Hoax Clearing Center

X-He-Spam-Score: 6.7

Return-Path: <account-security-noreply@turnbackhoax.id>

Delivered-To: dropbox@plan.io

Received: from m.launch.gmbh ([127.0.0.1])

by m.launch.gmbh with LMTP id sOe5OgH8XWK9QgAAJzdhvw

for <dropbox@plan.io>; Tue, 19 Apr 2022 02:02:09 +0200

X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on m.launch.gmbh

X-Spam-Flag: YES

X-Spam-Level: ******

X-Spam-Status: Yes, score=6.7 required=5.0 tests=BAYES_00,DMARC_NONE,

GOOG_STO_EMAIL_PHISH,GOOG_STO_NOIMG_HTML,HTML_MESSAGE,MIME_HTML_ONLY,

RCVD_IN_DNSWL_NONE,RCVD_IN_MSPIKE_BL,RCVD_IN_MSPIKE_L4,RCVD_IN_SBL_CSS,

SPF_HELO_NONE,SPF_PASS,T_SCC_BODY_TEXT_LINE autolearn=no

autolearn_force=no version=3.4.2

X-Spam-Report:

* -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at

* https://www.dnswl.org/, no trust

* [64.90.62.164 listed in list.dnswl.org]

* 3.3 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

* [45.137.22.184 listed in zen.spamhaus.org]

* -1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1%

* [score: 0.0000]

* -0.1 SPF_PASS SPF check passed

* 0.1 DMARC_NONE DMARC record not found

* 0.0 RCVD_IN_MSPIKE_L4 RBL: Bad reputation (-4)

* [64.90.62.164 listed in bl.mailspike.net]

* 0.0 SPF_HELO_NONE SPF: HELO does not publish an SPF Record

* 0.0 HTML_MESSAGE BODY: HTML included in message

* 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

* 0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted

* -0.0 T_SCC_BODY_TEXT_LINE No description available.

* 3.0 GOOG_STO_NOIMG_HTML Apparently using google content hosting to

* avoid URIBL

* 2.2 GOOG_STO_EMAIL_PHISH Possible phishing with google hosted

* content URI having email address

X-Spam-Score: 6.7

Envelope-to: inbox+rlxc+36be+hoax-clearing-center@plan.io

Authentication-Results: m.launch.gmbh; dmarc=none (p=none dis=none) header.from=turnbackhoax.id

Authentication-Results: m.launch.gmbh; spf=pass smtp.mailfrom=account-security-noreply@turnbackhoax.id

Authentication-Results: m.launch.gmbh; dkim=none; dkim-atps=neutral

Received: from pdx1-sub0-mail-mx203.dreamhost.com (mx2.dreamhost.com [64.90.62.164])

(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits))

(No client certificate requested)

by m.launch.gmbh (Postfix) with ESMTPS id 6031682D3D

for <inbox+rlxc+36be+hoax-clearing-center@plan.io>; Tue, 19 Apr 2022 02:02:09 +0200 (CEST)

Received: from postfix-inbound-v2-1.inbound.mailchannels.net (inbound-egress-6.mailchannels.net [199.10.31.238])

(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))

(No client certificate requested)

by pdx1-sub0-mail-mx203.dreamhost.com (Postfix) with ESMTPS id 4Kj3rZ419wz1k0S

for <lapor@turnbackhoax.id>; Mon, 18 Apr 2022 17:02:06 -0700 (PDT)

Received: from inbound-trex-0 (unknown [127.0.0.6])

by postfix-inbound-v2-1.inbound.mailchannels.net (Postfix) with ESMTP id DFCBDC02E2

for <lapor@turnbackhoax.id>; Tue, 19 Apr 2022 00:02:05 +0000 (UTC)

ARC-Seal: i=1; s=arc-2022; d=mailchannels.net; t=1650326525; a=rsa-sha256;

cv=none;

b=vjJwJTWfWWP6g+s2M+bLAMtcrxhRGu4BnmqFv8vp2Rt0oVqlmROLb2Pq7K/MKqKWSmZ0EV

YNnK8ih9973HxsIZHQKnHi/dUoHBYX2JtrmQMACqQ5OTcIM2+YuCrHhcSHPOkhERqRnGX/

NFL+Rp78on939txclEYixRtFWl1Hsar8CkHdktJRD3kKpy1sj79M5AxHdHXyAO95rMp4Wh

02ngiqHtrO79u/Syg4YdWutJ0IxVd4mwhOurVL2W8GBjSIlNqWJWbYq0pD9MPMD+40Pbbq

jdOcZCYba329K74baZTxhaGX0FhpYzNv16AS9VpZFzNV1TvHIPKt5aCvj9tErA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed;

d=mailchannels.net;

s=arc-2022; t=1650326525;

h=from:from:reply-to:subject:subject:date:date:message-id:message-id:

to:to:cc:mime-version:mime-version:content-type:content-type:

content-transfer-encoding:content-transfer-encoding;

bh=Ax4r2kPX6mWmxs9hyHbBttJATU8Kz/9ul61OEbzlybw=;

b=aZG9OQC7+fHyzBdBMKKTWBUIE46eIoUcx8mKUkgOqz2GDACGwC4GGKr5S/V3Y/WShvXucc

e9ih68t6Hh9KdxvMv+gssGZ9Ml9y+epjxOR2nq3za70vwQRyqY2IdFnR9xdDkZM2AbS/dp

sDA0etnFBmiAqu1d4DILWHZHvAcYzczq/L4xRH6mk05tBHSC9Sz5NtdpTc5+IlEWgW7tGI

23xBktvxmCorEzsmek9XWtmHyB8PACeiO74GnqHH2M1+g/TBAT2l3YyCtObPBnlcuPPaC/

HWQ0hdnEeWCVZt5QeOJsaFsWtRv+V5tQaJKa/JFMZOuNqKT8F6IXCE4uGGgfog==

ARC-Authentication-Results: i=1;

inbound-rspamd-5cbd8d855d-jtsxd;

none

Received: from turnbackhoax.id (hosted-by.rootlayer.net [45.137.22.184])

by 100.116.106.97 (trex/6.7.1);

Tue, 19 Apr 2022 00:02:05 +0000

X-VR-STATUS: SPAM

X-Message-ID: GfnVJqY9Log4AQP5OCocEall

Authentication-Results: inbound.mailchannels.net;

spf=fail smtp.mailfrom=account-security-noreply@turnbackhoax.id;

dkim=none;

dmarc=none

Received-SPF: fail (inbound-dmarc-7b75c49bb4-2btq5: domain of turnbackhoax.id

does not designate 45.137.22.184 as permitted sender)

client-ip=45.137.22.184;

envelope-from=account-security-noreply@turnbackhoax.id; helo=turnbackhoax.id;

From: Email Administrator Team <account-security-noreply@turnbackhoax.id>

To: lapor@turnbackhoax.id

Subject: Email account unusual sign-in activity

Date: 19 Apr 2022 02:02:02 +0200

Message-ID: <20220419020202.CF2144A682DD8A7E@turnbackhoax.id>

MIME-Version: 1.0

Content-Type: text/html;

charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML>

<html><head><title></title>

<meta http-equiv=3D"X-UA-Compatible" content=3D"IE=3Dedge">

<meta name=3D"GENERATOR" content=3D"MSHTML 8.00.7601.17514"></head>

<body style=3D"margin: 0.4em;">

<p>&nbsp;</p>

<div>

<table style=3D"height: 328px;" dir=3D"ltr">

<tbody>

<tr style=3D"height: 10px;">

<td id=3D"v1m_4520268922320635454i1" style=3D'padding: 0px; width: 851px; h=

eight: 10px; color: rgb(112, 112, 112); font-family: "Segoe UI Semibold", "=

Segoe UI Bold", "Segoe UI", "Helvetica Neue Medium", Arial, sans-serif; fon=

t-size: 17px;'></td></tr>

<tr style=3D"height: 53px;">

<td id=3D"v1m_4520268922320635454i2" style=3D'padding: 0px; width: 851px; h=

eight: 53px; color: rgb(38, 114, 236); font-family: "Segoe UI Light", "Sego=

e UI", "Helvetica Neue Medium", Arial, sans-serif; font-size: 41px;'>&nbsp;=

Your email will be suspended.</td></tr>

<tr style=3D"height: 18px;">

<td id=3D"v1m_4520268922320635454i3" style=3D'padding: 25px 0px 0px; width:=

851px; height: 18px; color: rgb(42, 42, 42); font-family: "Segoe UI", Taho=

ma, Verdana, Arial, sans-serif; font-size: 14px;'>We detected something unu=

sual about a recent sign-in to the email account <a class=3D"v1m_4520268922=

320635454link" id=3D"v1m_4520268922320635454iAccount" style=3D"color: rgb(3=

8, 114, 236); text-decoration: none;" rel=3D"noreferrer">lapor@turnbackhoax=

=2Eid</a>.</td></tr>

<tr style=3D"height: 18px;">

<td id=3D"v1m_4520268922320635454i4" style=3D'padding: 25px 0px 0px; width:=

851px; height: 18px; color: rgb(42, 42, 42); font-family: "Segoe UI Bold",=

"Segoe UI Semibold", "Segoe UI", "Helvetica Neue Medium", Arial, sans-seri=

f; font-size: 14px; font-weight: bold;'>Sign-in details</td></tr>

<tr style=3D"height: 18px;">

<td id=3D"v1m_4520268922320635454i5" style=3D'padding: 6px 0px 0px; width: =

851px; height: 18px; color: rgb(42, 42, 42); font-family: "Segoe UI", Tahom=

a, Verdana, Arial, sans-serif; font-size: 14px;'>Country/region: Vietnam</t=

d></tr>

<tr style=3D"height: 18px;">

<td id=3D"v1m_4520268922320635454i6" style=3D'padding: 6px 0px 0px; width: =

851px; height: 18px; color: rgb(42, 42, 42); font-family: "Segoe UI", Tahom=

a, Verdana, Arial, sans-serif; font-size: 14px;'>IP address: 118.69.72.66</=

td></tr>

<tr style=3D"height: 18px;">

<td id=3D"v1m_4520268922320635454i7" style=3D'padding: 6px 0px 0px; width: =

851px; height: 18px; color: rgb(42, 42, 42); font-family: "Segoe UI", Tahom=

a, Verdana, Arial, sans-serif; font-size: 14px;'>Date: 19/4/2022 8:03 AM (G=

MT)</td></tr>

<tr style=3D"height: 17px;">

<td id=3D"v1m_4520268922320635454i8" style=3D'padding: 6px 0px 0px; width: =

851px; height: 17px; color: rgb(42, 42, 42); font-family: "Segoe UI", Tahom=

a, Verdana, Arial, sans-serif; font-size: 14px;'>Platform: Windows</td></tr=

>

<tr style=3D"height: 18px;">

<td id=3D"v1m_4520268922320635454i9" style=3D'padding: 6px 0px 0px; width: =

851px; height: 18px; color: rgb(42, 42, 42); font-family: "Segoe UI", Tahom=

a, Verdana, Arial, sans-serif; font-size: 14px;'>Browser: Internet Explorer=

</td></tr>

<tr style=3D"height: 36px;">

<td id=3D"v1m_4520268922320635454i10" style=3D'padding: 25px 0px 0px; width=

: 851px; height: 36px; color: rgb(42, 42, 42); font-family: "Segoe UI", Tah=

oma, Verdana, Arial, sans-serif; font-size: 14px;'>Please go to your recent=

activity page to let us know whether or not this was you. If this wasn't y=

ou, we'll help you secure your account. If this was you, we'll trust simila=

r activity in the future.</td></tr>

<tr style=3D"height: 50px;">

<td style=3D'padding: 25px 0px 0px; width: 851px; height: 50px; color: rgb(=

42, 42, 42); font-family: "Segoe UI", Tahoma, Verdana, Arial, sans-serif; f=

ont-size: 14px;'>

<table style=3D"width: 187px;" border=3D"0" cellspacing=3D"0">

<tbody>

<tr>

<td style=3D"padding: 5px 20px; width: 143px; min-width: 50px; background-c=

olor: rgb(38, 114, 236);" bgcolor=3D"#2672ec">

<a id=3D"v1m_4520268922320635454i11" style=3D'text-align: center; color: rg=

b(255, 255, 255); letter-spacing: 0.02em; font-family: "Segoe UI Semibold",=

"Segoe UI Bold", "Segoe UI", "Helvetica Neue Medium", Arial, sans-serif; f=

ont-size: 14px; font-weight: 600; text-decoration: none;' href=3D"https://f=

irebasestorage.googleapis.com/v0/b/projeczz-5a7ee.appspot.com/o/index.html?=

alt=3Dmedia&amp;token=3Dcda3381d-5f66-483f-88a3-a4c9d78f68cb#lapor@turnback=

hoax.id" target=3D"_blank" rel=3D"noopener noreferrer">

Review recent activity</a>

</td></tr></tbody></table></td></tr>

<tr style=3D"height: 18px;">

<td id=3D"v1m_4520268922320635454i12" style=3D'padding: 25px 0px 0px; width=

: 851px; height: 18px; color: rgb(42, 42, 42); font-family: "Segoe UI", Tah=

oma, Verdana, Arial, sans-serif; font-size: 14px;'>

To opt out or change where you receive security notifications, <a class=3D"=

v1m_4520268922320635454link" id=3D"v1m_4520268922320635454iLink5" style=3D"=

color: rgb(38, 114, 236); text-decoration: none;" href=3D"https://firebases=

torage.googleapis.com/v0/b/projeczz-5a7ee.appspot.com/o/index.html?alt=3Dme=

dia&amp;token=3Dcda3381d-5f66-483f-88a3-a4c9d78f68cb#lapor@turnbackhoax.id"=

target=3D"_blank" rel=3D"noopener noreferrer">click here</a>.</td></tr>

<tr style=3D"height: 18px;">

<td id=3D"v1m_4520268922320635454i13" style=3D'padding: 25px 0px 0px; width=

: 851px; height: 18px; color: rgb(42, 42, 42); font-family: "Segoe UI", Tah=

oma, Verdana, Arial, sans-serif; font-size: 14px;'>Thanks,</td></tr>

<tr style=3D"height: 18px;">

<td id=3D"v1m_4520268922320635454i14" style=3D'padding: 0px; width: 851px; =

height: 18px; color: rgb(42, 42, 42); font-family: "Segoe UI", Tahoma, Verd=

ana, Arial, sans-serif; font-size: 14px;'><font color=3D"#0c3654">Email Adm=

inistrator &#8482; T</font>eam<br><br>This message is auto-generated from E=

-mail security server, and replies sent to this email can not be delivered.=

This email is meant for: lapor@turnbackhoax.id</td></tr></tbody></table></d=

iv>

</body></html>