OwlCyberSecurity - MANAGER

Edit File: 1705084280.M313299P238951.server237.web-hosting.com,S=20570,W=20909

Envelope-to: dev@ebaarchitects.org
Delivery-date: Fri, 12 Jan 2024 13:31:20 -0500
Received-SPF: Pass (protection.outlook.com: domain of utahhomefitness.com
 designates 20.98.2.159 as permitted sender) receiver=protection.outlook.com;
 client-ip=20.98.2.159; helo=us1-emailsignatures-cloud.codetwo.com; pr=C
From: Utah Home Fitness Sales <sales@utahhomefitness.com>
To: "dev@ebaarchitects.org" <dev@ebaarchitects.org>
Subject: Re: Perplexed by a mysterious charge on my bank statement linked to
 your Shopify store
Thread-Topic: Perplexed by a mysterious charge on my bank statement linked to
 your Shopify store
Thread-Index: AQHaRYTNnoszDGTE4k2BStUtfcYkWbDWf8Uw
Date: Fri, 12 Jan 2024 18:30:23 +0000
Message-ID: <LV8PR22MB49438F74A882AEC385CECBD6AA6F2@LV8PR22MB4943.namprd22.prod.outlook.com>
References: <a52f8229ddd66f64423871da2efcd6dde1b918ed@ebaarchitects.org>
In-Reply-To: <a52f8229ddd66f64423871da2efcd6dde1b918ed@ebaarchitects.org>
Accept-Language: en-US
Content-Language: en-US
Authentication-Results-Original: dkim=none (message not signed)
 header.d=none;dmarc=none action=none header.from=utahhomefitness.com;
X-Microsoft-Antispam-Message-Info-Original:
 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
X-Forefront-Antispam-Report-Untrusted:
 CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:LV8PR22MB4943.namprd22.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230031)(136003)(366004)(376002)(346002)(396003)(39840400004)(230173577357003)(230473577357003)(230373577357003)(230273577357003)(1690799017)(451199024)(186009)(64100799003)(1800799012)(76236004)(122000001)(83380400001)(38100700002)(86362001)(38070700009)(76116006)(478600001)(52536014)(71200400001)(66476007)(33656002)(316002)(6916009)(7696005)(66946007)(8936002)(8676002)(26005)(66446008)(64756008)(6506007)(15650500001)(53546011)(66556008)(5660300002)(9686003)(41300700001)(55236004)(55016003)(2906002)(19627405001)(166002);DIR:OUT;SFP:1102;
Content-Type: multipart/alternative;
	boundary="_000_LV8PR22MB49438F74A882AEC385CECBD6AA6F2LV8PR22MB4943namp_"
MIME-Version: 1.0
X-MS-Exchange-Transport-CrossTenantHeadersStamped: LV3PR22MB4510
X-CodeTwo-MessageID: 7163db9f-16b1-40d7-8a54-ddc3c3c983a2.20240112183025@us1-emailsignatures-cloud.codetwo.com
X-CodeTwoProcessed: true
X-EOPAttributedMessage: 0
X-MS-Exchange-Transport-CrossTenantHeadersStripped:
 CY4PEPF0000EE3A.namprd03.prod.outlook.com
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-Correlation-Id-Prvs:
	29d106e4-0c48-4793-b1c8-08dc139c8a05
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info:
	kR1Z2GPbU8x9HLuklGLuvrE9D/HYf3kEyXTb2kjb37Zot3NXahxi2J0gXFfETc71kHgs5kfncp/GpZ6B/nPhpCgjv+CBx+fHs4c6pu4yIzf4Y3kBkTebOzklDHIFKPNLZ6DwpM5m4VeZAfLDgpSRq7c/ii2zzQcbgAKKJQcTiNcl6eWSUtyFDu7fF71thC9tMSNA1TqQUXK7yMC7yAayaiC9X5kQAaI8t5CkiCEIen9yWYBVvSNZ0FxaE7zjNCxsrV3HmGxgTR1FyJQsfoPKKARf5vCXYlh2UXq72b8Dn4QRtsstZ6/Pb6B4b1IeuRZPsWbihJsNfmKkdGS0weuixxirxl5D0lhgLKTGdbnnFQ80qmsRgHiy0rvDz6yAlBLm9QTOgLJbGkNTX+I8pvszbC6xIzu9X4v1U9AYg+5Oym/xfmybSkrVRRsJNTZN9mwvU3UKoPVMyJHnmg40r0OLBP92oAAP90r18LwlSUlJTFB/mKD9JpSqm2S0H/TCI/7yxsXNGRgxfdk5qhagcnIlIQvTQRctcuUVjxAReR5YQeKUOY5XFxKXUQh/mgCZjzUMnFp70WRYGnBWilnn07Uu8yGqLcDNd+zOWoE0V06C8RX61jcaJo5Io5Ke2MBZBuNQXyLZ9rb2DP+TgTXeugdWxpxifk6rT9h520OPgIMxdf9MjGz7XB4ulw3qahbQAYvQom4O2fcvi1eAfo0G1bA0yJkSN3a2rhHPe0EASfTlsVFbYpnPqisQp1PuDafhtKw4ejUShhb9jlBI+paYePbqWSDUEVMDQ6Du0QckBzk3Kus=
X-Forefront-Antispam-Report:
	CIP:20.98.2.159;CTRY:US;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:us1-emailsignatures-cloud.codetwo.com;PTR:us1-emailsignatures-cloud.codetwo.com;CAT:NONE;SFS:(13230031)(4636009)(39840400004)(396003)(136003)(376002)(346002)(230373577357003)(230473577357003)(230173577357003)(230273577357003)(451199024)(64100799003)(1690799017)(1800799012)(82310400011)(186009)(46966006)(36840700001)(36860700001)(336012)(83380400001)(47076005)(26005)(15650500001)(52536014)(6916009)(9686003)(5660300002)(70206006)(70586007)(8676002)(8936002)(7696005)(86362001)(41300700001)(478600001)(2906002)(76236004)(53546011)(316002)(356005)(7596003)(7636003)(33656002)(166002)(6506007)(55016003)(19627405001)(40480700001);DIR:OUT;SFP:1102;
X-OriginatorOrg: utahhomefitness.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 12 Jan 2024 18:30:26.6543
 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: ae199047-d183-4374-cba8-08dc139c8c27
X-MS-Exchange-CrossTenant-Id: 92d5e0fe-de42-464e-9c1e-e059ec0cd083
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=92d5e0fe-de42-464e-9c1e-e059ec0cd083;Ip=[20.98.2.159];Helo=[us1-emailsignatures-cloud.codetwo.com]
X-MS-Exchange-CrossTenant-AuthSource:
	CY4PEPF0000EE3A.namprd03.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: MW4PR22MB3433
X-Spam-Status: No, score=-0.1
X-Spam-Score: 0
X-Spam-Bar: /
X-Ham-Report: Spam detection software, running on the system "server237.web-hosting.com",
 has NOT identified this incoming email as spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Hi There, Thank you for the message. We do not have the ability
    nor do we arbitrarily charge credit cards without a transaction initiated
    from a customer. This sounds like someone may have your credit cart info
   [...] 
 Content analysis details:   (-0.1 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: hubspotusercontent-na1.net]
 -0.0 SPF_PASS               SPF: sender matches SPF record
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
  0.1 URI_HEX                URI: URI hostname has long hexadecimal sequence
  0.0 HTML_MESSAGE           BODY: HTML included in message
 -0.1 DKIM_VALID             Message has at least one valid DKIM or DK signature
 -0.1 DKIM_VALID_AU          Message has a valid DKIM or DK signature from
                             author's domain
 -0.1 DKIM_VALID_EF          Message has a valid DKIM or DK signature from
                             envelope-from domain
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily
                             valid
 -0.0 T_SCC_BODY_TEXT_LINE   No description available.
X-Spam-Flag: NO

--_000_LV8PR22MB49438F74A882AEC385CECBD6AA6F2LV8PR22MB4943namp_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

Hi There,

Thank you for the message. We do not have the ability nor do we arbitrarily=
 charge credit cards without a transaction initiated from a customer. This =
sounds like someone may have your credit cart information and I would recom=
mend speaking to your bank or card company regarding this. They should be a=
ble to assist you with this.

Thanks,

Thank you,

Jason Mercado

[https://39568965.fs1.hubspotusercontent-na1.net/hubfs/39568965/new_ut_logo=
.jpg]

On Fri, Jan 12, 2024 at 12:26 PM, dominik <dev@ebaarchitects.org<mailto:dev=
@ebaarchitects.org>> wrote:

You don't often get email from dev@ebaarchitects.org. Learn why this is imp=
ortant<https://d4GhCD04.na1.hs-service-engage.com/Ctc/I9+23284/d4GhCD04/Jl2=
2-6qcW7lCdLW6lZ3pdW6V84q16wpFX8W41P9Qg3JXWPXVqz3G53FxwzWW8HC1wX4JML_JW55W3s=
m7JHmzXN3ngzLLKy2RzW22NKKl45Sh4tW3SMdns2kzB4qW6QVsG38KF2ZzW4Y3Ky_6_q34LW8zb=
LXr1L-pttW65PskJ5cl_f8W6Yz2PD4HJbpKW4t3kBW87Sj98W4sJXCl7CXDqBW8wqZFm8Q9lTMW=
4gltBC7xTHc-W5ZnTNG405lg_W3YlrD53wzQrLW6wq9yH6tB7dCV59CNy1pns6NW8cyL5l3K9Qt=
rN1PYtVC69-vTW5G0ZL88kF7cbf6SJDBb04>

Hello,

I am writing to discuss a unexpected charge from my credit card, which has =
been traced back to a transaction at your Shopify online shop. I have alrea=
dy contacted Shopify directly, and they confirmed that this withdrawal was =
linked to your service.

This incident has caused me distress, as I have no recollection of making a=
ny transactions at your store. I've initiated a inquiry with my credit comp=
any and would appreciate your support in providing details about this trans=
action, especially the order number.

I have gathered ample evidence, including payment records, to substantiate =
my claim.

I look forward to your prompt response on this matter.

--_000_LV8PR22MB49438F74A882AEC385CECBD6AA6F2LV8PR22MB4943namp_
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<!doctype html>
<html>
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii"=
>
</head>
<body>
<div class=3D"hs_reply_wrap">
<div style=3D"font-family: sans-serif;color: #444444;" dir=3D"auto" data-to=
p-level=3D"true">
<p style=3D"margin:0;"><span style=3D"font-size: 11pt;">Hi There,</span></p=
>
<br>
<p style=3D"margin:0;"><span style=3D"font-size: 11pt;">Thank you for the m=
essage. We do not have the ability nor do we arbitrarily charge credit card=
s without a transaction initiated from a customer. This sounds like someone=
 may have your credit cart information
 and I would recommend speaking to your bank or card company regarding this=
. They should be able to assist you with this.
</span></p>
<br>
<p style=3D"margin:0;"><span style=3D"font-size: 11pt;">Thanks,</span></p>
</div>
<br>
<div class=3D"hs_signature">
<div>Thank you, </div>
<br>
<div>Jason Mercado </div>
<br>
<br>
<figure style=3D"margin:0"><img width=3D"218" height=3D"80" src=3D"https://=
39568965.fs1.hubspotusercontent-na1.net/hubfs/39568965/new_ut_logo.jpg">
</figure><br>
<br>
</div>
<div class=3D"hs_reply"><br>
<div>On Fri, Jan 12, 2024 at 12:26 PM, dominik <span dir=3D"ltr">&lt;<a hre=
f=3D"mailto:dev@ebaarchitects.org" target=3D"_blank">dev@ebaarchitects.org<=
/a>&gt;</span> wrote:
<br>
<blockquote class=3D"hs_reply_quote" style=3D"margin:0 0 0 .8ex;border-left=
:1px #ccc solid;padding-left:1ex">
<table border=3D"0" cellspacing=3D"0" cellpadding=3D"0" width=3D"100%" styl=
e=3D"cellpadding:0;border:0;cellspacing:0;display:table;width:100%;table-la=
yout:fixed;border-collapse:seperate;float:none;" align=3D"left">
<tbody style=3D"display:block;">
<tr>
<td valign=3D"middle" width=3D"1px" bgcolor=3D"#A6A6A6" cellpadding=3D"7px =
2px 7px 2px" style=3D"padding:7px 2px 7px 2px;background-color:#A6A6A6;vali=
gn:middle">
</td>
<td valign=3D"middle" width=3D"100%" bgcolor=3D"#EAEAEA" cellpadding=3D"7px=
 5px 7px 15px" color=3D"#212121" style=3D"width:100%;background-color:#EAEA=
EA;padding:7px 5px 7px 15px;font-family:wf_segoe-ui_normal,Segoe UI,Segoe W=
P,Tahoma,Arial, sans-serif;font-size:12px;font-weight:normal;color:#212121;=
text-align:left;word-wrap:break-word;">
<div>You don't often get email from dev@ebaarchitects.org. <a href=3D"https=
://d4GhCD04.na1.hs-service-engage.com/Ctc/I9+23284/d4GhCD04/Jl22-6qcW7lCdLW=
6lZ3pdW6V84q16wpFX8W41P9Qg3JXWPXVqz3G53FxwzWW8HC1wX4JML_JW55W3sm7JHmzXN3ngz=
LLKy2RzW22NKKl45Sh4tW3SMdns2kzB4qW6QVsG38KF2ZzW4Y3Ky_6_q34LW8zbLXr1L-pttW65=
PskJ5cl_f8W6Yz2PD4HJbpKW4t3kBW87Sj98W4sJXCl7CXDqBW8wqZFm8Q9lTMW4gltBC7xTHc-=
W5ZnTNG405lg_W3YlrD53wzQrLW6wq9yH6tB7dCV59CNy1pns6NW8cyL5l3K9QtrN1PYtVC69-v=
TW5G0ZL88kF7cbf6SJDBb04">
Learn why this is important</a> </div>
</td>
<td valign=3D"middle" align=3D"left" width=3D"75px" bgcolor=3D"#EAEAEA" cel=
lpadding=3D"7px 5px 7px 5px" color=3D"#212121" style=3D"width:75px;backgrou=
nd-color:#EAEAEA;padding:7px 5px 7px 5px;font-family:wf_segoe-ui_normal,Seg=
oe UI,Segoe WP,Tahoma,Arial, sans-serif;font-size:12px;font-weight:normal;c=
olor:#212121;text-align:left;word-wrap:break-word;align:left">
</td>
</tr>
</tbody>
</table>
<div>
<div align=3D"left"><font size=3D"2" face=3D"Arial">Hello,</font> </div>
<div>&nbsp; </div>
<div align=3D"left"><font size=3D"2" face=3D"Arial">I am writing to discuss=
 a unexpected charge from my credit card, which has been traced back to a t=
ransaction at your Shopify online shop. I have already contacted Shopify di=
rectly, and they confirmed that this withdrawal
 was linked to your service.</font> </div>
<div>&nbsp; </div>
<div align=3D"left"><font size=3D"2" face=3D"Arial">This incident has cause=
d me distress, as I have no recollection of making any transactions at your=
 store. I've initiated a inquiry with my credit company and would appreciat=
e your support in providing details about
 this transaction, especially the order number.</font> </div>
<div>&nbsp; </div>
<div align=3D"left"><font size=3D"2" face=3D"Arial">I have gathered ample e=
vidence, including payment records, to substantiate my claim.</font>
</div>
<div>&nbsp; </div>
<div align=3D"left"><font size=3D"2" face=3D"Arial">I look forward to your =
prompt response on this matter.</font>
</div>
</div>
</blockquote>
</div>
</div>
</div>
<img width=3D"1" height=3D"1" style=3D"display:none" alt=3D"" src=3D"https:=
//d4GhCD04.na1.hs-service-engage.com/Cto/I9+23284/d4GhCD04/R5R8b46hbN8LKtlJ=
2fD9mW1YZwGR1Q4vk6W3GHNXG1Xn6B5W1GysB01-WktKW24T2gQ1W-tzgW3M065V1Z0NpWn1Q44=
PK4W1">
</body>
</html>

--_000_LV8PR22MB49438F74A882AEC385CECBD6AA6F2LV8PR22MB4943namp_--