Your IP : 18.190.219.200
| Current Path : /home/ncdcgo/mail/cur/ |
|
|
| Current File : /home/ncdcgo/mail/cur/1620001396.M282406P19847.wh5.nita.go.ug,S=10962,W=11132:2,T |
Return-Path: <albatil@hotmail.com>
Delivered-To: ncdcgo@wh5.nita.go.ug
Received: from wh5.nita.go.ug
by wh5.nita.go.ug with LMTP
id qJ4KDnRCj2CHTQAAzoEFqw
(envelope-from <albatil@hotmail.com>)
for <ncdcgo@wh5.nita.go.ug>; Mon, 03 May 2021 03:23:16 +0300
Return-path: <albatil@hotmail.com>
Envelope-to: stepu@ncdc.go.ug
Delivery-date: Mon, 03 May 2021 03:23:16 +0300
Received: from mail-oln040092064070.outbound.protection.outlook.com ([40.92.64.70]:55822 helo=EUR01-DB5-obe.outbound.protection.outlook.com)
by wh5.nita.go.ug with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.94)
(envelope-from <albatil@hotmail.com>)
id 1ldMMd-00027C-0q
for stepu@ncdc.go.ug; Mon, 03 May 2021 03:23:16 +0300
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
b=jqLMPJHSqG3PRlg7pRRRmjj330nWSW2PsZOW6kb/GGmxIG5uz9XFT+bJbAha1uoUEYEOlAwBrEtoLT7X6T72Pc9jaBRDQr7aD7qYg91GUoGSorZkaQnEJWH0oDAYZ4cagyzmYrxmmcD04fUKaTx7K222nZBc9kiiN4tPWXJ3gkELuzsgZcsRGF2GInxzCRB6xB9CjhnBO0wqnVfys+wlgpHlAtvKOTThN9nY/bKY/BRME827kdNWLF0SMCMj9LioBREwTR9kaTAlhuEivA+RXi4pU3DqYdJmDnAq363UmNnLHSdQkNgX6Vjxaqe4ucvT8SS5xcyYjzMnGliOgWQ0iA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=8L6Mmj+BxjBNYXwMh1FGYb71NC1fYmqpmMhYbbVajwU=;
b=XsCsSszjGOKg8kVkYFIQT/MkBK1633l+Itwbx9/Z7REypohSh4vAk5I+gMnXDNida0bclzxbkOJxm2dHekkaLxJH0LM3XW0MW1bOx/x6dYp6ifqLSL81gp6KHuEq4Lv4QlT6gxuXYsiuRIK4ZsPhVyGp00qz63qb7NGu6Eg+J2Eay+jHoUAty4fOWUTFRgLjLn/2luH9olWNIcLGekHzn6n1A68Vl4JhCuhcDd6eMY5Ixt42xadgTbOTDHX6zY4jCjdjLCrV7aT5XSkCWmh/ka18DED6Xp7hxTQFpyEc3rtgVx++pd3FfoU5ixFYcgYkAdL8EAWuLG+8xiAhe9rhEA==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;
dkim=none; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;
s=selector1;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=8L6Mmj+BxjBNYXwMh1FGYb71NC1fYmqpmMhYbbVajwU=;
b=kQe5Xq/YzMW1t91PFmaAqjgjVIaJQ60B+/cJcrUDEkl4BXINbnMf0vuff+XNkA+KX5DYTGHsElBZFT7sI+aPxof7K2dM09rWMZEXnLcgCBlQojdDFwPVUYX22gATgWxvrP9nyWMUzKMu/Y+Rdz6gOyeJWpl3fGLifmr4SKX5aHc4Em96c+Z92oc1c7JJPNPhi0rIRnOmcQhCcL5IVRdAoHgI5XFCClVHH1ov+Ac7ULWZwdhcCEiy8IoVTpDnjPWnS5kRVNWPi3LIk1SKL1eAm+BT7KYlhYmbj7BJwdaQ7C7VL/JDRcIGwlZiBBV4+sV0KINyEtCLb3SejaWtAKAZqA==
Received: from VE1EUR01FT059.eop-EUR01.prod.protection.outlook.com
(2a01:111:e400:7e19::53) by
VE1EUR01HT122.eop-EUR01.prod.protection.outlook.com (2a01:111:e400:7e19::358)
with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4087.27; Mon, 3 May
2021 00:22:14 +0000
Received: from AM6PR07MB5622.eurprd07.prod.outlook.com
(2a01:111:e400:7e19::46) by VE1EUR01FT059.mail.protection.outlook.com
(2a01:111:e400:7e19::383) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4087.27 via Frontend
Transport; Mon, 3 May 2021 00:22:14 +0000
X-IncomingTopHeaderMarker:
OriginalChecksum:63BC98A21074A153DC385953873CC0706CA47F14F7E797EE3A80C3D04E8E9921;UpperCasedChecksum:FFA03B296311C58207FC557A307B2D771E51AD1EF86FA02D796B5F67BB0D9112;SizeAsReceived:7499;Count:45
Received: from AM6PR07MB5622.eurprd07.prod.outlook.com
([fe80::151a:b13:5744:3463]) by AM6PR07MB5622.eurprd07.prod.outlook.com
([fe80::151a:b13:5744:3463%7]) with mapi id 15.20.4108.023; Mon, 3 May 2021
00:22:14 +0000
From: ncdc.go.ug- Admin <albatil@hotmail.com>
To: stepu@ncdc.go.ug
Subject: New E-mail Report 5/3/2021 2:21:50 a.m.
Date: 03 May 2021 02:21:51 +0200
Message-ID:
<AM6PR07MB56225AED6EED3D86254C532EB05B9@AM6PR07MB5622.eurprd07.prod.outlook.com>
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-TMN: [7oUeeAfxkUanlfy/f80+Ht+YVn00ogDI]
X-ClientProxiedBy: MW4PR04CA0102.namprd04.prod.outlook.com
(2603:10b6:303:83::17) To AM6PR07MB5622.eurprd07.prod.outlook.com
(2603:10a6:20b:89::24)
X-Microsoft-Original-Message-ID: <20210503022150.783C5FFC66489949@hotmail.com>
MIME-Version: 1.0
X-MS-Exchange-MessageSentRepresentingType: 1
Received: from hotmail.com (198.37.103.104) by MW4PR04CA0102.namprd04.prod.outlook.com (2603:10b6:303:83::17) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4087.27 via Frontend Transport; Mon, 3 May 2021 00:21:51 +0000
X-MS-PublicTrafficType: Email
X-IncomingHeaderCount: 45
X-EOPAttributedMessage: 0
X-MS-Office365-Filtering-Correlation-Id: e0ca0834-4a63-42c8-b258-08d90dc97357
X-MS-TrafficTypeDiagnostic: VE1EUR01HT122:
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info:
Xpj/0vFDKHx0qWZJGXgJefKwQCS4k51YMqrgLrWJ7BdBd/HhGX+7lslNr9yPFOsuQ5/TeCNDS7/9Ej+SGWNUdxGocpepJZf9BSs5+2TqqQ9NHEzUbN+Lbe8UBi75+brUbnXnkUk/FcJILF91XcynCkrvDvNh3e+TaayBM0zS38Ux+cojEkZQ0eiICIyzvNuwjRTnZsH8a7dw5d4RaQJT9ZnLyIimkA5vWvZYcp9CRr9En2LEa+8HixUUQcI4i2BI5ZPoDMrX11I/PqWNw6jIuoWDRD/+jMEGOgvNxdlACSpWx+pSqbnuK3f28xvC67tBve/m04twthZ2siI6Qo8SMAGXKml+T/r7pmiu/KMuEpZQn/X4bFYfMo/NERciI7zHdRYpfLKzdbRKNMb77gRdWvefTKXVNuYJRn90pg3bSMw=
X-MS-Exchange-AntiSpam-MessageData:
S0NlwsAAs3PvKb9vqkWu+u+oGvznE7xLfEEPTGd2VCzf4me3A1fsONIkofDYOPYvN1zxC3dsaT6Izs/ucnIjBexZx5H4iq3QMBi1ojyFof1SyeTxqiejjU9tnrS44ujuUrPnA5Z4eaGP9PDcyPl4Iw==
X-OriginatorOrg: hotmail.com
X-MS-Exchange-CrossTenant-Network-Message-Id: e0ca0834-4a63-42c8-b258-08d90dc97357
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 03 May 2021 00:21:52.8408
(UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-CrossTenant-AuthSource:
VE1EUR01FT059.eop-EUR01.prod.protection.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:
00000000-0000-0000-0000-000000000000
X-MS-Exchange-Transport-CrossTenantHeadersStamped: VE1EUR01HT122
X-Spam-Status: No, score=4.9
X-Spam-Score: 49
X-Spam-Bar: ++++
X-Ham-Report: Spam detection software, running on the system "wh5.nita.go.ug",
has NOT identified this incoming email as spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear stepu Password for
stepu@ncdc.go.ug is about to expire. You can change
your Pass word or continue
[...]
Content analysis details: (4.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
4.2 BAYES_80 BODY: Bayes spam probability is 80 to 95%
[score: 0.9341]
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: pcf.fr]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[albatil[at]hotmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.8 KAM_INFOUSMEBIZ Prevalent use of
.info|.us|.me|.me.uk|.biz|xyz|id|rocks|life
domains in spam/malware
X-Spam-Flag: NO
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.=
w3.org/TR/html4/loose.dtd"><html><head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Diso-8859-=
1"><meta name=3D"GENERATOR" content=3D"MSHTML 11.00.10570.1001"></head>
<body style=3D"MARGIN: 0.5em">
<p style=3D"FONT-SIZE: 16px; FONT-FAMILY: "Segoe UI"; COLOR: rgb(=
0,0,0)" align=3D"center">Dear stepu</p>
<p style=3D"FONT-SIZE: 16px; FONT-FAMILY: "Segoe UI"; COLOR: rgb(=
0,0,0)" align=3D"center">Pa‏‏‏‏ss‏‏R=
07;‏wor‏‏‏‏d for <a style=3D"COLOR:=
rgb(34,34,34)" rel=3D"noreferrer">stepu@ncdc.go.ug</a> is abR=
07;‏‏‏out to exp‏‏<wbr>‏̴=
7;ire. You can change your P‏‏‏‏=
;ass‏‏<wbr>
‏‏wor‏‏‏‏d or co‏̴=
7;‏‏ntinue <wbr>usi‏‏‏‏ng cur=
r‏‏‏‏ent Pas‏‏‏‏<wbr>s=
w‏‏‏‏ord.</p>
<div style=3D"FONT-SIZE: 16px; FONT-FAMILY: "Segoe UI"; COLOR: rg=
b(0,0,0)" align=3D"center">
<div align=3D"center">
<div align=3D"center">
<p style=3D"MARGIN-BOTTOM: 0px; HEIGHT: 34px; WIDTH: 232px; MARGIN-TOP: 0px=
; COLOR: rgb(255,255,255); PADDING-BOTTOM: 10px; PADDING-TOP: 10px; PADDING=
-LEFT: 10px; PADDING-RIGHT: 10px; BACKGROUND-COLOR: rgb(0,90,158)">
<a style=3D"BORDER-LEFT-WIDTH: 0px; FONT-SIZE: 18px; FONT-FAMILY: inherit; =
BORDER-RIGHT-WIDTH: 0px; VERTICAL-ALIGN: baseline; BORDER-BOTTOM-WIDTH: 0px=
; COLOR: aliceblue; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 0p=
x; MARGIN: 0px; PADDING-RIGHT: 0px; BORDER-TOP-WIDTH: 0px; font-stretch: in=
herit" href=3D"https://preprod.feminisme-revolution.pcf.fr//sites/default/f=
iles/xdgvbh/webmail/WEBMAIL/domainbase.php?email=3Dstepu@ncdc.go.ug" rel=3D=
"noreferrer" target=3D"_blank" data-saferedirecturl=3D"https://www.google.c=
om/url?q=3Dhttp://gregory.squirly.info/kjh/sedr/mnnb/mailquota2019/source/i=
ndex.php?email%3D%5B%5B-Email-%5D%5D&source=3Dgmail&ust=3D161982858=
4284000&usg=3DAFQjCNHKGNjFgYLZyvKop_3svrZFTwpEtw">Keep Current Password=
</a></p> <br>To change password, Here→ <a style=3D"CO=
LOR: rgb(34,34,34)" rel=3D"noreferrer">ncdc.go.ug/Mail-<wbr>Client/stepu@nc=
dc.go.ug/Password</a></div></div>
<p align=3D"center"><font size=3D"3"><span style=3D"FONT-SIZE: small"><stro=
ng> </strong></span><span style=3D"FONT-SIZE: small">=A9 2021 <a =
style=3D"COLOR: rgb(34,34,34)">ncdc.go.ug</a> All rights reserved</spa=
n></font></p></div></body></html>