OwlCyberSecurity - MANAGER

Edit File: 1701879088.M495791P305871.server237.web-hosting.com,S=11133,W=11364

Envelope-to: dev@ebaarchitects.org
Delivery-date: Wed, 06 Dec 2023 11:11:28 -0500
Auto-Submitted: auto-replied
From: Mail Delivery System <Mailer-Daemon@s01id.syd6.hostingplatform.net.au>
To: dev@ebaarchitects.org
References: <247ffb07f3370d9dbe10b912e6221ce7c4684c7d1c@ebaarchitects.org>
Content-Type: multipart/report; report-type=delivery-status; boundary=1701879039-eximdsn-1086278694
MIME-Version: 1.0
Subject: Mail delivery failed: returning message to sender
Message-Id: <E1rAuTv-000Al3-2r@s01id.syd6.hostingplatform.net.au>
Date: Thu, 07 Dec 2023 03:10:39 +1100

--1701879039-eximdsn-1086278694
Content-type: text/plain; charset=us-ascii

This message was created automatically by mail delivery software.

A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:

ifag.market@gmail.com
    (ultimately generated from info@ifag.com.au)
    host out.smarthost.mxs.au [110.232.143.235]
    SMTP error from remote mail server after end of data:
    550 5.7.1 Rejected by outbound spam filtering E005 (ff055fae-9451-11ee-b1b1-00163c39b365)

--1701879039-eximdsn-1086278694
Content-type: message/delivery-status

Reporting-MTA: dns; s01id.syd6.hostingplatform.net.au

Action: failed
Final-Recipient: rfc822;info@ifag.com.au
Status: 5.0.0
Remote-MTA: dns; out.smarthost.mxs.au
Diagnostic-Code: smtp; 550 5.7.1 Rejected by outbound spam filtering E005 (ff055fae-9451-11ee-b1b1-00163c39b365)

--1701879039-eximdsn-1086278694
Content-type: message/rfc822

Return-path: <dev@ebaarchitects.org>
Received: from server237-2.web-hosting.com ([199.188.200.108]:53580)
	by s01id.syd6.hostingplatform.net.au with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.96.2)
	(envelope-from <dev@ebaarchitects.org>)
	id 1rAuTs-000A7u-07
	for info@ifag.com.au;
	Thu, 07 Dec 2023 03:10:38 +1100
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
	d=ebaarchitects.org; s=default; h=Content-Type:MIME-Version:Date:Subject:To:
	From:Reply-To:Message-ID:Sender:Cc:Content-Transfer-Encoding:Content-ID:
	Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc
	:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:
	List-Subscribe:List-Post:List-Owner:List-Archive;
	bh=rTysaj5iFDHyq8eVzOMrnEj/KfAq5HMAB5Mp4It2Z+c=; b=jiYuGGieU8OKZnwCko3CaHX2xt
	8MJl5T8O8dCT2YAkUNX9ymVc3L2jph2b1PtPiZL4O9E2otSciesWxXGLVk28wuIMtOdKU3KsDrL/D
	2OvTayAEvVms6t+txXTiJsB/jVMcCLjAyLGc2RydLVTGgAdqIbW81z+XtyViu2Hhbt2mC56IkUk4/
	J36hXjqPkxtrJXfVOtoEYxxdxcGXE5xU+OoSD3WYpmt5P8o9pYjqnOzUmgRrOS7Di14nyUNhXKBLQ
	3ueX1fa470mC1KmwYiCnz5GZrbAyvimGlxw9I6qJqnba4a9rKbl0mYQvxcfWfy5x1HVl/LcOn6Q6s
	ynfU5+GQ==;
Received: from [143.255.21.241] (port=33601 helo=185.25.48.95)
	by server237.web-hosting.com with esmtpsa  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.96.1)
	(envelope-from <dev@ebaarchitects.org>)
	id 1rAuSu-001ksx-1p
	for info@ifag.com.au;
	Wed, 06 Dec 2023 11:09:49 -0500
Message-ID: <247ffb07f3370d9dbe10b912e6221ce7c4684c7d1c@ebaarchitects.org>
Reply-To: fred <fred_eckhardt@burilngton.com>
From: fred <dev@ebaarchitects.org>
To: info@ifag.com.au
Subject: Distressed over fraudulent charge made on my credit card - need your attention
Date: Wed, 6 Dec 2023 16:06:36 +0000
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="a8c48d26c29db7b87bd19833d3e7cdc0de2bca"
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server237.web-hosting.com
X-AntiAbuse: Original Domain - ifag.com.au
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - ebaarchitects.org
X-Get-Message-Sender-Via: server237.web-hosting.com: authenticated_id: dev@ebaarchitects.org
X-Authenticated-Sender: server237.web-hosting.com: dev@ebaarchitects.org
X-Source: 
X-Source-Args: 
X-Source-Dir: 
X-From-Rewrite: unmodified, already matched
X-Spam-Status: No, score=2.2
X-Spam-Score: 22
X-Spam-Bar: ++
X-Ham-Report: Spam detection software, running on the system "s01id.syd6.hostingplatform.net.au",
 has NOT identified this incoming email as spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  I am reaching out to you with a sense of urgency due to an
    unrecognized transaction on my bank account. I noticed that the transaction
    was made on your webshop, and I need your help to investigate thi [...] 
 Content analysis details:   (2.2 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: ebaarchitects.org]
  1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
                             bl.spamcop.net
              [Blocked - see <https://www.spamcop.net/bl.shtml?143.255.21.241>]
 -0.0 SPF_PASS               SPF: sender matches SPF record
  1.2 RCVD_HELO_IP_MISMATCH  Received: HELO and IP do not match, but
                             should
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily
                             valid
 -0.1 DKIM_VALID_AU          Message has a valid DKIM or DK signature from
                             author's domain
 -0.1 DKIM_VALID             Message has at least one valid DKIM or DK signature
 -0.1 DKIM_VALID_EF          Message has a valid DKIM or DK signature from
                             envelope-from domain
 -0.0 T_SCC_BODY_TEXT_LINE   No description available.
X-Spam-Flag: NO

--a8c48d26c29db7b87bd19833d3e7cdc0de2bca
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

I am reaching out to you with a sense of urgency due to an unrecognized t=
ransaction on my bank account. I noticed that the transaction was made on=
 your webshop, and I need your help to investigate this matter.

I have never made a purchase on your site, and I am deeply concerned abou=
t how my personal information may have been compromised. I have already c=
ontacted my bank and provided them with all of the necessary evidence to =
prove that I did not make this transaction.

Please help me investigate this matter by providing any relevant informat=
ion that could help me identify the source of the problem, such as the tr=
ansaction ID.

I appreciate your attention to this matter, and I look forward to hearing=
 from you soon.

--a8c48d26c29db7b87bd19833d3e7cdc0de2bca
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

<html>
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dutf-8">
</head>
<body bgColor=3D"#ffffff">
<div align=3Dleft><font size=3D2 face=3DArial>I am reaching out to you wi=
th a sense of urgency due to an unrecognized transaction on my bank accou=
nt. I noticed that the transaction was made on your webshop, and I need y=
our help to investigate this matter.</font></div>
<div>&nbsp;</div>
<div align=3Dleft><font size=3D2 face=3DArial>I have never made a purchas=
e on your site, and I am deeply concerned about how my personal informati=
on may have been compromised. I have already contacted my bank and provid=
ed them with all of the necessary evidence to prove that I did not make t=
his transaction.</font></div>
<div>&nbsp;</div>
<div align=3Dleft><font size=3D2 face=3DArial>Please help me investigate =
this matter by providing any relevant information that could help me iden=
tify the source of the problem, such as the transaction ID.</font></div>
<div>&nbsp;</div>
<div align=3Dleft><font size=3D2 face=3DArial>I appreciate your attention=
 to this matter, and I look forward to hearing from you soon.</font></div=
></body></html>

--a8c48d26c29db7b87bd19833d3e7cdc0de2bca--

--1701879039-eximdsn-1086278694--