2a2a2a;"><a id="iLink2" class="link" style="color:#2672ec; text-decoration:none" href="http://go.microsoft.com/fwlink/?LinkID=324395">3. Learn how to make your account more secure.</a></td></tr> <tr><td id="i14" style="padding:0; padding-top:25px; font-family:'Segoe UI', Tahoma, Verdana, Arial, sans-serif; font-size:14px; color:#2a2a2a;">You can also <a id="iLink3" class="link" style="color:#2672ec; text-decoration:none" href="https://account.live.com/SecurityNotifications/Update">opt out</a> or change where you receive security notifications.</td></tr> <tr><td id="i15" style="padding:0; padding-top:25px; font-family:'Segoe UI', Tahoma, Verdana, Arial, sans-serif; font-size:14px; color:#2a2a2a;">Thanks,</td></tr> <tr><td id="i16" style="padding:0; font-family:'Segoe UI', Tahoma, Verdana, Arial, sans-serif; font-size:14px; color:#2a2a2a;">The Microsoft account team</td></tr> </table> </body> </html> --=-Bd0JQAbW5sPh1kPNoW037g==--