OwlCyberSecurity - MANAGER

Edit File: 1701874959.M712307P4188202.server237.web-hosting.com,S=20785,W=21130

Envelope-to: dev@ebaarchitects.org
Delivery-date: Wed, 06 Dec 2023 10:02:39 -0500
Received-SPF: None (protection.outlook.com: mail.realpage.com does not
 designate permitted sender hosts)
MIME-Version: 1.0
From: <postmaster@RealPage.com>
To: <dev@ebaarchitects.org>
Date: Wed, 6 Dec 2023 09:01:45 -0600
Content-Type: multipart/report; report-type=delivery-status;
	boundary="dd7f6219-7b8c-4878-a398-35fe9e41eb20"
Content-Language: en-US
Message-ID: <a69c28e7-3bd2-4ab6-ac87-ff310f8643c9@RCEEITAPEXC001.Corp.realpage.com>
In-Reply-To: <ad64e843b77a9f94b3e9a00bff2fe5eedfe4c634@ebaarchitects.org>
References: <ad64e843b77a9f94b3e9a00bff2fe5eedfe4c634@ebaarchitects.org>
Subject: Undeliverable: Concerned about an ambiguous charge on my credit card
 - appreciate your assistance
Auto-Submitted: auto-replied
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 06 Dec 2023 15:01:47.8891
 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 087c2109-68ff-408b-14e6-08dbf66c451b
X-MS-Exchange-CrossTenant-Id: 2c94bed6-d675-4d3d-a53b-7b461fd6acc2
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=2c94bed6-d675-4d3d-a53b-7b461fd6acc2;Ip=[8.39.216.5];Helo=[mail.realpage.com]
X-MS-Exchange-CrossTenant-AuthSource:
	DM6NAM04FT041.eop-NAM04.prod.protection.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN4PR0801MB7789
X-Spam-Status: No, score=0.9
X-Spam-Score: 9
X-Spam-Bar: /
X-Ham-Report: Spam detection software, running on the system "server237.web-hosting.com",
 has NOT identified this incoming email as spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Delivery has failed to these recipients or groups: dlmusil@on-site.com<mailto:dlmusil@on-site.com>
    The email address you entered couldn't be found. Please check the recipient's
    email address and try to resend the message. If the problem continues, ple
    [...] 
 Content analysis details:   (0.9 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: realpage.com]
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily
                             valid
 -0.1 DKIM_VALID             Message has at least one valid DKIM or DK signature
 -0.1 DKIM_VALID_AU          Message has a valid DKIM or DK signature from
                             author's domain
 -0.0 T_SCC_BODY_TEXT_LINE   No description available.
  1.0 FORGED_SPF_HELO        No description available.
X-Spam-Flag: NO

--dd7f6219-7b8c-4878-a398-35fe9e41eb20
Content-Type: multipart/alternative; differences=Content-Type;
	boundary="1a407b93-7755-44b9-9712-2bb8fc531065"

--1a407b93-7755-44b9-9712-2bb8fc531065
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

Delivery has failed to these recipients or groups:

dlmusil@on-site.com<mailto:dlmusil@on-site.com>
The email address you entered couldn't be found. Please check the recipient=
's email address and try to resend the message. If the problem continues, p=
lease contact your email admin.

--1a407b93-7755-44b9-9712-2bb8fc531065
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<html>
<Head></head><body>
<p><b><font color=3D"#000066" size=3D"3" face=3D"Arial">Delivery has failed=
 to these recipients or groups:</font></b></p>
<font color=3D"#000000" size=3D"2" face=3D"Tahoma"><p><a href=3D"mailto:dlm=
usil@on-site.com">dlmusil@on-site.com</a><br>
</font>
<font color=3D"#000000" size=3D"3" face=3D"Arial">The email address you ent=
ered couldn't be found. Please check the recipient's email address and try =
to resend the message. If the problem continues, please contact your email =
admin.<br>
</font>
<font color=3D"#000000" size=3D"2" face=3D"Tahoma"><br>
</p>
</font>
</body>
</html>=

--1a407b93-7755-44b9-9712-2bb8fc531065--

--dd7f6219-7b8c-4878-a398-35fe9e41eb20
Content-Type: message/delivery-status

Reporting-MTA: dns;RCEEITAPEXC001.Corp.realpage.com
Received-From-MTA: dns;NAM10-DM6-obe.outbound.protection.outlook.com
Arrival-Date: Wed, 6 Dec 2023 15:01:45 +0000

Final-Recipient: rfc822;dlmusil@on-site.com
Action: failed
Status: 5.1.10
Diagnostic-Code: smtp;550 5.1.10 RESOLVER.ADR.RecipientNotFound; Recipient not found by SMTP address lookup

--dd7f6219-7b8c-4878-a398-35fe9e41eb20
Content-Type: message/rfc822

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
 b=lbCTaOpLExqt+8uZXaKpWjWgFL5WI7SPvOAeyNZP8pEokqlkiezCev+mzHdVt5lmDAn/sUr1Lfq2WYoYaYBP/I4VBIgi4FCZHhOjtJVqiUQexYuKKpKbZc6yTuqHZIJwEbzxZCmUA/7XBIcEtRcRR44Bhko3b5Y9jiQa1Q7TR4M9Anj6E5cFR9Hx7gehVgYcenEiITnR+17768x/9X9vDIyht8OfJQShhuSSRXBD9U5QDa53hu9/v1xfN43GwV+CLQXhbRG+DTuau14+HO0bMGvneQP1FJmptHAfkytWaTQ6TOaIqw+dvTOpuk3dfHPNlxH2BM5gxdcU4ZopAvpCnw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
 s=arcselector9901;
 h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
 bh=NMFq8FdvqfRlS5WtHK+pkyz+PUM7w4524e7PqAKD6Cc=;
 b=AJbq7ofLB2qubnlJdPcmAJ3XkhVTiwZI5//8dsIkn3Rx/NQCjCd9DxDBnpxKWkPSzvElAEWPREdjqvXiWCc1w9MampNen8NK54mi8iSJ0BRvlYU5g26FGHj/sCVler2C1nUS61PdMvzcc4kp3NR/B3i728Ys19wotkXqkmn+6edeiI9yEhBU/Q47iUwvr09H0CopwxNrHvqLifOpjKc8tfoXhV8GgKJtlijbM64TLhiqCpEOt7QaTNRpbusEN4Rwi+Cb1NVpNkJ5ZyVT4pPrBt3baI3B/WTdoeJNTTEOQ1DzXBHs+QOyRvDifYnx66uwvtiMNGxYh1lCpjgMQqnX6Q==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass (sender ip is
 199.188.200.108) smtp.rcpttodomain=on-site.com
 smtp.mailfrom=ebaarchitects.org; dmarc=bestguesspass action=none
 header.from=ebaarchitects.org; dkim=pass (signature was verified)
 header.d=ebaarchitects.org; arc=none (0)
Authentication-Results: spf=pass (sender IP is 199.188.200.108)
 smtp.mailfrom=ebaarchitects.org; dkim=pass (signature was verified)
 header.d=ebaarchitects.org;dmarc=bestguesspass action=none
 header.from=ebaarchitects.org;compauth=pass reason=109
Received-SPF: Pass (protection.outlook.com: domain of ebaarchitects.org
 designates 199.188.200.108 as permitted sender)
 receiver=protection.outlook.com; client-ip=199.188.200.108;
 helo=server237-2.web-hosting.com; pr=C
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
	d=ebaarchitects.org; s=default; h=Content-Type:MIME-Version:Date:Subject:To:
	From:Reply-To:Message-ID:Sender:Cc:Content-Transfer-Encoding:Content-ID:
	Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc
	:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:
	List-Subscribe:List-Post:List-Owner:List-Archive;
	bh=QDRh60mLLx5yd6x3KNSvrIAAdSv0JjCfdOzkKKio7lU=; b=pjTMltfdtFE5LZ+eD80+HBz5Zr
	kHE9ik/g+s3uQ9z3w6vYSC+7/TcxTna4owbKR5sbp+tFWqAwXrwoM7buO2ssremxfYJGUlfjDqHfq
	7mlgdAOa6kEXVbV9tSkbV5t70971nLWobX3VOM7eK8WfmYWIvhTXRsO1938FguKzCymrPfDNSyKXX
	TnRW+CpilioZLomsXZd40TA0BW0/BSCJ/yxOljwU7+GtcJDQ2Zs1NG9HGaxr8MFBgOk7TKgyr87BY
	wrJynpzn8hRLZSP/L6d0/UZ10EZNKZsbj3/jBfWh12ANqsSbSvjc2DQ7fdhd3QCP5TZFNdj3x+Xgy
	WVoHCX2w==;
Message-ID: <ad64e843b77a9f94b3e9a00bff2fe5eedfe4c634@ebaarchitects.org>
Reply-To: Bern S <bernspeicher@burilngton.com>
From: Bern S <dev@ebaarchitects.org>
To: <dlmusil@on-site.com>
Subject: Concerned about an ambiguous charge on my credit card - appreciate your assistance
Date: Wed, 6 Dec 2023 14:58:43 +0000
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="89236ac8f33719e2c16b229d894d75df1716"
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server237.web-hosting.com
X-AntiAbuse: Original Domain - on-site.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - ebaarchitects.org
X-Get-Message-Sender-Via: server237.web-hosting.com: authenticated_id: dev@ebaarchitects.org
X-Authenticated-Sender: server237.web-hosting.com: dev@ebaarchitects.org
X-Source:
X-Source-Args:
X-Source-Dir:
X-From-Rewrite: unmodified, already matched
Return-Path: dev@ebaarchitects.org
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 2c94bed6-d675-4d3d-a53b-7b461fd6acc2:0
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic: BN8NAM04FT052:EE_|SN7PR08MB8641:EE_
X-MS-Office365-Filtering-Correlation-Id: 6c56a7ae-3f0e-4b39-91f5-08dbf66c42a6
X-MS-Exchange-AtpMessageProperties: SA|SL
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info: =?utf-8?B?STB3dU1vVWhMZC9RZHN3Mm1UcjlMNnVHWEJ5cWRQeUQ0TEZvVGN1dnJObzU4?=
 =?utf-8?B?LzlQSi9TQXdLWSszcXlGVFY3b2U2S3V5eURPWlRhNm92cEdxNzQrRlQ1bm51?=
 =?utf-8?B?VVhLektTbzdGeWRvWjdhVmx6SW5hQm43czgvakZCZk1rYUw1SXFGRCtqM2Vx?=
 =?utf-8?B?MGdMUnVsd254UzduU0I4dHlLUzRJamI2R2tpS05iRGtzVGNEM3ZBczh2Y0lx?=
 =?utf-8?B?bE85dTQ3Wm1ZTFhNT0RBWkZ3Y2hQQW93MnVQYmM5akVTUllIN1grem5EU29R?=
 =?utf-8?B?aWtBaW43RVhsRlVHTDB2aVhsc3hDdDhkTXMrcHl3YlA4b3U1dkdTS2E3a01W?=
 =?utf-8?B?amllU3RzaEIreHkwQWZTYWtwZ1lhYXFiUU5jQVBsdmZ6ZUk3NVFDQTcveHl0?=
 =?utf-8?B?aEpIcFN4eHgvOStHdE85cWpXcG5IZjF1TGd3WGRRYXBXNFE4NnJPRFNLQ3Yr?=
 =?utf-8?B?bVVQTDUreDViSm1NdjQ5MXhDaEgwem1ZNWUwS0JodDdHSjA5T2h4amhsbG8z?=
 =?utf-8?B?REduL21Mc0JvVFQ5QTlYZjBna3Rzc0NIbTVHVlRxV2ozN0MzOUplczk4d2RG?=
 =?utf-8?B?SW83QkR3TGs5bXhVcExvdGl0WTFJZGtuc0R6RUp1M1lVZ3Z3YUMxZTN5d0N5?=
 =?utf-8?B?UmdiR1dHcElFZ2tnTnFvdFhzQmtSSkg0aXVpRHAzVE9iSkZEV1dqWHZQVldF?=
 =?utf-8?B?SGRvQ1FzeDFJNGl5KzRQbjdSa2JHeDBEazMxNUFaNlp1UU8xUjN0a2p0Sy9v?=
 =?utf-8?B?UGM5R3NlWlJDTCtTYlFJZ0psRzY2VnY1ais4SklnSjZ3Nm1GT0lOVHoybU9C?=
 =?utf-8?B?K2hPMmhiYlZodGhVZjhoTFVKeGR3djkzN081ZW0vRnh0cXdiNWVQMFhsZ3RH?=
 =?utf-8?B?S0xVYmFZQStHa1g2Q3ZEdEMwVDFpOGpkdzVxb1V3UjRzb1NkaG5NVHQyella?=
 =?utf-8?B?RWxsdlRMRkhrZC9RK1VJQ1dpM2F3aFg3aWV6MHFVUG5XZGV4anBnLzM4NXVy?=
 =?utf-8?B?ZkN4dkJnYmMwRUpKUlJhaWc0MXhBWklYTG5tR1JybURwanQ3OThUREFJWEtT?=
 =?utf-8?B?cyttclcwMUhzWXJINngwckN5Q1FSWWJDUnp5cHVDVzVMSUV2aTFNYW8vUDZG?=
 =?utf-8?B?VDFST3B5eGVYeDZ5UWFsV29oQkxLNVJ5MityZXZ1NjlCd0pxTUFKNUdxYUJl?=
 =?utf-8?B?ZVR6VCtSRkFyUGwyYjMyR054RzBQRlJqeTNVOFBUb0JVc0F6cnloRWlXMVcr?=
 =?utf-8?B?aWZkbHpnaDNLZWtFVjFZSlRZTkdyZFdIalR3V0RzY0dwL1k3dm9hMTFUWUdK?=
 =?utf-8?B?SHZadmZ6R0NTajlUMnFXZjdhKzJNZGpmK0xzcXdoWVdJaGxXN1lTSTVQVkY4?=
 =?utf-8?B?RzJ5aWZxbE1VRXEveTRtYWxQVFI1djNHUkFxamlkWDh2UnlubzdHKzVKbzhy?=
 =?utf-8?B?QkNmWk9KT2FCTjAzd0tGbStxTlBWYWJmTlo5R1IvS0pRcWZweFhOb0UxNVRp?=
 =?utf-8?B?cW5neG5IeUFMSW9tN29wQXorWktGdEJhVHRpTWFScXFoSHhGMnB4Y29ocHNN?=
 =?utf-8?B?SGhwOW9vYkVSQXQ3bUsrN0VaWXFERG5VeHRHUGZNUTlBTys5T1NWZ29FMVlo?=
 =?utf-8?B?ZWt6RUNBL1dOTHlQR1Z0c2hzWFVjbVZmSUVmNFhVd1d0OVFab2lRNTBXU2lk?=
 =?utf-8?B?S210Qy9jcVNyUVNEeFdwN1l2bDRPQU9xbTd3OVltdmtkRDM5SUpjYWZxeUR3?=
 =?utf-8?B?WXFkTDJ3NmMyQWZHVGtUaVhWTTVwMFZ3U2Vub2NCRGtrdTBaOTRHSEVyOFBS?=
 =?utf-8?B?SjRtN3lPeExGQUJHV3J5TlQ3M0Rtd2tZS1VVZWZJYUYzNGRmQUlwZXRjR2h1?=
 =?utf-8?B?a3BjMnBkYnBBdjh1QU9vdFB3R0xxb0tJeUZBTzVReTM0SFg5UTMxdkNpMVE4?=
 =?utf-8?B?eFdGVTZiMnJNSHN6MytOb1h1U3FKcGFTOXNlN1AyU0p5SC9LMW9YZ21lcHd0?=
 =?utf-8?B?WWVWdDk2RllxOGlyRWx1UWhqTjJ0alI1UnJvMjVkZkozb1hjVmRKZUhzR3J1?=
 =?utf-8?B?M09Vcmh1eGNmNytQVXhPN2tNcDlOSlhnTm5abnZIL3E5c1NKMUhnNkVFVWZD?=
 =?utf-8?B?WUd3NHVla2R6SGxpNVdsS1VBdEtybkxkYTJGbGV1RWVpWDVHc25tYzBXUlRT?=
 =?utf-8?B?MUpwVDJFQyswalFPOUt2NGRFSlF2WTNmYWdJZ2VTRC9tNDM1R0pHWWFEemNv?=
 =?utf-8?B?S2ZZZ2ljcUxlLzZCVDZlQ2Nlelp5Q2VKNzZPK000eWt6cVUxQnJxTmRpUlZ2?=
 =?utf-8?B?RUhzcHdiNnBRQWI3QUdDWC81YTZvODZ0eTVzdG9XdUZ5UExmS213dEhCYUV0?=
 =?utf-8?B?SURldFdDaXlVRWZHbVhqbG1GT1YxM0tKSGlCYjU5UmJCVkJHMk1vMjErRHRJ?=
 =?utf-8?B?b0dKblhWREZ5UkRMQ3c9PQ==?=
X-Forefront-Antispam-Report: CIP:199.188.200.108;CTRY:US;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:server237-2.web-hosting.com;PTR:server237-2.web-hosting.com;CAT:NONE;SFS:(13230031)(4636009)(230173577357003)(230273577357003)(451199024)(83380400001)(336012)(120186005)(36756003)(7636003)(356005)(34756004)(7596003)(26005)(9786002)(956004)(2616005)(6666004)(33964004)(5660300002)(1096003)(6966003)(86362001)(6916009)(8676002)(17983001)(6106002)(93036002);DIR:INB;
X-MS-Exchange-ATPSafeLinks-Stat: 0
X-MS-Exchange-ATPSafeLinks-BitVector: 2000:0x0|0x0|0x2000|0x0|0x0;
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 06 Dec 2023 15:01:43.6139
 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 6c56a7ae-3f0e-4b39-91f5-08dbf66c42a6
X-MS-Exchange-CrossTenant-Id: 2c94bed6-d675-4d3d-a53b-7b461fd6acc2
X-MS-Exchange-CrossTenant-AuthSource: BN8NAM04FT052.eop-NAM04.prod.protection.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN7PR08MB8641
X-OrganizationHeadersPreserved: SN7PR08MB8641.namprd08.prod.outlook.com
X-CrossPremisesHeadersPromoted: RCEEITAPEXC002.Corp.realpage.com
X-CrossPremisesHeadersFiltered: RCEEITAPEXC002.Corp.realpage.com
X-OriginatorOrg: RealPage.onmicrosoft.com

--89236ac8f33719e2c16b229d894d75df1716
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

CAUTION: This email originated from outside of the organization. Do not cli=
ck links or open attachments unless you recognize the sender and know the c=
ontent is safe.

Dear,

I've noticed an unexpected withdrawal on my PayPal account associated with =
your store.

This was quite shocking to me, as I have never shopped at your platform. Co=
uld you provide details on this payment?

Thank you,

--89236ac8f33719e2c16b229d894d75df1716
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

<html>
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dutf-8">
</head>
<body bgcolor=3D"#ffffff">
<div style=3D"background-color:#FFEB9C; width:100%; border-style: solid; bo=
rder-color:#9C6500; border-width:1pt; padding:2pt; font-size:10pt; line-hei=
ght:12pt; font-family:'Calibri'; color:Black; text-align: left;">
<span style=3D"color:#9C6500; font-weight:bold;">CAUTION:</span> This email=
 originated from outside of the organization. Do not click links or open at=
tachments unless you recognize the sender and know the content is safe.</di=
v>
<br>
<div>
<div align=3D"left"><font size=3D"2" face=3D"Arial">Dear,</font></div>
<div>&nbsp;</div>
<div align=3D"left"><font size=3D"2" face=3D"Arial">I've noticed an unexpec=
ted withdrawal on my PayPal account associated with your store.</font></div=
>
<div>&nbsp;</div>
<div align=3D"left"><font size=3D"2" face=3D"Arial">This was quite shocking=
 to me, as I have never shopped at your platform. Could you provide details=
 on this payment?</font></div>
<div>&nbsp;</div>
<div align=3D"left"><font size=3D"2" face=3D"Arial">Thank you,</font></div>
</div>
</body>
</html>

--89236ac8f33719e2c16b229d894d75df1716--

--dd7f6219-7b8c-4878-a398-35fe9e41eb20--