OwlCyberSecurity - MANAGER

Edit File: 1704879867.M463404P3023070.server237.web-hosting.com,S=14889,W=15163

Envelope-to: dev@ebaarchitects.org
Delivery-date: Wed, 10 Jan 2024 04:44:27 -0500
From: Ciconia Travel <info@ciconiatravel.com>
To: "dev@ebaarchitects.org" <dev@ebaarchitects.org>
Subject: Re: Unclear payment on my credit card linked to your website - need
 your expertise
Thread-Topic: Unclear payment on my credit card linked to your website - need
 your expertise
Thread-Index: AQHaQSju5PoLJIr3SUCWQyyfvLf1yrDS0KWj
Date: Wed, 10 Jan 2024 09:43:37 +0000
Message-ID:
 <VI1PR05MB443134F1BE84009E66C56552C3692@VI1PR05MB4431.eurprd05.prod.outlook.com>
References: <8fc0ba11e5135d56705a13b84c9953586769cc84@ebaarchitects.org>
In-Reply-To: <8fc0ba11e5135d56705a13b84c9953586769cc84@ebaarchitects.org>
Accept-Language: tr-TR, en-US
Content-Language: en-US
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0:
 =?us-ascii?Q?RMROSimXyUxIb73vu4wMhFYVdRkYgPkMA0RuJXmb6qjktgML7rr8Cx7GGPGc?=
 =?us-ascii?Q?+j2QNnRZ15Fc3oGxaqqijNw6WAdtG52ddjdYhcKNS7nuqtt1emCgZ/XNMWuR?=
 =?us-ascii?Q?XRgfxc8tDOpKxra/5VSjk2GA9Y5PU6ce7V848MuXGbRVB2mn/O4ZBobWYgTw?=
 =?us-ascii?Q?U1uni1RdVwDphm4h7M/nG1mPDW6WBwKsX9NuCuiOJDsl/Aq+FPhgCq/zZFRQ?=
 =?us-ascii?Q?xMd/aFHMqDOKq51ghmmf8df0IeoCtorYQfIZCMD+zvknvmW6RaZt0KyVTKEe?=
 =?us-ascii?Q?1lEhdP2sZE4Lp/hbx0BudU1qPtoltWLMbhBpf8anFFAskhnEhVMg4jafEUOh?=
 =?us-ascii?Q?fyzUghz7cncXPIFM5+hnB5eZhS3AfcDDFU0du7yNZPMyV+pht2CgZhggkYmO?=
 =?us-ascii?Q?FghaVqnEaMpBgygmZBwIGn7PDO8c2LmD4UOzBWgr6JNKg6oNOTfp3pE9J5nY?=
 =?us-ascii?Q?kroq2mWX1R+VZz19c0cUuQ+f0qZbSHadSHxSemlJWCMhNhK7PkG4o0k1MBpY?=
 =?us-ascii?Q?hKUq6zWdf2YNrq5cmyWRwEG6tjVRmcagMD81Pf9Op74yx7SDiEq5mGaYuX9A?=
 =?us-ascii?Q?00f5c0sz/YC0yj0Ub7Ea921VR42XF4CZPawRQNwnwznO5NAcdJaN6RGteCTu?=
 =?us-ascii?Q?7xzsRYRCjLF1zlF+LmmX92lOVn8Za8uXK8Iy/Gswh8e4m1SfGkgcM2+PDqvS?=
 =?us-ascii?Q?nrzJBjVOeAZCBYqviTGyCBzFQTzi1wLy3IQclhUhp5k2lzvEYgfOPHAWFgaA?=
 =?us-ascii?Q?d3jyiqDzRPuboTVFjp0x4Vd2AYrMXulu97Y4MHb9HVW2cASlfhkUxd1c1cYB?=
 =?us-ascii?Q?yQGIO764kD2Fa9EjckmHdLnNpxtBpxZ4K0ZAjiAr/OeLTN+RY8sJaTe8egEj?=
 =?us-ascii?Q?AVXiU7kZaWj11L975iz54pIiC/98vbHpOrWEVxlTZKtSPPvyjbJ6q7nrU3TO?=
 =?us-ascii?Q?eQwQtpw+z94GJssYpo6qAr17JLK158X3s1KqUdCp8yT5kH8G9QGYNISikfMO?=
 =?us-ascii?Q?CzX7lPAuVO2Su5wEmqzkMOTbu6uw4nq2ZIEKmOzFpyM7vK2H6uGh64OMO9f+?=
 =?us-ascii?Q?lzPrvV1J4BQWAWzXR37erAsRCfoofSnOQ7thnTO4M/yo+wqhFQ3SvSEemwqd?=
 =?us-ascii?Q?uW2xXcl4DsN+43npztfFCi8+aM0N7yD2wLB+VqHPylnUpLO7XuKUBlGfFbTZ?=
 =?us-ascii?Q?AlM0tyK0/rovvBUCNWRQ71zaeCEha/L2PaXbW8B3RIktVM77CvdwL3XVEmC8?=
 =?us-ascii?Q?1hOQi8G5y4i6GDUeCZrhisb8Zq9i4341LAsipGqyM/9uGlAcQPLJxFzH0wlg?=
 =?us-ascii?Q?i7IVAJRo64/ZnKIdgSwRURLt4Nr1Id/OqKJ6Stx1qi0FwgQySAktdUcDAwOl?=
 =?us-ascii?Q?wM21BX89/BEed26yzoGNwAvIjtsjkjHpRRZ4LE+KM5RFwYytBGjeQhQSSIlH?=
 =?us-ascii?Q?CJWTBkdCr4EpUfdWELaZ+gMybeVWjMCEbYQtfGBLCpSgx4P5DYG7sP+LconX?=
 =?us-ascii?Q?HaLIZdYs8CjO4lBtub7i53Fb/baK+1glaSxCBympHIEy/yPlF0nV4DiNL0dI?=
 =?us-ascii?Q?FTYQXBu99PDZftrc7LelKhHc4IHv2da1/uftnRTY?=
Content-Type: multipart/alternative;
	boundary="_000_VI1PR05MB443134F1BE84009E66C56552C3692VI1PR05MB4431eurp_"
MIME-Version: 1.0
X-OriginatorOrg: ciconiatravel.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: VI1PR05MB4431.eurprd05.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: e13a02f0-ea51-4468-e94b-08dc11c09e95
X-MS-Exchange-CrossTenant-originalarrivaltime: 10 Jan 2024 09:43:37.1736
 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: d2152e87-706a-4938-9227-8fd60ef11a18
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: r813EMtD5w6Sd2/aMDKqQOIQRmcX3J3SyofAcDHPnACzAzWbzJAQmg4NkVx1oUKcpcS8RelBBPZ63DX6xGhCFQ==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: PAXPR05MB8723
X-Spam-Status: No, score=0.1
X-Spam-Score: 1
X-Spam-Bar: /
X-Ham-Report: Spam detection software, running on the system "server237.web-hosting.com",
 has NOT identified this incoming email as spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Hello Randy, Thank you for contacting us, we hope all is well.
    Could you please kindly further describe the transaction details? You appear
    to have no bookings with us. 
 Content analysis details:   (0.1 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: hubspotusercontent-na1.net]
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
 -0.0 SPF_PASS               SPF: sender matches SPF record
  0.1 URI_HEX                URI: URI hostname has long hexadecimal sequence
  0.0 HTML_IMAGE_ONLY_32     BODY: HTML: images with 2800-3200 bytes of
                             words
  0.0 HTML_MESSAGE           BODY: HTML included in message
 -0.1 DKIM_VALID             Message has at least one valid DKIM or DK signature
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily
                             valid
 -0.0 T_SCC_BODY_TEXT_LINE   No description available.
X-Spam-Flag: NO

--_000_VI1PR05MB443134F1BE84009E66C56552C3692VI1PR05MB4431eurp_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

Hello Randy,

Thank you for contacting us, we hope all is well.

Could you please kindly further describe the transaction details? You appea=
r to have no bookings with us.

We're looking forward to your response.

Kind Regards,

Eric Aalen

Sales & Customer Service

Tel: +44 20 704 325 37<tel:+442070432537>

[https://6901198.fs1.hubspotusercontent-na1.net/hubfs/6901198/Ciconia%20Tra=
vel%20-%20New%20Logo.png]

On Sunday, 7 January 2024, 00:18:21 -0500, Randy Willis <dev@ebaarchitects.=
org<mailto:dev@ebaarchitects.org>> wrote:
Hello,

I am reaching out to express my confusion and concern regarding an inexplic=
able charge I noticed on my credit card account linked to a transaction on =
your e-commerce platform.

This occurrence is baffling to me as I have no prior purchases with your se=
rvice. To address this, I have already started the procedure of disputing t=
his charge with my financial institution. Any information you could provide=
, particularly the transaction reference, would be immensely helpful.

I am equipped with adequate proofs, such as bank records, to support my cla=
im.

Your prompt response is eagerly awaited.

--_000_VI1PR05MB443134F1BE84009E66C56552C3692VI1PR05MB4431eurp_
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<!doctype html>
<html>
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii"=
>
</head>
<body>
<div class=3D"hs_reply_wrap">
<div style=3D"font-family: sans-serif;color: #444444;" dir=3D"auto" data-to=
p-level=3D"true">
<p style=3D"margin:0;"><span style=3D"font-size: 11pt;">Hello Randy,</span>=
</p>
<br>
<p style=3D"margin:0;"><span style=3D"font-size: 11pt;">Thank you for conta=
cting us, we hope all is well.</span></p>
<br>
<p style=3D"margin:0;"><span style=3D"font-size: 11pt;">Could you please ki=
ndly further describe the transaction details? You appear to have no bookin=
gs with us.</span></p>
<br>
<p style=3D"margin:0;"><span style=3D"font-size: 11pt;">We're looking forwa=
rd to your response.</span></p>
<br>
<p style=3D"margin:0;"><span style=3D"font-size: 11pt;">Kind Regards,</span=
></p>
<p style=3D"margin:0;"><span style=3D"font-size: 14.6667px;">Eric Aalen</sp=
an></p>
<p style=3D"margin:0;"><span style=3D"font-size: 11pt;">Sales &amp; Custome=
r Service</span></p>
<p style=3D"margin:0;"><span style=3D"font-size: 11pt;">Tel: <a href=3D"tel=
:+442070432537" target=3D"_blank" rel=3D"noopener noreferrer">
+44 20 704 325 37</a></span></p>
<div style=3D""><img width=3D"209" height=3D"55" style=3D"" src=3D"https://=
6901198.fs1.hubspotusercontent-na1.net/hubfs/6901198/Ciconia%20Travel%20-%2=
0New%20Logo.png">
</div>
</div>
<div class=3D"hs_reply"><br>
<div>On Sunday, 7 January 2024, 00:18:21 -0500, Randy Willis <span dir=3D"l=
tr">&lt;<a href=3D"mailto:dev@ebaarchitects.org" target=3D"_blank">dev@ebaa=
rchitects.org</a>&gt;</span> wrote:
<br>
<blockquote class=3D"hs_reply_quote" style=3D"margin:0 0 0 .8ex;border-left=
:1px #ccc solid;padding-left:1ex">
<div><font size=3D"2" face=3D"Arial">Hello,</font> </div>
<div>&nbsp; </div>
<div><font size=3D"2" face=3D"Arial">I am reaching out to express my confus=
ion and concern regarding an inexplicable charge I noticed on my credit car=
d account linked to a transaction on your e-commerce platform.</font>
</div>
<div>&nbsp; </div>
<div><font size=3D"2" face=3D"Arial">This occurrence is baffling to me as I=
 have no prior purchases with your service. To address this, I have already=
 started the procedure of disputing this charge with my financial instituti=
on. Any information you could provide,
 particularly the transaction reference, would be immensely helpful.</font>=
 </div>
<div>&nbsp; </div>
<div><font size=3D"2" face=3D"Arial">I am equipped with adequate proofs, su=
ch as bank records, to support my claim.</font>
</div>
<div>&nbsp; </div>
<div><font size=3D"2" face=3D"Arial">Your prompt response is eagerly awaite=
d.<br>
</font></div>
<div align=3D"left"><font size=3D"2" face=3D"Arial"></font></div>
</blockquote>
</div>
</div>
</div>
<img width=3D"1" height=3D"1" style=3D"display:none" alt=3D"" src=3D"https:=
//cQRG-04.na1.hs-servicecrm-engage.com/Cto/5D+23284/cQRG-04/R5X8b4747N61BP-=
y2fDlRW1Z0m6H3z95MPW3GM1dX1Xp1k0W1Gy2y71-Wpr-W1-ZKZX1S2Fd5W1Y-D4s1X2cFxN1-X=
zQ5hPQ_Ff5Lc03604">
</body>
</html>

--_000_VI1PR05MB443134F1BE84009E66C56552C3692VI1PR05MB4431eurp_--