JezK
Edit File: 1647630970.M268822P154987.mocha3025.mochahost.com,S=13028,W=13319:2,S
Received: from accountprotection.microsoft.com (52.234.111.146) by CO1NAM11FT053.mail.protection.outlook.com (10.13.175.63) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3955.18 via Frontend Transport; Tue, 30 Mar 2021 06:00:12 +0000 Received: from mail-dm6nam11on2066.outbound.protection.outlook.com ([40.107.223.66]:63680 helo=NAM11-DM6-obe.outbound.protection.outlook.com) by mocha3025.mochahost.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.93) (envelope-from <account-security-noreply@accountprotection.microsoft.com>) id 1lR7Qs-00Asuh-20 for dr.tokhi@jack.ngo; Tue, 30 Mar 2021 02:00:58 -0400 Received: from mocha3025.mochahost.com by mocha3025.mochahost.com with LMTP id UCs9AZu+YmAilicAaMJ/gg (envelope-from <account-security-noreply@accountprotection.microsoft.com>) for <dr.tokhi@jack.ngo>; Tue, 30 Mar 2021 02:00:59 -0400 Received: from CO1NAM11FT053.eop-nam11.prod.protection.outlook.com (2603:10b6:303:b6:cafe::33) by MW4PR03CA0066.outlook.office365.com (2603:10b6:303:b6::11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3977.26 via Frontend Transport; Tue, 30 Mar 2021 06:00:12 +0000 Received: from MW4PR03CA0066.namprd03.prod.outlook.com (2603:10b6:303:b6::11) by SA2PR16MB4106.namprd16.prod.outlook.com (2603:10b6:806:145::8) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3977.25; Tue, 30 Mar 2021 06:00:13 +0000 Return-Path: <account-security-noreply@accountprotection.microsoft.com> From: "Microsoft account team" <account-security-noreply@accountprotection.microsoft.com> To: <dr.tokhi@jack.ngo> Subject: Microsoft account password change Date: Tue, 30 Mar 2021 10:30:08 +0430 Message-ID: <XQZ77OWACDU4.MUDC3ZRVLR7Y2@BY1PEPF00001EEC> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_3B997_01D83B22.586D6200" X-Priority: 3 X-Mailer: Microsoft Outlook 16.0 Thread-Index: AQFydENOP0hThk8CyFmhbNwGJTT2Yw== X-OlkEid: 000000005FCBC13F93E5A7478B89D20520A2ADCA0700C3B68E10F77511CEB4CD00AA00BBB6E600000000000C00005699424C4FF4794B83FDE3A0EC838359000000002ABF00009E989E7AB59A43459AF7F6D66ACB8096 X-Spam-Status: No, score=-15.6 X-Spam-Score: -155 X-Spam-Bar: --------------- X-Ham-Report: Spam detection software, running on the system "mocha3025.mochahost.com", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Your password for the Microsoft account dr*****@jack.ngo was changed on 3/30/2021 6:00 AM (GMT). Security info used: 93799612015 Country/region: Afghanistan Platform: Windows Browser: Microsoft Edge IP address: 103.215.210.12 Content analysis details: (-15.6 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: live.com] -0.0 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2) [40.107.223.66 listed in wl.mailspike.net] -7.5 USER_IN_DEF_SPF_WL From: address is in the default SPF white-list -7.5 USER_IN_DEF_DKIM_WL From: address is in the default DKIM white-list -0.0 SPF_PASS SPF: sender matches SPF record -0.0 SPF_HELO_PASS SPF: HELO matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's domain -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid -0.5 ENV_AN D_H DR_ SPF _MA TCH E nv and Hd r F rom us ed in def aul t S PF WL Mat ch X-Spam-Flag: NO x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 7fa15abc-ba61-4cb2-e5e6-08d8f34114ed x-ms-traffictypediagnostic: SA2PR16MB4106:FirstParty-MicrosoftAccount-System x-microsoft-antispam-prvs: <SA2PR16MB41068F73918215364FE31D20897D9@SA2PR16MB4106.namprd16.prod.outlook.com> x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:52.234.111.146;CTRY:US;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:accountprotection.microsoft.com;PTR:InfoDomainNonexistent;CAT:NONE;SFS:;DIR:OUT;SFP:1101; X-OriginatorOrg: accountprotection.microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: 7fa15abc-ba61-4cb2-e5e6-08d8f34114ed X-MS-Exchange-CrossTenant-originalarrivaltime: 30 Mar 2021 06:00:12.1394 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Internet X-MS-Exchange-CrossTenant-id: 5ba90553-c2cd-460e-b5fd-ab93ad9155c7 X-MS-Exchange-Transport-CrossTenantHeadersStamped: SA2PR16MB4106 x-ms-oob-tlc-oobclassifiers: OLM:792; x-ms-exchange-antispam-messagedata: J/FduGYjlx+KyYqeR6laqkhYRgToN0kZLJz5hSjaOTE4KcSSqe5jdrmlNZYqMEtyG83ikFQEtjmIknJOEdWUAZ7JrkFwyXlBgRybAANtbEBOR6Q7cAG3bL6i8T2/jBozkDNnNbriWfG6tAF+78D2ErLrTUpa21+cwi1Jt683WxmBze1QZ9kF4vfl4mIqjUVQOOmANG8eG/CL0pnHWHg7ItaQWE7R2vlIXvwUY10vDgmHJgiXRpHqBNdhHZYtYm2Y X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: TreatMessagesAsInternal-CO1NAM11FT053.eop-nam11.prod.protection.outlook.com X-MSAPipeline: MessageDispatcherEOP X-MSAMetaData: =?us-ascii?q?DU2jGtqWfhY9XqqL5KPNmITjTWUM01fyxRHUpxXnSO71UzxLx7N1fmGrE!0lR?= =?us-ascii?q?cSTXtmmGYsBUoNWdh5MJTcHjcQnE!PSEzG8vjvMTgqkhca6!dryT0cMkiAdb1?= =?us-ascii?q?PyddKO7g$$?= X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=5ba90553-c2cd-460e-b5fd-ab93ad9155c7;Ip=[52.234.111.146];Helo=[accountprotection.microsoft.com] X-MS-Exchange-Authentication-Results: spf=none (sender IP is 52.234.111.146) smtp.mailfrom=accountprotection.microsoft.com; jack.ngo; dkim=none (message not signed) header.d=none;jack.ngo; dmarc=none action=none header.from=accountprotection.microsoft.com; This is a multipart message in MIME format. ------=_NextPart_000_3B997_01D83B22.586D6200 Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: 7bit Microsoft account Your password changed Your password for the Microsoft account dr*****@jack.ngo <mailto:dr*****@jack.ngo> was changed on 3/30/2021 6:00 AM (GMT). If this was you, then you can safely ignore this email. Security info used: 93799612015 Country/region: Afghanistan Platform: Windows Browser: Microsoft Edge IP address: 103.215.210.12 If this wasn't you, your account has been compromised. Please follow these steps: 1. Reset your password. <https://account.live.com/pw> 2. Review your security info. <https://account.live.com/Proofs/Manage> 3. Learn how to make your account more secure. <http://go.microsoft.com/fwlink/?LinkID=324395> You can also opt out <https://account.live.com/SecurityNotifications/Update> or change where you receive security notifications. Thanks, The Microsoft account team ------=_NextPart_000_3B997_01D83B22.586D6200 Content-Type: text/html; boundary="=-Dcf3Yq1RO7TnUupKXKNT+w=="; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" = "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html xmlns=3D"http://www.w3.org/1999/xhtml" dir=3D"ltr">=20 <head> <style type=3D"text/css"> .link:link, .link:active, .link:visited { color:#2672ec !important; text-decoration:none !important; } .link:hover { color:#4284ee !important; text-decoration:none !important; } </style> <title></title> </head> <body> <table dir=3D"ltr"> <tr><td id=3D"i1" style=3D"padding:0; font-family:'Segoe UI = Semibold', 'Segoe UI Bold', 'Segoe UI', 'Helvetica Neue Medium', Arial, = sans-serif; font-size:17px; color:#707070;">Microsoft account</td></tr> <tr><td id=3D"i2" style=3D"padding:0; font-family:'Segoe UI = Light', 'Segoe UI', 'Helvetica Neue Medium', Arial, sans-serif; = font-size:41px; color:#2672ec;">Your password changed</td></tr> <tr><td id=3D"i3" style=3D"padding:0; padding-top:25px; = font-family:'Segoe UI', Tahoma, Verdana, Arial, sans-serif; = font-size:14px; color:#2a2a2a;">Your password for the Microsoft account = <a dir=3D"ltr" id=3D"iAccount" class=3D"link" style=3D"color:#2672ec; = text-decoration:none" = href=3D"mailto:dr*****@jack.ngo">dr*****@jack.ngo</a> was changed on = 3/30/2021 6:00 AM (GMT).</td></tr> <tr><td id=3D"i4" style=3D"padding:0; padding-top:25px; = font-family:'Segoe UI', Tahoma, Verdana, Arial, sans-serif; = font-size:14px; color:#2a2a2a;">If this was you, then you can safely = ignore this email.</td></tr> <tr><td id=3D"i5" style=3D"padding:0; padding-top:25px; = font-family:'Segoe UI', Tahoma, Verdana, Arial, sans-serif; = font-size:14px; color:#2a2a2a;">Security info used: = 93799612015</td></tr> <tr><td id=3D"i6" style=3D"padding:0; padding-top:6px; = font-family:'Segoe UI', Tahoma, Verdana, Arial, sans-serif; = font-size:14px; color:#2a2a2a;">Country/region: Afghanistan</td></tr> <tr><td id=3D"i7" style=3D"padding:0; padding-top:6px; = font-family:'Segoe UI', Tahoma, Verdana, Arial, sans-serif; = font-size:14px; color:#2a2a2a;">Platform: Windows</td></tr> <tr><td id=3D"i8" style=3D"padding:0; padding-top:6px; = font-family:'Segoe UI', Tahoma, Verdana, Arial, sans-serif; = font-size:14px; color:#2a2a2a;">Browser: Microsoft Edge</td></tr> <tr><td id=3D"i9" style=3D"padding:0; padding-top:6px; = font-family:'Segoe UI', Tahoma, Verdana, Arial, sans-serif; = font-size:14px; color:#2a2a2a;">IP address: 103.215.210.12</td></tr> <tr><td id=3D"i10" style=3D"padding:0; padding-top:25px; = font-family:'Segoe UI', Tahoma, Verdana, Arial, sans-serif; = font-size:14px; color:#2a2a2a;">If this wasn't you, your account has = been compromised. Please follow these steps:</td></tr> <tr><td id=3D"i11" style=3D"padding:0; padding-top:6px; = font-family:'Segoe UI', Tahoma, Verdana, Arial, sans-serif; = font-size:14px; color:#2a2a2a;"><a id=3D"iLink1" class=3D"link" = style=3D"color:#2672ec; text-decoration:none" = href=3D"https://account.live.com/pw">1. Reset your = password.</a></td></tr> <tr><td id=3D"i12" style=3D"padding:0; padding-top:6px; = font-family:'Segoe UI', Tahoma, Verdana, Arial, sans-serif; = font-size:14px; color:#2a2a2a;"><a id=3D"iLink4" class=3D"link" = style=3D"color:#2672ec; text-decoration:none" = href=3D"https://account.live.com/Proofs/Manage">2. Review your security = info.</a></td></tr> <tr><td id=3D"i13" style=3D"padding:0; padding-top:6px; = font-family:'Segoe UI', Tahoma, Verdana, Arial, sans-serif; = font-size:14px; color:#2a2a2a;"><a id=3D"iLink2" class=3D"link" = style=3D"color:#2672ec; text-decoration:none" = href=3D"http://go.microsoft.com/fwlink/?LinkID=3D324395">3. Learn how to = make your account more secure.</a></td></tr> <tr><td id=3D"i14" style=3D"padding:0; padding-top:25px; = font-family:'Segoe UI', Tahoma, Verdana, Arial, sans-serif; = font-size:14px; color:#2a2a2a;">You can also <a id=3D"iLink3" = class=3D"link" style=3D"color:#2672ec; text-decoration:none" = href=3D"https://account.live.com/SecurityNotifications/Update">opt = out</a> or change where you receive security notifications.</td></tr> <tr><td id=3D"i15" style=3D"padding:0; padding-top:25px; = font-family:'Segoe UI', Tahoma, Verdana, Arial, sans-serif; = font-size:14px; color:#2a2a2a;">Thanks,</td></tr> <tr><td id=3D"i16" style=3D"padding:0; font-family:'Segoe UI', = Tahoma, Verdana, Arial, sans-serif; font-size:14px; color:#2a2a2a;">The = Microsoft account team</td></tr> </table> </body> </html> ------=_NextPart_000_3B997_01D83B22.586D6200--