EVOLUTION-NINJA
Edit File: 1563693964.M838559P22479.myaccount8.wpcpanel.com,S=12960,W=13158
Return-Path: <3VhM0XQgTCD0mn-qdokxZbbntmsr.fnnfkd.bnlbZkZmcqZd13.bnl.Zt@gaia.bounces.google.com> Delivered-To: calandra@e24.com.au Received: from myaccount8.wpcpanel.com by myaccount8.wpcpanel.com with LMTP id OMv4HIwTNF3PVwAAycIfzw (envelope-from <3VhM0XQgTCD0mn-qdokxZbbntmsr.fnnfkd.bnlbZkZmcqZd13.bnl.Zt@gaia.bounces.google.com>) for <calandra@e24.com.au>; Sun, 21 Jul 2019 17:26:04 +1000 Return-path: <3VhM0XQgTCD0mn-qdokxZbbntmsr.fnnfkd.bnlbZkZmcqZd13.bnl.Zt@gaia.bounces.google.com> Envelope-to: calandra@e24.com.au Delivery-date: Sun, 21 Jul 2019 17:26:04 +1000 Received: from mail-qt1-f202.google.com ([209.85.160.202]:36618) by myaccount8.wpcpanel.com with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128) (Exim 4.92) (envelope-from <3VhM0XQgTCD0mn-qdokxZbbntmsr.fnnfkd.bnlbZkZmcqZd13.bnl.Zt@gaia.bounces.google.com>) id 1hp6EH-0005qi-SR for calandra@e24.com.au; Sun, 21 Jul 2019 17:26:04 +1000 Received: by mail-qt1-f202.google.com with SMTP id q26so32355933qtr.3 for <calandra@e24.com.au>; Sun, 21 Jul 2019 00:25:34 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=accounts.google.com; s=20161025; h=mime-version:date:feedback-id:message-id:subject:from:to; bh=7JYGDarTY9So1hmLuf9emCBckOr7Eyz9LRb4SlnfsD8=; b=IHZ4U3uMjdSf5SfbMGhP7C/R8EBnLM/U66u42yCPlZEcw6ZtuZ1K+e/ymkYzeQ+qUB YVu6g5Js+Ircfq1CxbQnwfBvhI7YElNQX3DQUQSRpsCzodYOhHXYZPn58fQAxmHf4LE6 G+3gbnz04T/kp+KpM1pPPTtB7cie+voP41i30MaD2c+OjCsOvETRQhpP9Wlfhoy25HE9 qoyGmVrOnr3M1x3Egcuc/gEJEJXC3RYu+N3Jit1D65D4GhZjZb/7RW6mKfAB9UAPVp43 YRmNNn2wpSB+f4ew5dUi10SZ56nzKRYoKAABDjmAg+yEzwckajQDCMaSxsyQEtt9DaGC YW/g== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:date:feedback-id:message-id:subject :from:to; bh=7JYGDarTY9So1hmLuf9emCBckOr7Eyz9LRb4SlnfsD8=; b=H4GBTcHUMdUbmloHSrlVOOpbrXdktRtoSCJK8fYEbjdGOEMsTaKAVnGXtFucTDczjC GYrx/rEil/A5Dz50NsyAlRtN+g2b58RPzY7VjSyKmI48+kd1oHyV1ifq+yfJTFu+jt/X TNk7eDhtJ1Y0Fw+XtZ/NAJ1uzAR3Ja7rDl7UGi2N230jQwNgoYje/DyD7zlniWo+nYhO LK90w/cLd7dlzuSQ5wLDQHyc42wap9NaAIwmiBNG583NrJhsFHkZy11Vwu1n4Lc54H9a ounMmvj3EqGUUTU7/rPn1U1R1iPGzrZoi5xQ1veRQW4V1bgnch0an8c7ee2VFKuG1ot/ mWaQ== X-Gm-Message-State: APjAAAV7RjwCFrQ4+EEhh0Z0hqimtdxk8Qldfq37WGznfpN9Oga9rKVT q2i70QGZUSHOJELXwX88EwpF3d3XCSLw X-Google-Smtp-Source: APXvYqy5XktP+HUoM6tNeTwHQE9aa9x0LpjPHCZ1HXu1VP/E76hMj5CrOI5OOAE9jHIdqskqiz83NWSelNEmTm69zlRrHg== MIME-Version: 1.0 X-Received: by 2002:a05:620a:1448:: with SMTP id i8mr42890444qkl.73.1563693910463; Sun, 21 Jul 2019 00:25:10 -0700 (PDT) Date: Sun, 21 Jul 2019 07:25:09 +0000 (UTC) X-Account-Notification-Type: 127-RECOVERY-anexp#givab-fa--mdv2-fa Feedback-ID: 127-RECOVERY-anexp#givab-fa--mdv2-fa:account-notifier X-Notifications: 4971463e17000000 Message-ID: <Rg8Bf71AfWX_afq1G_EZ2g.0@notifications.google.com> Subject: Security alert for your linked Google Account From: Google <no-reply@accounts.google.com> To: calandra@e24.com.au Content-Type: multipart/alternative; boundary="000000000000121793058e2bdc69" X-Spam-Status: No, score=-5.7 X-Spam-Score: -56 X-Spam-Bar: ----- X-Ham-Report: Spam detection software, running on the system "myaccount8.wpcpanel.com", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Your account calandra@e24.com.au is listed as the recovery email for calandrasacco@gmail.com. Don't recognise this account? Click here <https://accounts.google.com/AccountDisavow?adt=AOX8kiq_otxOWuico [...] Content analysis details: (-5.7 points, 4.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60% [score: 0.5000] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: e24.com.au] -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at https://www.dnswl.org/, no trust [209.85.160.202 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record -7.5 USER_IN_DEF_DKIM_WL From: address is in the default DKIM white-list 0.0 URI_TRY_3LD URI: "Try it" URI, suspicious hostname 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 KAM_REALLYHUGEIMGSRC RAW: Spam with image tags with ridiculously huge http urls -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's domain 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature X-Spam-Flag: NO --000000000000121793058e2bdc69 Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes Content-Transfer-Encoding: base64 WW91ciBhY2NvdW50IGNhbGFuZHJhQGUyNC5jb20uYXUgaXMgbGlzdGVkIGFzIHRoZSByZWNvdmVy eSBlbWFpbCBmb3INCmNhbGFuZHJhc2FjY29AZ21haWwuY29tLiBEb24ndCByZWNvZ25pc2UgdGhp cyBhY2NvdW50PyBDbGljayBoZXJlDQo8aHR0cHM6Ly9hY2NvdW50cy5nb29nbGUuY29tL0FjY291 bnREaXNhdm93P2FkdD1BT1g4a2lxX290eE9XdWljb3VrS3FGTHJfbHZQbUVFaC1PcmRsb0ZUelZO TEE5eUlTUG5ONlViTmF5R0tET2FEJnJmbj0xMjcmYW5leHA9Z2l2YWItZmEtLW1kdjItZmE+DQpt YWNPUyB3YXMgZ3JhbnRlZCBhY2Nlc3MgdG8geW91ciBsaW5rZWQgR29vZ2xlIGFjY291bnQNCg0K DQpjYWxhbmRyYXNhY2NvQGdtYWlsLmNvbQ0KDQpJZiB5b3UgZGlkIG5vdCBncmFudCBhY2Nlc3Ms IHlvdSBzaG91bGQgY2hlY2sgdGhpcyBhY3Rpdml0eSBhbmQgc2VjdXJlIHlvdXINCmFjY291bnQu DQpDaGVjayBhY3Rpdml0eQ0KPGh0dHBzOi8vYWNjb3VudHMuZ29vZ2xlLmNvbS9BY2NvdW50Q2hv b3Nlcj9FbWFpbD1jYWxhbmRyYXNhY2NvQGdtYWlsLmNvbSZjb250aW51ZT1odHRwczovL215YWNj b3VudC5nb29nbGUuY29tL2FsZXJ0L250LzE1NjM2OTM5MDkwMDA/cmZuJTNEMTI3JTI2cmZuYyUz RDElMjZlaWQlM0Q1NDcyNTc4OTE5NTA3OTkyOCUyNmV0JTNEMSUyNmFuZXhwJTNEZ2l2YWItZmEt LW1kdjItZmE+DQpZb3UgcmVjZWl2ZWQgdGhpcyBlbWFpbCB0byBsZXQgeW91IGtub3cgYWJvdXQg aW1wb3J0YW50IGNoYW5nZXMgdG8geW91cg0KR29vZ2xlIEFjY291bnQgYW5kIHNlcnZpY2VzLg0K wqkgMjAxOSBHb29nbGUgTExDLCAxNjAwIEFtcGhpdGhlYXRyZSBQYXJrd2F5LCBNb3VudGFpbiBW aWV3LCBDQSA5NDA0MywgVVNBDQo= --000000000000121793058e2bdc69 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable <!DOCTYPE html><html lang=3Den-AU><head><meta name=3Dformat-detection conte= nt=3Demail=3Dno /><meta name=3Dformat-detection content=3Ddate=3Dno /><styl= e>.awl a {color: #FFFFFF; text-decoration: none;} .abml a {color: #000000; = font-family: Roboto-Medium,Helvetica,Arial,sans-serif; font-weight: bold; t= ext-decoration: none;} .adgl a {color: rgba(0, 0, 0, 0.87); text-decoration= : none;} .afal a {color: #b0b0b0; text-decoration: none;} @media screen and= (min-width: 600px) {.v2sp {padding: 6px 30px 0px;} .v2rsp {padding: 0px 10= px;}} @media screen and (min-width: 600px) {.mdv2rw {padding: 40px 40px;}} = </style><link href=3D//fonts.googleapis.com/css?family=3DGoogle+Sans rel=3D= stylesheet type=3Dtext/css /></head><body style=3D"margin: 0; padding: 0;" = bgcolor=3D#FFFFFF><img src=3Dhttps://notifications.googleapis.com/email/t/A= FG8qyX25eTsliyiBuHka-yNFXxaGB9kQhvrNDTDv3UF7_Oxd7A1Ru_wTgP-gIlFeXnI2RFbAu95= O6WHdEh0kkwJoaXfZX80e1V7zb5vmtJaLfp_HX2jgVQkJMdobbV4qOQW_zmbTaNIyZCSpFiyx11= 8CPyq3OLc78w4qx4MwB0yOq444gQBFpZcsKwSAmUzxEoY6q7sC9NQUMu32w3A23_jcED0Pg7-YY= qVIA3lQSaIAAg5G2mmoIJVctuCAA/a.gif width=3D1 height=3D1><table width=3D100%= height=3D100% style=3D"min-width: 348px;" border=3D0 cellspacing=3D0 cellp= adding=3D0 lang=3Den-AU><tr height=3D32 style=3D"height: 32px;"><td></td></= tr><tr align=3Dcenter><td><div itemscope itemtype=3D//schema.org/EmailMessa= ge><div itemprop=3Daction itemscope itemtype=3D//schema.org/ViewAction><lin= k itemprop=3Durl href=3Dhttps://accounts.google.com/AccountChooser?Email=3D= calandrasacco@gmail.com&continue=3Dhttps://myaccount.google.com/alert/n= t/1563693909000?rfn%3D127%26rfnc%3D1%26eid%3D54725789195079928%26et%3D1%26a= nexp%3Dgivab-fa--mdv2-fa /><meta itemprop=3Dname content=3D"Review Activity= " /></div></div><table border=3D0 cellspacing=3D0 cellpadding=3D0 style=3D"= padding-bottom: 20px;max-width: 516px;min-width: 220px;"><tr><td width=3D8 = style=3D"width: 8px;"></td><td><div style=3D"background-color: #F5F5F5; dir= ection: ltr; padding: 16px;margin-bottom: 6px;"><table width=3D100% border= =3D0 cellspacing=3D0 cellpadding=3D0><tbody><tr><td style=3D"vertical-align= : top;"><img height=3D20 src=3Dhttps://www.gstatic.com/accountalerts/email/= Icon_recovery_x2_20_20.png></td><td width=3D13 style=3D"width: 13px;"></td>= <td style=3D"direction: ltr;"><span style=3D"font-family: Roboto-Regular,He= lvetica,Arial,sans-serif; font-size: 13px; color: rgba(0,0,0,0.87); line-he= ight: 1.6; color: rgba(0,0,0,0.54);">Your account <a style=3D"text-decorati= on: none; color: rgba(0,0,0,0.87);">calandra@e24.com.au</a> is listed as th= e recovery email for <a style=3D"text-decoration: none; color: rgba(0,0,0,0= .87);">calandrasacco@gmail.com</a>.</span> <span><span style=3D"font-family= : Roboto-Regular,Helvetica,Arial,sans-serif; font-size: 13px; color: rgba(0= ,0,0,0.87); line-height: 1.6; color: rgba(0,0,0,0.54);">Don't recognise thi= s account? <a href=3Dhttps://accounts.google.com/AccountDisavow?adt=3DAOX8k= iq_otxOWuicoukKqFLr_lvPmEEh-OrdloFTzVNLA9yISPnN6UbNayGKDOaD&rfn=3D127&a= mp;anexp=3Dgivab-fa--mdv2-fa data-meta-key=3Ddisavow style=3D"text-decorati= on: none; color: #4285F4;" target=3D_blank>Click here</a></span></span></td= ></tr></tbody></table></div><div style=3D"border-style: solid; border-width= : thin; border-color:#dadce0; border-radius: 8px; padding: 40px 20px;" alig= n=3Dcenter class=3Dmdv2rw><img width=3D75 height=3D24 src=3Dhttps://www.gst= atic.com/accountalerts/email/googlelogo_color_188x64dp.png style=3D"width: = 75px; height: 24px; margin-bottom: 16px;"><div style=3D"font-family: 'G= oogle Sans',Roboto,RobotoDraft,Helvetica,Arial,sans-serif;border-bottom= : thin solid #dadce0; color: rgba(0,0,0,0.87); line-height: 32px; padding-b= ottom: 24px;text-align: center; word-break: break-word;"><div style=3D"font= -size: 24px;"><a>macOS</a> was granted access to your linked Google ac= count</div><table align=3Dcenter style=3Dmargin-top:8px;><tr style=3D"line-= height: normal;"><td align=3Dright style=3Dpadding-right:8px;><img width=3D= 20 height=3D20 style=3D"width: 20px; height: 20px; vertical-align: sub; bor= der-radius: 50%;;" src=3Dhttps://www.gstatic.com/accountalerts/email/anonym= ous_profile_photo.png></td><td><a style=3D"font-family: 'Google Sans= 9;,Roboto,RobotoDraft,Helvetica,Arial,sans-serif;color: rgba(0,0,0,0.87); f= ont-size: 14px; line-height: 20px;">calandrasacco@gmail.com</a></td></tr></= table></div><div style=3D"font-family: Roboto-Regular,Helvetica,Arial,sans-= serif; font-size: 14px; color: rgba(0,0,0,0.87); line-height: 20px;padding-= top: 20px; text-align: left;"><br>If you did not grant access, you should c= heck this activity and secure your account.<div style=3D"padding-top: 32px;= text-align: center;"><a href=3Dhttps://accounts.google.com/AccountChooser?E= mail=3Dcalandrasacco@gmail.com&continue=3Dhttps://myaccount.google.com/= alert/nt/1563693909000?rfn%3D127%26rfnc%3D1%26eid%3D54725789195079928%26et%= 3D1%26anexp%3Dgivab-fa--mdv2-fa target=3D_blank style=3D"font-family: '= Google Sans',Roboto,RobotoDraft,Helvetica,Arial,sans-serif; line-height= : 16px; color: #ffffff; font-weight: 400; text-decoration: none;font-size: = 14px;display:inline-block;padding: 10px 24px;background-color: #4184F3; bor= der-radius: 5px; min-width: 90px;">Check activity</a></div></div></div><div= style=3D"text-align: left;"><div style=3D"font-family: Roboto-Regular,Helv= etica,Arial,sans-serif;color: rgba(0,0,0,0.54);font-size: 11px; line-height= : 18px; padding-top: 12px; text-align: center;"><div>You received this emai= l to let you know about important changes to your Google Account and servic= es.</div><div style=3D"direction: ltr;">© 2019 Google LLC, <a class=3D= afal style=3D"font-family: Roboto-Regular,Helvetica,Arial,sans-serif;color:= rgba(0,0,0,0.54);font-size: 11px; line-height: 18px; padding-top: 12px; te= xt-align: center;">1600 Amphitheatre Parkway, Mountain View, CA 94043, USA<= /a></div></div></div></td><td width=3D8 style=3D"width: 8px;"></td></tr></t= able></td></tr><tr height=3D32 style=3D"height: 32px;"><td></td></tr></tabl= e></body></html> --000000000000121793058e2bdc69--