OwlCyberSecurity - MANAGER

Edit File: 1702494488.M609198P3842852.server237.web-hosting.com,S=46884,W=47799

Envelope-to: dev@ebaarchitects.org
Delivery-date: Wed, 13 Dec 2023 14:08:08 -0500
MIME-Version: 1.0
From: <postmaster@normakamali.com>
To: <dev@ebaarchitects.org>
Date: Wed, 13 Dec 2023 19:07:12 +0000
Content-Type: multipart/report; report-type=delivery-status;
	boundary="1174d818-7cf6-4616-9029-c90d0b264046"
Content-Language: en-US
Message-ID:
 <4497ecd4-8750-425a-bbba-2cbe7dd380a0@CH2PR02MB6728.namprd02.prod.outlook.com>
In-Reply-To: <a7ff3f946099f8f3d55f16bd499ca6ad8d021fae@ebaarchitects.org>
References: <a7ff3f946099f8f3d55f16bd499ca6ad8d021fae@ebaarchitects.org>
Subject: Undeliverable: [EXTERNAL EMAIL] Unknown payment made on your online
 store - need assistance
Auto-Submitted: auto-replied
X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1
X-MS-Exchange-AntiSpam-MessageData-0:
	c1bAWtoczPibtPx2HTMi7tS4BkW0CCMEp0NtRLo5GTOBuYe19LAjTGOV+109OhhRygFhfOGf+n0TWgKi5zkO+IODL4ARPn3yo1kXt6Xsx+vzWBCVNLXSEP1x/pqAZHGXubNqOW7cE2ZvMdN3nvFuIS2W5Pmi9FDTbLvvgjhIq80BI5lCzOk7SlQqF4p5+0bS
X-OriginatorOrg: normakamali.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 13 Dec 2023 19:07:12.1521
 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-AuthSource: CH2PR02MB6728.namprd02.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-Network-Message-Id:
	33100aa3-002e-48f2-65d5-08dbfc0eb650
X-MS-Exchange-Transport-CrossTenantHeadersStamped: CH2PR02MB6728
X-Spam-Status: No, score=2.4
X-Spam-Score: 24
X-Spam-Bar: ++
X-Ham-Report: Spam detection software, running on the system "server237.web-hosting.com",
 has NOT identified this incoming email as spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Delivery has failed to these recipients or groups: jills@normakamali.com<mailto:jills@normakamali.com>
    Your message wasn't delivered. Despite repeated attempts to deliver your
   message, the recipient's email system refused to accept a connection from
   y [...] 
 Content analysis details:   (2.4 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: web-hosting.com]
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
  1.5 KAM_MXURI              URI: URI begins with a mail exchange prefix, i.e.
                             mx.[...]
  0.0 HTML_MESSAGE           BODY: HTML included in message
 -0.1 DKIM_VALID_AU          Message has a valid DKIM or DK signature from
                             author's domain
 -0.1 DKIM_VALID             Message has at least one valid DKIM or DK signature
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily
                             valid
  1.0 FORGED_SPF_HELO        No description available.
 -0.0 T_SCC_BODY_TEXT_LINE   No description available.
X-Spam-Flag: NO

--1174d818-7cf6-4616-9029-c90d0b264046
Content-Type: multipart/alternative; differences=Content-Type;
	boundary="c1379488-ec67-44fc-b396-3b3425ed1857"

--c1379488-ec67-44fc-b396-3b3425ed1857
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

Delivery has failed to these recipients or groups:

jills@normakamali.com<mailto:jills@normakamali.com>
Your message wasn't delivered. Despite repeated attempts to deliver your me=
ssage, the recipient's email system refused to accept a connection from you=
r email system.

Contact the recipient by some other means (by phone, for example) and ask t=
hem to tell their email admin that it appears that their email system is re=
fusing connections from your email server. Give them the error details show=
n below. It's likely that the recipient's email admin is the only one who c=
an fix this problem.

For Email Admins
No connection could be made because the target computer actively refused it=
. This usually results from trying to connect to a service that is inactive=
 on the remote host - that is, one with no server application running. For =
more information and tips to fix this issue see this article: https://go.mi=
crosoft.com/fwlink/?LinkId=3D389361

Diagnostic information for administrators:

Generating server: CH2PR02MB6728.namprd02.prod.outlook.com
Receiving server: CH2PR02MB6728.namprd02.prod.outlook.com

jills@normakamali.com
12/13/2023 7:07:12 PM - Server at CH2PR02MB6728.namprd02.prod.outlook.com r=
eturned '550 5.4.316 Message expired, connection refused(Socket error code =
10061)'
12/13/2023 6:57:03 PM - Server at 50.75.248.155 (50.75.248.155) returned '4=
50 4.4.316 Connection refused [Message=3DSocket error code 10061] [LastAtte=
mptedServerName=3D50.75.248.155] [LastAttemptedIP=3D50.75.248.155:25] [Smtp=
Security=3D-2;-2] [DM3NAM02FT029.eop-nam02.prod.protection.outlook.com 2023=
-12-13T18:57:11.933Z 08DBF246109A4FD8](Socket error code 10061)'

Original message headers:

Received: from SJ2PR02MB9415.namprd02.prod.outlook.com (2603:10b6:a03:4c9::=
7)
 by CH2PR02MB6728.namprd02.prod.outlook.com (2603:10b6:610:7e::24) with
 Microsoft SMTP Server (version=3DTLS1_2,
 cipher=3DTLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7091.26; Wed, 13 =
Dec
 2023 17:09:07 +0000
Received: from CH3PR02MB9555.namprd02.prod.outlook.com (2603:10b6:610:120::=
18)
 by SJ2PR02MB9415.namprd02.prod.outlook.com (2603:10b6:a03:4c9::7) with
 Microsoft SMTP Server (version=3DTLS1_2,
 cipher=3DTLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7068.28; Wed, 13 =
Dec
 2023 06:04:31 +0000
ARC-Seal: i=3D1; a=3Drsa-sha256; s=3Darcselector9901; d=3Dmicrosoft.com; cv=
=3Dnone;
 b=3DD4T+aWI5G5UXSoDtA1fnEcPmsW5uLIDheFJjJwtNm1/Y2diJMuodrw8t0l2XGlQhyzRKa0=
JAId0zVfcXZ3wze0IQSJLY+sAPe/n7xDb+e+SvZn/DKjxWya+arORY3btUaHNp3OdFpCpN2qQu5=
0fpObRQrCjdrXaBwm8IdOrzvTbwJgByj5/7wmtCyWF6e2hF6ESzpIw0tWz7S9bPmQ4J/MzIC1vb=
TWHD1LWOi5Uqk0D4xe9AQ97W9bkrPHb7oxnR2CTdIDvBIIYI7lvDpGsmjY5+rcZaGVcGUZT1Stz=
TvOUsvm8sT5aMXrG+C+5Cnl2cFTIWwQk5wr3oxRKvBMyMiw=3D=3D
ARC-Message-Signature: i=3D1; a=3Drsa-sha256; c=3Drelaxed/relaxed; d=3Dmicr=
osoft.com;
 s=3Darcselector9901;
 h=3DFrom:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-A=
ntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Ex=
change-AntiSpam-MessageData-1;
 bh=3DQImrmibG5RX6B3Mp50wfPvbKjz6b0DXOW7GBD5eLt5A=3D;
 b=3Dal+mNc5JeNzEYFpa8RsNA5P5NfQXlIaqi24uldhP+fgPUnrj5Bpi46WWS1xefcOfbJezDB=
nf8rWMVTaOMPtPiRHmv3nkc91mJjsgnEfxsmoSHGfXxJrT7Mhz7HIt30hF4hJbm5apO7MI7JkEb=
Zn5v7k9lK3y7o9aAmpPqcIK1vBr3FhfYvAwhQO+wrU7JF8jFQ7KTuxt0bh2hWtn6XAX3PAfMJOv=
mI+QFkCr7PmAjy+fimPWwrhtczTTfph+Qp1GIcW1NqmfwF0v94Fdjf0ovwegvxyPnv7qLhINllx=
Rf5ondUL7FrAk8aQ5KDPHBbdagyWkXeG6FD5MCK5UPu4gcQ=3D=3D
ARC-Authentication-Results: i=3D1; mx.microsoft.com 1; spf=3Dpass (sender i=
p is
 199.188.200.108) smtp.rcpttodomain=3Dnormakamali.com
 smtp.mailfrom=3Debaarchitects.org; dmarc=3Dbestguesspass action=3Dnone
 header.from=3Debaarchitects.org; dkim=3Dpass (signature was verified)
 header.d=3Debaarchitects.org; arc=3Dnone (0)
Received: from SN7PR04CA0064.namprd04.prod.outlook.com (2603:10b6:806:121::=
9)
 by CH3PR02MB9555.namprd02.prod.outlook.com (2603:10b6:610:120::18) with
 Microsoft SMTP Server (version=3DTLS1_2,
 cipher=3DTLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7068.33; Tue, 12 =
Dec
 2023 18:58:37 +0000
Received: from SA2PEPF000015C9.namprd03.prod.outlook.com
 (2603:10b6:806:121:cafe::74) by SN7PR04CA0064.outlook.office365.com
 (2603:10b6:806:121::9) with Microsoft SMTP Server (version=3DTLS1_2,
 cipher=3DTLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7091.26 via Front=
end
 Transport; Tue, 12 Dec 2023 18:58:37 +0000
Authentication-Results: spf=3Dpass (sender IP is 199.188.200.108)
 smtp.mailfrom=3Debaarchitects.org; dkim=3Dpass (signature was verified)
 header.d=3Debaarchitects.org;dmarc=3Dbestguesspass action=3Dnone
 header.from=3Debaarchitects.org;compauth=3Dpass reason=3D109
Received-SPF: Pass (protection.outlook.com: domain of ebaarchitects.org
 designates 199.188.200.108 as permitted sender)
 receiver=3Dprotection.outlook.com; client-ip=3D199.188.200.108;
 helo=3Dserver237-2.web-hosting.com; pr=3DC
Received: from server237-2.web-hosting.com (199.188.200.108) by
 SA2PEPF000015C9.mail.protection.outlook.com (10.167.241.199) with Microsof=
t
 SMTP Server (version=3DTLS1_2, cipher=3DTLS_ECDHE_RSA_WITH_AES_256_GCM_SHA=
384) id
 15.20.7091.26 via Frontend Transport; Tue, 12 Dec 2023 18:58:37 +0000
DKIM-Signature: v=3D1; a=3Drsa-sha256; q=3Ddns/txt; c=3Drelaxed/relaxed;
        d=3Debaarchitects.org; s=3Ddefault; h=3DContent-Type:MIME-Version:D=
ate:Subject:To:
        From:Reply-To:Message-ID:Sender:Cc:Content-Transfer-Encoding:Conten=
t-ID:
        Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To=
:Resent-Cc
        :Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Un=
subscribe:
        List-Subscribe:List-Post:List-Owner:List-Archive;
        bh=3DQImrmibG5RX6B3Mp50wfPvbKjz6b0DXOW7GBD5eLt5A=3D; b=3DJVLmLRPcCt=
rHGUJ7SaQts2w/2F
        VcTfnUBnGvmJlg/9np2yL2WONzk2c67PLvcghwQBqhnWWE2IXX1En8iB1WaFVqR2UO9=
lK4LTw7Uq/
        GRaf6BrgRi2uvlMTtSOYyVPfwVnO3po8dH0b/FvkX672nhSrLWN4bAtc2gH8xSiOZbm=
44x6mBGnht
        V7xkq5c9WaSFwUC9XX6UNG2A3FeyA5jKTrb7B5wjDkMxkMX68M0Oq1TpzdAGm/x+8EO=
W8k1wHnPal
        OPV2Wl+oDhf+I5mBEDI4d/Q5ic2hlPShap7qdM8nWv9kmqCTw9KmpONDjlwYUMBWg2T=
lRG6vZ0hoe
        kd9FwaDw=3D=3D;
Received: from [115.79.219.39] (port=3D49892 helo=3D85.206.160.13)
        by server237.web-hosting.com with esmtpsa  (TLS1.2) tls TLS_ECDHE_R=
SA_WITH_AES_256_GCM_SHA384
        (Exim 4.96.1)
        (envelope-from <dev@ebaarchitects.org>)
        id 1rD7xX-008zo5-38
        for jills@normakamali.com;
        Tue, 12 Dec 2023 13:58:36 -0500
Message-ID: <a7ff3f946099f8f3d55f16bd499ca6ad8d021fae@ebaarchitects.org>
Reply-To: joshua c <joshuacampbell@mythenesa.com>
From: joshua c <dev@ebaarchitects.org>
To: jills@normakamali.com
Subject: [EXTERNAL EMAIL] Unknown payment made on your online store - need
 assistance
Date: Tue, 12 Dec 2023 10:55:59 -0800
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary=3D"80e8a10ac34c66686bc18823c6=
123830b0d21c"
X-AntiAbuse: This header was added to track abuse, please include it with a=
ny abuse report
X-AntiAbuse: Primary Hostname - server237.web-hosting.com
X-AntiAbuse: Original Domain - normakamali.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - ebaarchitects.org
X-Get-Message-Sender-Via: server237.web-hosting.com: authenticated_id: dev@=
ebaarchitects.org
X-Authenticated-Sender: server237.web-hosting.com: dev@ebaarchitects.org
X-Source:
X-Source-Args:
X-Source-Dir:
X-From-Rewrite: unmodified, already matched
Return-Path: dev@ebaarchitects.org
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 06cd03e6-9cb8-4eff-aef6-0906e06f98ed:0
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic:
        SA2PEPF000015C9:EE_|CH3PR02MB9555:EE_|SJ2PR02MB9415:EE_|CH2PR02MB67=
28:EE_
X-MS-Office365-Filtering-Correlation-Id: 4c33e7e7-7407-4506-b1ec-08dbfb4459=
2c
X-LD-Processed: 06cd03e6-9cb8-4eff-aef6-0906e06f98ed,ExtAddr,ExtAddr,ExtAdd=
r
X-MS-Exchange-AtpMessageProperties: SA|SL
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info: =3D?utf-8?B?STQ1ek51YThTSjk5M3dYczFhblJ5=
T3h5djRmd2pjNHB0Z3JTN0JZdkQ4dmVr?=3D
 =3D?utf-8?B?Yk5RWHd3NDUyQmwxZkh5akNmUGp0TXhNZldZbTJzSmRXQ01EVFV0aHNiOFI0?=
=3D
 =3D?utf-8?B?dUw4V0IwQ0R5UTZCZ295aS9ablo2dDY2VFA4TFJTbkpCWFFjQWhsZGMzVTBP?=
=3D
 =3D?utf-8?B?THpiWFhGWnRmTWZBODkyWWZjdGt0Q2R3aEsyVUNPdGtkRHRPbVExdDhEbmxF?=
=3D
 =3D?utf-8?B?b0RTNktGcWdLdlR4cW1hWUxCeXhsbmhoUHhVVGYvdUZsREFySTFRNVRKS2J5?=
=3D
 =3D?utf-8?B?TVJqclVGL0hZZy8yQmxNcWhNTlB3bk9qRXl4QW51VFJjZ0l5d1pnY2hPMUJS?=
=3D
 =3D?utf-8?B?aUhNQmNGTldGQjYreWdGOEx1SHl0bGZGUkZqYjV3TlFUY080L3dSck53cnhn?=
=3D
 =3D?utf-8?B?aG9XYzF2bG96NXByTDBZdTdQeVc5SnI2RC9wdEZ5dHRSZUc4MHdUb0Rva01v?=
=3D
 =3D?utf-8?B?WUFDV3FkQ21OYUxMaXdibi9oN2hJdHM3Z0pPdjd1Tm5jV2pMNXVObDl1TzJK?=
=3D
 =3D?utf-8?B?UlhSbTZBT1UvdG5tSGY4azUyR095Sk5zNkM2TXV4US9YQlFoWWpLV0pOQmpn?=
=3D
 =3D?utf-8?B?RFljdmlCMGRacWcwZHNOUmQxSEEwZTJ6NHVic3dkT2trMWdFSjdiWnRQTWRj?=
=3D
 =3D?utf-8?B?cElkckNSdTJUVS90UmZ1NFE0TkpWbzNMZlZYYTdxR205WjZSQVgyT0VIZy9Y?=
=3D
 =3D?utf-8?B?NGVxd3lPYlh0d1JmQUdwLzhWc3Z5VE85amwvaDlLcUc3S2NWanVjc2RvT2dO?=
=3D
 =3D?utf-8?B?RTRhMExqV2VCVFpObHhTcGZ4eThMeDd1SEw4azlDOWpSRmt0c0xScjV4b3pX?=
=3D
 =3D?utf-8?B?QWRKcC9KR3VHL3FaVUJrY2NRL29kTWR1bVdsK3RUdzhDSTJaYWlsQm1nY3A2?=
=3D
 =3D?utf-8?B?VjBvZkxwMVJxR0ZtWFc5emVMTzYyN3IxS0tnOGpUa2FoMEdHKzBVMm1NSVd5?=
=3D
 =3D?utf-8?B?SThzdFRIYmpCcnFUSVdRN0o2T295QURyY3UzTGFvcm1WSitBOEpad2lPeHlO?=
=3D
 =3D?utf-8?B?VjN4emk5M0ZxSE81dDJ6alZ2RGhYSEpwNWlZZG5qU21UYVZteHhEOUxGb1U5?=
=3D
 =3D?utf-8?B?am51QWpkejJxTmQ5MEpNb1ptMEQ1TXpPYS9SaVQzOUd2OXIvN3B3dlBaNFJB?=
=3D
 =3D?utf-8?B?czNLcWVUK2xBdDY2bmk2OFppSE9KUi8xTHp3eXNyZjJtNXpZbTh1ZTduTndD?=
=3D
 =3D?utf-8?B?VERKOFdLb1ZJci9WeDlNWC9VODYwOWlNckN2VlZpTGZpZFZ5aUsxL0ozekZm?=
=3D
 =3D?utf-8?B?dUNjbkRaYmg5cXlHL2lod2ljNXArcmlvUVNDTUFHN0Qxd2MwcWY3WElkVXY0?=
=3D
 =3D?utf-8?B?eURjVFFicENPQnBTd2pMZzM3MDFYUytCOXlUM2QvYlExTFZzdkZOSWFzSEFG?=
=3D
 =3D?utf-8?B?WlhwM1E1K1p1L3hobW1HaDdSLzhwUm9iTmdVQUhrM1pwdTBYUmtiV3p3MkpG?=
=3D
 =3D?utf-8?B?Q2VwdXFjSS90VUhJMXY5NzJWT3E0OHN0djBOZWppV1VMdHlqMEpCaXZhZFJY?=
=3D
 =3D?utf-8?B?TWt0VW5pZERkMlRxdG5PckowZ2pCRFRPOXhyczBTTzRKRFhzcHE5NFgyaUhQ?=
=3D
 =3D?utf-8?B?SHhYdFExL1ZIeGJXVUJWYUU0ZUNORld0SmIxRjBMWE56NkVhdXdHZXdHN0hY?=
=3D
 =3D?utf-8?B?dGdKVy9oVG91ZVp3dHFta0QyYVl4WEh4WXpRU2pTQzFKVjlhcFl4ZFQzRndK?=
=3D
 =3D?utf-8?B?ZWtlcDVJdEhMMlF5RjBGMUJVYjFlUTJrdjJ6VjBjOXludnhFN1RscDFDV01H?=
=3D
 =3D?utf-8?B?V3FsTGRTV0dwOUo0WnNRZkp6SnZ3OTZrQWRWZjNXSG1kaFczQlJ2MWk1bDQ5?=
=3D
 =3D?utf-8?B?enloTHlvSVg1ampwdzJvb0l5MmI1VEJJTnJIMHBDZWVhQUZxVE1kK1N0aTFr?=
=3D
 =3D?utf-8?B?M1FvNVlJU25rbm1xN0ZBcTRLTktJOGJndXBVV3lqUXdvOEZnalBuNm5SeC9s?=
=3D
 =3D?utf-8?B?aDNHSDRSdHAxUytzT2l4Rmt6RDNMbmM5TTUycm9id2NpeTAyK29qWS9uYTVB?=
=3D
 =3D?utf-8?B?T3A2NmJ6cXdYcHJlVk4zdS9UVFZSbXNjWjZ0Y3JmWEhMSjFZbGlSS1dHb0pS?=
=3D
 =3D?utf-8?B?NnNxTFNnbExUQWp4NEVsdlFkMjh5WkFpMUJPR0JKL3EvbUFFOFU5Y2gyWGNm?=
=3D
 =3D?utf-8?B?NVk4YTlyZmJJZHlrTE5Tbm5xUWkrQ1ltNXFXaWRZQ1phdm1Vbmh4ZUMxL2sx?=
=3D
 =3D?utf-8?B?QmczbklSdmZDL0trU3graVFqb0RZR2VNL2NUcysvVFpsVnVPZUJ1UWpwNFM1?=
=3D
 =3D?utf-8?B?TEFqbEpINVA2elBoSi9jZzEvYUQ0MkszQXgzaDl3VkMwaWFmOWZzWGRDRlFt?=
=3D
 =3D?utf-8?B?N1JESXJ5M3EzWHVuSVBrL2t1Q3VCQkUySStkQ2lOVEQxdWc0aGw3S0hNNWtB?=
=3D
 =3D?utf-8?B?VGtwdlk4REVYZlBad0ducGVYcWZkdkczWlRHaGN5SUFwMzQyQlFzNWVzNWFY?=
=3D
 =3D?utf-8?B?d0pwQWl2K1Zia1ZkaGpKU0tjbEJYRkE5cExWVHphdnZHVmpwMkhvQTJDRDUx?=
=3D
 =3D?utf-8?B?MktRbGo0V3VBNEdPVm5nbGJFZFhKNFRQSFlxd0RJMVNrbVN6MHpnTVp4NHh6?=
=3D
 =3D?utf-8?B?eSttQmRNVHA1VW52bjlTR3hxaGZRbnNvSkc4RGJRUWpsQWJBR3drK2hyWXRG?=
=3D
 =3D?utf-8?B?endHdXRuQkFVazZIeHFaQ2REcVNjR2NpMzZqY1dESjFzMkZaNVNYclBqanVz?=
=3D
 =3D?utf-8?B?eHQyTDUrcC9CdGgrc1dFaTRiV3Mvbld3VUJmaGUwdTR0bVdPRTVLNTcwZ1Zo?=
=3D
 =3D?utf-8?Q?2q1Dz+nBytbpuNGr+SI4pNf?=3D
X-Forefront-Antispam-Report: CIP:199.188.200.108;CTRY:US;LANG:en;SCL:1;SRV:=
;IPV:NLI;SFV:NSPM;H:server237-2.web-hosting.com;PTR:server237-2.web-hosting=
.com;CAT:NONE;SFS:(13230031)(4636009)(451199024)(336012)(33964004)(83380400=
001)(956004)(2616005)(5660300002)(1096003)(9786002)(120186005)(8676002)(342=
06002)(26005)(15650500001)(6666004)(6966003)(3613699003)(86362001)(36756003=
)(7636003)(7596003)(356005)(62893002)(93036002)(6106002);DIR:INB;
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 12 Dec 2023 18:58:37.3943
 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 4c33e7e7-7407-4506-b1ec-08dbf=
b44592c
X-MS-Exchange-CrossTenant-Id: 06cd03e6-9cb8-4eff-aef6-0906e06f98ed
X-MS-Exchange-CrossTenant-AuthSource: SA2PEPF000015C9.namprd03.prod.outlook=
.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-Transport-CrossTenantHeadersStamped: CH3PR02MB9555
X-OrganizationHeadersPreserved: CH3PR02MB9555.namprd02.prod.outlook.com
X-OriginatorOrg: normakamali.com
X-CrossPremisesHeadersFilteredByDsnGenerator:
        CH2PR02MB6728.namprd02.prod.outlook.com

--c1379488-ec67-44fc-b396-3b3425ed1857
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<html>
<Head></head><body>
<p><b><font color=3D"#000066" size=3D"3" face=3D"Arial">Delivery has failed=
 to these recipients or groups:</font></b></p>
<font color=3D"#000000" size=3D"2" face=3D"Tahoma"><p><a href=3D"mailto:jil=
ls@normakamali.com">jills@normakamali.com</a><br>
</font>
<font color=3D"#000000" size=3D"3" face=3D"Arial">Your message wasn't deliv=
ered. Despite repeated attempts to deliver your message, the recipient's em=
ail system refused to accept a connection from your email system.<p>Contact=
 the recipient by some other means (by phone, for example) and ask them to =
tell their email admin that it appears that their email system is refusing =
connections from your email server. Give them the error details shown below=
. It's likely that the recipient's email admin is the only one who can fix =
this problem.</p><p>For Email Admins<br>No connection could be made because=
 the target computer actively refused it. This usually results from trying =
to connect to a service that is inactive on the remote host - that is, one =
with no server application running. For more information and tips to fix th=
is issue see this article: https://go.microsoft.com/fwlink/?LinkId=3D389361=
</p><br>
</font>
<font color=3D"#000000" size=3D"2" face=3D"Tahoma"><br>
</p>
</font>
<br><br><br><br><br><br>
<font color=3D"#808080" size=3D"2" face=3D"Tahoma"><p><b>Diagnostic informa=
tion for administrators:</b></p>
<p>Generating server: CH2PR02MB6728.namprd02.prod.outlook.com<br>
Receiving server: CH2PR02MB6728.namprd02.prod.outlook.com <br>
</p>
<p>jills@normakamali.com<br>
12/13/2023 7:07:12 PM - Server at CH2PR02MB6728.namprd02.prod.outlook.com  =
returned '550 5.4.316 Message expired, connection refused(Socket error code=
 10061)'<br>
12/13/2023 6:57:03 PM - Server at 50.75.248.155 (50.75.248.155) returned '4=
50 4.4.316 Connection refused [Message=3DSocket error code 10061] [LastAtte=
mptedServerName=3D50.75.248.155] [LastAttemptedIP=3D50.75.248.155:25] [Smtp=
Security=3D-2;-2] [DM3NAM02FT029.eop-nam02.prod.protection.outlook.com 2023=
-12-13T18:57:11.933Z 08DBF246109A4FD8](Socket error code 10061)'</p>
<p>Original message headers:</p>
<pre>Received: from SJ2PR02MB9415.namprd02.prod.outlook.com (2603:10b6:a03:=
4c9::7)
 by CH2PR02MB6728.namprd02.prod.outlook.com (2603:10b6:610:7e::24) with
 Microsoft SMTP Server (version=3DTLS1_2,
 cipher=3DTLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7091.26; Wed, 13 =
Dec
 2023 17:09:07 +0000
Received: from CH3PR02MB9555.namprd02.prod.outlook.com (2603:10b6:610:120::=
18)
 by SJ2PR02MB9415.namprd02.prod.outlook.com (2603:10b6:a03:4c9::7) with
 Microsoft SMTP Server (version=3DTLS1_2,
 cipher=3DTLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7068.28; Wed, 13 =
Dec
 2023 06:04:31 +0000
ARC-Seal: i=3D1; a=3Drsa-sha256; s=3Darcselector9901; d=3Dmicrosoft.com; cv=
=3Dnone;
 b=3DD4T+aWI5G5UXSoDtA1fnEcPmsW5uLIDheFJjJwtNm1/Y2diJMuodrw8t0l2XGlQhyzRKa0=
JAId0zVfcXZ3wze0IQSJLY+sAPe/n7xDb+e+SvZn/DKjxWya+arORY3btUaHNp3OdFpCpN2qQu5=
0fpObRQrCjdrXaBwm8IdOrzvTbwJgByj5/7wmtCyWF6e2hF6ESzpIw0tWz7S9bPmQ4J/MzIC1vb=
TWHD1LWOi5Uqk0D4xe9AQ97W9bkrPHb7oxnR2CTdIDvBIIYI7lvDpGsmjY5+rcZaGVcGUZT1Stz=
TvOUsvm8sT5aMXrG+C+5Cnl2cFTIWwQk5wr3oxRKvBMyMiw=3D=3D
ARC-Message-Signature: i=3D1; a=3Drsa-sha256; c=3Drelaxed/relaxed; d=3Dmicr=
osoft.com;
 s=3Darcselector9901;
 h=3DFrom:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-A=
ntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Ex=
change-AntiSpam-MessageData-1;
 bh=3DQImrmibG5RX6B3Mp50wfPvbKjz6b0DXOW7GBD5eLt5A=3D;
 b=3Dal+mNc5JeNzEYFpa8RsNA5P5NfQXlIaqi24uldhP+fgPUnrj5Bpi46WWS1xefcOfbJezDB=
nf8rWMVTaOMPtPiRHmv3nkc91mJjsgnEfxsmoSHGfXxJrT7Mhz7HIt30hF4hJbm5apO7MI7JkEb=
Zn5v7k9lK3y7o9aAmpPqcIK1vBr3FhfYvAwhQO+wrU7JF8jFQ7KTuxt0bh2hWtn6XAX3PAfMJOv=
mI+QFkCr7PmAjy+fimPWwrhtczTTfph+Qp1GIcW1NqmfwF0v94Fdjf0ovwegvxyPnv7qLhINllx=
Rf5ondUL7FrAk8aQ5KDPHBbdagyWkXeG6FD5MCK5UPu4gcQ=3D=3D
ARC-Authentication-Results: i=3D1; mx.microsoft.com 1; spf=3Dpass (sender i=
p is
 199.188.200.108) smtp.rcpttodomain=3Dnormakamali.com
 smtp.mailfrom=3Debaarchitects.org; dmarc=3Dbestguesspass action=3Dnone
 header.from=3Debaarchitects.org; dkim=3Dpass (signature was verified)
 header.d=3Debaarchitects.org; arc=3Dnone (0)
Received: from SN7PR04CA0064.namprd04.prod.outlook.com (2603:10b6:806:121::=
9)
 by CH3PR02MB9555.namprd02.prod.outlook.com (2603:10b6:610:120::18) with
 Microsoft SMTP Server (version=3DTLS1_2,
 cipher=3DTLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7068.33; Tue, 12 =
Dec
 2023 18:58:37 +0000
Received: from SA2PEPF000015C9.namprd03.prod.outlook.com
 (2603:10b6:806:121:cafe::74) by SN7PR04CA0064.outlook.office365.com
 (2603:10b6:806:121::9) with Microsoft SMTP Server (version=3DTLS1_2,
 cipher=3DTLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7091.26 via Front=
end
 Transport; Tue, 12 Dec 2023 18:58:37 +0000
Authentication-Results: spf=3Dpass (sender IP is 199.188.200.108)
 smtp.mailfrom=3Debaarchitects.org; dkim=3Dpass (signature was verified)
 header.d=3Debaarchitects.org;dmarc=3Dbestguesspass action=3Dnone
 header.from=3Debaarchitects.org;compauth=3Dpass reason=3D109
Received-SPF: Pass (protection.outlook.com: domain of ebaarchitects.org
 designates 199.188.200.108 as permitted sender)
 receiver=3Dprotection.outlook.com; client-ip=3D199.188.200.108;
 helo=3Dserver237-2.web-hosting.com; pr=3DC
Received: from server237-2.web-hosting.com (199.188.200.108) by
 SA2PEPF000015C9.mail.protection.outlook.com (10.167.241.199) with Microsof=
t
 SMTP Server (version=3DTLS1_2, cipher=3DTLS_ECDHE_RSA_WITH_AES_256_GCM_SHA=
384) id
 15.20.7091.26 via Frontend Transport; Tue, 12 Dec 2023 18:58:37 +0000
DKIM-Signature: v=3D1; a=3Drsa-sha256; q=3Ddns/txt; c=3Drelaxed/relaxed;
	d=3Debaarchitects.org; s=3Ddefault; h=3DContent-Type:MIME-Version:Date:Sub=
ject:To:
	From:Reply-To:Message-ID:Sender:Cc:Content-Transfer-Encoding:Content-ID:
	Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent=
-Cc
	:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscri=
be:
	List-Subscribe:List-Post:List-Owner:List-Archive;
	bh=3DQImrmibG5RX6B3Mp50wfPvbKjz6b0DXOW7GBD5eLt5A=3D; b=3DJVLmLRPcCtrHGUJ7S=
aQts2w/2F
	VcTfnUBnGvmJlg/9np2yL2WONzk2c67PLvcghwQBqhnWWE2IXX1En8iB1WaFVqR2UO9lK4LTw7=
Uq/
	GRaf6BrgRi2uvlMTtSOYyVPfwVnO3po8dH0b/FvkX672nhSrLWN4bAtc2gH8xSiOZbm44x6mBG=
nht
	V7xkq5c9WaSFwUC9XX6UNG2A3FeyA5jKTrb7B5wjDkMxkMX68M0Oq1TpzdAGm/x+8EOW8k1wHn=
Pal
	OPV2Wl+oDhf+I5mBEDI4d/Q5ic2hlPShap7qdM8nWv9kmqCTw9KmpONDjlwYUMBWg2TlRG6vZ0=
hoe
	kd9FwaDw=3D=3D;
Received: from [115.79.219.39] (port=3D49892 helo=3D85.206.160.13)
	by server237.web-hosting.com with esmtpsa  (TLS1.2) tls TLS_ECDHE_RSA_WITH=
_AES_256_GCM_SHA384
	(Exim 4.96.1)
	(envelope-from &lt;dev@ebaarchitects.org&gt;)
	id 1rD7xX-008zo5-38
	for jills@normakamali.com;
	Tue, 12 Dec 2023 13:58:36 -0500
Message-ID: &lt;a7ff3f946099f8f3d55f16bd499ca6ad8d021fae@ebaarchitects.org&=
gt;
Reply-To: joshua c &lt;joshuacampbell@mythenesa.com&gt;
From: joshua c &lt;dev@ebaarchitects.org&gt;
To: jills@normakamali.com
Subject: [EXTERNAL EMAIL] Unknown payment made on your online store - need
 assistance
Date: Tue, 12 Dec 2023 10:55:59 -0800
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary=3D&quot;80e8a10ac34c66686bc18=
823c6123830b0d21c&quot;
X-AntiAbuse: This header was added to track abuse, please include it with a=
ny abuse report
X-AntiAbuse: Primary Hostname - server237.web-hosting.com
X-AntiAbuse: Original Domain - normakamali.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - ebaarchitects.org
X-Get-Message-Sender-Via: server237.web-hosting.com: authenticated_id: dev@=
ebaarchitects.org
X-Authenticated-Sender: server237.web-hosting.com: dev@ebaarchitects.org
X-Source:
X-Source-Args:
X-Source-Dir:
X-From-Rewrite: unmodified, already matched
Return-Path: dev@ebaarchitects.org
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 06cd03e6-9cb8-4eff-aef6-0906e06f98ed:0
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic:
	SA2PEPF000015C9:EE_|CH3PR02MB9555:EE_|SJ2PR02MB9415:EE_|CH2PR02MB6728:EE_
X-MS-Office365-Filtering-Correlation-Id: 4c33e7e7-7407-4506-b1ec-08dbfb4459=
2c
X-LD-Processed: 06cd03e6-9cb8-4eff-aef6-0906e06f98ed,ExtAddr,ExtAddr,ExtAdd=
r
X-MS-Exchange-AtpMessageProperties: SA|SL
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info: =3D?utf-8?B?STQ1ek51YThTSjk5M3dYczFhblJ5=
T3h5djRmd2pjNHB0Z3JTN0JZdkQ4dmVr?=3D
 =3D?utf-8?B?Yk5RWHd3NDUyQmwxZkh5akNmUGp0TXhNZldZbTJzSmRXQ01EVFV0aHNiOFI0?=
=3D
 =3D?utf-8?B?dUw4V0IwQ0R5UTZCZ295aS9ablo2dDY2VFA4TFJTbkpCWFFjQWhsZGMzVTBP?=
=3D
 =3D?utf-8?B?THpiWFhGWnRmTWZBODkyWWZjdGt0Q2R3aEsyVUNPdGtkRHRPbVExdDhEbmxF?=
=3D
 =3D?utf-8?B?b0RTNktGcWdLdlR4cW1hWUxCeXhsbmhoUHhVVGYvdUZsREFySTFRNVRKS2J5?=
=3D
 =3D?utf-8?B?TVJqclVGL0hZZy8yQmxNcWhNTlB3bk9qRXl4QW51VFJjZ0l5d1pnY2hPMUJS?=
=3D
 =3D?utf-8?B?aUhNQmNGTldGQjYreWdGOEx1SHl0bGZGUkZqYjV3TlFUY080L3dSck53cnhn?=
=3D
 =3D?utf-8?B?aG9XYzF2bG96NXByTDBZdTdQeVc5SnI2RC9wdEZ5dHRSZUc4MHdUb0Rva01v?=
=3D
 =3D?utf-8?B?WUFDV3FkQ21OYUxMaXdibi9oN2hJdHM3Z0pPdjd1Tm5jV2pMNXVObDl1TzJK?=
=3D
 =3D?utf-8?B?UlhSbTZBT1UvdG5tSGY4azUyR095Sk5zNkM2TXV4US9YQlFoWWpLV0pOQmpn?=
=3D
 =3D?utf-8?B?RFljdmlCMGRacWcwZHNOUmQxSEEwZTJ6NHVic3dkT2trMWdFSjdiWnRQTWRj?=
=3D
 =3D?utf-8?B?cElkckNSdTJUVS90UmZ1NFE0TkpWbzNMZlZYYTdxR205WjZSQVgyT0VIZy9Y?=
=3D
 =3D?utf-8?B?NGVxd3lPYlh0d1JmQUdwLzhWc3Z5VE85amwvaDlLcUc3S2NWanVjc2RvT2dO?=
=3D
 =3D?utf-8?B?RTRhMExqV2VCVFpObHhTcGZ4eThMeDd1SEw4azlDOWpSRmt0c0xScjV4b3pX?=
=3D
 =3D?utf-8?B?QWRKcC9KR3VHL3FaVUJrY2NRL29kTWR1bVdsK3RUdzhDSTJaYWlsQm1nY3A2?=
=3D
 =3D?utf-8?B?VjBvZkxwMVJxR0ZtWFc5emVMTzYyN3IxS0tnOGpUa2FoMEdHKzBVMm1NSVd5?=
=3D
 =3D?utf-8?B?SThzdFRIYmpCcnFUSVdRN0o2T295QURyY3UzTGFvcm1WSitBOEpad2lPeHlO?=
=3D
 =3D?utf-8?B?VjN4emk5M0ZxSE81dDJ6alZ2RGhYSEpwNWlZZG5qU21UYVZteHhEOUxGb1U5?=
=3D
 =3D?utf-8?B?am51QWpkejJxTmQ5MEpNb1ptMEQ1TXpPYS9SaVQzOUd2OXIvN3B3dlBaNFJB?=
=3D
 =3D?utf-8?B?czNLcWVUK2xBdDY2bmk2OFppSE9KUi8xTHp3eXNyZjJtNXpZbTh1ZTduTndD?=
=3D
 =3D?utf-8?B?VERKOFdLb1ZJci9WeDlNWC9VODYwOWlNckN2VlZpTGZpZFZ5aUsxL0ozekZm?=
=3D
 =3D?utf-8?B?dUNjbkRaYmg5cXlHL2lod2ljNXArcmlvUVNDTUFHN0Qxd2MwcWY3WElkVXY0?=
=3D
 =3D?utf-8?B?eURjVFFicENPQnBTd2pMZzM3MDFYUytCOXlUM2QvYlExTFZzdkZOSWFzSEFG?=
=3D
 =3D?utf-8?B?WlhwM1E1K1p1L3hobW1HaDdSLzhwUm9iTmdVQUhrM1pwdTBYUmtiV3p3MkpG?=
=3D
 =3D?utf-8?B?Q2VwdXFjSS90VUhJMXY5NzJWT3E0OHN0djBOZWppV1VMdHlqMEpCaXZhZFJY?=
=3D
 =3D?utf-8?B?TWt0VW5pZERkMlRxdG5PckowZ2pCRFRPOXhyczBTTzRKRFhzcHE5NFgyaUhQ?=
=3D
 =3D?utf-8?B?SHhYdFExL1ZIeGJXVUJWYUU0ZUNORld0SmIxRjBMWE56NkVhdXdHZXdHN0hY?=
=3D
 =3D?utf-8?B?dGdKVy9oVG91ZVp3dHFta0QyYVl4WEh4WXpRU2pTQzFKVjlhcFl4ZFQzRndK?=
=3D
 =3D?utf-8?B?ZWtlcDVJdEhMMlF5RjBGMUJVYjFlUTJrdjJ6VjBjOXludnhFN1RscDFDV01H?=
=3D
 =3D?utf-8?B?V3FsTGRTV0dwOUo0WnNRZkp6SnZ3OTZrQWRWZjNXSG1kaFczQlJ2MWk1bDQ5?=
=3D
 =3D?utf-8?B?enloTHlvSVg1ampwdzJvb0l5MmI1VEJJTnJIMHBDZWVhQUZxVE1kK1N0aTFr?=
=3D
 =3D?utf-8?B?M1FvNVlJU25rbm1xN0ZBcTRLTktJOGJndXBVV3lqUXdvOEZnalBuNm5SeC9s?=
=3D
 =3D?utf-8?B?aDNHSDRSdHAxUytzT2l4Rmt6RDNMbmM5TTUycm9id2NpeTAyK29qWS9uYTVB?=
=3D
 =3D?utf-8?B?T3A2NmJ6cXdYcHJlVk4zdS9UVFZSbXNjWjZ0Y3JmWEhMSjFZbGlSS1dHb0pS?=
=3D
 =3D?utf-8?B?NnNxTFNnbExUQWp4NEVsdlFkMjh5WkFpMUJPR0JKL3EvbUFFOFU5Y2gyWGNm?=
=3D
 =3D?utf-8?B?NVk4YTlyZmJJZHlrTE5Tbm5xUWkrQ1ltNXFXaWRZQ1phdm1Vbmh4ZUMxL2sx?=
=3D
 =3D?utf-8?B?QmczbklSdmZDL0trU3graVFqb0RZR2VNL2NUcysvVFpsVnVPZUJ1UWpwNFM1?=
=3D
 =3D?utf-8?B?TEFqbEpINVA2elBoSi9jZzEvYUQ0MkszQXgzaDl3VkMwaWFmOWZzWGRDRlFt?=
=3D
 =3D?utf-8?B?N1JESXJ5M3EzWHVuSVBrL2t1Q3VCQkUySStkQ2lOVEQxdWc0aGw3S0hNNWtB?=
=3D
 =3D?utf-8?B?VGtwdlk4REVYZlBad0ducGVYcWZkdkczWlRHaGN5SUFwMzQyQlFzNWVzNWFY?=
=3D
 =3D?utf-8?B?d0pwQWl2K1Zia1ZkaGpKU0tjbEJYRkE5cExWVHphdnZHVmpwMkhvQTJDRDUx?=
=3D
 =3D?utf-8?B?MktRbGo0V3VBNEdPVm5nbGJFZFhKNFRQSFlxd0RJMVNrbVN6MHpnTVp4NHh6?=
=3D
 =3D?utf-8?B?eSttQmRNVHA1VW52bjlTR3hxaGZRbnNvSkc4RGJRUWpsQWJBR3drK2hyWXRG?=
=3D
 =3D?utf-8?B?endHdXRuQkFVazZIeHFaQ2REcVNjR2NpMzZqY1dESjFzMkZaNVNYclBqanVz?=
=3D
 =3D?utf-8?B?eHQyTDUrcC9CdGgrc1dFaTRiV3Mvbld3VUJmaGUwdTR0bVdPRTVLNTcwZ1Zo?=
=3D
 =3D?utf-8?Q?2q1Dz+nBytbpuNGr+SI4pNf?=3D
X-Forefront-Antispam-Report: CIP:199.188.200.108;CTRY:US;LANG:en;SCL:1;SRV:=
;IPV:NLI;SFV:NSPM;H:server237-2.web-hosting.com;PTR:server237-2.web-hosting=
.com;CAT:NONE;SFS:(13230031)(4636009)(451199024)(336012)(33964004)(83380400=
001)(956004)(2616005)(5660300002)(1096003)(9786002)(120186005)(8676002)(342=
06002)(26005)(15650500001)(6666004)(6966003)(3613699003)(86362001)(36756003=
)(7636003)(7596003)(356005)(62893002)(93036002)(6106002);DIR:INB;
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 12 Dec 2023 18:58:37.3943
 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 4c33e7e7-7407-4506-b1ec-08dbf=
b44592c
X-MS-Exchange-CrossTenant-Id: 06cd03e6-9cb8-4eff-aef6-0906e06f98ed
X-MS-Exchange-CrossTenant-AuthSource: SA2PEPF000015C9.namprd03.prod.outlook=
.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-Transport-CrossTenantHeadersStamped: CH3PR02MB9555
X-OrganizationHeadersPreserved: CH3PR02MB9555.namprd02.prod.outlook.com
X-OriginatorOrg: normakamali.com
X-CrossPremisesHeadersFilteredByDsnGenerator:
	CH2PR02MB6728.namprd02.prod.outlook.com
</pre>
</font>
</body>
</html>=

--c1379488-ec67-44fc-b396-3b3425ed1857--

--1174d818-7cf6-4616-9029-c90d0b264046
Content-Type: message/delivery-status

Reporting-MTA: dns;CH2PR02MB6728.namprd02.prod.outlook.com
Received-From-MTA: dns;SJ2PR02MB9415.namprd02.prod.outlook.com
Arrival-Date: Wed, 13 Dec 2023 17:09:07 +0000

Original-Recipient: rfc822;jills@normakamali.com
Final-Recipient: rfc822;jills@normakamali.com
Action: failed
Status: 5.4.316
Diagnostic-Code: smtp;550 5.4.316 Message expired, connection refused

--1174d818-7cf6-4616-9029-c90d0b264046
Content-Type: message/rfc822

Received: from SJ2PR02MB9415.namprd02.prod.outlook.com (2603:10b6:a03:4c9::7)
 by CH2PR02MB6728.namprd02.prod.outlook.com (2603:10b6:610:7e::24) with
 Microsoft SMTP Server (version=TLS1_2,
 cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7091.26; Wed, 13 Dec
 2023 17:09:07 +0000
Received: from CH3PR02MB9555.namprd02.prod.outlook.com (2603:10b6:610:120::18)
 by SJ2PR02MB9415.namprd02.prod.outlook.com (2603:10b6:a03:4c9::7) with
 Microsoft SMTP Server (version=TLS1_2,
 cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7068.28; Wed, 13 Dec
 2023 06:04:31 +0000
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
 b=D4T+aWI5G5UXSoDtA1fnEcPmsW5uLIDheFJjJwtNm1/Y2diJMuodrw8t0l2XGlQhyzRKa0JAId0zVfcXZ3wze0IQSJLY+sAPe/n7xDb+e+SvZn/DKjxWya+arORY3btUaHNp3OdFpCpN2qQu50fpObRQrCjdrXaBwm8IdOrzvTbwJgByj5/7wmtCyWF6e2hF6ESzpIw0tWz7S9bPmQ4J/MzIC1vbTWHD1LWOi5Uqk0D4xe9AQ97W9bkrPHb7oxnR2CTdIDvBIIYI7lvDpGsmjY5+rcZaGVcGUZT1StzTvOUsvm8sT5aMXrG+C+5Cnl2cFTIWwQk5wr3oxRKvBMyMiw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
 s=arcselector9901;
 h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
 bh=QImrmibG5RX6B3Mp50wfPvbKjz6b0DXOW7GBD5eLt5A=;
 b=al+mNc5JeNzEYFpa8RsNA5P5NfQXlIaqi24uldhP+fgPUnrj5Bpi46WWS1xefcOfbJezDBnf8rWMVTaOMPtPiRHmv3nkc91mJjsgnEfxsmoSHGfXxJrT7Mhz7HIt30hF4hJbm5apO7MI7JkEbZn5v7k9lK3y7o9aAmpPqcIK1vBr3FhfYvAwhQO+wrU7JF8jFQ7KTuxt0bh2hWtn6XAX3PAfMJOvmI+QFkCr7PmAjy+fimPWwrhtczTTfph+Qp1GIcW1NqmfwF0v94Fdjf0ovwegvxyPnv7qLhINllxRf5ondUL7FrAk8aQ5KDPHBbdagyWkXeG6FD5MCK5UPu4gcQ==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass (sender ip is
 199.188.200.108) smtp.rcpttodomain=normakamali.com
 smtp.mailfrom=ebaarchitects.org; dmarc=bestguesspass action=none
 header.from=ebaarchitects.org; dkim=pass (signature was verified)
 header.d=ebaarchitects.org; arc=none (0)
Received: from SN7PR04CA0064.namprd04.prod.outlook.com (2603:10b6:806:121::9)
 by CH3PR02MB9555.namprd02.prod.outlook.com (2603:10b6:610:120::18) with
 Microsoft SMTP Server (version=TLS1_2,
 cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7068.33; Tue, 12 Dec
 2023 18:58:37 +0000
Received: from SA2PEPF000015C9.namprd03.prod.outlook.com
 (2603:10b6:806:121:cafe::74) by SN7PR04CA0064.outlook.office365.com
 (2603:10b6:806:121::9) with Microsoft SMTP Server (version=TLS1_2,
 cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7091.26 via Frontend
 Transport; Tue, 12 Dec 2023 18:58:37 +0000
Authentication-Results: spf=pass (sender IP is 199.188.200.108)
 smtp.mailfrom=ebaarchitects.org; dkim=pass (signature was verified)
 header.d=ebaarchitects.org;dmarc=bestguesspass action=none
 header.from=ebaarchitects.org;compauth=pass reason=109
Received-SPF: Pass (protection.outlook.com: domain of ebaarchitects.org
 designates 199.188.200.108 as permitted sender)
 receiver=protection.outlook.com; client-ip=199.188.200.108;
 helo=server237-2.web-hosting.com; pr=C
Received: from server237-2.web-hosting.com (199.188.200.108) by
 SA2PEPF000015C9.mail.protection.outlook.com (10.167.241.199) with Microsoft
 SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
 15.20.7091.26 via Frontend Transport; Tue, 12 Dec 2023 18:58:37 +0000
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
	d=ebaarchitects.org; s=default; h=Content-Type:MIME-Version:Date:Subject:To:
	From:Reply-To:Message-ID:Sender:Cc:Content-Transfer-Encoding:Content-ID:
	Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc
	:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:
	List-Subscribe:List-Post:List-Owner:List-Archive;
	bh=QImrmibG5RX6B3Mp50wfPvbKjz6b0DXOW7GBD5eLt5A=; b=JVLmLRPcCtrHGUJ7SaQts2w/2F
	VcTfnUBnGvmJlg/9np2yL2WONzk2c67PLvcghwQBqhnWWE2IXX1En8iB1WaFVqR2UO9lK4LTw7Uq/
	GRaf6BrgRi2uvlMTtSOYyVPfwVnO3po8dH0b/FvkX672nhSrLWN4bAtc2gH8xSiOZbm44x6mBGnht
	V7xkq5c9WaSFwUC9XX6UNG2A3FeyA5jKTrb7B5wjDkMxkMX68M0Oq1TpzdAGm/x+8EOW8k1wHnPal
	OPV2Wl+oDhf+I5mBEDI4d/Q5ic2hlPShap7qdM8nWv9kmqCTw9KmpONDjlwYUMBWg2TlRG6vZ0hoe
	kd9FwaDw==;
Received: from [115.79.219.39] (port=49892 helo=85.206.160.13)
	by server237.web-hosting.com with esmtpsa  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.96.1)
	(envelope-from <dev@ebaarchitects.org>)
	id 1rD7xX-008zo5-38
	for jills@normakamali.com;
	Tue, 12 Dec 2023 13:58:36 -0500
Message-ID: <a7ff3f946099f8f3d55f16bd499ca6ad8d021fae@ebaarchitects.org>
Reply-To: joshua c <joshuacampbell@mythenesa.com>
From: joshua c <dev@ebaarchitects.org>
To: jills@normakamali.com
Subject: [EXTERNAL EMAIL] Unknown payment made on your online store - need
 assistance
Date: Tue, 12 Dec 2023 10:55:59 -0800
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="80e8a10ac34c66686bc18823c6123830b0d21c"
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server237.web-hosting.com
X-AntiAbuse: Original Domain - normakamali.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - ebaarchitects.org
X-Get-Message-Sender-Via: server237.web-hosting.com: authenticated_id: dev@ebaarchitects.org
X-Authenticated-Sender: server237.web-hosting.com: dev@ebaarchitects.org
X-Source:
X-Source-Args:
X-Source-Dir:
X-From-Rewrite: unmodified, already matched
Return-Path: dev@ebaarchitects.org
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 06cd03e6-9cb8-4eff-aef6-0906e06f98ed:0
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic:
 SA2PEPF000015C9:EE_|CH3PR02MB9555:EE_|SJ2PR02MB9415:EE_|CH2PR02MB6728:EE_
X-MS-Office365-Filtering-Correlation-Id: 4c33e7e7-7407-4506-b1ec-08dbfb44592c
X-LD-Processed: 06cd03e6-9cb8-4eff-aef6-0906e06f98ed,ExtAddr,ExtAddr,ExtAddr
X-MS-Exchange-AtpMessageProperties: SA|SL
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info: =?utf-8?B?STQ1ek51YThTSjk5M3dYczFhblJ5T3h5djRmd2pjNHB0Z3JTN0JZdkQ4dmVr?=
 =?utf-8?B?Yk5RWHd3NDUyQmwxZkh5akNmUGp0TXhNZldZbTJzSmRXQ01EVFV0aHNiOFI0?=
 =?utf-8?B?dUw4V0IwQ0R5UTZCZ295aS9ablo2dDY2VFA4TFJTbkpCWFFjQWhsZGMzVTBP?=
 =?utf-8?B?THpiWFhGWnRmTWZBODkyWWZjdGt0Q2R3aEsyVUNPdGtkRHRPbVExdDhEbmxF?=
 =?utf-8?B?b0RTNktGcWdLdlR4cW1hWUxCeXhsbmhoUHhVVGYvdUZsREFySTFRNVRKS2J5?=
 =?utf-8?B?TVJqclVGL0hZZy8yQmxNcWhNTlB3bk9qRXl4QW51VFJjZ0l5d1pnY2hPMUJS?=
 =?utf-8?B?aUhNQmNGTldGQjYreWdGOEx1SHl0bGZGUkZqYjV3TlFUY080L3dSck53cnhn?=
 =?utf-8?B?aG9XYzF2bG96NXByTDBZdTdQeVc5SnI2RC9wdEZ5dHRSZUc4MHdUb0Rva01v?=
 =?utf-8?B?WUFDV3FkQ21OYUxMaXdibi9oN2hJdHM3Z0pPdjd1Tm5jV2pMNXVObDl1TzJK?=
 =?utf-8?B?UlhSbTZBT1UvdG5tSGY4azUyR095Sk5zNkM2TXV4US9YQlFoWWpLV0pOQmpn?=
 =?utf-8?B?RFljdmlCMGRacWcwZHNOUmQxSEEwZTJ6NHVic3dkT2trMWdFSjdiWnRQTWRj?=
 =?utf-8?B?cElkckNSdTJUVS90UmZ1NFE0TkpWbzNMZlZYYTdxR205WjZSQVgyT0VIZy9Y?=
 =?utf-8?B?NGVxd3lPYlh0d1JmQUdwLzhWc3Z5VE85amwvaDlLcUc3S2NWanVjc2RvT2dO?=
 =?utf-8?B?RTRhMExqV2VCVFpObHhTcGZ4eThMeDd1SEw4azlDOWpSRmt0c0xScjV4b3pX?=
 =?utf-8?B?QWRKcC9KR3VHL3FaVUJrY2NRL29kTWR1bVdsK3RUdzhDSTJaYWlsQm1nY3A2?=
 =?utf-8?B?VjBvZkxwMVJxR0ZtWFc5emVMTzYyN3IxS0tnOGpUa2FoMEdHKzBVMm1NSVd5?=
 =?utf-8?B?SThzdFRIYmpCcnFUSVdRN0o2T295QURyY3UzTGFvcm1WSitBOEpad2lPeHlO?=
 =?utf-8?B?VjN4emk5M0ZxSE81dDJ6alZ2RGhYSEpwNWlZZG5qU21UYVZteHhEOUxGb1U5?=
 =?utf-8?B?am51QWpkejJxTmQ5MEpNb1ptMEQ1TXpPYS9SaVQzOUd2OXIvN3B3dlBaNFJB?=
 =?utf-8?B?czNLcWVUK2xBdDY2bmk2OFppSE9KUi8xTHp3eXNyZjJtNXpZbTh1ZTduTndD?=
 =?utf-8?B?VERKOFdLb1ZJci9WeDlNWC9VODYwOWlNckN2VlZpTGZpZFZ5aUsxL0ozekZm?=
 =?utf-8?B?dUNjbkRaYmg5cXlHL2lod2ljNXArcmlvUVNDTUFHN0Qxd2MwcWY3WElkVXY0?=
 =?utf-8?B?eURjVFFicENPQnBTd2pMZzM3MDFYUytCOXlUM2QvYlExTFZzdkZOSWFzSEFG?=
 =?utf-8?B?WlhwM1E1K1p1L3hobW1HaDdSLzhwUm9iTmdVQUhrM1pwdTBYUmtiV3p3MkpG?=
 =?utf-8?B?Q2VwdXFjSS90VUhJMXY5NzJWT3E0OHN0djBOZWppV1VMdHlqMEpCaXZhZFJY?=
 =?utf-8?B?TWt0VW5pZERkMlRxdG5PckowZ2pCRFRPOXhyczBTTzRKRFhzcHE5NFgyaUhQ?=
 =?utf-8?B?SHhYdFExL1ZIeGJXVUJWYUU0ZUNORld0SmIxRjBMWE56NkVhdXdHZXdHN0hY?=
 =?utf-8?B?dGdKVy9oVG91ZVp3dHFta0QyYVl4WEh4WXpRU2pTQzFKVjlhcFl4ZFQzRndK?=
 =?utf-8?B?ZWtlcDVJdEhMMlF5RjBGMUJVYjFlUTJrdjJ6VjBjOXludnhFN1RscDFDV01H?=
 =?utf-8?B?V3FsTGRTV0dwOUo0WnNRZkp6SnZ3OTZrQWRWZjNXSG1kaFczQlJ2MWk1bDQ5?=
 =?utf-8?B?enloTHlvSVg1ampwdzJvb0l5MmI1VEJJTnJIMHBDZWVhQUZxVE1kK1N0aTFr?=
 =?utf-8?B?M1FvNVlJU25rbm1xN0ZBcTRLTktJOGJndXBVV3lqUXdvOEZnalBuNm5SeC9s?=
 =?utf-8?B?aDNHSDRSdHAxUytzT2l4Rmt6RDNMbmM5TTUycm9id2NpeTAyK29qWS9uYTVB?=
 =?utf-8?B?T3A2NmJ6cXdYcHJlVk4zdS9UVFZSbXNjWjZ0Y3JmWEhMSjFZbGlSS1dHb0pS?=
 =?utf-8?B?NnNxTFNnbExUQWp4NEVsdlFkMjh5WkFpMUJPR0JKL3EvbUFFOFU5Y2gyWGNm?=
 =?utf-8?B?NVk4YTlyZmJJZHlrTE5Tbm5xUWkrQ1ltNXFXaWRZQ1phdm1Vbmh4ZUMxL2sx?=
 =?utf-8?B?QmczbklSdmZDL0trU3graVFqb0RZR2VNL2NUcysvVFpsVnVPZUJ1UWpwNFM1?=
 =?utf-8?B?TEFqbEpINVA2elBoSi9jZzEvYUQ0MkszQXgzaDl3VkMwaWFmOWZzWGRDRlFt?=
 =?utf-8?B?N1JESXJ5M3EzWHVuSVBrL2t1Q3VCQkUySStkQ2lOVEQxdWc0aGw3S0hNNWtB?=
 =?utf-8?B?VGtwdlk4REVYZlBad0ducGVYcWZkdkczWlRHaGN5SUFwMzQyQlFzNWVzNWFY?=
 =?utf-8?B?d0pwQWl2K1Zia1ZkaGpKU0tjbEJYRkE5cExWVHphdnZHVmpwMkhvQTJDRDUx?=
 =?utf-8?B?MktRbGo0V3VBNEdPVm5nbGJFZFhKNFRQSFlxd0RJMVNrbVN6MHpnTVp4NHh6?=
 =?utf-8?B?eSttQmRNVHA1VW52bjlTR3hxaGZRbnNvSkc4RGJRUWpsQWJBR3drK2hyWXRG?=
 =?utf-8?B?endHdXRuQkFVazZIeHFaQ2REcVNjR2NpMzZqY1dESjFzMkZaNVNYclBqanVz?=
 =?utf-8?B?eHQyTDUrcC9CdGgrc1dFaTRiV3Mvbld3VUJmaGUwdTR0bVdPRTVLNTcwZ1Zo?=
 =?utf-8?Q?2q1Dz+nBytbpuNGr+SI4pNf?=
X-Forefront-Antispam-Report: CIP:199.188.200.108;CTRY:US;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:server237-2.web-hosting.com;PTR:server237-2.web-hosting.com;CAT:NONE;SFS:(13230031)(4636009)(451199024)(336012)(33964004)(83380400001)(956004)(2616005)(5660300002)(1096003)(9786002)(120186005)(8676002)(34206002)(26005)(15650500001)(6666004)(6966003)(3613699003)(86362001)(36756003)(7636003)(7596003)(356005)(62893002)(93036002)(6106002);DIR:INB;
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 12 Dec 2023 18:58:37.3943
 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 4c33e7e7-7407-4506-b1ec-08dbfb44592c
X-MS-Exchange-CrossTenant-Id: 06cd03e6-9cb8-4eff-aef6-0906e06f98ed
X-MS-Exchange-CrossTenant-AuthSource: SA2PEPF000015C9.namprd03.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-Transport-CrossTenantHeadersStamped: CH3PR02MB9555
X-OrganizationHeadersPreserved: CH3PR02MB9555.namprd02.prod.outlook.com
X-OriginatorOrg: normakamali.com
X-CrossPremisesHeadersFilteredByDsnGenerator:
 CH2PR02MB6728.namprd02.prod.outlook.com

--80e8a10ac34c66686bc18823c6123830b0d21c
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

I am writing to you regarding a problem with a purchase that was made fro=
m my debit card on your website.

I have no recollection of making this transaction and am concerned that m=
y account might have been hacked. I have already contacted my bank, and I=
 have all the necessary records to show that I did not make this transact=
ion.

I would appreciate it if you could investigate this matter. I would also =
like to request that you provide me with any relevant information about t=
he transaction, such as the transaction ID, and any other relevant inform=
ation that you can provide.

Thank you for your time and assistance in this matter. I look forward to =
hearing back from you soon.

Sincerely

--80e8a10ac34c66686bc18823c6123830b0d21c
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

<html>
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dutf-8">
</head>
<body bgColor=3D"#ffffff">
<div align=3Dleft><font size=3D2 face=3DArial>I am writing to you regardi=
ng a problem with a purchase that was made from my debit card on your web=
site.</font></div>
<div>&nbsp;</div>
<div align=3Dleft><font size=3D2 face=3DArial>I have no recollection of m=
aking this transaction and am concerned that my account might have been h=
acked. I have already contacted my bank, and I have all the necessary rec=
ords to show that I did not make this transaction.</font></div>
<div>&nbsp;</div>
<div align=3Dleft><font size=3D2 face=3DArial>I would appreciate it if yo=
u could investigate this matter. I would also like to request that you pr=
ovide me with any relevant information about the transaction, such as the=
 transaction ID, and any other relevant information that you can provide.=
</font></div>
<div>&nbsp;</div>
<div align=3Dleft><font size=3D2 face=3DArial>Thank you for your time and=
 assistance in this matter. I look forward to hearing back from you soon.=
</font></div>
<div>&nbsp;</div>
<div align=3Dleft><font size=3D2 face=3DArial>Sincerely</font></div></bod=
y></html>

--80e8a10ac34c66686bc18823c6123830b0d21c--

--1174d818-7cf6-4616-9029-c90d0b264046--