OwlCyberSecurity - MANAGER
Edit File: 1676559907.M242569P1935813.server237.web-hosting.com,S=7351,W=7500
Return-Path: <> Delivered-To: dev@ebaarchitects.org Received: from server237.web-hosting.com by server237.web-hosting.com with LMTP id 4EljDiNG7mPFiR0A7Ypugw (envelope-from <>) for <dev@ebaarchitects.org>; Thu, 16 Feb 2023 10:05:07 -0500 Return-path: <> Envelope-to: dev@ebaarchitects.org Delivery-date: Thu, 16 Feb 2023 10:05:07 -0500 Received: from mta-112633.us.email.fireeyecloud.com ([3.93.93.219]:56380 helo=fireeyecloud.com) by server237.web-hosting.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.95) id 1pSfok-0086uT-EN for dev@ebaarchitects.org; Thu, 16 Feb 2023 10:05:07 -0500 Received: from [127.0.0.1] ([local]) by use1-etp-mta-inbound-delivery-prd09-21.cso.fireeye.com (envelope-from <>) (ecelerity 4.3.1.999 r(:)) with INTERNAL id 46/BD-06107-5F54EE36; Thu, 16 Feb 2023 15:04:21 +0000 Received: from [127.0.0.1] ([local]) by use1-etp-mta-inbound-delivery-prd09-21.cso.fireeye.com (envelope-from <>) (ecelerity 4.3.1.999 r(:)) with INTERNAL id 46/BD-06107-5F54EE36; Thu, 16 Feb 2023 15:04:21 +0000 To: dev@ebaarchitects.org Subject: Mail Delivery Failure Message-ID: <46.BD.06107.5F54EE36@use1-etp-mta-inbound-delivery-prd09-21.cso.fireeye.com> MIME-Version: 1.0 Content-Type: multipart/report; report-type=delivery-status; boundary="JoQ1ZrjUsy3pPsPJZb3hzztRdzCbMye2LCO4rQ==" Date: Thu, 16 Feb 2023 15:04:21 +0000 From: Mail Delivery System <Mailer-Daemon@fireeyecloud.com> X-Spam-Status: No, score=1.3 X-Spam-Score: 13 X-Spam-Bar: + X-Ham-Report: Spam detection software, running on the system "server237.web-hosting.com", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: This message was created automatically by the mail system (ecelerity). A message that you sent could not be delivered to one or more of its recipients. This is a permanent error. The following address(es) failed: Content analysis details: (1.3 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: web-hosting.com] -0.0 SPF_HELO_PASS SPF: HELO matches SPF record 0.2 KAM_DMARC_NONE DKIM has Failed or SPF has failed on the message and the domain has no DMARC policy 1.0 FORGED_SPF_HELO No description available. 0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict Alignment X-Spam-Flag: NO --JoQ1ZrjUsy3pPsPJZb3hzztRdzCbMye2LCO4rQ== Content-Type: text/plain This message was created automatically by the mail system (ecelerity). A message that you sent could not be delivered to one or more of its recipients. This is a permanent error. The following address(es) failed: >>> andrew.butler@deltaapparel.com (after RCPT TO): 550 5.4.1 Recipient address rejected: Access denied. AS(201806281) [BN1NAM02FT020.eop-nam02.prod.protection.outlook.com 2023-02-16T15:04:21.361Z 08DB0C7CD4371A95] --JoQ1ZrjUsy3pPsPJZb3hzztRdzCbMye2LCO4rQ== Content-Type: message/delivery-status Arrival-Date: Thu, 16 Feb 2023 15:04:20 +0000 Reporting-MTA: dns; use1-etp-mta-inbound-delivery-prd09-21.cso.fireeye.com Action: failed Final-Recipient: rfc822; andrew.butler@deltaapparel.com Diagnostic-Code: smtp; 550 5.4.1 Recipient address rejected: Access denied. AS(201806281) [BN1NAM02FT020.eop-nam02.prod.protection.outlook.com 2023-02-16T15:04:21.361Z 08DB0C7CD4371A95] Status: 5.4.1 Last-Attempt-Date: Thu, 16 Feb 2023 15:04:20 +0000 --JoQ1ZrjUsy3pPsPJZb3hzztRdzCbMye2LCO4rQ== Content-Type: text/plain Content-Disposition: inline ------ This is a copy of the headers of the original message. ------ Return-Path: <dev@ebaarchitects.org> Received: from [127.0.0.1] ([127.0.0.1:51428] helo=smtp-injection-worker) by prd09-use1-21 (envelope-from <dev@ebaarchitects.org>) (ecelerity 4.3.1.999 r(:)) with ESMTPS (cipher=ECDHE-RSA-AES128-GCM-SHA256) id D4/BD-06107-4F54EE36; Thu, 16 Feb 2023 15:04:20 +0000 X-FE-ETP-SENDER-IP: 199.188.200.112 X-FE-ETP-CONNECTING-IP: 199.188.200.112 Received: from server237-5.web-hosting.com (server237-5.web-hosting.com [199.188.200.112]) by prd09-use1-24 (envelope-from <dev@ebaarchitects.org>) FireEye ETP with ESMTPS (cipher=ECDHE-RSA-AES256-GCM-SHA384) id 3yOXfGM-14511-355A042105E54EE362e037377; batch_id 35/5A-04210-5E54EE36; Thu, 16 Feb 2023 15:04:06 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ebaarchitects.org; s=default; h=Content-Type:MIME-Version:Date:Subject:To: From:Reply-To:Message-ID:Sender:Cc:Content-Transfer-Encoding:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe: List-Subscribe:List-Post:List-Owner:List-Archive; bh=gH3gr+uhX/kIzRqM9++NvnnDExEkHDvUryXfMUWhXzI=; b=BisISTHhSnz6UEtwd0+5ffW3CB LG6HD64hhiOL5/86H0qruaDixTzrjt50IKEgBZ+i9OnWiBtZC6Bhx/RVuSzuf3A+9l370XIxW0AES 87HNPRjmPaRxe7IJ3WXGZK/KyuSgKaR/EFitllWQCqfkGq8sUXYXsbUUSJJhIKCFiTYBWwMjJxilV CryIycIuNORR+/W7NZwuVJtotRrMelP1xuNUP9ZgM8cwSyPZEhBll4CQxQic4ei6sr4nByD/ARDoX avBGsPi1Pem9xEE0XVWGCfXW4pJ30i9nV8O4lb+x1g60YwzeIjn6GpzmeB12vSONQoyzvnlhlq50p nHr4CGuw==; Received: from [82.149.104.214] (port=59176 helo=89.39.104.123) by server237.web-hosting.com with esmtpsa (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.95) (envelope-from <dev@ebaarchitects.org>) id 1pSfnf-0086bx-DK for andrew.butler@deltaapparel.com; Thu, 16 Feb 2023 10:04:00 -0500 Message-ID: <22e4ad06cda18b84379dd47f9a4e646ec38c6b@ebaarchitects.org> Reply-To: Alex <alexander_schulze@sioneracs.com> From: Alex <dev@ebaarchitects.org> To: andrew.butler@deltaapparel.com Subject: Possible suspicious charge on my bank account - urgent attention required Date: Thu, 16 Feb 2023 15:03:28 +0000 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="832960f4a86c42d9fa5019a34783a85ec054" X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - server237.web-hosting.com X-AntiAbuse: Original Domain - deltaapparel.com X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - ebaarchitects.org X-Get-Message-Sender-Via: server237.web-hosting.com: authenticated_id: dev@ebaarchitects.org X-Authenticated-Sender: server237.web-hosting.com: dev@ebaarchitects.org X-Source: X-Source-Args: X-Source-Dir: X-From-Rewrite: unmodified, already matched X-FE-ETP-SPF: PASS X-FE-ETP-DKIM: PASS X-FE-ETP-DMARC: NONE X-FE-ETP-METADATA: eyAidGlkIjogIjN5T1hmR00tMTQ1MTEtMzU1QTA0MjEwNUU1NEVFMzYyZTAzNzM3NyIsICJhY2Nl cHRlZF90aW1lc3RhbXAiOiAiMjAyMzAyMTYxNTA0MDYiLCAiYWNjZXB0ZWRfdGltZXN0YW1wX2Vw b2NoIjogIjE2NzY1NTk4NDYiLCAiZG9tYWluX25hbWUiOiAiZGVsdGFhcHBhcmVsLmNvbSIsICJh dHRfY291bnQiOiAtMiwgInNyY19pcCI6ICIxOTkuMTg4LjIwMC4xMTIiIH0= --JoQ1ZrjUsy3pPsPJZb3hzztRdzCbMye2LCO4rQ==--