OwlCyberSecurity - MANAGER

Edit File: 1701883716.M401284P612217.server237.web-hosting.com,S=13690,W=13972

Envelope-to: dev@ebaarchitects.org
Delivery-date: Wed, 06 Dec 2023 12:28:36 -0500
Date: Wed, 06 Dec 2023 10:29:09 -0700
From: mailer-daemon@secureserver.net
To: dev@ebaarchitects.org
Subject: Message Delivery Failure
MIME-Version: 1.0
Content-Type: multipart/report; boundary="------------I305M09060309060P_862117018837490"
    
 Content analysis details:   (0.3 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: ebaarchitects.org]
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
 -0.0 T_SCC_BODY_TEXT_LINE   No description available.
  0.2 KAM_DMARC_NONE         DKIM has Failed or SPF has failed on the message
                             and the domain has no DMARC policy
X-Spam-Flag: NO

This is a multi-part message in MIME format.

--------------I305M09060309060P_862117018837490
Content-Type: text/plain; charset=UTF-8;
Content-Transfer-Encoding: 8bit

This is an automatically generated Delivery Status Notification.

Delivery to the following recipients failed permanently:

* maris@stellarvue.com

Reason: There was an error while attempting to deliver your message with [Subject: "Need your help with a unauthorized payment on my debit card - requesting your guidance"] to maris@stellarvue.com. MTA p3plibsmtp02-14.prod.phx3.secureserver.net received this response from the destination host IP - 104.47.66.10 -  550 , 550 5.4.1 Recipient address rejected: Access denied. AS(201806281) [MW2NAM12FT086.eop-nam12.prod.protection.outlook.com 2023-12-06T17:27:51.211Z 08DBF59C00B3E41B]
.

--------------I305M09060309060P_862117018837490
Content-Type: message/delivery-status; charset=UTF-8;
Content-Transfer-Encoding: 8bit

Reporting-MTA: dns; p3plibsmtp02-14.prod.phx3.secureserver.net [68.178.213.37]
Received-From-MTA: dns; p3plibsmtp01-14.prod.phx3.secureserver.net [208.109.193.78]
Arrival-Date: Wed, 06 Dec 2023 10:28:38 -0700

Final-recipient: rfc822; maris@stellarvue.com
Diagnostic-Code: smtp; 550 5.4.1 Recipient address rejected: Access denied. AS(201806281) [MW2NAM12FT086.eop-nam12.prod.protection.outlook.com 2023-12-06T17:27:51.211Z 08DBF59C00B3E41B]

Last-attempt-Date: Wed, 06 Dec 2023 10:29:09 -0700

--------------I305M09060309060P_862117018837490
Content-Type: text/rfc822-headers
Content-Transfer-Encoding: 8bit
Content-Disposition: attachment

Received: from p3plibsmtp01-14.prod.phx3.secureserver.net ([208.109.193.78])
	(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 256/256 bits)
	(Client did not present a certificate)
	by CMGW with ESMTP
	id Avctr2HKj00khAvhMr0pX5; Wed, 06 Dec 2023 10:28:38 -0700
X-CMAE-Analysis: v=2.4 cv=Pd05xAtd c=1 sm=1 tr=0 ts=6570af46 cx=a_idp_d
 a=6jHAi1gJO7HG0mRJpWrsNg==:117 a=baaR9QXXxMdOG0y5kTxOvQ==:17
 a=9+rZDBEiDlHhcck0kWbJtElFXBc=:19 a=OWjo9vPv0XrRhIrVQ50Ab3nP57M=:19
 a=dLZJa+xiwSxG16/P+YVxDGlgEgI=:19 a=gQX1269ULFhLm4Thdby34LUHVW0=:19
 a=-esQCJWrd0d94Dut:21 a=e2cXIFwxEfEA:10 a=2nhcAg-4M1CqD2rTIpUA:9
 a=QEXdDO2ut3YA:10 a=zgiPjhLxNE0A:10 a=fzApnqvMwKL1hXtXXe4A:9
 a=Aetat93H6aneEZh3:21 a=_W_S_7VecoQA:10 a=9zVmoonSqOGx9jp7k1HL:22
 a=HhbK4dLum7pmb74im6QT:22
Authentication-Results: p3plibsmtp02-14.prod.phx3.secureserver.net;
	dkim=pass header.d=ebaarchitects.org header.b=RDT1w+X8;
	dmarc=none header.from=ebaarchitects.org
Received: from server237-2.web-hosting.com ([199.188.200.108])
	(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 256/256 bits)
	(Client did not present a certificate)
	by CMGW with ESMTP
	id AvforrpigHI01AvfqrqGpW; Wed, 06 Dec 2023 10:27:03 -0700
X-CMAE-Analysis: v=2.4 cv=BYQekJh2 c=1 sm=1 tr=0 ts=6570aee7 cx=a_idp_d
 a=baaR9QXXxMdOG0y5kTxOvQ==:117 a=baaR9QXXxMdOG0y5kTxOvQ==:17
 a=9+rZDBEiDlHhcck0kWbJtElFXBc=:19 a=OWjo9vPv0XrRhIrVQ50Ab3nP57M=:19
 a=dLZJa+xiwSxG16/P+YVxDGlgEgI=:19 a=gQX1269ULFhLm4Thdby34LUHVW0=:19
 a=-esQCJWrd0d94Dut:21 a=e2cXIFwxEfEA:10 a=2nhcAg-4M1CqD2rTIpUA:9
 a=QEXdDO2ut3YA:10 a=zgiPjhLxNE0A:10 a=fzApnqvMwKL1hXtXXe4A:9
 a=Aetat93H6aneEZh3:21 a=_W_S_7VecoQA:10 a=9zVmoonSqOGx9jp7k1HL:22
 a=HhbK4dLum7pmb74im6QT:22
Authentication-Results: p3plibsmtp01-14.prod.phx3.secureserver.net;
	dkim=pass header.d=ebaarchitects.org header.b=RDT1w+X8;
	dmarc=none header.from=ebaarchitects.org
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
	d=ebaarchitects.org; s=default; h=Content-Type:MIME-Version:Date:Subject:To:
	From:Reply-To:Message-ID:Sender:Cc:Content-Transfer-Encoding:Content-ID:
	Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc
	:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:
	List-Subscribe:List-Post:List-Owner:List-Archive;
	bh=5LeVLq80VUBS/xm73XeKKQUN8Fh+xoHyI7XHEjsghtc=; b=RDT1w+X8EtJXIjOPe6BUMcYni8
	9e8BhGi809So8PYkkgZJocsE6OwPEzpD3uFJfxHCyYOhoarwYwze3txuTDYplG+KI/zon7Gp3Zsda
	ZogFF0aO7QI7InyX5YGMfs5IYpAbHyulxkUQGBYBtzQvGav+j3moCUNdM4lHgiecxHBL4RtmAMtay
	OrBugXVstOJq5tylyHF5M+Nd8vaCr2sfwplTMg3c4hE/Idf685gfeMb9RC7Lg1dBgR+7dhqpmg1Ic
	50stgyYdFD3uY7+u48JfyHlDJtkVJx0ywX11nEe3aHGTdbsjL3zwhN6ezbDN1RS3fGpRGRYON5gGx
	7HLOG4UQ==;
Received: from [191.7.208.80] (port=43963 helo=185.25.48.95)
	by server237.web-hosting.com with esmtpsa  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.96.1)
	(envelope-from <dev@ebaarchitects.org>)
	id 1rAvfO-002w3z-2q
	for maris@stellarvue.com;
	Wed, 06 Dec 2023 12:26:42 -0500
Message-ID: <24042f41b5717d8ba8069f34c0043b3013a88841f2@ebaarchitects.org>
Reply-To: Gerard <gerard.reiche@burilngton.com>
From: Gerard <dev@ebaarchitects.org>
To: maris@stellarvue.com
Subject: Need your help with a unauthorized payment on my debit card - requesting your guidance
Date: Wed, 6 Dec 2023 17:23:39 +0000
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="8b2168e5ec2806ddfe541da35793a8877b01"
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server237.web-hosting.com
X-AntiAbuse: Original Domain - stellarvue.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - ebaarchitects.org
X-Get-Message-Sender-Via: server237.web-hosting.com: authenticated_id: dev@ebaarchitects.org
X-Authenticated-Sender: server237.web-hosting.com: dev@ebaarchitects.org
X-Source: 
X-Source-Args: 
X-Source-Dir: 
X-From-Rewrite: unmodified, already matched
X-CMAE-Envelope: MS4xfCOCWfKxPNa1rCoBKCVj/tVBljwR7Xz6CbuEvhW8bREDaIEFT4lgUUtRDsPXPHSkHPkIUyQGJohQcX1TZJiZevc4g6ONDYJI67VX0nEUJzsJdJzv5amo
 4qUYtEw3ZtMVG801A1nsI+JUKssUcGLQqW56fxxYmXA0yc5K+bs0vh3oxC3OgguhLQL0Y9uozu6fW5AmZ+xEWovdpXscGbaiMhDwFbwM5dXlTMONh6ZzlSqX

--------------I305M09060309060P_862117018837490
Content-Type: message/rfc822
Content-Transfer-Encoding: 8bit
Content-Disposition: attachment

--8b2168e5ec2806ddfe541da35793a8877b01
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

Hi,

I'm contacting you regarding a mysterious transaction on my credit card t=
ied to your website.

I was surprised by this, as I've never shopped at your platform. Can you =
provide any relevant details about the payment?

Best wishes

--8b2168e5ec2806ddfe541da35793a8877b01
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

<html>
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dutf-8">
</head>
<body bgColor=3D"#ffffff">
<div align=3Dleft><font size=3D2 face=3DArial>Hi,</font></div>
<div>&nbsp;</div>
<div align=3Dleft><font size=3D2 face=3DArial>I'm contacting you regardin=
g a mysterious transaction on my credit card tied to your website.</font>=
</div>
<div>&nbsp;</div>
<div align=3Dleft><font size=3D2 face=3DArial>I was surprised by this, as=
 I've never shopped at your platform. Can you provide any relevant detail=
s about the payment?</font></div>
<div>&nbsp;</div>
<div align=3Dleft><font size=3D2 face=3DArial>Best wishes</font></div></b=
ody></html>

--8b2168e5ec2806ddfe541da35793a8877b01--

--------------I305M09060309060P_862117018837490--