JezK
Edit File: 1617691313.M821736P1783692.mocha3025.mochahost.com,S=13922,W=14113:2,S
Return-Path: <account-security-noreply@accountprotection.microsoft.com> Delivered-To: hafiz@jack.ngo Received: from mocha3025.mochahost.com by mocha3025.mochahost.com with LMTP id MPaGL7ECbGCMNxsAaMJ/gg (envelope-from <account-security-noreply@accountprotection.microsoft.com>) for <hafiz@jack.ngo>; Tue, 06 Apr 2021 02:41:53 -0400 Return-path: <account-security-noreply@accountprotection.microsoft.com> Envelope-to: hafiz@jack.ngo Delivery-date: Tue, 06 Apr 2021 02:41:53 -0400 Received: from mail-dm6nam11on2048.outbound.protection.outlook.com ([40.107.223.48]:55008 helo=NAM11-DM6-obe.outbound.protection.outlook.com) by mocha3025.mochahost.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.93) (envelope-from <account-security-noreply@accountprotection.microsoft.com>) id 1lTfPI-007Y9h-Om for hafiz@jack.ngo; Tue, 06 Apr 2021 02:41:53 -0400 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=Zo1rn4Q4qHAOwdtQ5fYRdvEizT3Vr/DViCRtjS5jS9voxuZ419VTVygyPBnF4Ff/Vr9sQUYthGPcFgLTGHKt/xslUECZ7LzgtJcOnO3y47X2wytab/QIE/swCNuGi/LhsqX0uZJJuwTK8qq6JooxJQQ90qxsdGqR3pt6W2zK4rLJ934loDZmuceYjN0M42aXbh7QHxJjvK1Qq3AIX4G1BvC+iXoY86KCw87v+pe8F+5mdrkN8zgbT1IKMPvfNORCzoO3pbg2Ck8koh9hot6f6vWNyIZqa3vZD99M/EffMF+p0+a5BN5uQT1QmE5dp7zIMupT8r5yZp2LyOFhhF/gXg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=rST6XNW3XL0KfPEuYGmEsXLc+rik4LcRKCmNTZURK4Y=; b=FUtXo7BGK9YZrU72e5oQQzFswI+ancDSa1E2cb7aA13ypRVAlDZxXBeNlLhQxHZwHAUpoM90E2MmZBOwAdei23k3pfBJoOerE/jI+/B029jIJHnnGpGieEIn7HMz5PvHrN+HszZPSDnsiIfwsXb5oWtm95LnwQLtqsXpHmWPUTTGTeADULP1aN49UUjgIDhT3v+oY8QWmDr32cL5Oi8rABhZo84Elr760PNw89ncdlVBLCnPgSF7IFN97MdoTovobvbg1iEtRTeNEDAbzuyzXg7bIG5fPgsA+nfpOylOMzogBmhSn/X8gqjuxMqAQrZOWVP7pVwOEFo+4zuyofvx2g== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none action=none header.from=accountprotection.microsoft.com; dkim=none (message not signed); arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=accountprotection.microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=rST6XNW3XL0KfPEuYGmEsXLc+rik4LcRKCmNTZURK4Y=; b=brYbS+zQXniS9hyNeT2KJfB5KkphMX+ZPLUpMXy7xxKo9toTyf59ise8qB+r5ZOJyGyou0WCNw2QuLo0w3QEc9BgJCp12SwLZE7zNYd2Rhk8hup4MH9Tk0g4S4oakJevWQ+3Ww3sktRY70fhP1eOj7fDwKxdEIU1hbb43aDe008= Received: from BN1PR12CA0027.namprd12.prod.outlook.com (2603:10b6:408:e1::32) by DM6PR16MB3178.namprd16.prod.outlook.com (2603:10b6:5:192::17) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3999.29; Tue, 6 Apr 2021 06:41:07 +0000 Received: from BN8NAM11FT026.eop-nam11.prod.protection.outlook.com (2603:10b6:408:e1:cafe::6d) by BN1PR12CA0027.outlook.office365.com (2603:10b6:408:e1::32) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3999.28 via Frontend Transport; Tue, 6 Apr 2021 06:41:07 +0000 X-MS-Exchange-Authentication-Results: spf=none (sender IP is 52.234.111.146) smtp.mailfrom=accountprotection.microsoft.com; jack.ngo; dkim=none (message not signed) header.d=none;jack.ngo; dmarc=none action=none header.from=accountprotection.microsoft.com; Received: from accountprotection.microsoft.com (52.234.111.146) by BN8NAM11FT026.mail.protection.outlook.com (10.13.177.51) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3999.28 via Frontend Transport; Tue, 6 Apr 2021 06:41:07 +0000 From: Microsoft account team <account-security-noreply@accountprotection.microsoft.com> Date: Mon, 05 Apr 2021 23:41:07 -0700 Subject: Microsoft account password change To: hafiz@jack.ngo X-Priority: 3 X-MSAPipeline: MessageDispatcherEOP Message-ID: <MXGFMDEGEDU4.MXJJKZEF0F233@BY1PEPF00001EE9> X-MSAMetaData: =?us-ascii?q?DdSNI7PpHXy6XxQrgVRrCx2*aFYMNML9EHPfrbxM4XfIyxVTfIGQ2851yEUKn?= =?us-ascii?q?KAQ72O0u8CU*L8qEy1Qjv6jdvWvqLfRvOo5oGHL1F0SxXug7oZBXLkeMVBzeb?= =?us-ascii?q?CwNGQ39g$$?= MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="=-BQ70aG/SbhmJUICvaSLliA==" X-MS-PublicTrafficType: Email X-MS-Office365-Filtering-Correlation-Id: 753ecfaa-40c0-4462-ab42-08d8f8c6f53a X-MS-TrafficTypeDiagnostic: DM6PR16MB3178:FirstParty-MicrosoftAccount-System X-Microsoft-Antispam-PRVS: <DM6PR16MB31785C101AF046E0D63FF30889769@DM6PR16MB3178.namprd16.prod.outlook.com> X-MS-Oob-TLC-OOBClassifiers: OLM:2582; X-MS-Exchange-SenderADCheck: 1 X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:52.234.111.146;CTRY:US;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:accountprotection.microsoft.com;PTR:InfoDomainNonexistent;CAT:NONE;SFS:;DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData: GAZI/wbonNOCYKPlN9557aAULZ1E+o3mzmRgC/q4PdYKd+bxsgGS3MXHKeQlWVoPpuL228lLt9V0WjNRiTV/hVHmUIAU4+ya82cxVK+oN93SLrJ82EGauR2NJJsY4bLYq0jQvyTQs0nVe2LTAkyM2j67p0oaNPyNA83nBA9qxPN2yfyqg6/OQTDlBNyumdb+mm8c9kVUNTcbMmU6opsxNEFtjO/oCYxiuo3/uen4LrbZvqjeCepDC7K0JH6bcxEN X-OriginatorOrg: accountprotection.microsoft.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 06 Apr 2021 06:41:07.2072 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 753ecfaa-40c0-4462-ab42-08d8f8c6f53a X-MS-Exchange-CrossTenant-Id: 5ba90553-c2cd-460e-b5fd-ab93ad9155c7 X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=5ba90553-c2cd-460e-b5fd-ab93ad9155c7;Ip=[52.234.111.146];Helo=[accountprotection.microsoft.com] X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: TreatMessagesAsInternal-BN8NAM11FT026.eop-nam11.prod.protection.outlook.com X-MS-Exchange-CrossTenant-FromEntityHeader: Internet X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM6PR16MB3178 X-Spam-Status: No, score=-15.6 X-Spam-Score: -155 X-Spam-Bar: --------------- X-Ham-Report: Spam detection software, running on the system "mocha3025.mochahost.com", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Your password for the Microsoft account ha*****@jack.ngo was changed on 06/04/2021 06:41 (GMT). Security info used: 93700852585 Country/region: Afghanistan Platform: Windows Browser: Microsoft Edge IP address: 103.215.210.12 Content analysis details: (-15.6 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: live.com] -7.5 USER_IN_DEF_SPF_WL From: address is in the default SPF white-list -7.5 USER_IN_DEF_DKIM_WL From: address is in the default DKIM white-list -0.0 SPF_PASS SPF: sender matches SPF record -0.0 SPF_HELO_PASS SPF: HELO matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message -0.0 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2) [40.107.223.48 listed in wl.mailspike.net] -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's domain -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid -0.5 ENV_AND_HDR_SPF_MATCH Env and Hdr From used in default SPF WL Match X-Spam-Flag: NO --=-BQ70aG/SbhmJUICvaSLliA== Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 7bit Your password for the Microsoft account ha*****@jack.ngo was changed on 06/04/2021 06:41 (GMT). Security info used: 93700852585 Country/region: Afghanistan Platform: Windows Browser: Microsoft Edge IP address: 103.215.210.12 If this was you, then you can safely ignore this email. If this wasn't you, then your account has been compromised. Please follow these steps: 1. Reset your password https://account.live.com/pw. 2. Review your security info https://account.live.com/Proofs/Manage. 3. Learn how to make your account more secure http://go.microsoft.com/fwlink/?LinkID=324395. You can also opt out or change where you receive security notifications https://account.live.com/SecurityNotifications/Update. Thanks, The Microsoft account team --=-BQ70aG/SbhmJUICvaSLliA== Content-Type: text/html; charset=windows-1252 Content-Transfer-Encoding: 7bit <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html xmlns="http://www.w3.org/1999/xhtml" dir="ltr"> <head> <style type="text/css"> .link:link, .link:active, .link:visited { color:#2672ec !important; text-decoration:none !important; } .link:hover { color:#4284ee !important; text-decoration:none !important; } </style> <title></title> </head> <body> <table dir="ltr"> <tr><td id="i1" style="padding:0; font-family:'Segoe UI Semibold', 'Segoe UI Bold', 'Segoe UI', 'Helvetica Neue Medium', Arial, sans-serif; font-size:17px; color:#707070;">Microsoft account</td></tr> <tr><td id="i2" style="padding:0; font-family:'Segoe UI Light', 'Segoe UI', 'Helvetica Neue Medium', Arial, sans-serif; font-size:41px; color:#2672ec;">Your password changed</td></tr> <tr><td id="i3" style="padding:0; padding-top:25px; font-family:'Segoe UI', Tahoma, Verdana, Arial, sans-serif; font-size:14px; color:#2a2a2a;">Your password for the Microsoft account <a dir="ltr" id="iAccount" class="link" style="color:#2672ec; text-decoration:none" href="mailto:ha*****@jack.ngo">ha*****@jack.ngo</a> was changed on 06/04/2021 06:41 (GMT).</td></tr> <tr><td id="i4" style="padding:0; padding-top:25px; font-family:'Segoe UI', Tahoma, Verdana, Arial, sans-serif; font-size:14px; color:#2a2a2a;">If this was you, then you can safely ignore this email.</td></tr> <tr><td id="i5" style="padding:0; padding-top:25px; font-family:'Segoe UI', Tahoma, Verdana, Arial, sans-serif; font-size:14px; color:#2a2a2a;">Security info used: 93700852585</td></tr> <tr><td id="i6" style="padding:0; padding-top:6px; font-family:'Segoe UI', Tahoma, Verdana, Arial, sans-serif; font-size:14px; color:#2a2a2a;">Country/region: Afghanistan</td></tr> <tr><td id="i7" style="padding:0; padding-top:6px; font-family:'Segoe UI', Tahoma, Verdana, Arial, sans-serif; font-size:14px; color:#2a2a2a;">Platform: Windows</td></tr> <tr><td id="i8" style="padding:0; padding-top:6px; font-family:'Segoe UI', Tahoma, Verdana, Arial, sans-serif; font-size:14px; color:#2a2a2a;">Browser: Microsoft Edge</td></tr> <tr><td id="i9" style="padding:0; padding-top:6px; font-family:'Segoe UI', Tahoma, Verdana, Arial, sans-serif; font-size:14px; color:#2a2a2a;">IP address: 103.215.210.12</td></tr> <tr><td id="i10" style="padding:0; padding-top:25px; font-family:'Segoe UI', Tahoma, Verdana, Arial, sans-serif; font-size:14px; color:#2a2a2a;">If this wasn't you, your account has been compromised. Please follow these steps:</td></tr> <tr><td id="i11" style="padding:0; padding-top:6px; font-family:'Segoe UI', Tahoma, Verdana, Arial, sans-serif; font-size:14px; color:#2a2a2a;"><a id="iLink1" class="link" style="color:#2672ec; text-decoration:none" href="https://account.live.com/pw">1. Reset your password.</a></td></tr> <tr><td id="i12" style="padding:0; padding-top:6px; font-family:'Segoe UI', Tahoma, Verdana, Arial, sans-serif; font-size:14px; color:#2a2a2a;"><a id="iLink4" class="link" style="color:#2672ec; text-decoration:none" href="https://account.live.com/Proofs/Manage">2. Review your security info.</a></td></tr> <tr><td id="i13" style="padding:0; padding-top:6px; font-family:'Segoe UI', Tahoma, Verdana, Arial, sans-serif; font-size:14px; color:#2a2a2a;"><a id="iLink2" class="link" style="color:#2672ec; text-decoration:none" href="http://go.microsoft.com/fwlink/?LinkID=324395">3. Learn how to make your account more secure.</a></td></tr> <tr><td id="i14" style="padding:0; padding-top:25px; font-family:'Segoe UI', Tahoma, Verdana, Arial, sans-serif; font-size:14px; color:#2a2a2a;">You can also <a id="iLink3" class="link" style="color:#2672ec; text-decoration:none" href="https://account.live.com/SecurityNotifications/Update">opt out</a> or change where you receive security notifications.</td></tr> <tr><td id="i15" style="padding:0; padding-top:25px; font-family:'Segoe UI', Tahoma, Verdana, Arial, sans-serif; font-size:14px; color:#2a2a2a;">Thanks,</td></tr> <tr><td id="i16" style="padding:0; font-family:'Segoe UI', Tahoma, Verdana, Arial, sans-serif; font-size:14px; color:#2a2a2a;">The Microsoft account team</td></tr> </table> </body> </html> --=-BQ70aG/SbhmJUICvaSLliA==--