OwlCyberSecurity - MANAGER
Edit File: 1703600417.M566477P2065841.server237.web-hosting.com,S=11445,W=11682
Return-Path: <> Delivered-To: dev@ebaarchitects.org Received: from server237.web-hosting.com by server237.web-hosting.com with LMTP id aJCkISHhimWxhR8A7Ypugw (envelope-from <>) for <dev@ebaarchitects.org>; Tue, 26 Dec 2023 09:20:17 -0500 Return-path: <> Envelope-to: dev@ebaarchitects.org Delivery-date: Tue, 26 Dec 2023 09:20:17 -0500 Received: from [69.16.249.60] (port=59680 helo=host.immersifydigital.com) by server237.web-hosting.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96.1) id 1rI8I0-008gKn-0W for dev@ebaarchitects.org; Tue, 26 Dec 2023 09:20:17 -0500 Received: from mailnull by cloudvpstemplate.c0uwnx-lwsites.com with local (Exim 4.96.2) id 1rI8HK-0056uy-2w for dev@ebaarchitects.org; Tue, 26 Dec 2023 09:19:30 -0500 X-Failed-Recipients: sarahstobber@gmail.com Auto-Submitted: auto-replied From: Mail Delivery System <Mailer-Daemon@cloudvpstemplate.c0uwnx-lwsites.com> To: dev@ebaarchitects.org References: <00236ac11079535d2e84cd6686123829f9013f@ebaarchitects.org> Content-Type: multipart/report; report-type=delivery-status; boundary=1703600370-eximdsn-1337077469 MIME-Version: 1.0 Subject: Mail delivery failed: returning message to sender Message-Id: <E1rI8HK-0056uy-2w@cloudvpstemplate.c0uwnx-lwsites.com> Date: Tue, 26 Dec 2023 09:19:30 -0500 X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - cloudvpstemplate.c0uwnx-lwsites.com X-AntiAbuse: Original Domain - ebaarchitects.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - X-Get-Message-Sender-Via: cloudvpstemplate.c0uwnx-lwsites.com: sender_ident via received_protocol == local: mailnull/primary_hostname/system user X-Authenticated-Sender: cloudvpstemplate.c0uwnx-lwsites.com: mailnull X-Source: X-Source-Args: X-Source-Dir: X-Spam-Status: No, score=2.8 X-Spam-Score: 28 X-Spam-Bar: ++ X-Ham-Report: Spam detection software, running on the system "server237.web-hosting.com", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: This message was created automatically by mail delivery software. A message that you sent could not be delivered to one or more of its recipients. This is a permanent error. The following address(es) failed: Content analysis details: (2.8 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 T_SPF_HELO_TEMPERROR SPF: test of HELO record failed (temperror) 0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS 0.0 HTML_MESSAGE BODY: HTML included in message 0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict Alignment 2.0 RDNS_NONE Delivered to internal network by a host with no rDNS -0.0 T_SCC_BODY_TEXT_LINE No description available. X-Spam-Flag: NO --1703600370-eximdsn-1337077469 Content-type: text/plain; charset=us-ascii This message was created automatically by mail delivery software. A message that you sent could not be delivered to one or more of its recipients. This is a permanent error. The following address(es) failed: sarahstobber@gmail.com (ultimately generated from sales@ecommercejumpstart.com) host gmail-smtp-in.l.google.com [64.233.182.27] SMTP error from remote mail server after end of data: 550-5.7.25 [69.16.249.60] The IP address sending this message does not have a 550-5.7.25 PTR record setup, or the corresponding forward DNS entry does not 550-5.7.25 point to the sending IP. As a policy, Gmail does not accept messages 550-5.7.25 from IPs with missing PTR records. For more information, go to 550 5.7.25 https://support.google.com/mail/answer/81126#ip-practices m10-20020a92d70a000000b0035f8933e586si4882190iln.93 - gsmtp --1703600370-eximdsn-1337077469 Content-type: message/delivery-status Reporting-MTA: dns; cloudvpstemplate.c0uwnx-lwsites.com Action: failed Final-Recipient: rfc822;sales@ecommercejumpstart.com Status: 5.0.0 Remote-MTA: dns; gmail-smtp-in.l.google.com Diagnostic-Code: smtp; 550-5.7.25 [69.16.249.60] The IP address sending this message does not have a 550-5.7.25 PTR record setup, or the corresponding forward DNS entry does not 550-5.7.25 point to the sending IP. As a policy, Gmail does not accept messages 550-5.7.25 from IPs with missing PTR records. For more information, go to 550 5.7.25 https://support.google.com/mail/answer/81126#ip-practices m10-20020a92d70a000000b0035f8933e586si4882190iln.93 - gsmtp --1703600370-eximdsn-1337077469 Content-type: message/rfc822 Return-path: <dev@ebaarchitects.org> Received: from server237-2.web-hosting.com ([199.188.200.108]:42936) by cloudvpstemplate.c0uwnx-lwsites.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96.2) (envelope-from <dev@ebaarchitects.org>) id 1rI8HH-0056sC-2h for sales@ecommercejumpstart.com; Tue, 26 Dec 2023 09:19:30 -0500 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ebaarchitects.org; s=default; h=Content-Type:MIME-Version:Date:Subject:To: From:Reply-To:Message-ID:Sender:Cc:Content-Transfer-Encoding:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe: List-Subscribe:List-Post:List-Owner:List-Archive; bh=yXLOUjjXuW3syX+XMaULt99Lal+PVLR0Mn8QFlvsY1c=; b=nGFH+tlAx2XbqIPoXNdbUSFceW qRrpCju9T6xtg+TBJRskfkm9mNeRNh9ItxgWIbjqKLk68vCioRdRggh9ZvW2St7/YQW1Q/GOZqT6X 66Un9XfWAavLyK9MwgaMSips63X3bkL6Qqyb9s7YvsFkqO+dT/nPBGzcXMl1zEoYbD71kZw2I4CoE 562mBur5GIYSJqrBjuswYGdscBdxEnXEUfvSTudpGDngoUjEOIJAoCAa9lkxApq9Tss1mIukyUAKv Yzdka62ssl7dmZ/2yXqOND+s71DV1xeLggTLxd8sl9TNVAif+3HyrV2a2A7HgVnNCCFC+RUB1otCL Hk5S9h/w==; Received: from [189.58.142.191] (port=33157 helo=62.204.41.121) by server237.web-hosting.com with esmtpsa (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96.1) (envelope-from <dev@ebaarchitects.org>) id 1rI8GP-008f05-1d for sales@ecommercejumpstart.com; Tue, 26 Dec 2023 09:18:45 -0500 Message-ID: <00236ac11079535d2e84cd6686123829f9013f@ebaarchitects.org> Reply-To: michael <michael.thornton@primank.com> From: michael <dev@ebaarchitects.org> To: sales@ecommercejumpstart.com Subject: Need your assistance with a puzzling payment on my credit card - need your expertise Date: Tue, 26 Dec 2023 06:15:43 -0800 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="a0c38a21f099b3bdce642d8666f2d8c9eecc88" X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - server237.web-hosting.com X-AntiAbuse: Original Domain - ecommercejumpstart.com X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - ebaarchitects.org X-Get-Message-Sender-Via: server237.web-hosting.com: authenticated_id: dev@ebaarchitects.org X-Authenticated-Sender: server237.web-hosting.com: dev@ebaarchitects.org X-Source: X-Source-Args: X-Source-Dir: X-From-Rewrite: unmodified, already matched X-Spam-Status: No, score=3.7 X-Spam-Score: 37 X-Spam-Bar: +++ X-Ham-Report: Spam detection software, running on the system "cloudvpstemplate.c0uwnx-lwsites.com", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Hello, I've recently detected a suspicious deduction on my financial statement and it seems to be connected to a purchase on your site. I'm stunned as I have not used your services on your site previously. I've already begun a fraud investigation with my bank and would be grateful if you could shed some light on this charge, especiall [...] Content analysis details: (3.7 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: ebaarchitects.org] 1.5 BAYES_60 BODY: Bayes spam probability is 60 to 80% [score: 0.6988] 2.4 RCVD_HELO_IP_MISMATCH Received: HELO and IP do not match, but should -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid -0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from envelope-from domain -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's domain -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature -0.0 T_SCC_BODY_TEXT_LINE No description available. X-Spam-Flag: NO --a0c38a21f099b3bdce642d8666f2d8c9eecc88 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Hello, I've recently detected a suspicious deduction on my financial statement a= nd it seems to be connected to a purchase on your site. I'm stunned as I have not used your services on your site previously. I'v= e already begun a fraud investigation with my bank and would be grateful = if you could shed some light on this charge, especially details like the = purchase reference. To reinforce my claim, I have ample documentation including digital proof= s. Your prompt response would be highly appreciated. Kind regards, --a0c38a21f099b3bdce642d8666f2d8c9eecc88 Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: quoted-printable <html> <head> <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dutf-8"> </head> <body bgColor=3D"#ffffff"> <div align=3Dleft><font size=3D2 face=3DArial>Hello,</font></div> <div> </div> <div align=3Dleft><font size=3D2 face=3DArial>I've recently detected a su= spicious deduction on my financial statement and it seems to be connected= to a purchase on your site.</font></div> <div> </div> <div align=3Dleft><font size=3D2 face=3DArial>I'm stunned as I have not u= sed your services on your site previously. I've already begun a fraud inv= estigation with my bank and would be grateful if you could shed some ligh= t on this charge, especially details like the purchase reference.</font><= /div> <div> </div> <div align=3Dleft><font size=3D2 face=3DArial>To reinforce my claim, I ha= ve ample documentation including digital proofs.</font></div> <div> </div> <div align=3Dleft><font size=3D2 face=3DArial>Your prompt response would = be highly appreciated.</font></div> <div> </div> <div align=3Dleft><font size=3D2 face=3DArial>Kind regards,</font></div><= /body></html> --a0c38a21f099b3bdce642d8666f2d8c9eecc88-- --1703600370-eximdsn-1337077469--