OwlCyberSecurity - MANAGER

Edit File: 1702969480.M578397P1660940.server237.web-hosting.com,S=29038,W=29597

Envelope-to: dev@ebaarchitects.org
Delivery-date: Tue, 19 Dec 2023 02:04:40 -0500
MIME-Version: 1.0
From: <postmaster@dhs-wine.com>
To: <dev@ebaarchitects.org>
Date: Tue, 19 Dec 2023 07:03:53 +0000
Content-Type: multipart/report; report-type=delivery-status;
	boundary="ddeb8195-24ef-4116-93c3-91f98ca55fd1"
Content-Language: en-US
Message-ID:
 <ddefc2f0-e753-4860-9a28-b0768d6db61b@BY3PR08MB7234.namprd08.prod.outlook.com>
In-Reply-To: <88a9e04b91f9d3ddbe145df611e5cfd7f8dfa4@ebaarchitects.org>
References: <88a9e04b91f9d3ddbe145df611e5cfd7f8dfa4@ebaarchitects.org>
Subject: Undeliverable: Unclear payment on my bank statement linked to your
 online platform - looking for your guidance
Auto-Submitted: auto-replied
X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1
X-MS-Exchange-AntiSpam-MessageData-0:
	upKkMFcEuOl2y9evxPmJ1a9ASnZtMe+MD0uiLvNDSUIKvoh5Hp6D752N7pkNrX5R/37Wp3gXO1wIUtnb0TxfqRvIdif8jlg/Lj8A19TpCHq6l4lj6vX0azwLe+vJOkqi8FzRod4rc2xL/6oUrFtBnN7wbGIiq0ko7uKq0qB7tUXx2P6a8CdK1v4h9xcVXRl/
X-OriginatorOrg: dhs-wine.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 19 Dec 2023 07:03:53.3753
 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-AuthSource: BY3PR08MB7234.namprd08.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-Network-Message-Id:
	a8084036-f440-425e-1a17-08dc0060a91b
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY3PR08MB7234
X-Spam-Status: No, score=0.9
X-Spam-Score: 9
X-Spam-Bar: /
X-Ham-Report: Spam detection software, running on the system "server237.web-hosting.com",
 has NOT identified this incoming email as spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Your email couldn't be forwarded from rose@dhs-wine.com to
    another email address. rose@dhs-wine.com<mailto:rose@dhs-wine.com> Your message
    wasn't delivered because the recipient's email provider rejected it. 
 Content analysis details:   (0.9 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: web-hosting.com]
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
  0.0 HTML_MESSAGE           BODY: HTML included in message
 -0.1 DKIM_VALID             Message has at least one valid DKIM or DK signature
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily
                             valid
 -0.1 DKIM_VALID_AU          Message has a valid DKIM or DK signature from
                             author's domain
 -0.0 T_SCC_BODY_TEXT_LINE   No description available.
  1.0 FORGED_SPF_HELO        No description available.
X-Spam-Flag: NO

--ddeb8195-24ef-4116-93c3-91f98ca55fd1
Content-Type: multipart/alternative; differences=Content-Type;
	boundary="d4699c1e-df75-4c2a-858e-2435d99e125f"

--d4699c1e-df75-4c2a-858e-2435d99e125f
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

Your email couldn't be forwarded from rose@dhs-wine.com to another email ad=
dress.

rose@dhs-wine.com<mailto:rose@dhs-wine.com>
Your message wasn't delivered because the recipient's email provider reject=
ed it.

Diagnostic information for administrators:

Generating server: BY3PR08MB7234.namprd08.prod.outlook.com

rose@dhs-wine.com
Remote server returned '550 5.7.520 Access denied, Your organization does n=
ot allow external forwarding. Please contact your administrator for further=
 assistance. AS(7550)'

Original message headers:

Resent-From: <rose@dhs-wine.com>
Received: from YT1PR01CA0051.CANPRD01.PROD.OUTLOOK.COM (2603:10b6:b01:2e::2=
0)
 by BY3PR08MB7234.namprd08.prod.outlook.com (2603:10b6:a03:36d::6) with
 Microsoft SMTP Server (version=3DTLS1_2,
 cipher=3DTLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7113.17; Tue, 19 =
Dec
 2023 07:03:49 +0000
Received: from YT3CAN01FT011.eop-CAN01.prod.protection.outlook.com
 (2603:10b6:b01:2e:cafe::2b) by YT1PR01CA0051.outlook.office365.com
 (2603:10b6:b01:2e::20) with Microsoft SMTP Server (version=3DTLS1_2,
 cipher=3DTLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7091.38 via Front=
end
 Transport; Tue, 19 Dec 2023 07:03:49 +0000
Authentication-Results: spf=3Dpass (sender IP is 199.188.200.108)
 smtp.mailfrom=3Debaarchitects.org; dkim=3Dpass (signature was verified)
 header.d=3Debaarchitects.org;dmarc=3Dbestguesspass action=3Dnone
 header.from=3Debaarchitects.org;
Received-SPF: Pass (protection.outlook.com: domain of ebaarchitects.org
 designates 199.188.200.108 as permitted sender)
 receiver=3Dprotection.outlook.com; client-ip=3D199.188.200.108;
 helo=3Dserver237-2.web-hosting.com; pr=3DC
Received: from server237-2.web-hosting.com (199.188.200.108) by
 YT3CAN01FT011.mail.protection.outlook.com (10.118.140.90) with Microsoft S=
MTP
 Server (version=3DTLS1_2, cipher=3DTLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) =
id
 15.20.7113.17 via Frontend Transport; Tue, 19 Dec 2023 07:03:48 +0000
DKIM-Signature: v=3D1; a=3Drsa-sha256; q=3Ddns/txt; c=3Drelaxed/relaxed;
        d=3Debaarchitects.org; s=3Ddefault; h=3DContent-Type:MIME-Version:D=
ate:Subject:To:
        From:Reply-To:Message-ID:Sender:Cc:Content-Transfer-Encoding:Conten=
t-ID:
        Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To=
:Resent-Cc
        :Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Un=
subscribe:
        List-Subscribe:List-Post:List-Owner:List-Archive;
        bh=3Dtrv215nrzvCPN7Sv2ttoMB0iSBsLhdq8mPr5rha2Odc=3D; b=3Dc30jvTWHHT=
hhY6sk570MVCk13k
        z59UnfDayWv5KjKzUpNq2OzTQR3G4vvtov6jP6MuR9KfBX7kbN9BkMTzWWSBwUJ4P2d=
W+Pqu/uJA1
        rbEB3DqumcfI/cVoF6w2m/+goa9kUF1IYDOUkbNxme13KwNl1VWaZTHxjAj12kiEsX0=
xLWmzp3irN
        XElet/3HOPCaZ0IEfuCusMS1KMOMLIWdNB6+zhIJDLbh9DZijD0l7/COq3yH77JYvHp=
0DGnSDuZ2N
        2JwyBQLnNTIcZbRGjfp4G2ewhBuagSpWE8suluEabdG8S85VEqDdnnKCv75VfnwDj/s=
tvSqHYRAMw
        EwUD78Hw=3D=3D;
Received: from [77.77.215.6] (port=3D56267 helo=3D85.206.160.225)
        by server237.web-hosting.com with esmtpsa  (TLS1.2) tls TLS_ECDHE_R=
SA_WITH_AES_256_GCM_SHA384
        (Exim 4.96.1)
        (envelope-from <dev@ebaarchitects.org>)
        id 1rFU8b-0073d3-33
        for rose@dhs-wine.com;
        Tue, 19 Dec 2023 02:03:47 -0500
Message-ID: <88a9e04b91f9d3ddbe145df611e5cfd7f8dfa4@ebaarchitects.org>
Reply-To: Oliver <oliver.f@mythenesa.com>
From: Oliver <dev@ebaarchitects.org>
To: rose@dhs-wine.com
Subject: Unclear payment on my bank statement linked to your online platfor=
m - looking for your guidance
Date: Mon, 18 Dec 2023 23:01:43 -0800
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary=3D"ab0148cd95517e3516bcf54d89=
4d74c35bb2"
X-AntiAbuse: This header was added to track abuse, please include it with a=
ny abuse report
X-AntiAbuse: Primary Hostname - server237.web-hosting.com
X-AntiAbuse: Original Domain - dhs-wine.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - ebaarchitects.org
X-Get-Message-Sender-Via: server237.web-hosting.com: authenticated_id: dev@=
ebaarchitects.org
X-Authenticated-Sender: server237.web-hosting.com: dev@ebaarchitects.org
X-Source:
X-Source-Args:
X-Source-Dir:
X-From-Rewrite: unmodified, already matched
Return-Path: dev@ebaarchitects.org
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 98a351a6-bc11-481c-badf-34e129373bb8:0
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic: YT3CAN01FT011:EE_|BY3PR08MB7234:EE_
X-MS-Office365-Filtering-Correlation-Id: f3f87f87-ea7b-4da4-078d-08dc0060a6=
5c
X-LD-Processed: 98a351a6-bc11-481c-badf-34e129373bb8,ExtFwd
X-MS-Exchange-SenderADCheck: 0
X-MS-Exchange-AntiSpam-Relay: 0
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info:
        WgeMdRslRwGUGppr7B4a/b78B3YgrpRUevhn+SDnjHS0D3gpop7g1G/Ot7diGfUgjb7=
KJER2GZBsLueMbJDjyjcxWX/X50ts+C+nhWx5CjWWbkuDECk7KerdvZNMqTLej8LarYtZ/+Xzu+=
2cy2aEkuCY+h1wVYvahh8tYXxy6dufu9CI9hJDftxrUZX/9QqfGCDtRUZ7iD9EGoI0a0PI1GLdc=
97MHhfu1bMSRfpsJ1cax5XhtaIjWrzuyq/kXgdEzTiQmgN6Tq93xmOZmZQY4reBXKJEs6P9Qf1T=
fNfC+XON0ofEhDFqjHMm7tg8L+DCoBwDDIoPY69Q7zgJJFSiSm1naEsTaPBNzKJADpaFivwa7iG=
rw2AbTplmiRGpSSdf8Cp3BD/X23XoE2m9UY5oAm0AY1lr2phEDAAIR+dE5q7UvjS/kPLmnn+sAA=
jzVw2dzq+WJD9LwTXLVw0FdGDW9tXaAbFI02jRXIxwQZ/1GLvSDRXBDTncHHPCuJ08ip8UPJaza=
bDvXJ1MVp3/Bjn5QHDQxPNeOcmqI2WCusc4rzGCz2BMUBEUVNrLTFfIXrUcpY/mSZYH4YEPGLR4=
dBcNudlS+40kdrA1G2jxnsVlx8KaQWgZrcYpsrIW0mNXcqQMYD6AGyiPYUAImL1SObMXEtQiGwk=
S41cvo+tk/S5Se2Z8CDcKj57h/U2Ilu8m6L+qhYwxQbemhK6mCkY9Y4ZeGG92Jkk2XJHlhhxvO3=
Pk8cxgR1BRloEAz1xkqn5Hnk1P
X-Forefront-Antispam-Report:
        CIP:199.188.200.108;CTRY:US;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:s=
erver237-2.web-hosting.com;PTR:server237-2.web-hosting.com;CAT:NONE;SFS:(13=
230031)(396003)(39830400003)(136003)(376002)(346002)(230922051799003)(64100=
799003)(61400799012)(451199024)(48200799006)(36756003)(3613699003)(316002)(=
120186005)(6966003)(336012)(68406010)(70586007)(34206002)(9786002)(2906002)=
(8676002)(5660300002)(33964004)(6666004)(26005)(956004)(498600001)(86362001=
)(2616005)(356005)(7636003)(7596003)(6106002)(93036002);DIR:OUT;SFP:1101;
X-ExternalRecipientOutboundConnectors: 98a351a6-bc11-481c-badf-34e129373bb8
X-MS-Exchange-ForwardingLoop:
        rose@dhs-wine.com;98a351a6-bc11-481c-badf-34e129373bb8
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 19 Dec 2023 07:03:48.5645
 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: f3f87f87-ea7b-4da4-078d-08dc0=
060a65c
X-MS-Exchange-CrossTenant-Id: 98a351a6-bc11-481c-badf-34e129373bb8
X-MS-Exchange-CrossTenant-AuthSource: YT3CAN01FT011.eop-CAN01.prod.protecti=
on.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY3PR08MB7234

--d4699c1e-df75-4c2a-858e-2435d99e125f
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<html>
<Head></head><body>
<p><b><font color=3D"#000066" size=3D"3" face=3D"Arial">Your email couldn't=
 be forwarded from rose@dhs-wine.com to another email address.</font></b></=
p>
<font color=3D"#000000" size=3D"2" face=3D"Tahoma"><p><a href=3D"mailto:ros=
e@dhs-wine.com">rose@dhs-wine.com</a><br>
</font>
<font color=3D"#000000" size=3D"3" face=3D"Arial">Your message wasn't deliv=
ered because the recipient's email provider rejected it.<br>
</font>
<font color=3D"#000000" size=3D"2" face=3D"Tahoma"><br>
</p>
</font>
<br><br><br><br><br><br>
<font color=3D"#808080" size=3D"2" face=3D"Tahoma"><p><b>Diagnostic informa=
tion for administrators:</b></p>
<p>Generating server: BY3PR08MB7234.namprd08.prod.outlook.com<br>
</p>
<p>rose@dhs-wine.com<br>
Remote server  returned '550 5.7.520 Access denied, Your organization does =
not allow external forwarding. Please contact your administrator for furthe=
r assistance. AS(7550)'<br>
</p>
<p>Original message headers:</p>
<pre>Resent-From: &lt;rose@dhs-wine.com&gt;
Received: from YT1PR01CA0051.CANPRD01.PROD.OUTLOOK.COM (2603:10b6:b01:2e::2=
0)
 by BY3PR08MB7234.namprd08.prod.outlook.com (2603:10b6:a03:36d::6) with
 Microsoft SMTP Server (version=3DTLS1_2,
 cipher=3DTLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7113.17; Tue, 19 =
Dec
 2023 07:03:49 +0000
Received: from YT3CAN01FT011.eop-CAN01.prod.protection.outlook.com
 (2603:10b6:b01:2e:cafe::2b) by YT1PR01CA0051.outlook.office365.com
 (2603:10b6:b01:2e::20) with Microsoft SMTP Server (version=3DTLS1_2,
 cipher=3DTLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7091.38 via Front=
end
 Transport; Tue, 19 Dec 2023 07:03:49 +0000
Authentication-Results: spf=3Dpass (sender IP is 199.188.200.108)
 smtp.mailfrom=3Debaarchitects.org; dkim=3Dpass (signature was verified)
 header.d=3Debaarchitects.org;dmarc=3Dbestguesspass action=3Dnone
 header.from=3Debaarchitects.org;
Received-SPF: Pass (protection.outlook.com: domain of ebaarchitects.org
 designates 199.188.200.108 as permitted sender)
 receiver=3Dprotection.outlook.com; client-ip=3D199.188.200.108;
 helo=3Dserver237-2.web-hosting.com; pr=3DC
Received: from server237-2.web-hosting.com (199.188.200.108) by
 YT3CAN01FT011.mail.protection.outlook.com (10.118.140.90) with Microsoft S=
MTP
 Server (version=3DTLS1_2, cipher=3DTLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) =
id
 15.20.7113.17 via Frontend Transport; Tue, 19 Dec 2023 07:03:48 +0000
DKIM-Signature: v=3D1; a=3Drsa-sha256; q=3Ddns/txt; c=3Drelaxed/relaxed;
	d=3Debaarchitects.org; s=3Ddefault; h=3DContent-Type:MIME-Version:Date:Sub=
ject:To:
	From:Reply-To:Message-ID:Sender:Cc:Content-Transfer-Encoding:Content-ID:
	Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent=
-Cc
	:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscri=
be:
	List-Subscribe:List-Post:List-Owner:List-Archive;
	bh=3Dtrv215nrzvCPN7Sv2ttoMB0iSBsLhdq8mPr5rha2Odc=3D; b=3Dc30jvTWHHThhY6sk5=
70MVCk13k
	z59UnfDayWv5KjKzUpNq2OzTQR3G4vvtov6jP6MuR9KfBX7kbN9BkMTzWWSBwUJ4P2dW+Pqu/u=
JA1
	rbEB3DqumcfI/cVoF6w2m/+goa9kUF1IYDOUkbNxme13KwNl1VWaZTHxjAj12kiEsX0xLWmzp3=
irN
	XElet/3HOPCaZ0IEfuCusMS1KMOMLIWdNB6+zhIJDLbh9DZijD0l7/COq3yH77JYvHp0DGnSDu=
Z2N
	2JwyBQLnNTIcZbRGjfp4G2ewhBuagSpWE8suluEabdG8S85VEqDdnnKCv75VfnwDj/stvSqHYR=
AMw
	EwUD78Hw=3D=3D;
Received: from [77.77.215.6] (port=3D56267 helo=3D85.206.160.225)
	by server237.web-hosting.com with esmtpsa  (TLS1.2) tls TLS_ECDHE_RSA_WITH=
_AES_256_GCM_SHA384
	(Exim 4.96.1)
	(envelope-from &lt;dev@ebaarchitects.org&gt;)
	id 1rFU8b-0073d3-33
	for rose@dhs-wine.com;
	Tue, 19 Dec 2023 02:03:47 -0500
Message-ID: &lt;88a9e04b91f9d3ddbe145df611e5cfd7f8dfa4@ebaarchitects.org&gt=
;
Reply-To: Oliver &lt;oliver.f@mythenesa.com&gt;
From: Oliver &lt;dev@ebaarchitects.org&gt;
To: rose@dhs-wine.com
Subject: Unclear payment on my bank statement linked to your online platfor=
m - looking for your guidance
Date: Mon, 18 Dec 2023 23:01:43 -0800
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary=3D&quot;ab0148cd95517e3516bcf=
54d894d74c35bb2&quot;
X-AntiAbuse: This header was added to track abuse, please include it with a=
ny abuse report
X-AntiAbuse: Primary Hostname - server237.web-hosting.com
X-AntiAbuse: Original Domain - dhs-wine.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - ebaarchitects.org
X-Get-Message-Sender-Via: server237.web-hosting.com: authenticated_id: dev@=
ebaarchitects.org
X-Authenticated-Sender: server237.web-hosting.com: dev@ebaarchitects.org
X-Source:
X-Source-Args:
X-Source-Dir:
X-From-Rewrite: unmodified, already matched
Return-Path: dev@ebaarchitects.org
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 98a351a6-bc11-481c-badf-34e129373bb8:0
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic: YT3CAN01FT011:EE_|BY3PR08MB7234:EE_
X-MS-Office365-Filtering-Correlation-Id: f3f87f87-ea7b-4da4-078d-08dc0060a6=
5c
X-LD-Processed: 98a351a6-bc11-481c-badf-34e129373bb8,ExtFwd
X-MS-Exchange-SenderADCheck: 0
X-MS-Exchange-AntiSpam-Relay: 0
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info:
	WgeMdRslRwGUGppr7B4a/b78B3YgrpRUevhn+SDnjHS0D3gpop7g1G/Ot7diGfUgjb7KJER2GZ=
BsLueMbJDjyjcxWX/X50ts+C+nhWx5CjWWbkuDECk7KerdvZNMqTLej8LarYtZ/+Xzu+2cy2aEk=
uCY+h1wVYvahh8tYXxy6dufu9CI9hJDftxrUZX/9QqfGCDtRUZ7iD9EGoI0a0PI1GLdc97MHhfu=
1bMSRfpsJ1cax5XhtaIjWrzuyq/kXgdEzTiQmgN6Tq93xmOZmZQY4reBXKJEs6P9Qf1TfNfC+XO=
N0ofEhDFqjHMm7tg8L+DCoBwDDIoPY69Q7zgJJFSiSm1naEsTaPBNzKJADpaFivwa7iGrw2AbTp=
lmiRGpSSdf8Cp3BD/X23XoE2m9UY5oAm0AY1lr2phEDAAIR+dE5q7UvjS/kPLmnn+sAAjzVw2dz=
q+WJD9LwTXLVw0FdGDW9tXaAbFI02jRXIxwQZ/1GLvSDRXBDTncHHPCuJ08ip8UPJazabDvXJ1M=
Vp3/Bjn5QHDQxPNeOcmqI2WCusc4rzGCz2BMUBEUVNrLTFfIXrUcpY/mSZYH4YEPGLR4dBcNudl=
S+40kdrA1G2jxnsVlx8KaQWgZrcYpsrIW0mNXcqQMYD6AGyiPYUAImL1SObMXEtQiGwkS41cvo+=
tk/S5Se2Z8CDcKj57h/U2Ilu8m6L+qhYwxQbemhK6mCkY9Y4ZeGG92Jkk2XJHlhhxvO3Pk8cxgR=
1BRloEAz1xkqn5Hnk1P
X-Forefront-Antispam-Report:
	CIP:199.188.200.108;CTRY:US;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:server23=
7-2.web-hosting.com;PTR:server237-2.web-hosting.com;CAT:NONE;SFS:(13230031)=
(396003)(39830400003)(136003)(376002)(346002)(230922051799003)(64100799003)=
(61400799012)(451199024)(48200799006)(36756003)(3613699003)(316002)(1201860=
05)(6966003)(336012)(68406010)(70586007)(34206002)(9786002)(2906002)(867600=
2)(5660300002)(33964004)(6666004)(26005)(956004)(498600001)(86362001)(26160=
05)(356005)(7636003)(7596003)(6106002)(93036002);DIR:OUT;SFP:1101;
X-ExternalRecipientOutboundConnectors: 98a351a6-bc11-481c-badf-34e129373bb8
X-MS-Exchange-ForwardingLoop:
	rose@dhs-wine.com;98a351a6-bc11-481c-badf-34e129373bb8
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 19 Dec 2023 07:03:48.5645
 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: f3f87f87-ea7b-4da4-078d-08dc0=
060a65c
X-MS-Exchange-CrossTenant-Id: 98a351a6-bc11-481c-badf-34e129373bb8
X-MS-Exchange-CrossTenant-AuthSource: YT3CAN01FT011.eop-CAN01.prod.protecti=
on.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY3PR08MB7234
</pre>
</font>
</body>
</html>=

--d4699c1e-df75-4c2a-858e-2435d99e125f--

--ddeb8195-24ef-4116-93c3-91f98ca55fd1
Content-Type: message/delivery-status

Reporting-MTA: dns;BY3PR08MB7234.namprd08.prod.outlook.com
Received-From-MTA: dns;server237-2.web-hosting.com
Arrival-Date: Tue, 19 Dec 2023 07:03:49 +0000

Original-Recipient: rfc822;rose@dhs-wine.com
Final-Recipient: rfc822;rose@dhs-wine.com
Action: failed
Status: 5.7.520
Diagnostic-Code: smtp;550 5.7.520 Access denied, Your organization does not allow external forwarding. Please contact your administrator for further assistance. AS(7550)

--ddeb8195-24ef-4116-93c3-91f98ca55fd1
Content-Type: message/rfc822

Resent-From: <rose@dhs-wine.com>
Received: from YT1PR01CA0051.CANPRD01.PROD.OUTLOOK.COM (2603:10b6:b01:2e::20)
 by BY3PR08MB7234.namprd08.prod.outlook.com (2603:10b6:a03:36d::6) with
 Microsoft SMTP Server (version=TLS1_2,
 cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7113.17; Tue, 19 Dec
 2023 07:03:49 +0000
Received: from YT3CAN01FT011.eop-CAN01.prod.protection.outlook.com
 (2603:10b6:b01:2e:cafe::2b) by YT1PR01CA0051.outlook.office365.com
 (2603:10b6:b01:2e::20) with Microsoft SMTP Server (version=TLS1_2,
 cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7091.38 via Frontend
 Transport; Tue, 19 Dec 2023 07:03:49 +0000
Authentication-Results: spf=pass (sender IP is 199.188.200.108)
 smtp.mailfrom=ebaarchitects.org; dkim=pass (signature was verified)
 header.d=ebaarchitects.org;dmarc=bestguesspass action=none
 header.from=ebaarchitects.org;
Received-SPF: Pass (protection.outlook.com: domain of ebaarchitects.org
 designates 199.188.200.108 as permitted sender)
 receiver=protection.outlook.com; client-ip=199.188.200.108;
 helo=server237-2.web-hosting.com; pr=C
Received: from server237-2.web-hosting.com (199.188.200.108) by
 YT3CAN01FT011.mail.protection.outlook.com (10.118.140.90) with Microsoft SMTP
 Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
 15.20.7113.17 via Frontend Transport; Tue, 19 Dec 2023 07:03:48 +0000
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
	d=ebaarchitects.org; s=default; h=Content-Type:MIME-Version:Date:Subject:To:
	From:Reply-To:Message-ID:Sender:Cc:Content-Transfer-Encoding:Content-ID:
	Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc
	:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:
	List-Subscribe:List-Post:List-Owner:List-Archive;
	bh=trv215nrzvCPN7Sv2ttoMB0iSBsLhdq8mPr5rha2Odc=; b=c30jvTWHHThhY6sk570MVCk13k
	z59UnfDayWv5KjKzUpNq2OzTQR3G4vvtov6jP6MuR9KfBX7kbN9BkMTzWWSBwUJ4P2dW+Pqu/uJA1
	rbEB3DqumcfI/cVoF6w2m/+goa9kUF1IYDOUkbNxme13KwNl1VWaZTHxjAj12kiEsX0xLWmzp3irN
	XElet/3HOPCaZ0IEfuCusMS1KMOMLIWdNB6+zhIJDLbh9DZijD0l7/COq3yH77JYvHp0DGnSDuZ2N
	2JwyBQLnNTIcZbRGjfp4G2ewhBuagSpWE8suluEabdG8S85VEqDdnnKCv75VfnwDj/stvSqHYRAMw
	EwUD78Hw==;
Received: from [77.77.215.6] (port=56267 helo=85.206.160.225)
	by server237.web-hosting.com with esmtpsa  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.96.1)
	(envelope-from <dev@ebaarchitects.org>)
	id 1rFU8b-0073d3-33
	for rose@dhs-wine.com;
	Tue, 19 Dec 2023 02:03:47 -0500
Message-ID: <88a9e04b91f9d3ddbe145df611e5cfd7f8dfa4@ebaarchitects.org>
Reply-To: Oliver <oliver.f@mythenesa.com>
From: Oliver <dev@ebaarchitects.org>
To: rose@dhs-wine.com
Subject: Unclear payment on my bank statement linked to your online platform - looking for your guidance
Date: Mon, 18 Dec 2023 23:01:43 -0800
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="ab0148cd95517e3516bcf54d894d74c35bb2"
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server237.web-hosting.com
X-AntiAbuse: Original Domain - dhs-wine.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - ebaarchitects.org
X-Get-Message-Sender-Via: server237.web-hosting.com: authenticated_id: dev@ebaarchitects.org
X-Authenticated-Sender: server237.web-hosting.com: dev@ebaarchitects.org
X-Source:
X-Source-Args:
X-Source-Dir:
X-From-Rewrite: unmodified, already matched
Return-Path: dev@ebaarchitects.org
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 98a351a6-bc11-481c-badf-34e129373bb8:0
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic: YT3CAN01FT011:EE_|BY3PR08MB7234:EE_
X-MS-Office365-Filtering-Correlation-Id: f3f87f87-ea7b-4da4-078d-08dc0060a65c
X-LD-Processed: 98a351a6-bc11-481c-badf-34e129373bb8,ExtFwd
X-MS-Exchange-SenderADCheck: 0
X-MS-Exchange-AntiSpam-Relay: 0
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info:
 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
X-Forefront-Antispam-Report:
 CIP:199.188.200.108;CTRY:US;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:server237-2.web-hosting.com;PTR:server237-2.web-hosting.com;CAT:NONE;SFS:(13230031)(396003)(39830400003)(136003)(376002)(346002)(230922051799003)(64100799003)(61400799012)(451199024)(48200799006)(36756003)(3613699003)(316002)(120186005)(6966003)(336012)(68406010)(70586007)(34206002)(9786002)(2906002)(8676002)(5660300002)(33964004)(6666004)(26005)(956004)(498600001)(86362001)(2616005)(356005)(7636003)(7596003)(6106002)(93036002);DIR:OUT;SFP:1101;
X-ExternalRecipientOutboundConnectors: 98a351a6-bc11-481c-badf-34e129373bb8
X-MS-Exchange-ForwardingLoop:
 rose@dhs-wine.com;98a351a6-bc11-481c-badf-34e129373bb8
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 19 Dec 2023 07:03:48.5645
 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: f3f87f87-ea7b-4da4-078d-08dc0060a65c
X-MS-Exchange-CrossTenant-Id: 98a351a6-bc11-481c-badf-34e129373bb8
X-MS-Exchange-CrossTenant-AuthSource: YT3CAN01FT011.eop-CAN01.prod.protection.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY3PR08MB7234

--ab0148cd95517e3516bcf54d894d74c35bb2
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

Hi,

I'm reaching out to discuss an unanticipated withdrawal from my debit car=
d that seems to be associated with your store.

This was a confusion as I've never shopped at your platform. I'm hoping y=
ou could shed light on this transaction.

Thank you

--ab0148cd95517e3516bcf54d894d74c35bb2
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

<html>
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dutf-8">
</head>
<body bgColor=3D"#ffffff">
<div align=3Dleft><font size=3D2 face=3DArial>Hi,</font></div>
<div>&nbsp;</div>
<div align=3Dleft><font size=3D2 face=3DArial>I'm reaching out to discuss=
 an unanticipated withdrawal from my debit card that seems to be associat=
ed with your store.</font></div>
<div>&nbsp;</div>
<div align=3Dleft><font size=3D2 face=3DArial>This was a confusion as I'v=
e never shopped at your platform. I'm hoping you could shed light on this=
 transaction.</font></div>
<div>&nbsp;</div>
<div align=3Dleft><font size=3D2 face=3DArial>Thank you</font></div></bod=
y></html>

--ab0148cd95517e3516bcf54d894d74c35bb2--

--ddeb8195-24ef-4116-93c3-91f98ca55fd1--