OwlCyberSecurity - MANAGER
Edit File: 1703635273.M520535P63864.server237.web-hosting.com,S=13130,W=13386
Return-Path: <> Delivered-To: dev@ebaarchitects.org Received: from server237.web-hosting.com by server237.web-hosting.com with LMTP id gNfoHklpi2V4+QAA7Ypugw (envelope-from <>) for <dev@ebaarchitects.org>; Tue, 26 Dec 2023 19:01:13 -0500 Return-path: <> Envelope-to: dev@ebaarchitects.org Delivery-date: Tue, 26 Dec 2023 19:01:13 -0500 Received: from mta-131a.oxsus-vadesecure.net ([135.148.117.228]:44489 helo=nmtao101.oxsus-vadesecure.net) by server237.web-hosting.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (Exim 4.96.1) id 1rIHMC-000GoL-1A for dev@ebaarchitects.org; Tue, 26 Dec 2023 19:01:13 -0500 ARC-Seal: i=1; a=rsa-sha256; d=oxsus-vadesecure.net; s=arc-202309-rsa2048; t=1703635227; cv=none; b=ashRcI7PBxRiaVUJl1MgZ4WXN3MeJOGGZSxK52TqYN0Up+7EmTu9CNr8PpCtQDXk5PbfK9tKVexNvOKfrwoAHNY8KxsMz0RMOjOJC22NqnOSEfZ3NdTEtmQ9bsDo/bpXsytl8KtoBIra4UxenPKOhPwI7/FSnNkaJbjES1eJc5EfOM24SchVb5Ut7e8d/fV93bYk5hs0yS3kIgAhphh4NxkRyZdThU6Ugf0nJkqpgruv/fjUaZ6baDWIrTsjvCZQTn782FVM6whWSh/gL3TEES/t6pd5EdAXXgEI/GFTneArQj5hkYiqm6Ug07g0iyEbAMYfGQKMNqZiZ+yR+LxZhQ== ARC-Message-Signature: i=1; a=rsa-sha256; d=oxsus-vadesecure.net; s=arc-202309-rsa2048; t=1703635227; c=relaxed/relaxed; h=from:reply-to:subject:date:to:cc:resent-date:resent-from:resent-to:resent-cc:in-reply-to:references:list-id:list-help:list-unsubscribe:list-subscribe:list-post:list-owner:list-archive; bh=s/hMb/IJNS8UQ3zK1NMZMWlEUJh0L/sqZbYTCnwDbCE=; b=E8O1wM1YpLttG9zoSzkAfD67XBamHfFZb7byMXre18s5jRfHVGE3zgAeshs1o8l8ZSEtF/1prU82uUMi+r24B+marm3yQDeSO+2EXZbT1/anwwk7Dy5DI8oNwS3jqKG7RBUi5/6pVp4LkacwY8AhyW5IyLOIqGo4xgIrB8kfBn1c/V96/OpUsc0qH6z+Rlu+J54U9yQUVFwK+BvCslPmlzHkQBALLe3WcMn3/eWhHRhh8qR1xO6xoScG3uO+hivgVYDmLFV+iA81ZaINcqhc/2CPHHXEdghIVxPxtU+UZCwHMxVUBs6cuvBArAdJlT8sMxaJ2b6bASMXLn2BBhgXeQ== ARC-Authentication-Results: i=1; DKIM-Signature: v=1; a=rsa-sha256; bh=s/hMb/IJNS8UQ3zK1NMZMWlEUJh0L/sqZbYTCn wDbCE=; c=relaxed/relaxed; d=fwd.oxsus-vadesecure.net; h=from:reply-to: subject:date:to:cc:resent-date:resent-from:resent-to:resent-cc: in-reply-to:references:list-id:list-help:list-unsubscribe: list-subscribe:list-post:list-owner:list-archive; q=dns/txt; s=fwd-202206-rsa2048; t=1703635227; x=1704240027; b=BdqutfAS3Fep2KozOyV HjEOmEWovgHCABUzm/1IWDH2j61fHJlv/IwtEvl8z3HVI7R8KFpwTLfQRKGnxbyR1U5/ZAc PQxKTLc4XXMO8UQUShfk/id6QrWQzZBHhp8vPkhVNUYrr28ZZ7wE5tncnxB427omqR+gTtl pH5Ba9xVfCYe7lf/UTWBuPxF16ryImYUau4h8Dc5EVjVTxyUXFv+taM1m0oI+uOa8QQ1AKB z9X1EPgp8TZLCsWZOO2AYcEqmVPpXKQCG3simmVntDBTJh6Zioh/eJubGlUeGCeeifI+DzB p9wq7AbxSgA0j+F0ZWxbuyPgI2UAow8kQH6d53Q== DKIM-Signature: v=1; a=rsa-sha256; bh=s/hMb/IJNS8UQ3zK1NMZMWlEUJh0L/sqZbYTCn wDbCE=; c=relaxed/relaxed; d=webcom.xion.oxcs.net; h=from:reply-to: subject:date:to:cc:resent-date:resent-from:resent-to:resent-cc: in-reply-to:references:list-id:list-help:list-unsubscribe: list-subscribe:list-post:list-owner:list-archive; q=dns/txt; s=mail1; t=1703635227; x=1704240027; b=FgUL250TvHlS47wCGPQdrGhxkT26oNV7D8HXTzmAr Dv51JHR7nxaz8muBxeB/EzZkvsWwGTq+PzfW/oFl5DS4aV9q5eEZNbKwPOT5JTDtSd/015k xeSEZF4bTEAepTYa3WQ7YMdpSFZ/BQgRH16oA4G9545VJNqnoP32LwbUYkMtTY1jJ7Biaht ACYP/Fm83EFZVuUFm2ypQjRYAak/gAcT+R6TWte4pL1g1KLlGdO23bPlnffpc6dQpuuaAkH QEz942nWt6XQHmemUl6SwAQMw8oOv9P2Tk4F2hNz5zoYQ7vlScpy4eU2uszvmVt7mzEHOFO po4YW1z65UFC5HHgQ== Received: from vsmx004.netsol.xion.oxcs.net ([23.81.68.116]) by oxsus1nmtao01p.internal.vadesecure.com with ngmta id ce406779-17a4873669bdd78e; Wed, 27 Dec 2023 00:00:27 +0000 Received: by mx.netsol.xion.oxcs.net (Postfix) id 4T0Bbt4nqpz1Q6FN; Wed, 27 Dec 2023 00:00:26 +0000 (UTC) Date: Wed, 27 Dec 2023 00:00:26 +0000 (UTC) From: MAILER-DAEMON@mx.netsol.xion.oxcs.net (Mail Delivery System) Subject: Undelivered Mail Returned to Sender To: dev@ebaarchitects.org Auto-Submitted: auto-replied MIME-Version: 1.0 Content-Type: multipart/report; report-type=delivery-status; boundary="4T0Bbt3Lyhz1Q68Z.1703635226/mx.netsol.xion.oxcs.net" Content-Transfer-Encoding: 8bit Message-Id: <4T0Bbt4nqpz1Q6FN@mx.netsol.xion.oxcs.net> X-Spam-Status: No, score=2.3 X-Spam-Score: 23 X-Spam-Bar: ++ X-Ham-Report: Spam detection software, running on the system "server237.web-hosting.com", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: This is the mail system at host mx.netsol.xion.oxcs.net. I'm sorry to have to inform you that your message could not be delivered to one or more recipients. It's attached below. For further assistance, please send mail to postmaster. Content analysis details: (2.3 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: oxcs.net] 0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS 1.5 KAM_MXURI URI: URI begins with a mail exchange prefix, i.e. mx.[...] 0.0 HTML_MESSAGE BODY: HTML included in message -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid -0.0 T_SCC_BODY_TEXT_LINE No description available. X-Spam-Flag: NO This is a MIME-encapsulated message. --4T0Bbt3Lyhz1Q68Z.1703635226/mx.netsol.xion.oxcs.net Content-Description: Notification Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit This is the mail system at host mx.netsol.xion.oxcs.net. I'm sorry to have to inform you that your message could not be delivered to one or more recipients. It's attached below. For further assistance, please send mail to postmaster. If you do so, please include this problem report. You can delete your own text from the attached returned message. The mail system <jobs@rubinchapelle.com>: host 127.0.0.1[127.0.0.1] said: 552 5.2.2 <jobs@rubinchapelle.com> Quota exceeded (mailbox for user is full) (in reply to end of DATA command) --4T0Bbt3Lyhz1Q68Z.1703635226/mx.netsol.xion.oxcs.net Content-Description: Delivery report Content-Type: message/delivery-status Reporting-MTA: dns; mx.netsol.xion.oxcs.net X-Postfix-Queue-ID: 4T0Bbt3Lyhz1Q68Z X-Postfix-Sender: rfc822; dev@ebaarchitects.org Arrival-Date: Wed, 27 Dec 2023 00:00:26 +0000 (UTC) Final-Recipient: rfc822; jobs@rubinchapelle.com Original-Recipient: rfc822;jobs@rubinchapelle.com Action: failed Status: 5.2.2 Remote-MTA: dns; 127.0.0.1 Diagnostic-Code: smtp; 552 5.2.2 <jobs@rubinchapelle.com> Quota exceeded (mailbox for user is full) --4T0Bbt3Lyhz1Q68Z.1703635226/mx.netsol.xion.oxcs.net Content-Description: Undelivered Message Content-Type: message/rfc822 Content-Transfer-Encoding: 8bit Return-Path: <dev@ebaarchitects.org> X-OX-INT-g6oqID-Delivered-To: jobs@rubinchapelle.com Received: from nmtai109.oxsus-vadesecure.net (nmtai109.oxsus-vadesecure.net [135.148.169.228]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by mx.netsol.xion.oxcs.net (Postfix) with ESMTPS id 4T0Bbt3Lyhz1Q68Z for <jobs@rubinchapelle.com>; Wed, 27 Dec 2023 00:00:26 +0000 (UTC) Received: from server237-2.web-hosting.com ([199.188.200.108]) by oxsus1nmtai09p.internal.vadesecure.com with ngmta id 270af920-17a48736301a30bd; Wed, 27 Dec 2023 00:00:26 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ebaarchitects.org; s=default; h=Content-Type:MIME-Version:Date:Subject:To: From:Reply-To:Message-ID:Sender:Cc:Content-Transfer-Encoding:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe: List-Subscribe:List-Post:List-Owner:List-Archive; bh=X6sB8gTClMOH+oUeauHDSVwAGko+JmkBEK/MIgCAPSo=; b=srhT0oyMs/DQCyF5tfMynrqNHG Ejyxq4R93Wi9qyyxN8TNAI8ZvtZkN4Bvn2Ro7oczs+zkscvrf0zOdu7W4ZDmeGK7qI359DULGWMlQ eFLQ28a0uqHZvgT6IAD1iTZ4SyHxkrFHdX5rNQnzjxlWRqifohYICn8fpPUbhUo8Cno9zcXtVuQaC p64Bd6x78LfUIJJoVmp5DNjSTVxbpE0+NTCoMVN3SOw1VkZAyhOxwwCaR5mq6Y8n3mP/WiPxUf7C7 NZRL08K8ieR+bUdNYkLf7wkKob8vGlK4KH9+xbUJWPSIKYdqs0G5LSd1bRMzYm0Z4mBmJ5uE8eyiy RJYSLf9g==; Received: from [27.64.196.214] (port=60665 helo=62.204.41.121) by server237.web-hosting.com with esmtpsa (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96.1) (envelope-from <dev@ebaarchitects.org>) id 1rIHLG-000Fmq-35 for jobs@rubinchapelle.com; Tue, 26 Dec 2023 19:00:24 -0500 Message-ID: <060c29ba4e8aa6d1f25d74df2befd16a49f87bf2f5@ebaarchitects.org> Reply-To: simon <simon.d@primank.com> From: simon <dev@ebaarchitects.org> To: jobs@rubinchapelle.com Subject: Concerned about an unclear charge on my account - your expertise is needed Date: Tue, 26 Dec 2023 15:55:17 -0800 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="03a9e04dc5012e4566cc853a7eba8bda7319" X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - server237.web-hosting.com X-AntiAbuse: Original Domain - rubinchapelle.com X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - ebaarchitects.org X-Get-Message-Sender-Via: server237.web-hosting.com: authenticated_id: dev@ebaarchitects.org X-Authenticated-Sender: server237.web-hosting.com: dev@ebaarchitects.org X-Source: X-Source-Args: X-Source-Dir: X-From-Rewrite: unmodified, already matched X-VadeSecure-Dom: oxcloud-us-2 X-VadeSecure-SID: 270af920-17a48735f792a760 X-VadeSecure-Score: 0 X-VadeSecure-Cause: gggruggvucftvghtrhhoucdtuddrgedvkedrvddvkecutefuodetggdote frodftvfcurfhrohhfihhlvgemucghgfeuvefqofdpggftfghnshhusghstghrihgsvgenuceurgh ilhhouhhtmecufedtudenucenucfjughrpefkrhfhvffuffggtgesrgdtreertddtjeenucfhrhho mhepshhimhhonhcuoeguvghvsegvsggrrghrtghhihhtvggtthhsrdhorhhgqeenucggtffrrghtt hgvrhhnpeelleffvedthfdtjefgvdfhkeejgeefheelffefgeetkeelgfeuheegtdettdduhfenuc fkphepudelledrudekkedrvddttddruddtkedpvdejrdeigedrudeliedrvddugeenucevlhhushh tvghrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpeduleelrddukeekrddvtddtrddutdekpdhh vghlohepshgvrhhvvghrvdefjedqvddrfigvsgdqhhhoshhtihhnghdrtghomhdpmhgrihhlfhhro hhmpeguvghvsegvsggrrghrtghhihhtvggtthhsrdhorhhgpdhnsggprhgtphhtthhopedupdhrtg hpthhtohepjhhosghssehruhgsihhntghhrghpvghllhgvrdgtohhmpdhmohguvgepshhmthhppdh gvghtqdfurghfvggfnhhsuhgsshgtrhhisggvpdhgvghokffrpehushdpshhpfhepphgrshhspdgu khhimhepshhutggtvghssh X-VadeSecure-Status: clean X-VadeSecure-Verdict: clean X-VadeSecure-Malware: Clean X-VadeSecure-Originating-IP: 199.188.200.108 Received-SPF: Pass Received-DKIM: Success Authentication-Results: oxsus-vadesecure.net; iprev=pass ip=199.188.200.108; spf=Pass client-ip=199.188.200.108 smtp.mailfrom=dev@ebaarchitects.org; dkim=pass; dmarc=none action=no policy; arc=none; --03a9e04dc5012e4566cc853a7eba8bda7319 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Dear, I am writing to express my concern over a unusual charge from my bank acc= ount that seems to have been processed through your online portal. I find myself alarmed as I have no recollection of purchasing on your sto= re. I've already taken steps to contest this transaction with my financia= l institution and would appreciate any data you could provide, especially= the transaction code. Your prompt attention to this query would be greatly valued. Best regards, --03a9e04dc5012e4566cc853a7eba8bda7319 Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: quoted-printable <html> <head> <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dutf-8"> </head> <body bgColor=3D"#ffffff"> <div align=3Dleft><font size=3D2 face=3DArial>Dear,</font></div> <div> </div> <div align=3Dleft><font size=3D2 face=3DArial>I am writing to express my = concern over a unusual charge from my bank account that seems to have bee= n processed through your online portal.</font></div> <div> </div> <div align=3Dleft><font size=3D2 face=3DArial>I find myself alarmed as I = have no recollection of purchasing on your store. I've already taken step= s to contest this transaction with my financial institution and would app= reciate any data you could provide, especially the transaction code.</fon= t></div> <div> </div> <div align=3Dleft><font size=3D2 face=3DArial>Your prompt attention to th= is query would be greatly valued.</font></div> <div> </div> <div align=3Dleft><font size=3D2 face=3DArial>Best regards,</font></div><= /body></html> --03a9e04dc5012e4566cc853a7eba8bda7319-- --4T0Bbt3Lyhz1Q68Z.1703635226/mx.netsol.xion.oxcs.net--