OwlCyberSecurity - MANAGER

Edit File: 1702637931.M494564P889348.server237.web-hosting.com,S=46279,W=47175

Envelope-to: dev@ebaarchitects.org
Delivery-date: Fri, 15 Dec 2023 05:58:51 -0500
MIME-Version: 1.0
From: <postmaster@normakamali.com>
To: <dev@ebaarchitects.org>
Date: Fri, 15 Dec 2023 10:58:00 +0000
Content-Type: multipart/report; report-type=delivery-status;
	boundary="16d0c690-bcdf-46a3-a7da-9f1edf820be9"
Content-Language: en-US
Message-ID:
 <17c6a478-9e5d-4315-b1f2-70ed2eff6782@MN2PR02MB6640.namprd02.prod.outlook.com>
In-Reply-To: <05b0dc778353aea5830940eb1fc99398bd5fbc3d@ebaarchitects.org>
References: <05b0dc778353aea5830940eb1fc99398bd5fbc3d@ebaarchitects.org>
Subject: Undeliverable: [EXTERNAL EMAIL] Distressed over unknown charge made
 on my account - requesting immediate action
Auto-Submitted: auto-replied
X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1
X-MS-Exchange-AntiSpam-MessageData-0:
	N+M+PszhAIigGWj71MqFvkJB/ma0sTWd6klgrTq8Z71oVtvgIFtx/xzMRsRnx7QGYYjfkCttx7sWnGR5QLBgvHsitWGgrhShSaJTZywqwJT2z3jgxJTSKEy2HuG0eT0e2R5fldHVhpY00h1cgKLCCUawxFMOGWn1n2ZvZzALHxxdsJVCYVueF8cvukkAGiNJ
X-OriginatorOrg: normakamali.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 15 Dec 2023 10:58:00.3654
 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-AuthSource: MN2PR02MB6640.namprd02.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-Network-Message-Id:
	8ce9291c-2966-42a3-af11-08dbfd5cb41c
X-MS-Exchange-Transport-CrossTenantHeadersStamped: MN2PR02MB6640
X-Spam-Status: No, score=2.4
X-Spam-Score: 24
X-Spam-Bar: ++
X-Ham-Report: Spam detection software, running on the system "server237.web-hosting.com",
 has NOT identified this incoming email as spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Delivery has failed to these recipients or groups: jillians@normakamali.com<mailto:jillians@normakamali.com>
    Your message wasn't delivered. Despite repeated attempts to deliver your
   message, the recipient's email system refused to accept a connection [...]
    
 Content analysis details:   (2.4 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: web-hosting.com]
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
  1.5 KAM_MXURI              URI: URI begins with a mail exchange prefix, i.e.
                             mx.[...]
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily
                             valid
 -0.1 DKIM_VALID             Message has at least one valid DKIM or DK signature
 -0.1 DKIM_VALID_AU          Message has a valid DKIM or DK signature from
                             author's domain
  1.0 FORGED_SPF_HELO        No description available.
 -0.0 T_SCC_BODY_TEXT_LINE   No description available.
X-Spam-Flag: NO

--16d0c690-bcdf-46a3-a7da-9f1edf820be9
Content-Type: multipart/alternative; differences=Content-Type;
	boundary="68ffd778-9ea1-4592-99d5-5bfb08b8da0c"

--68ffd778-9ea1-4592-99d5-5bfb08b8da0c
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

Delivery has failed to these recipients or groups:

jillians@normakamali.com<mailto:jillians@normakamali.com>
Your message wasn't delivered. Despite repeated attempts to deliver your me=
ssage, the recipient's email system refused to accept a connection from you=
r email system.

Contact the recipient by some other means (by phone, for example) and ask t=
hem to tell their email admin that it appears that their email system is re=
fusing connections from your email server. Give them the error details show=
n below. It's likely that the recipient's email admin is the only one who c=
an fix this problem.

For Email Admins
No connection could be made because the target computer actively refused it=
. This usually results from trying to connect to a service that is inactive=
 on the remote host - that is, one with no server application running. For =
more information and tips to fix this issue see this article: https://go.mi=
crosoft.com/fwlink/?LinkId=3D389361

Diagnostic information for administrators:

Generating server: MN2PR02MB6640.namprd02.prod.outlook.com
Receiving server: MN2PR02MB6640.namprd02.prod.outlook.com

jillians@normakamali.com
12/15/2023 10:58:00 AM - Server at MN2PR02MB6640.namprd02.prod.outlook.com =
returned '550 5.4.316 Message expired, connection refused(Socket error code=
 10061)'
12/15/2023 10:47:46 AM - Server at 50.75.248.155 (50.75.248.155) returned '=
450 4.4.316 Connection refused [Message=3DSocket error code 10061] [LastAtt=
emptedServerName=3D50.75.248.155] [LastAttemptedIP=3D50.75.248.155:25] [Smt=
pSecurity=3D-2;-2] [BN8NAM12FT044.eop-nam12.prod.protection.outlook.com 202=
3-12-15T10:48:00.290Z 08DBFC18EBE32934](Socket error code 10061)'

Original message headers:

Received: from IA0PR02MB9243.namprd02.prod.outlook.com (2603:10b6:208:434::=
10)
 by MN2PR02MB6640.namprd02.prod.outlook.com (2603:10b6:208:1d0::19) with
 Microsoft SMTP Server (version=3DTLS1_2,
 cipher=3DTLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7091.31; Fri, 15 =
Dec
 2023 08:40:02 +0000
Received: from BN0PR02MB8031.namprd02.prod.outlook.com (2603:10b6:408:16e::=
14)
 by IA0PR02MB9243.namprd02.prod.outlook.com (2603:10b6:208:434::10) with
 Microsoft SMTP Server (version=3DTLS1_2,
 cipher=3DTLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7091.28; Fri, 15 =
Dec
 2023 02:32:59 +0000
Received: from DS0PR02MB10250.namprd02.prod.outlook.com (2603:10b6:8:192::5=
)
 by BN0PR02MB8031.namprd02.prod.outlook.com (2603:10b6:408:16e::14) with
 Microsoft SMTP Server (version=3DTLS1_2,
 cipher=3DTLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7091.28; Thu, 14 =
Dec
 2023 21:59:20 +0000
ARC-Seal: i=3D1; a=3Drsa-sha256; s=3Darcselector9901; d=3Dmicrosoft.com; cv=
=3Dnone;
 b=3Db3K185rg4ryQK3v5PRodqZCtTTp6WwAXe/FgR3IOeYjwHpc/DPZ6keYzKBmWU/MOGXFf2+=
UjGGzuS71jh8VpIOJzocNe0R2XizBHCqEHbvJpTkqisnVFq3ZcXKpHBUH30nWc//XbBL0rjKAXI=
XWmVheUSLzvYy55nQNPVPdu6MFGLwwTUPBwAqqcqjjQgXeY5t7xqr+hHIxIuyiLa1UGUYVZu3c6=
rBsR2SX7Vta8pUziF+P9yIP9QOz2O2vTLG65E/ig7b+o4ImnXmCW4eESyB/yWudMV17+klXhUqO=
InV5KT6QSWFcgkeKRS0iaLusLXzI/d7YdTvIcnkZ95vZ4VQ=3D=3D
ARC-Message-Signature: i=3D1; a=3Drsa-sha256; c=3Drelaxed/relaxed; d=3Dmicr=
osoft.com;
 s=3Darcselector9901;
 h=3DFrom:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-A=
ntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Ex=
change-AntiSpam-MessageData-1;
 bh=3DaNeNM3ZZioTUth0mXCeyaAxx+omKVjfkd4enxwO1Da8=3D;
 b=3DROr4Hn+OBUXADBKwRXWxBy2kun78uEKZCc34b44hZNfA3wlXDb5XQ/zHM5NgySRTTKMtN6=
32NQdo1yMJriCtg13VkCi6JvJ70FEejo/UguvKfnQIC88Aul2t1kdabD3F9ZDLMeQoq4QHFT36F=
23yLRffQKzResg+DErMGKPkKmgOUEwv7EEwcs9ST0yyur/XVYT3hmBbKqwksl5ve7vTy2xcfY46=
qgAq9mK27egi116ZcOGV0AmyWSM/M7+Jarvyu/DFT1+D4uEncjI8c3WxK+9f9wcbE9GeVBoR/2P=
6xDAWRZJWRdQ9R6UqIl3lzdUYQ3HeN0bZqv1iyc80CnvNGg=3D=3D
ARC-Authentication-Results: i=3D1; mx.microsoft.com 1; spf=3Dpass (sender i=
p is
 199.188.200.108) smtp.rcpttodomain=3Dnormakamali.com
 smtp.mailfrom=3Debaarchitects.org; dmarc=3Dbestguesspass action=3Dnone
 header.from=3Debaarchitects.org; dkim=3Dpass (signature was verified)
 header.d=3Debaarchitects.org; arc=3Dnone (0)
Received: from BLAPR03CA0069.namprd03.prod.outlook.com (2603:10b6:208:329::=
14)
 by DS0PR02MB10250.namprd02.prod.outlook.com (2603:10b6:8:192::5) with
 Microsoft SMTP Server (version=3DTLS1_2,
 cipher=3DTLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7091.28; Thu, 14 =
Dec
 2023 10:51:07 +0000
Received: from MN1PEPF0000F0DE.namprd04.prod.outlook.com
 (2603:10b6:208:329:cafe::28) by BLAPR03CA0069.outlook.office365.com
 (2603:10b6:208:329::14) with Microsoft SMTP Server (version=3DTLS1_2,
 cipher=3DTLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7091.28 via Front=
end
 Transport; Thu, 14 Dec 2023 10:51:07 +0000
Authentication-Results: spf=3Dpass (sender IP is 199.188.200.108)
 smtp.mailfrom=3Debaarchitects.org; dkim=3Dpass (signature was verified)
 header.d=3Debaarchitects.org;dmarc=3Dbestguesspass action=3Dnone
 header.from=3Debaarchitects.org;compauth=3Dpass reason=3D109
Received-SPF: Pass (protection.outlook.com: domain of ebaarchitects.org
 designates 199.188.200.108 as permitted sender)
 receiver=3Dprotection.outlook.com; client-ip=3D199.188.200.108;
 helo=3Dserver237-2.web-hosting.com; pr=3DC
Received: from server237-2.web-hosting.com (199.188.200.108) by
 MN1PEPF0000F0DE.mail.protection.outlook.com (10.167.242.36) with Microsoft
 SMTP Server (version=3DTLS1_2, cipher=3DTLS_ECDHE_RSA_WITH_AES_256_GCM_SHA=
384) id
 15.20.7091.26 via Frontend Transport; Thu, 14 Dec 2023 10:51:06 +0000
DKIM-Signature: v=3D1; a=3Drsa-sha256; q=3Ddns/txt; c=3Drelaxed/relaxed;
        d=3Debaarchitects.org; s=3Ddefault; h=3DContent-Type:MIME-Version:D=
ate:Subject:To:
        From:Reply-To:Message-ID:Sender:Cc:Content-Transfer-Encoding:Conten=
t-ID:
        Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To=
:Resent-Cc
        :Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Un=
subscribe:
        List-Subscribe:List-Post:List-Owner:List-Archive;
        bh=3DaNeNM3ZZioTUth0mXCeyaAxx+omKVjfkd4enxwO1Da8=3D; b=3DO3cYb451Qq=
ylcSogH2YgX69IGi
        slMAK4vvy0hMQR3v0rLopzHIPjD6H22uRqmY/GjlanKf4xUTt48+xUXeVyQ4VqFJSdG=
S8OBBaBC1T
        7na4VpJ+GylQjY8r+FnWbArr6/eV2eKVdweW8+TrYYFx8Ec6x/yprY9yWxICHi0aT3G=
sjzDGeJ5B9
        82bG9ZBX3yca5e0aLEb0+C8ZN8b/JPGK2u+OgUcC99oQ3E84RyQ5oVOYxWrsRiEFiPP=
Bpukl9BdhD
        7NTbtR3gnoTAuE9U2fL8w7+gGihX8Cs8Fr+DgH1hQ7hQcU9AZ60tBRiUsjjtnc82NK6=
zHOZb2rhRj
        8QGH1XZQ=3D=3D;
Received: from [197.155.69.154] (port=3D49018 helo=3D185.25.49.220)
        by server237.web-hosting.com with esmtpsa  (TLS1.2) tls TLS_ECDHE_R=
SA_WITH_AES_256_GCM_SHA384
        (Exim 4.96.1)
        (envelope-from <dev@ebaarchitects.org>)
        id 1rDjIu-00EvZ5-1A
        for jillians@normakamali.com;
        Thu, 14 Dec 2023 05:51:05 -0500
Message-ID: <05b0dc778353aea5830940eb1fc99398bd5fbc3d@ebaarchitects.org>
Reply-To: joshua c <joshuacampbell@mythenesa.com>
From: joshua c <dev@ebaarchitects.org>
To: jillians@normakamali.com
Subject: [EXTERNAL EMAIL] Distressed over unknown charge made on my account=
 -
 requesting immediate action
Date: Thu, 14 Dec 2023 02:48:15 -0800
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary=3D"0ba1e85774b09fb4973d74cd49=
8da1c6371d"
X-AntiAbuse: This header was added to track abuse, please include it with a=
ny abuse report
X-AntiAbuse: Primary Hostname - server237.web-hosting.com
X-AntiAbuse: Original Domain - normakamali.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - ebaarchitects.org
X-Get-Message-Sender-Via: server237.web-hosting.com: authenticated_id: dev@=
ebaarchitects.org
X-Authenticated-Sender: server237.web-hosting.com: dev@ebaarchitects.org
X-Source:
X-Source-Args:
X-Source-Dir:
X-From-Rewrite: unmodified, already matched
Return-Path: dev@ebaarchitects.org
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 06cd03e6-9cb8-4eff-aef6-0906e06f98ed:0
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic:
        MN1PEPF0000F0DE:EE_|DS0PR02MB10250:EE_|BN0PR02MB8031:EE_|IA0PR02MB9=
243:EE_|MN2PR02MB6640:EE_
X-MS-Office365-Filtering-Correlation-Id: 2f8abce6-d8b4-4a3a-512a-08dbfc9293=
58
X-MS-Exchange-AtpMessageProperties: SA|SL
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info: =3D?utf-8?B?VmQzTEFEd3hnYUpzOUtQYWlIc3Fr=
cHNGblpWT05lZEJDcnp3dVMxVFQwblFJ?=3D
 =3D?utf-8?B?d1dZeDEyQlQ0V043SFFiOG9wb1hOcHhMdnpmMXJVS2dXU3ViUW1IczdPMWxt?=
=3D
 =3D?utf-8?B?MEwra3NmSWlPK0NGNGRZZ1pUMDFabnR6cW5GZUkxdS8xQkFBckg2aFc3UkZH?=
=3D
 =3D?utf-8?B?MSs0cGd0ZlgzL0hJS281KzFjTmpjV3NpcEpIY0QvbUVmYU50aVVybEFpSWMy?=
=3D
 =3D?utf-8?B?eEJSQnJaWXI3Q0p3clZMZXV6T3cyRVBqdlUrMFNFbzR3a2Y1RmhZSVl1U2RH?=
=3D
 =3D?utf-8?B?eXJ1aG9vMVNBZGh1eTgvbk9YOVVuMHNOVWVsRFY1S3VuNHJQRFdMaFZLMUxq?=
=3D
 =3D?utf-8?B?N0l2OW9WNVRwemJtWFp3d293VU1lL0d4QTNKYnJmcndBMHJ3WmlIWEJnRytR?=
=3D
 =3D?utf-8?B?ejN4T3hKa1FFRHJtRGN1Zm9oeWxNeUsrY3lLb29LQ1ZMeXJSK0FLQ0pPU2p3?=
=3D
 =3D?utf-8?B?Q2hoNDhaTE5rU1lnc3VRR2lLTXcrQlV6cTBpZllSV3pNMGg3M1B6bU1ZV1hq?=
=3D
 =3D?utf-8?B?bjVJVXUzdlgyKzJ2akdwNGdBU2RQQStFVTAzZkUvMHZJbGV5UloxVXhYNjBh?=
=3D
 =3D?utf-8?B?Z0lIREN1YnJ4a0c2YnFTVGtyRTkvS2ZkVDNHeUkyN3hnUHI5N2dSeGFvREc0?=
=3D
 =3D?utf-8?B?YzlFWUNuS1BuS1V4d3BqMGxOSkZ2YldYKzBhOEFUNG1pUjZUemFuOFN1ekJT?=
=3D
 =3D?utf-8?B?WDlSWkE1TEVhZDdrMjVzSU1QcW5RYjFLSUE3eCtneStaNENPUy8vVnAvaTBE?=
=3D
 =3D?utf-8?B?b1VKSWZUMlRoTXFuYzdoSE9zMzZpTjYyMWxiaHdUaDlUWk5yV3hBa0xHVGNa?=
=3D
 =3D?utf-8?B?aVlRNmhSSWtOVEVaU2ZRUGRRd1NGTFVVdUR1VHh6WXIxWnV0clNPN01tOEJ1?=
=3D
 =3D?utf-8?B?UDhzSmJvd29kOVd5L2RvYUpaNk1wYytRZm1oMFkwRE8wcHpsTFNOeHFkQmVu?=
=3D
 =3D?utf-8?B?QVJkRllaMVNwWTBHVklhU1BjV1dmeDdXOFZzallzVUI0bHc2clZqY1RZTjFs?=
=3D
 =3D?utf-8?B?QjRISEZyWEVPM0o2UU15UmlGTEdNVlNsQU1paGdmK1I4aUk1WFpkTmRpYUs3?=
=3D
 =3D?utf-8?B?RjdiRlZ4MUxjZGVuOUVBYnkxTHdobm5PYlVvU2RPck9od3ZuRWN3d3cxWE9Q?=
=3D
 =3D?utf-8?B?MGpKUWdISkUva3BtTHJEMHBwVndodHZhamFFWEx2RTUzcFgya210SjQ3VEdS?=
=3D
 =3D?utf-8?B?cFpvdmdyaW9xOThnN1p3bVozMmVXOVZEekZ3RlNPdngwS3VqRmhrM1ZrSDlm?=
=3D
 =3D?utf-8?B?Z1MvaVp0OEpIMkFhUVlueWNlekl0RGNLazJrSkljT0czTGlQQlNOQ0xrRTdl?=
=3D
 =3D?utf-8?B?MG8zZ0lFbHVaTk90WUlxVkFCSGZvNzhIOFpxeWxFTkhKZHVzY0MwbWN4N1Jl?=
=3D
 =3D?utf-8?B?UkoyT1ZRanhCbzNZclFFRFF1YlBXWTRtOGF4ZGUvYXlhVnpqWCtrR0cyUEhn?=
=3D
 =3D?utf-8?B?TFE5TTMwSDRKMmtmZ3pZL25kb3hKSisxbDZRRjNnL21PT1pURXRiMzJnU3p0?=
=3D
 =3D?utf-8?B?VjBIM00vZW82YzA0Sm91a0o1Qk42NzJidE9QNm9HK2tTVVAwNEtqTFB2QURI?=
=3D
 =3D?utf-8?B?aDVZODNKZWNWcWFpTEhUK3BkdEV5bVM0UDJBbjA4V0VpUGtDNjV5MHczU1dG?=
=3D
 =3D?utf-8?B?YXBtamFDYkdYcEh4UWRhSVcwYXNHZHA3MEIxVHFXWGdudVY0Rjk0THN1RTJt?=
=3D
 =3D?utf-8?B?OXZqdE1LRTNPaCtXOGZVamVndVJQUDExckw5UzdkUDRTYU82b1ZJQm5QdjdG?=
=3D
 =3D?utf-8?B?MUdqU0NOalVudTJtM0x2WVlvNkYwcVpZb1NKc1g4NVI2cW1icktCb2pzU1JK?=
=3D
 =3D?utf-8?B?Qk1pK21WbFJxRXMrT2RWd3BhTi9Tb0lwOXV6aU9rODc2aWJVNXd2YjJva0lz?=
=3D
 =3D?utf-8?B?Qkl6SHMyMzNLNkZ6TEZJQmVmOU9oRGgvS1c5MEdOYWpXUHc4cVkwQUdBOC9E?=
=3D
 =3D?utf-8?B?ellqZytaWktPaXg0OXpEM29sZTRsWEZUZEEwVkxIcml4OS9Pd1lpMVpmOHh0?=
=3D
 =3D?utf-8?B?TjQwOWhGa2JRbUk4SXFnODg2Uys3QjZtbXZsbXNKTWNJRVFTeVVYZVlJaW5t?=
=3D
 =3D?utf-8?B?TThrZGhUUE1BeEhJZXhSQzh0Y1lpb0xYc3pmTkZsWjNGY1ZycG1USHlkL2RO?=
=3D
 =3D?utf-8?B?SWdyRDVEaEtBZ0o5VzltZXI3dVg0UEZiaERQQTZVeU02OU1xMWhad3lPWmho?=
=3D
 =3D?utf-8?B?Umd2cDJWM3orSW1ka1o0ZXJYUkhPWE1GaDFYSjlEQWFrNWxKdVBjaWlkN3hX?=
=3D
 =3D?utf-8?B?M0RrWnd2OVJBbHhMbWdHMXhOR0FseVJYYzBHQUszeUFYR2JDNUk3dmloWk8r?=
=3D
 =3D?utf-8?B?NUVyRytvUmE1TlhmTzdlNE82K2NleEhrMkRlOS96b09xVW52RGNoZlRBZEtw?=
=3D
 =3D?utf-8?Q?dm5mO+Z3xaO+1/movE7an3vAFmoI8qwZPD4GI?=3D
X-Forefront-Antispam-Report: CIP:199.188.200.108;CTRY:US;LANG:en;SCL:1;SRV:=
;IPV:NLI;SFV:NSPM;H:server237-2.web-hosting.com;PTR:server237-2.web-hosting=
.com;CAT:NONE;SFS:(13230031)(4636009)(84040400005)(451199024)(33964004)(336=
012)(26005)(120186005)(2616005)(956004)(14773004)(7636003)(6666004)(3675600=
3)(356005)(86362001)(7596003)(83380400001)(9786002)(1096003)(5660300002)(15=
650500001)(8676002)(6916009)(6966003)(5001810100001)(18116004)(6106002)(930=
36002);DIR:INB;
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 14 Dec 2023 10:51:06.6926
 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 2f8abce6-d8b4-4a3a-512a-08dbf=
c929358
X-MS-Exchange-CrossTenant-Id: 06cd03e6-9cb8-4eff-aef6-0906e06f98ed
X-MS-Exchange-CrossTenant-AuthSource: MN1PEPF0000F0DE.namprd04.prod.outlook=
.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DS0PR02MB10250
X-OrganizationHeadersPreserved: DS0PR02MB10250.namprd02.prod.outlook.com
X-OriginatorOrg: normakamali.com
X-CrossPremisesHeadersFilteredByDsnGenerator:
        MN2PR02MB6640.namprd02.prod.outlook.com

--68ffd778-9ea1-4592-99d5-5bfb08b8da0c
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<html>
<Head></head><body>
<p><b><font color=3D"#000066" size=3D"3" face=3D"Arial">Delivery has failed=
 to these recipients or groups:</font></b></p>
<font color=3D"#000000" size=3D"2" face=3D"Tahoma"><p><a href=3D"mailto:jil=
lians@normakamali.com">jillians@normakamali.com</a><br>
</font>
<font color=3D"#000000" size=3D"3" face=3D"Arial">Your message wasn't deliv=
ered. Despite repeated attempts to deliver your message, the recipient's em=
ail system refused to accept a connection from your email system.<p>Contact=
 the recipient by some other means (by phone, for example) and ask them to =
tell their email admin that it appears that their email system is refusing =
connections from your email server. Give them the error details shown below=
. It's likely that the recipient's email admin is the only one who can fix =
this problem.</p><p>For Email Admins<br>No connection could be made because=
 the target computer actively refused it. This usually results from trying =
to connect to a service that is inactive on the remote host - that is, one =
with no server application running. For more information and tips to fix th=
is issue see this article: https://go.microsoft.com/fwlink/?LinkId=3D389361=
</p><br>
</font>
<font color=3D"#000000" size=3D"2" face=3D"Tahoma"><br>
</p>
</font>
<br><br><br><br><br><br>
<font color=3D"#808080" size=3D"2" face=3D"Tahoma"><p><b>Diagnostic informa=
tion for administrators:</b></p>
<p>Generating server: MN2PR02MB6640.namprd02.prod.outlook.com<br>
Receiving server: MN2PR02MB6640.namprd02.prod.outlook.com <br>
</p>
<p>jillians@normakamali.com<br>
12/15/2023 10:58:00 AM - Server at MN2PR02MB6640.namprd02.prod.outlook.com =
 returned '550 5.4.316 Message expired, connection refused(Socket error cod=
e 10061)'<br>
12/15/2023 10:47:46 AM - Server at 50.75.248.155 (50.75.248.155) returned '=
450 4.4.316 Connection refused [Message=3DSocket error code 10061] [LastAtt=
emptedServerName=3D50.75.248.155] [LastAttemptedIP=3D50.75.248.155:25] [Smt=
pSecurity=3D-2;-2] [BN8NAM12FT044.eop-nam12.prod.protection.outlook.com 202=
3-12-15T10:48:00.290Z 08DBFC18EBE32934](Socket error code 10061)'</p>
<p>Original message headers:</p>
<pre>Received: from IA0PR02MB9243.namprd02.prod.outlook.com (2603:10b6:208:=
434::10)
 by MN2PR02MB6640.namprd02.prod.outlook.com (2603:10b6:208:1d0::19) with
 Microsoft SMTP Server (version=3DTLS1_2,
 cipher=3DTLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7091.31; Fri, 15 =
Dec
 2023 08:40:02 +0000
Received: from BN0PR02MB8031.namprd02.prod.outlook.com (2603:10b6:408:16e::=
14)
 by IA0PR02MB9243.namprd02.prod.outlook.com (2603:10b6:208:434::10) with
 Microsoft SMTP Server (version=3DTLS1_2,
 cipher=3DTLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7091.28; Fri, 15 =
Dec
 2023 02:32:59 +0000
Received: from DS0PR02MB10250.namprd02.prod.outlook.com (2603:10b6:8:192::5=
)
 by BN0PR02MB8031.namprd02.prod.outlook.com (2603:10b6:408:16e::14) with
 Microsoft SMTP Server (version=3DTLS1_2,
 cipher=3DTLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7091.28; Thu, 14 =
Dec
 2023 21:59:20 +0000
ARC-Seal: i=3D1; a=3Drsa-sha256; s=3Darcselector9901; d=3Dmicrosoft.com; cv=
=3Dnone;
 b=3Db3K185rg4ryQK3v5PRodqZCtTTp6WwAXe/FgR3IOeYjwHpc/DPZ6keYzKBmWU/MOGXFf2+=
UjGGzuS71jh8VpIOJzocNe0R2XizBHCqEHbvJpTkqisnVFq3ZcXKpHBUH30nWc//XbBL0rjKAXI=
XWmVheUSLzvYy55nQNPVPdu6MFGLwwTUPBwAqqcqjjQgXeY5t7xqr+hHIxIuyiLa1UGUYVZu3c6=
rBsR2SX7Vta8pUziF+P9yIP9QOz2O2vTLG65E/ig7b+o4ImnXmCW4eESyB/yWudMV17+klXhUqO=
InV5KT6QSWFcgkeKRS0iaLusLXzI/d7YdTvIcnkZ95vZ4VQ=3D=3D
ARC-Message-Signature: i=3D1; a=3Drsa-sha256; c=3Drelaxed/relaxed; d=3Dmicr=
osoft.com;
 s=3Darcselector9901;
 h=3DFrom:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-A=
ntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Ex=
change-AntiSpam-MessageData-1;
 bh=3DaNeNM3ZZioTUth0mXCeyaAxx+omKVjfkd4enxwO1Da8=3D;
 b=3DROr4Hn+OBUXADBKwRXWxBy2kun78uEKZCc34b44hZNfA3wlXDb5XQ/zHM5NgySRTTKMtN6=
32NQdo1yMJriCtg13VkCi6JvJ70FEejo/UguvKfnQIC88Aul2t1kdabD3F9ZDLMeQoq4QHFT36F=
23yLRffQKzResg+DErMGKPkKmgOUEwv7EEwcs9ST0yyur/XVYT3hmBbKqwksl5ve7vTy2xcfY46=
qgAq9mK27egi116ZcOGV0AmyWSM/M7+Jarvyu/DFT1+D4uEncjI8c3WxK+9f9wcbE9GeVBoR/2P=
6xDAWRZJWRdQ9R6UqIl3lzdUYQ3HeN0bZqv1iyc80CnvNGg=3D=3D
ARC-Authentication-Results: i=3D1; mx.microsoft.com 1; spf=3Dpass (sender i=
p is
 199.188.200.108) smtp.rcpttodomain=3Dnormakamali.com
 smtp.mailfrom=3Debaarchitects.org; dmarc=3Dbestguesspass action=3Dnone
 header.from=3Debaarchitects.org; dkim=3Dpass (signature was verified)
 header.d=3Debaarchitects.org; arc=3Dnone (0)
Received: from BLAPR03CA0069.namprd03.prod.outlook.com (2603:10b6:208:329::=
14)
 by DS0PR02MB10250.namprd02.prod.outlook.com (2603:10b6:8:192::5) with
 Microsoft SMTP Server (version=3DTLS1_2,
 cipher=3DTLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7091.28; Thu, 14 =
Dec
 2023 10:51:07 +0000
Received: from MN1PEPF0000F0DE.namprd04.prod.outlook.com
 (2603:10b6:208:329:cafe::28) by BLAPR03CA0069.outlook.office365.com
 (2603:10b6:208:329::14) with Microsoft SMTP Server (version=3DTLS1_2,
 cipher=3DTLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7091.28 via Front=
end
 Transport; Thu, 14 Dec 2023 10:51:07 +0000
Authentication-Results: spf=3Dpass (sender IP is 199.188.200.108)
 smtp.mailfrom=3Debaarchitects.org; dkim=3Dpass (signature was verified)
 header.d=3Debaarchitects.org;dmarc=3Dbestguesspass action=3Dnone
 header.from=3Debaarchitects.org;compauth=3Dpass reason=3D109
Received-SPF: Pass (protection.outlook.com: domain of ebaarchitects.org
 designates 199.188.200.108 as permitted sender)
 receiver=3Dprotection.outlook.com; client-ip=3D199.188.200.108;
 helo=3Dserver237-2.web-hosting.com; pr=3DC
Received: from server237-2.web-hosting.com (199.188.200.108) by
 MN1PEPF0000F0DE.mail.protection.outlook.com (10.167.242.36) with Microsoft
 SMTP Server (version=3DTLS1_2, cipher=3DTLS_ECDHE_RSA_WITH_AES_256_GCM_SHA=
384) id
 15.20.7091.26 via Frontend Transport; Thu, 14 Dec 2023 10:51:06 +0000
DKIM-Signature: v=3D1; a=3Drsa-sha256; q=3Ddns/txt; c=3Drelaxed/relaxed;
	d=3Debaarchitects.org; s=3Ddefault; h=3DContent-Type:MIME-Version:Date:Sub=
ject:To:
	From:Reply-To:Message-ID:Sender:Cc:Content-Transfer-Encoding:Content-ID:
	Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent=
-Cc
	:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscri=
be:
	List-Subscribe:List-Post:List-Owner:List-Archive;
	bh=3DaNeNM3ZZioTUth0mXCeyaAxx+omKVjfkd4enxwO1Da8=3D; b=3DO3cYb451QqylcSogH=
2YgX69IGi
	slMAK4vvy0hMQR3v0rLopzHIPjD6H22uRqmY/GjlanKf4xUTt48+xUXeVyQ4VqFJSdGS8OBBaB=
C1T
	7na4VpJ+GylQjY8r+FnWbArr6/eV2eKVdweW8+TrYYFx8Ec6x/yprY9yWxICHi0aT3GsjzDGeJ=
5B9
	82bG9ZBX3yca5e0aLEb0+C8ZN8b/JPGK2u+OgUcC99oQ3E84RyQ5oVOYxWrsRiEFiPPBpukl9B=
dhD
	7NTbtR3gnoTAuE9U2fL8w7+gGihX8Cs8Fr+DgH1hQ7hQcU9AZ60tBRiUsjjtnc82NK6zHOZb2r=
hRj
	8QGH1XZQ=3D=3D;
Received: from [197.155.69.154] (port=3D49018 helo=3D185.25.49.220)
	by server237.web-hosting.com with esmtpsa  (TLS1.2) tls TLS_ECDHE_RSA_WITH=
_AES_256_GCM_SHA384
	(Exim 4.96.1)
	(envelope-from &lt;dev@ebaarchitects.org&gt;)
	id 1rDjIu-00EvZ5-1A
	for jillians@normakamali.com;
	Thu, 14 Dec 2023 05:51:05 -0500
Message-ID: &lt;05b0dc778353aea5830940eb1fc99398bd5fbc3d@ebaarchitects.org&=
gt;
Reply-To: joshua c &lt;joshuacampbell@mythenesa.com&gt;
From: joshua c &lt;dev@ebaarchitects.org&gt;
To: jillians@normakamali.com
Subject: [EXTERNAL EMAIL] Distressed over unknown charge made on my account=
 -
 requesting immediate action
Date: Thu, 14 Dec 2023 02:48:15 -0800
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary=3D&quot;0ba1e85774b09fb4973d7=
4cd498da1c6371d&quot;
X-AntiAbuse: This header was added to track abuse, please include it with a=
ny abuse report
X-AntiAbuse: Primary Hostname - server237.web-hosting.com
X-AntiAbuse: Original Domain - normakamali.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - ebaarchitects.org
X-Get-Message-Sender-Via: server237.web-hosting.com: authenticated_id: dev@=
ebaarchitects.org
X-Authenticated-Sender: server237.web-hosting.com: dev@ebaarchitects.org
X-Source:
X-Source-Args:
X-Source-Dir:
X-From-Rewrite: unmodified, already matched
Return-Path: dev@ebaarchitects.org
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 06cd03e6-9cb8-4eff-aef6-0906e06f98ed:0
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic:
	MN1PEPF0000F0DE:EE_|DS0PR02MB10250:EE_|BN0PR02MB8031:EE_|IA0PR02MB9243:EE_=
|MN2PR02MB6640:EE_
X-MS-Office365-Filtering-Correlation-Id: 2f8abce6-d8b4-4a3a-512a-08dbfc9293=
58
X-MS-Exchange-AtpMessageProperties: SA|SL
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info: =3D?utf-8?B?VmQzTEFEd3hnYUpzOUtQYWlIc3Fr=
cHNGblpWT05lZEJDcnp3dVMxVFQwblFJ?=3D
 =3D?utf-8?B?d1dZeDEyQlQ0V043SFFiOG9wb1hOcHhMdnpmMXJVS2dXU3ViUW1IczdPMWxt?=
=3D
 =3D?utf-8?B?MEwra3NmSWlPK0NGNGRZZ1pUMDFabnR6cW5GZUkxdS8xQkFBckg2aFc3UkZH?=
=3D
 =3D?utf-8?B?MSs0cGd0ZlgzL0hJS281KzFjTmpjV3NpcEpIY0QvbUVmYU50aVVybEFpSWMy?=
=3D
 =3D?utf-8?B?eEJSQnJaWXI3Q0p3clZMZXV6T3cyRVBqdlUrMFNFbzR3a2Y1RmhZSVl1U2RH?=
=3D
 =3D?utf-8?B?eXJ1aG9vMVNBZGh1eTgvbk9YOVVuMHNOVWVsRFY1S3VuNHJQRFdMaFZLMUxq?=
=3D
 =3D?utf-8?B?N0l2OW9WNVRwemJtWFp3d293VU1lL0d4QTNKYnJmcndBMHJ3WmlIWEJnRytR?=
=3D
 =3D?utf-8?B?ejN4T3hKa1FFRHJtRGN1Zm9oeWxNeUsrY3lLb29LQ1ZMeXJSK0FLQ0pPU2p3?=
=3D
 =3D?utf-8?B?Q2hoNDhaTE5rU1lnc3VRR2lLTXcrQlV6cTBpZllSV3pNMGg3M1B6bU1ZV1hq?=
=3D
 =3D?utf-8?B?bjVJVXUzdlgyKzJ2akdwNGdBU2RQQStFVTAzZkUvMHZJbGV5UloxVXhYNjBh?=
=3D
 =3D?utf-8?B?Z0lIREN1YnJ4a0c2YnFTVGtyRTkvS2ZkVDNHeUkyN3hnUHI5N2dSeGFvREc0?=
=3D
 =3D?utf-8?B?YzlFWUNuS1BuS1V4d3BqMGxOSkZ2YldYKzBhOEFUNG1pUjZUemFuOFN1ekJT?=
=3D
 =3D?utf-8?B?WDlSWkE1TEVhZDdrMjVzSU1QcW5RYjFLSUE3eCtneStaNENPUy8vVnAvaTBE?=
=3D
 =3D?utf-8?B?b1VKSWZUMlRoTXFuYzdoSE9zMzZpTjYyMWxiaHdUaDlUWk5yV3hBa0xHVGNa?=
=3D
 =3D?utf-8?B?aVlRNmhSSWtOVEVaU2ZRUGRRd1NGTFVVdUR1VHh6WXIxWnV0clNPN01tOEJ1?=
=3D
 =3D?utf-8?B?UDhzSmJvd29kOVd5L2RvYUpaNk1wYytRZm1oMFkwRE8wcHpsTFNOeHFkQmVu?=
=3D
 =3D?utf-8?B?QVJkRllaMVNwWTBHVklhU1BjV1dmeDdXOFZzallzVUI0bHc2clZqY1RZTjFs?=
=3D
 =3D?utf-8?B?QjRISEZyWEVPM0o2UU15UmlGTEdNVlNsQU1paGdmK1I4aUk1WFpkTmRpYUs3?=
=3D
 =3D?utf-8?B?RjdiRlZ4MUxjZGVuOUVBYnkxTHdobm5PYlVvU2RPck9od3ZuRWN3d3cxWE9Q?=
=3D
 =3D?utf-8?B?MGpKUWdISkUva3BtTHJEMHBwVndodHZhamFFWEx2RTUzcFgya210SjQ3VEdS?=
=3D
 =3D?utf-8?B?cFpvdmdyaW9xOThnN1p3bVozMmVXOVZEekZ3RlNPdngwS3VqRmhrM1ZrSDlm?=
=3D
 =3D?utf-8?B?Z1MvaVp0OEpIMkFhUVlueWNlekl0RGNLazJrSkljT0czTGlQQlNOQ0xrRTdl?=
=3D
 =3D?utf-8?B?MG8zZ0lFbHVaTk90WUlxVkFCSGZvNzhIOFpxeWxFTkhKZHVzY0MwbWN4N1Jl?=
=3D
 =3D?utf-8?B?UkoyT1ZRanhCbzNZclFFRFF1YlBXWTRtOGF4ZGUvYXlhVnpqWCtrR0cyUEhn?=
=3D
 =3D?utf-8?B?TFE5TTMwSDRKMmtmZ3pZL25kb3hKSisxbDZRRjNnL21PT1pURXRiMzJnU3p0?=
=3D
 =3D?utf-8?B?VjBIM00vZW82YzA0Sm91a0o1Qk42NzJidE9QNm9HK2tTVVAwNEtqTFB2QURI?=
=3D
 =3D?utf-8?B?aDVZODNKZWNWcWFpTEhUK3BkdEV5bVM0UDJBbjA4V0VpUGtDNjV5MHczU1dG?=
=3D
 =3D?utf-8?B?YXBtamFDYkdYcEh4UWRhSVcwYXNHZHA3MEIxVHFXWGdudVY0Rjk0THN1RTJt?=
=3D
 =3D?utf-8?B?OXZqdE1LRTNPaCtXOGZVamVndVJQUDExckw5UzdkUDRTYU82b1ZJQm5QdjdG?=
=3D
 =3D?utf-8?B?MUdqU0NOalVudTJtM0x2WVlvNkYwcVpZb1NKc1g4NVI2cW1icktCb2pzU1JK?=
=3D
 =3D?utf-8?B?Qk1pK21WbFJxRXMrT2RWd3BhTi9Tb0lwOXV6aU9rODc2aWJVNXd2YjJva0lz?=
=3D
 =3D?utf-8?B?Qkl6SHMyMzNLNkZ6TEZJQmVmOU9oRGgvS1c5MEdOYWpXUHc4cVkwQUdBOC9E?=
=3D
 =3D?utf-8?B?ellqZytaWktPaXg0OXpEM29sZTRsWEZUZEEwVkxIcml4OS9Pd1lpMVpmOHh0?=
=3D
 =3D?utf-8?B?TjQwOWhGa2JRbUk4SXFnODg2Uys3QjZtbXZsbXNKTWNJRVFTeVVYZVlJaW5t?=
=3D
 =3D?utf-8?B?TThrZGhUUE1BeEhJZXhSQzh0Y1lpb0xYc3pmTkZsWjNGY1ZycG1USHlkL2RO?=
=3D
 =3D?utf-8?B?SWdyRDVEaEtBZ0o5VzltZXI3dVg0UEZiaERQQTZVeU02OU1xMWhad3lPWmho?=
=3D
 =3D?utf-8?B?Umd2cDJWM3orSW1ka1o0ZXJYUkhPWE1GaDFYSjlEQWFrNWxKdVBjaWlkN3hX?=
=3D
 =3D?utf-8?B?M0RrWnd2OVJBbHhMbWdHMXhOR0FseVJYYzBHQUszeUFYR2JDNUk3dmloWk8r?=
=3D
 =3D?utf-8?B?NUVyRytvUmE1TlhmTzdlNE82K2NleEhrMkRlOS96b09xVW52RGNoZlRBZEtw?=
=3D
 =3D?utf-8?Q?dm5mO+Z3xaO+1/movE7an3vAFmoI8qwZPD4GI?=3D
X-Forefront-Antispam-Report: CIP:199.188.200.108;CTRY:US;LANG:en;SCL:1;SRV:=
;IPV:NLI;SFV:NSPM;H:server237-2.web-hosting.com;PTR:server237-2.web-hosting=
.com;CAT:NONE;SFS:(13230031)(4636009)(84040400005)(451199024)(33964004)(336=
012)(26005)(120186005)(2616005)(956004)(14773004)(7636003)(6666004)(3675600=
3)(356005)(86362001)(7596003)(83380400001)(9786002)(1096003)(5660300002)(15=
650500001)(8676002)(6916009)(6966003)(5001810100001)(18116004)(6106002)(930=
36002);DIR:INB;
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 14 Dec 2023 10:51:06.6926
 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 2f8abce6-d8b4-4a3a-512a-08dbf=
c929358
X-MS-Exchange-CrossTenant-Id: 06cd03e6-9cb8-4eff-aef6-0906e06f98ed
X-MS-Exchange-CrossTenant-AuthSource: MN1PEPF0000F0DE.namprd04.prod.outlook=
.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DS0PR02MB10250
X-OrganizationHeadersPreserved: DS0PR02MB10250.namprd02.prod.outlook.com
X-OriginatorOrg: normakamali.com
X-CrossPremisesHeadersFilteredByDsnGenerator:
	MN2PR02MB6640.namprd02.prod.outlook.com
</pre>
</font>
</body>
</html>=

--68ffd778-9ea1-4592-99d5-5bfb08b8da0c--

--16d0c690-bcdf-46a3-a7da-9f1edf820be9
Content-Type: message/delivery-status

Reporting-MTA: dns;MN2PR02MB6640.namprd02.prod.outlook.com
Received-From-MTA: dns;IA0PR02MB9243.namprd02.prod.outlook.com
Arrival-Date: Fri, 15 Dec 2023 08:40:02 +0000

Final-Recipient: rfc822;jillians@normakamali.com
Action: failed
Status: 5.4.316
Diagnostic-Code: smtp;550 5.4.316 Message expired, connection refused

--16d0c690-bcdf-46a3-a7da-9f1edf820be9
Content-Type: message/rfc822

Received: from IA0PR02MB9243.namprd02.prod.outlook.com (2603:10b6:208:434::10)
 by MN2PR02MB6640.namprd02.prod.outlook.com (2603:10b6:208:1d0::19) with
 Microsoft SMTP Server (version=TLS1_2,
 cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7091.31; Fri, 15 Dec
 2023 08:40:02 +0000
Received: from BN0PR02MB8031.namprd02.prod.outlook.com (2603:10b6:408:16e::14)
 by IA0PR02MB9243.namprd02.prod.outlook.com (2603:10b6:208:434::10) with
 Microsoft SMTP Server (version=TLS1_2,
 cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7091.28; Fri, 15 Dec
 2023 02:32:59 +0000
Received: from DS0PR02MB10250.namprd02.prod.outlook.com (2603:10b6:8:192::5)
 by BN0PR02MB8031.namprd02.prod.outlook.com (2603:10b6:408:16e::14) with
 Microsoft SMTP Server (version=TLS1_2,
 cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7091.28; Thu, 14 Dec
 2023 21:59:20 +0000
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
 b=b3K185rg4ryQK3v5PRodqZCtTTp6WwAXe/FgR3IOeYjwHpc/DPZ6keYzKBmWU/MOGXFf2+UjGGzuS71jh8VpIOJzocNe0R2XizBHCqEHbvJpTkqisnVFq3ZcXKpHBUH30nWc//XbBL0rjKAXIXWmVheUSLzvYy55nQNPVPdu6MFGLwwTUPBwAqqcqjjQgXeY5t7xqr+hHIxIuyiLa1UGUYVZu3c6rBsR2SX7Vta8pUziF+P9yIP9QOz2O2vTLG65E/ig7b+o4ImnXmCW4eESyB/yWudMV17+klXhUqOInV5KT6QSWFcgkeKRS0iaLusLXzI/d7YdTvIcnkZ95vZ4VQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
 s=arcselector9901;
 h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
 bh=aNeNM3ZZioTUth0mXCeyaAxx+omKVjfkd4enxwO1Da8=;
 b=ROr4Hn+OBUXADBKwRXWxBy2kun78uEKZCc34b44hZNfA3wlXDb5XQ/zHM5NgySRTTKMtN632NQdo1yMJriCtg13VkCi6JvJ70FEejo/UguvKfnQIC88Aul2t1kdabD3F9ZDLMeQoq4QHFT36F23yLRffQKzResg+DErMGKPkKmgOUEwv7EEwcs9ST0yyur/XVYT3hmBbKqwksl5ve7vTy2xcfY46qgAq9mK27egi116ZcOGV0AmyWSM/M7+Jarvyu/DFT1+D4uEncjI8c3WxK+9f9wcbE9GeVBoR/2P6xDAWRZJWRdQ9R6UqIl3lzdUYQ3HeN0bZqv1iyc80CnvNGg==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass (sender ip is
 199.188.200.108) smtp.rcpttodomain=normakamali.com
 smtp.mailfrom=ebaarchitects.org; dmarc=bestguesspass action=none
 header.from=ebaarchitects.org; dkim=pass (signature was verified)
 header.d=ebaarchitects.org; arc=none (0)
Received: from BLAPR03CA0069.namprd03.prod.outlook.com (2603:10b6:208:329::14)
 by DS0PR02MB10250.namprd02.prod.outlook.com (2603:10b6:8:192::5) with
 Microsoft SMTP Server (version=TLS1_2,
 cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7091.28; Thu, 14 Dec
 2023 10:51:07 +0000
Received: from MN1PEPF0000F0DE.namprd04.prod.outlook.com
 (2603:10b6:208:329:cafe::28) by BLAPR03CA0069.outlook.office365.com
 (2603:10b6:208:329::14) with Microsoft SMTP Server (version=TLS1_2,
 cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7091.28 via Frontend
 Transport; Thu, 14 Dec 2023 10:51:07 +0000
Authentication-Results: spf=pass (sender IP is 199.188.200.108)
 smtp.mailfrom=ebaarchitects.org; dkim=pass (signature was verified)
 header.d=ebaarchitects.org;dmarc=bestguesspass action=none
 header.from=ebaarchitects.org;compauth=pass reason=109
Received-SPF: Pass (protection.outlook.com: domain of ebaarchitects.org
 designates 199.188.200.108 as permitted sender)
 receiver=protection.outlook.com; client-ip=199.188.200.108;
 helo=server237-2.web-hosting.com; pr=C
Received: from server237-2.web-hosting.com (199.188.200.108) by
 MN1PEPF0000F0DE.mail.protection.outlook.com (10.167.242.36) with Microsoft
 SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
 15.20.7091.26 via Frontend Transport; Thu, 14 Dec 2023 10:51:06 +0000
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
	d=ebaarchitects.org; s=default; h=Content-Type:MIME-Version:Date:Subject:To:
	From:Reply-To:Message-ID:Sender:Cc:Content-Transfer-Encoding:Content-ID:
	Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc
	:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:
	List-Subscribe:List-Post:List-Owner:List-Archive;
	bh=aNeNM3ZZioTUth0mXCeyaAxx+omKVjfkd4enxwO1Da8=; b=O3cYb451QqylcSogH2YgX69IGi
	slMAK4vvy0hMQR3v0rLopzHIPjD6H22uRqmY/GjlanKf4xUTt48+xUXeVyQ4VqFJSdGS8OBBaBC1T
	7na4VpJ+GylQjY8r+FnWbArr6/eV2eKVdweW8+TrYYFx8Ec6x/yprY9yWxICHi0aT3GsjzDGeJ5B9
	82bG9ZBX3yca5e0aLEb0+C8ZN8b/JPGK2u+OgUcC99oQ3E84RyQ5oVOYxWrsRiEFiPPBpukl9BdhD
	7NTbtR3gnoTAuE9U2fL8w7+gGihX8Cs8Fr+DgH1hQ7hQcU9AZ60tBRiUsjjtnc82NK6zHOZb2rhRj
	8QGH1XZQ==;
Received: from [197.155.69.154] (port=49018 helo=185.25.49.220)
	by server237.web-hosting.com with esmtpsa  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.96.1)
	(envelope-from <dev@ebaarchitects.org>)
	id 1rDjIu-00EvZ5-1A
	for jillians@normakamali.com;
	Thu, 14 Dec 2023 05:51:05 -0500
Message-ID: <05b0dc778353aea5830940eb1fc99398bd5fbc3d@ebaarchitects.org>
Reply-To: joshua c <joshuacampbell@mythenesa.com>
From: joshua c <dev@ebaarchitects.org>
To: jillians@normakamali.com
Subject: [EXTERNAL EMAIL] Distressed over unknown charge made on my account -
 requesting immediate action
Date: Thu, 14 Dec 2023 02:48:15 -0800
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0ba1e85774b09fb4973d74cd498da1c6371d"
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server237.web-hosting.com
X-AntiAbuse: Original Domain - normakamali.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - ebaarchitects.org
X-Get-Message-Sender-Via: server237.web-hosting.com: authenticated_id: dev@ebaarchitects.org
X-Authenticated-Sender: server237.web-hosting.com: dev@ebaarchitects.org
X-Source:
X-Source-Args:
X-Source-Dir:
X-From-Rewrite: unmodified, already matched
Return-Path: dev@ebaarchitects.org
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 06cd03e6-9cb8-4eff-aef6-0906e06f98ed:0
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic:
 MN1PEPF0000F0DE:EE_|DS0PR02MB10250:EE_|BN0PR02MB8031:EE_|IA0PR02MB9243:EE_|MN2PR02MB6640:EE_
X-MS-Office365-Filtering-Correlation-Id: 2f8abce6-d8b4-4a3a-512a-08dbfc929358
X-MS-Exchange-AtpMessageProperties: SA|SL
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info: =?utf-8?B?VmQzTEFEd3hnYUpzOUtQYWlIc3FrcHNGblpWT05lZEJDcnp3dVMxVFQwblFJ?=
 =?utf-8?B?d1dZeDEyQlQ0V043SFFiOG9wb1hOcHhMdnpmMXJVS2dXU3ViUW1IczdPMWxt?=
 =?utf-8?B?MEwra3NmSWlPK0NGNGRZZ1pUMDFabnR6cW5GZUkxdS8xQkFBckg2aFc3UkZH?=
 =?utf-8?B?MSs0cGd0ZlgzL0hJS281KzFjTmpjV3NpcEpIY0QvbUVmYU50aVVybEFpSWMy?=
 =?utf-8?B?eEJSQnJaWXI3Q0p3clZMZXV6T3cyRVBqdlUrMFNFbzR3a2Y1RmhZSVl1U2RH?=
 =?utf-8?B?eXJ1aG9vMVNBZGh1eTgvbk9YOVVuMHNOVWVsRFY1S3VuNHJQRFdMaFZLMUxq?=
 =?utf-8?B?N0l2OW9WNVRwemJtWFp3d293VU1lL0d4QTNKYnJmcndBMHJ3WmlIWEJnRytR?=
 =?utf-8?B?ejN4T3hKa1FFRHJtRGN1Zm9oeWxNeUsrY3lLb29LQ1ZMeXJSK0FLQ0pPU2p3?=
 =?utf-8?B?Q2hoNDhaTE5rU1lnc3VRR2lLTXcrQlV6cTBpZllSV3pNMGg3M1B6bU1ZV1hq?=
 =?utf-8?B?bjVJVXUzdlgyKzJ2akdwNGdBU2RQQStFVTAzZkUvMHZJbGV5UloxVXhYNjBh?=
 =?utf-8?B?Z0lIREN1YnJ4a0c2YnFTVGtyRTkvS2ZkVDNHeUkyN3hnUHI5N2dSeGFvREc0?=
 =?utf-8?B?YzlFWUNuS1BuS1V4d3BqMGxOSkZ2YldYKzBhOEFUNG1pUjZUemFuOFN1ekJT?=
 =?utf-8?B?WDlSWkE1TEVhZDdrMjVzSU1QcW5RYjFLSUE3eCtneStaNENPUy8vVnAvaTBE?=
 =?utf-8?B?b1VKSWZUMlRoTXFuYzdoSE9zMzZpTjYyMWxiaHdUaDlUWk5yV3hBa0xHVGNa?=
 =?utf-8?B?aVlRNmhSSWtOVEVaU2ZRUGRRd1NGTFVVdUR1VHh6WXIxWnV0clNPN01tOEJ1?=
 =?utf-8?B?UDhzSmJvd29kOVd5L2RvYUpaNk1wYytRZm1oMFkwRE8wcHpsTFNOeHFkQmVu?=
 =?utf-8?B?QVJkRllaMVNwWTBHVklhU1BjV1dmeDdXOFZzallzVUI0bHc2clZqY1RZTjFs?=
 =?utf-8?B?QjRISEZyWEVPM0o2UU15UmlGTEdNVlNsQU1paGdmK1I4aUk1WFpkTmRpYUs3?=
 =?utf-8?B?RjdiRlZ4MUxjZGVuOUVBYnkxTHdobm5PYlVvU2RPck9od3ZuRWN3d3cxWE9Q?=
 =?utf-8?B?MGpKUWdISkUva3BtTHJEMHBwVndodHZhamFFWEx2RTUzcFgya210SjQ3VEdS?=
 =?utf-8?B?cFpvdmdyaW9xOThnN1p3bVozMmVXOVZEekZ3RlNPdngwS3VqRmhrM1ZrSDlm?=
 =?utf-8?B?Z1MvaVp0OEpIMkFhUVlueWNlekl0RGNLazJrSkljT0czTGlQQlNOQ0xrRTdl?=
 =?utf-8?B?MG8zZ0lFbHVaTk90WUlxVkFCSGZvNzhIOFpxeWxFTkhKZHVzY0MwbWN4N1Jl?=
 =?utf-8?B?UkoyT1ZRanhCbzNZclFFRFF1YlBXWTRtOGF4ZGUvYXlhVnpqWCtrR0cyUEhn?=
 =?utf-8?B?TFE5TTMwSDRKMmtmZ3pZL25kb3hKSisxbDZRRjNnL21PT1pURXRiMzJnU3p0?=
 =?utf-8?B?VjBIM00vZW82YzA0Sm91a0o1Qk42NzJidE9QNm9HK2tTVVAwNEtqTFB2QURI?=
 =?utf-8?B?aDVZODNKZWNWcWFpTEhUK3BkdEV5bVM0UDJBbjA4V0VpUGtDNjV5MHczU1dG?=
 =?utf-8?B?YXBtamFDYkdYcEh4UWRhSVcwYXNHZHA3MEIxVHFXWGdudVY0Rjk0THN1RTJt?=
 =?utf-8?B?OXZqdE1LRTNPaCtXOGZVamVndVJQUDExckw5UzdkUDRTYU82b1ZJQm5QdjdG?=
 =?utf-8?B?MUdqU0NOalVudTJtM0x2WVlvNkYwcVpZb1NKc1g4NVI2cW1icktCb2pzU1JK?=
 =?utf-8?B?Qk1pK21WbFJxRXMrT2RWd3BhTi9Tb0lwOXV6aU9rODc2aWJVNXd2YjJva0lz?=
 =?utf-8?B?Qkl6SHMyMzNLNkZ6TEZJQmVmOU9oRGgvS1c5MEdOYWpXUHc4cVkwQUdBOC9E?=
 =?utf-8?B?ellqZytaWktPaXg0OXpEM29sZTRsWEZUZEEwVkxIcml4OS9Pd1lpMVpmOHh0?=
 =?utf-8?B?TjQwOWhGa2JRbUk4SXFnODg2Uys3QjZtbXZsbXNKTWNJRVFTeVVYZVlJaW5t?=
 =?utf-8?B?TThrZGhUUE1BeEhJZXhSQzh0Y1lpb0xYc3pmTkZsWjNGY1ZycG1USHlkL2RO?=
 =?utf-8?B?SWdyRDVEaEtBZ0o5VzltZXI3dVg0UEZiaERQQTZVeU02OU1xMWhad3lPWmho?=
 =?utf-8?B?Umd2cDJWM3orSW1ka1o0ZXJYUkhPWE1GaDFYSjlEQWFrNWxKdVBjaWlkN3hX?=
 =?utf-8?B?M0RrWnd2OVJBbHhMbWdHMXhOR0FseVJYYzBHQUszeUFYR2JDNUk3dmloWk8r?=
 =?utf-8?B?NUVyRytvUmE1TlhmTzdlNE82K2NleEhrMkRlOS96b09xVW52RGNoZlRBZEtw?=
 =?utf-8?Q?dm5mO+Z3xaO+1/movE7an3vAFmoI8qwZPD4GI?=
X-Forefront-Antispam-Report: CIP:199.188.200.108;CTRY:US;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:server237-2.web-hosting.com;PTR:server237-2.web-hosting.com;CAT:NONE;SFS:(13230031)(4636009)(84040400005)(451199024)(33964004)(336012)(26005)(120186005)(2616005)(956004)(14773004)(7636003)(6666004)(36756003)(356005)(86362001)(7596003)(83380400001)(9786002)(1096003)(5660300002)(15650500001)(8676002)(6916009)(6966003)(5001810100001)(18116004)(6106002)(93036002);DIR:INB;
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 14 Dec 2023 10:51:06.6926
 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 2f8abce6-d8b4-4a3a-512a-08dbfc929358
X-MS-Exchange-CrossTenant-Id: 06cd03e6-9cb8-4eff-aef6-0906e06f98ed
X-MS-Exchange-CrossTenant-AuthSource: MN1PEPF0000F0DE.namprd04.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DS0PR02MB10250
X-OrganizationHeadersPreserved: DS0PR02MB10250.namprd02.prod.outlook.com
X-OriginatorOrg: normakamali.com
X-CrossPremisesHeadersFilteredByDsnGenerator:
 MN2PR02MB6640.namprd02.prod.outlook.com

--0ba1e85774b09fb4973d74cd498da1c6371d
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

I am reaching out to you with a sense of urgency due to an unrecognized t=
ransaction on my bank account. I noticed that the transaction was made on=
 your webshop, and I need your help to investigate this matter.

I have never made a purchase on your site, and I am deeply concerned abou=
t how my personal information may have been compromised. I have already c=
ontacted my bank and provided them with all of the necessary evidence to =
prove that I did not make this transaction.

Please help me investigate this matter by providing any relevant informat=
ion that could help me identify the source of the problem, such as the or=
der number.

I appreciate your attention to this matter, and I look forward to hearing=
 from you soon.

--0ba1e85774b09fb4973d74cd498da1c6371d
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

<html>
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dutf-8">
</head>
<body bgColor=3D"#ffffff">
<div align=3Dleft><font size=3D2 face=3DArial>I am reaching out to you wi=
th a sense of urgency due to an unrecognized transaction on my bank accou=
nt. I noticed that the transaction was made on your webshop, and I need y=
our help to investigate this matter.</font></div>
<div>&nbsp;</div>
<div align=3Dleft><font size=3D2 face=3DArial>I have never made a purchas=
e on your site, and I am deeply concerned about how my personal informati=
on may have been compromised. I have already contacted my bank and provid=
ed them with all of the necessary evidence to prove that I did not make t=
his transaction.</font></div>
<div>&nbsp;</div>
<div align=3Dleft><font size=3D2 face=3DArial>Please help me investigate =
this matter by providing any relevant information that could help me iden=
tify the source of the problem, such as the order number.</font></div>
<div>&nbsp;</div>
<div align=3Dleft><font size=3D2 face=3DArial>I appreciate your attention=
 to this matter, and I look forward to hearing from you soon.</font></div=
></body></html>

--0ba1e85774b09fb4973d74cd498da1c6371d--

--16d0c690-bcdf-46a3-a7da-9f1edf820be9--