Google
Edit File: 1770743205.M371442P2541707.server-619288.prediksijaya.com,S=6978,W=7130:2,a
Return-Path: <hai@sukatulis.com> Delivered-To: angker+spam@server-619288.prediksijaya.com Received: from server-619288.prediksijaya.com by server-619288.prediksijaya.com with LMTP id 1ztzE6Vli2mLyCYAf7/9AQ (envelope-from <hai@sukatulis.com>) for <angker+spam@server-619288.prediksijaya.com>; Wed, 11 Feb 2026 00:06:45 +0700 Return-path: <hai@sukatulis.com> Envelope-to: hai@sukatulis.com Delivery-date: Wed, 11 Feb 2026 00:06:45 +0700 Received: from [14.177.89.140] (port=37006 helo=static.vnpt.vn) by server-619288.prediksijaya.com with esmtp (Exim 4.99.1) (envelope-from <hai@sukatulis.com>) id 1vprCF-0000000AfAz-2EF7 for hai@sukatulis.com; Wed, 11 Feb 2026 00:06:45 +0700 From: <hai@sukatulis.com> To: <hai@sukatulis.com> Date: Wed, 11 Feb 2026 00:02:33 +0700 Message-ID: <00a701dc9aaf$10704620$3150d260$@sukatulis.com> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_00A8_01DC9AE9.BCCF1E20" X-Mailer: Microsoft Outlook 16.0 Thread-Index: AdyartiaNfmdMOebSie/R7E5xm6oSQ== Content-Language: en-us X-Spam-Status: Yes, score=15.6 X-Spam-Score: 156 X-Spam-Bar: +++++++++++++++ X-Spam-Report: Spam detection software, running on the system "server-619288.prediksijaya.com", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: We have detected unusual activity on your account sukatulis.com, or believe your credentials are at risk. For your security and to ensure only you have access to your account, we will ask you to verif [...] Content analysis details: (15.6 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URI: windows.net] 0.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist [URI: zeyatatay.z27.web.core.windows.net] 1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist [URI: zeyatatay.z27.web.core.windows.net] 0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [14.177.89.140 listed in sa-accredit.habeas.com] 0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [14.177.89.140 listed in sa-trusted.bondedsender.org] 0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [14.177.89.140 listed in bl.score.senderscore.com] 1.5 RCVD_IN_HOSTKARMA_BL RBL: Sender listed in HOSTKARMA-BLACK [14.177.89.140 listed in hostkarma.junkemailfilter.com] 1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail) 0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict Alignment 0.2 KAM_DMARC_NONE DKIM has Failed or SPF has failed on the message and the domain has no DMARC policy 0.0 HTML_MESSAGE BODY: HTML included in message 2.0 RDNS_NONE Delivered to internal network by a host with no rDNS 2.9 VFY_ACCT_NORDNS Verify your account to a poorly-configured MTA - probable phishing 1.4 DOS_OUTLOOK_TO_MX Delivered direct to MX with Outlook headers 4.0 URI_PHISH Phishing using web form X-Spam-Flag: YES Subject: No-reply. This is a multipart message in MIME format. ------=_NextPart_000_00A8_01DC9AE9.BCCF1E20 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit We have detected unusual activity on your account sukatulis.com, or believe your credentials are at risk. For your security and to ensure only you have access to your account, we will ask you to verify your identity <https://zeyatatay.z27.web.core.windows.net/> and change your password <https://zeyatatay.z27.web.core.windows.net/> . ------=_NextPart_000_00A8_01DC9AE9.BCCF1E20 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable <html xmlns:v=3D"urn:schemas-microsoft-com:vml" = xmlns:o=3D"urn:schemas-microsoft-com:office:office" = xmlns:w=3D"urn:schemas-microsoft-com:office:word" = xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" = xmlns=3D"http://www.w3.org/TR/REC-html40"><head><META = HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; = charset=3Dus-ascii"><meta name=3DGenerator content=3D"Microsoft Word 15 = (filtered medium)"><style><!-- /* Font Definitions */ @font-face {font-family:"Cambria Math"; panose-1:2 4 5 3 5 4 6 3 2 4;} @font-face {font-family:Calibri; panose-1:2 15 5 2 2 2 4 3 2 4;} /* Style Definitions */ p.MsoNormal, li.MsoNormal, div.MsoNormal {margin:0in; font-size:11.0pt; font-family:"Calibri",sans-serif;} span.EmailStyle17 {mso-style-type:personal-compose; font-family:"Calibri",sans-serif; color:windowtext;} .MsoChpDefault {mso-style-type:export-only; font-family:"Calibri",sans-serif;} @page WordSection1 {size:8.5in 11.0in; margin:1.0in 1.0in 1.0in 1.0in;} div.WordSection1 {page:WordSection1;} --></style><!--[if gte mso 9]><xml> <o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" /> </xml><![endif]--><!--[if gte mso 9]><xml> <o:shapelayout v:ext=3D"edit"> <o:idmap v:ext=3D"edit" data=3D"1" /> </o:shapelayout></xml><![endif]--></head><body lang=3DEN-US = link=3D"#0563C1" vlink=3D"#954F72" style=3D'word-wrap:break-word'><div = class=3DWordSection1><p class=3DMsoNormal><br> We have detected unusual activity on your account sukatulis.com, or = believe your credentials are at risk.<br> For your security and to ensure only you have access to your account, we = will ask you to <a = href=3D"https://zeyatatay.z27.web.core.windows.net/"><b>verify your = identity</b></a> and <a = href=3D"https://zeyatatay.z27.web.core.windows.net/"><b>change your = password</b></a>.<br><o:p></o:p></p></div></body></html> ------=_NextPart_000_00A8_01DC9AE9.BCCF1E20--