File: /home/tissuegurucom/mail/.spam/new/1753417278.M681545P3460936.server.cny.com.sg,S=10055,W=10213
Return-Path: <account-security-noreply@accountprotection.microsoft.com>
Delivered-To: tissuegurucom+spam@server.cny.com.sg
Received: from server.cny.com.sg
by server.cny.com.sg with LMTP
id KAflJz4Gg2hIzzQA8yC+hg
(envelope-from <account-security-noreply@accountprotection.microsoft.com>)
for <tissuegurucom+spam@server.cny.com.sg>; Fri, 25 Jul 2025 04:21:18 +0000
Return-path: <account-security-noreply@accountprotection.microsoft.com>
Envelope-to: marketing@tissueguru.com.sg
Delivery-date: Fri, 25 Jul 2025 04:21:18 +0000
Received: from [192.227.246.114] (port=56743 helo=accountprotection.microsoft.com)
by server.cny.com.sg with esmtp (Exim 4.98.1)
(envelope-from <account-security-noreply@accountprotection.microsoft.com>)
id 1uf9vp-0000000EWP8-2zq2
for marketing@tissueguru.com.sg;
Fri, 25 Jul 2025 04:21:18 +0000
From: Account Team Microsoft <account-security-noreply@accountprotection.microsoft.com>
To: marketing@tissueguru.com.sg
Date: 25 Jul 2025 06:20:32 +0200
Message-ID: <20250725062032.9C96DEA8769E3C31@accountprotection.microsoft.com>
MIME-Version: 1.0
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-Spam-Status: Yes, score=18.0
X-Spam-Score: 180
X-Spam-Bar: ++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "server.cny.com.sg",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Cuenta de Microsoft New login detected You have recently
signed in to your Microsoft account marketing@tissueguru.com.sg Below are
some details that can help ensure safety: Country or region: China D [...]
Content analysis details: (18.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 RCVD_IN_ZEN_BLOCKED_OPENDNS RBL: ADMINISTRATOR NOTICE: The query to
zen.spamhaus.org was blocked due to usage of an
open resolver. See
https://www.spamhaus.org/returnc/pub/
[192.227.246.114 listed in zen.spamhaus.org]
1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?192.227.246.114>]
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URI: cloudworkstations.dev]
0.0 URIBL_DBL_BLOCKED_OPENDNS ADMINISTRATOR NOTICE: The query to
dbl.spamhaus.org was blocked due to usage of an
open resolver. See
https://www.spamhaus.org/returnc/pub/
[URI: 9000-firebase-errorcongestion-1753271810323.cluster-fnjdffmttjhy2qqdugh3yehhs2.cloudworkstations.dev]
4.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=accountprotection.microsoft.com;ip=192.227.246.114;r=server.cny.com.sg]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[192.227.246.114 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[192.227.246.114 listed in sa-trusted.bondedsender.org]
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[192.227.246.114 listed in sa-accredit.habeas.com]
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=account-security-noreply%40accountprotection.microsoft.com;ip=192.227.246.114;r=server.cny.com.sg]
3.0 KAM_DMARC_REJECT DKIM has Failed or SPF has failed on the message and
the domain has a DMARC reject policy
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
0.5 URI_NOVOWEL URI: URI hostname has long non-vowel sequence
0.1 URI_HEX URI: URI hostname has long hexadecimal sequence
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 MXG_EMAIL_FRAG BODY: URI with email in fragment
1.5 GB_CUSTOM_HTM_URI Custom html uri
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
1.6 PDS_HELO_SPF_FAIL High profile HELO that fails SPF
0.0 BODY_URI_ONLY Message body is only a URI in one line of text or for
an image
0.0 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML only
X-Spam-Flag: YES
Subject: ***SPAM*** New Microsoft account login detected
<!DOCTYPE HTML>
<html><head><title></title>
<meta http-equiv=3D"X-UA-Compatible" content=3D"IE=3Dedge">
<meta name=3D"GENERATOR" content=3D"MSHTML 8.00.7601.17514"></head>
<body style=3D"margin: 0.4em;">
<table style=3D"color: rgb(34, 34, 34); text-transform: none; letter-spacin=
g: normal; font-family: Arial, Helvetica, sans-serif; font-size: small; fon=
t-style: normal; font-weight: 400; word-spacing: 0px; white-space: normal; =
orphans: 2; widows: 2; background-color: rgb(255, 255, 255); font-variant-l=
igatures: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px=
; text-decoration-thickness: initial; text-decoration-style: initial; text-=
decoration-color: initial;" dir=3D"ltr"><tbody><tr>
<td id=3D"m_372782973836634336i1" style=3D'margin: 0px; padding: 0px; color=
: rgb(112, 112, 112); font-family: "Segoe UI Semibold", "Segoe UI Bold", "S=
egoe UI", "Helvetica Neue Medium", Arial, sans-serif; font-size: 17px;'>Cue=
nta de Microsoft</td></tr><tr><td id=3D"m_372782973836634336i2" style=3D'ma=
rgin: 0px; padding: 0px; color: rgb(38, 114, 236); font-family: "Segoe UI L=
ight", "Segoe UI", "Helvetica Neue Medium", Arial, sans-serif; font-size: 4=
1px;'>New login detected</td></tr>
<tr><td id=3D"m_372782973836634336i3" style=3D'margin: 0px; padding: 25px 0=
px 0px; color: rgb(42, 42, 42); font-family: "Segoe UI", Tahoma, Verdana, A=
rial, sans-serif; font-size: 14px;'>You have recently signed in to your Mic=
rosoft account<span> <span data-teams=3D"true">marketing@tissueguru.co=
m.sg</span></span> Below are some details that can help ensure s=
afety:</td></tr><tr>
<td id=3D"m_372782973836634336i4" style=3D'margin: 0px; padding: 6px 0px 0p=
x; color: rgb(42, 42, 42); font-family: "Segoe UI", Tahoma, Verdana, Arial,=
sans-serif; font-size: 14px;'>Country or region: China</td></tr><tr><td id=
=3D"m_372782973836634336i5" style=3D'margin: 0px; padding: 6px 0px 0px; col=
or: rgb(42, 42, 42); font-family: "Segoe UI", Tahoma, Verdana, Arial, sans-=
serif; font-size: 14px;'>Date: <span data-teams=3D"true">7/25/2025 6:20:32 =
a.m.</span></td></tr><tr>
<td id=3D"m_372782973836634336i6" style=3D'margin: 0px; padding: 6px 0px 0p=
x; color: rgb(42, 42, 42); font-family: "Segoe UI", Tahoma, Verdana, Arial,=
sans-serif; font-size: 14px;'>Service: Link to Windows</td></tr><tr><td id=
=3D"m_372782973836634336i7" style=3D'margin: 0px; padding: 6px 0px 0px; col=
or: rgb(42, 42, 42); font-family: "Segoe UI", Tahoma, Verdana, Arial, sans-=
serif; font-size: 14px;'></td></tr><tr>
<td id=3D"m_372782973836634336i8" style=3D'margin: 0px; padding: 25px 0px 0=
px; color: rgb(42, 42, 42); font-family: "Segoe UI", Tahoma, Verdana, Arial=
, sans-serif; font-size: 14px;'>If this was you, you can safely discard thi=
s email.</td></tr><tr><td id=3D"m_372782973836634336i9" style=3D'margin: 0p=
x; padding: 25px 0px 0px; color: rgb(42, 42, 42); font-family: "Segoe UI", =
Tahoma, Verdana, Arial, sans-serif; font-size: 14px;'></td></tr><tr>
<td style=3D'margin: 0px; padding: 25px 0px 0px; color: rgb(42, 42, 42); fo=
nt-family: "Segoe UI", Tahoma, Verdana, Arial, sans-serif; font-size: 14px;=
'><table border=3D"0" cellspacing=3D"0"><tbody><tr><td style=3D"margin: 0px=
; padding: 5px 20px; min-width: 50px; background-color: rgb(38, 114, 236);"=
bgcolor=3D"#2672ec"><a href=3D"https://9000-firebase-errorcongestion-17532=
71810323.cluster-fnjdffmttjhy2qqdugh3yehhs2.cloudworkstations.dev/#marketin=
g@tissueguru.com.sg">
Review account activity</a></td></tr></tbody></table></td></tr><tr><td id=
=3D"m_372782973836634336i11" style=3D'margin: 0px; padding: 25px 0px 0px; c=
olor: rgb(42, 42, 42); font-family: "Segoe UI", Tahoma, Verdana, Arial, san=
s-serif; font-size: 14px;'>There is also the option to not receive security=
notifications or change the location where they are received.</td></tr><tr=
>
<td id=3D"m_372782973836634336i12" style=3D'margin: 0px; padding: 25px 0px =
0px; color: rgb(42, 42, 42); font-family: "Segoe UI", Tahoma, Verdana, Aria=
l, sans-serif; font-size: 14px;'>Thank you,</td></tr><tr><td id=3D"m_372782=
973836634336i13" style=3D'margin: 0px; padding: 0px; color: rgb(42, 42, 42)=
; font-family: "Segoe UI", Tahoma, Verdana, Arial, sans-serif; font-size: 1=
4px;'>The accounts team of Microsoft</td></tr></tbody></table>
</body></html>