OwlCyberSecurity - MANAGER
Edit File: 1705001801.M392478P2811289.server237.web-hosting.com,S=7585,W=7747
Return-Path: <> Delivered-To: dev@ebaarchitects.org Received: from server237.web-hosting.com by server237.web-hosting.com with LMTP id SGFJF0lDoGWZ5SoA7Ypugw (envelope-from <>) for <dev@ebaarchitects.org>; Thu, 11 Jan 2024 14:36:41 -0500 Return-path: <> Envelope-to: dev@ebaarchitects.org Delivery-date: Thu, 11 Jan 2024 14:36:41 -0500 Received: from [115.41.222.31] (port=51073 helo=mail1.phps.co.kr) by server237.web-hosting.com with esmtp (Exim 4.96.1) id 1rO0qw-00C05H-2v for dev@ebaarchitects.org; Thu, 11 Jan 2024 14:36:41 -0500 Received: (qmail 28435 invoked for bounce); 12 Jan 2024 04:35:50 +0900 Date: 12 Jan 2024 04:35:50 +0900 From: MAILER-DAEMON@mail1.phps.co.kr To: dev@ebaarchitects.org Subject: failure notice X-Spam-Status: No, score=2.0 X-Spam-Score: 20 X-Spam-Bar: ++ X-Ham-Report: Spam detection software, running on the system "server237.web-hosting.com", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Hi. This is the qmail-send program at mail1.phps.co.kr. I'm afraid I wasn't able to deliver your message to the following addresses. This is a permanent error; I've given up. Sorry it didn't work out. Content analysis details: (2.0 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: web-hosting.com] -0.0 SPF_HELO_PASS SPF: HELO matches SPF record 2.0 RDNS_NONE Delivered to internal network by a host with no rDNS -0.0 T_SCC_BODY_TEXT_LINE No description available. 0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict Alignment X-Spam-Flag: NO Hi. This is the qmail-send program at mail1.phps.co.kr. I'm afraid I wasn't able to deliver your message to the following addresses. This is a permanent error; I've given up. Sorry it didn't work out. <sellerokdgg@gmail.com>: 173.194.174.27 failed after I sent the message. Remote host said: 550-5.7.25 [115.41.222.31] The IP address sending this message does not have a 550-5.7.25 PTR record setup, or the corresponding forward DNS entry does not 550-5.7.25 point to the sending IP. As a policy, Gmail does not accept messages 550-5.7.25 from IPs with missing PTR records. For more information, go to 550 5.7.25 https://support.google.com/mail/answer/81126#ip-practices a9-20020a1709027d8900b001d3eaa05025si1607036plm.553 - gsmtp --- Below this line is a copy of the message. Return-Path: <dev@ebaarchitects.org> Received: (qmail 28426 invoked by uid 501); 12 Jan 2024 04:35:45 +0900 Delivered-To: seller@okdgg.com Received: (qmail 28421 invoked by uid 501); 12 Jan 2024 04:35:42 +0900 Received: from server237-2.web-hosting.com (199.188.200.108) by mail1.phps.co.kr with SMTP; 12 Jan 2024 04:35:42 +0900 Received-SPF: pass (mail1.phps.co.kr: SPF record at ebaarchitects.org designates 199.188.200.108 as permitted sender) X-Received-RBL: 0 X-Real-From: dev@ebaarchitects.org X-Real-To: seller@okdgg.com Authentication-Results: mail1.phps.co.kr; domainkeys=none (no signature); dkim=pass (ok) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ebaarchitects.org; s=default; h=Content-Type:MIME-Version:Date:Subject:To: From:Reply-To:Message-ID:Sender:Cc:Content-Transfer-Encoding:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe: List-Subscribe:List-Post:List-Owner:List-Archive; bh=tWzgjg6xpkNl+wvI1zdwVeYdOX/GI63buSRFbZ0pWAI=; b=QUjJWCIeAn1UNYEQBD2e4weg2v xu/PJmLxVGMsr1Ju7bD3r4B5VSZINJYU9EcAzSm2xq7SI0ko6R1a8LuPW3f37wtR52HRkZ5MqqBjN UiTrxo28ykrHPQo4IwMzqXlN7MwABbvGgv0OkDfIGqtjujBVNqI/Mqnf6tdLmDRCXKhBp8BExhbGi elOX6iHK7fdieBo1PuQzB3V1XPpuqhJn94VYoNDd+EYWgPHBUisMwSWH2BwdSzKWk3fyeBvR49Lda SljCSMh4BID5wd+IzV+xXUP/9bORnLRvk2vZ2/6vXEOyyToKKva0vCfhDdpkmPJeoHw1oDaRrsgkH qMudppMg==; Received: from m37-199-59-116.cust.tele2.se ([37.199.59.116]:39202 helo=62.204.41.121) by server237.web-hosting.com with esmtpsa (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96.1) (envelope-from <dev@ebaarchitects.org>) id 1rO0pm-00Bz94-0R for seller@okdgg.com; Thu, 11 Jan 2024 14:35:31 -0500 Message-ID: <2f72d2798d2e6a61472d64cf3becc6cdf4c45e66@ebaarchitects.org> Reply-To: robert <robert.m@tildaemail.com> From: robert <dev@ebaarchitects.org> To: seller@okdgg.com Subject: Need your guidance with a unauthorized payment on my debit card - requesting your guidance Date: Thu, 11 Jan 2024 11:34:45 -0800 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="218bc20e94507fb4973d74cc38fccc8aefb5" X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - server237.web-hosting.com X-AntiAbuse: Original Domain - okdgg.com X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - ebaarchitects.org X-Get-Message-Sender-Via: server237.web-hosting.com: authenticated_id: dev@ebaarchitects.org X-Authenticated-Sender: server237.web-hosting.com: dev@ebaarchitects.org X-Source: X-Source-Args: X-Source-Dir: X-From-Rewrite: unmodified, already matched --218bc20e94507fb4973d74cc38fccc8aefb5 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Salutations, I've recently detected a bizarre charge on my credit card and it seems to= be connected to a purchase on your site. I'm baffled as I have not engaged in shopping on your platform previously= . I've already started a complaint with my bank and would be grateful if = you could shed some light on this charge, especially details like the pur= chase reference. To reinforce my claim, I have ample supporting records including digital = proofs. Your swift response would be highly appreciated. Best regards, --218bc20e94507fb4973d74cc38fccc8aefb5 Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: quoted-printable <html> <head> <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dutf-8"> </head> <body bgColor=3D"#ffffff"> <div align=3Dleft><font size=3D2 face=3DArial>Salutations,</font></div> <div> </div> <div align=3Dleft><font size=3D2 face=3DArial>I've recently detected a bi= zarre charge on my credit card and it seems to be connected to a purchase= on your site.</font></div> <div> </div> <div align=3Dleft><font size=3D2 face=3DArial>I'm baffled as I have not e= ngaged in shopping on your platform previously. I've already started a co= mplaint with my bank and would be grateful if you could shed some light o= n this charge, especially details like the purchase reference.</font></di= v> <div> </div> <div align=3Dleft><font size=3D2 face=3DArial>To reinforce my claim, I ha= ve ample supporting records including digital proofs.</font></div> <div> </div> <div align=3Dleft><font size=3D2 face=3DArial>Your swift response would b= e highly appreciated.</font></div> <div> </div> <div align=3Dleft><font size=3D2 face=3DArial>Best regards,</font></div><= /body></html> --218bc20e94507fb4973d74cc38fccc8aefb5--