OwlCyberSecurity - MANAGER
Edit File: 1708686325.M648951P136208.server237.web-hosting.com,S=10154,W=10358
Return-Path: <> Delivered-To: dev@ebaarchitects.org Received: from server237.web-hosting.com by server237.web-hosting.com with LMTP id CF6RJvV72GUQFAIA7Ypugw (envelope-from <>) for <dev@ebaarchitects.org>; Fri, 23 Feb 2024 06:05:25 -0500 Return-path: <> Envelope-to: dev@ebaarchitects.org Delivery-date: Fri, 23 Feb 2024 06:05:25 -0500 Received: from atl4mhob24.registeredsite.com ([209.17.115.121]:34150) by server237.web-hosting.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96.1) id 1rdTMl-000rMO-09 for dev@ebaarchitects.org; Fri, 23 Feb 2024 06:05:25 -0500 Received: from mail.hostingplatform.com (atl4qibmail20pod0.registeredsite.com [10.30.71.62]) by atl4mhob24.registeredsite.com (8.14.4/8.14.4) with ESMTP id 41NB4Zmt029455 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=FAIL) for <dev@ebaarchitects.org>; Fri, 23 Feb 2024 06:04:35 -0500 Message-Id: <202402231104.41NB4Zmt029455@atl4mhob24.registeredsite.com> Received: (qmail 8416 invoked for bounce); 23 Feb 2024 11:04:35 -0000 Date: 23 Feb 2024 11:04:35 -0000 From: MAILER-DAEMON@mail.hostingplatform.com To: dev@ebaarchitects.org Subject: failure notice X-Spam-Status: No, score=1.5 X-Spam-Score: 15 X-Spam-Bar: + X-Ham-Report: Spam detection software, running on the system "server237.web-hosting.com", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Hi. This is the qmail-send program at mail.hostingplatform.com. I'm afraid I wasn't able to deliver your message to the following addresses. This is a permanent error; I've given up. Sorry it didn't w [...] Content analysis details: (1.5 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: web-hosting.com] 1.5 KAM_MXURI URI: URI begins with a mail exchange prefix, i.e. mx.[...] -0.0 T_SCC_BODY_TEXT_LINE No description available. 0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay 0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict Alignment X-Spam-Flag: NO Hi. This is the qmail-send program at mail.hostingplatform.com. I'm afraid I wasn't able to deliver your message to the following addresses. This is a permanent error; I've given up. Sorry it didn't work out. <carpetexpress@carpetexpress.com>: From: support@networksolutions.com Subject: Mail Send Error - Mailbox Full //The email account you are trying to reach is full! Please try again in 24 hrs. --- Below this line is a copy of the message. Return-Path: <dev@ebaarchitects.org> Received: (qmail 8412 invoked by uid 78); 23 Feb 2024 11:04:35 -0000 Delivered-To: dave@carpetexpress.com Received: (qmail 8408 invoked by uid 0); 23 Feb 2024 11:04:35 -0000 Received: from unknown (HELO atl4mhib47.registeredsite.com) (209.17.115.182) by 0 with ESMTPS (DHE-RSA-AES256-GCM-SHA384 encrypted); 23 Feb 2024 11:04:35 -0000 Received: from vsmx004.netsol.xion.oxcs.net (cloudus.xion.oxcs.net [23.81.68.116] (may be forged)) by atl4mhib47.registeredsite.com (8.14.4/8.14.4) with ESMTP id 41NB4XkO001230 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO) for <dave@carpetexpress.com>; Fri, 23 Feb 2024 06:04:33 -0500 X-original-to: dave@carpetexpress.com Received: from nmtai201.oxsus-vadesecure.net (nmtai201.oxsus-vadesecure.net [147.135.37.32]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by mx.netsol.xion.oxcs.net (Postfix) with ESMTPS id 4Th6bN6c4Tz1Q6Ln for <dave@carpetexpress.com>; Fri, 23 Feb 2024 11:04:32 +0000 (UTC) Authentication-Results: oxsus-vadesecure.net; iprev=pass ip=199.188.200.108; spf=Pass client-ip=199.188.200.108 smtp.mailfrom=dev@ebaarchitects.org; dkim=pass; dmarc=none action=no policy; arc=none; Received-DKIM: Success Received-SPF: Pass X-VadeSecure-Originating-IP: 199.188.200.108 X-VadeSecure-Malware: Clean X-VadeSecure-Verdict: spam:low X-VadeSecure-Status: Spam X-VadeSecure-Cause: gggruggvucftvghtrhhoucdtuddrgedvledrfeeiucdltddurdegvdekrd dttddmucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuhgfgueevqffopdggtfgfnhhsuhg sshgtrhhisggvnecuuegrihhlohhuthemuceftddunecuogfuphgrmhfkphfpvghtfihorhhkucdl vdehtddmnefjrghmjfgvrgguvghrhfhivghlugcujfgvrgguvghrucfutghorhhinhhgucdlqddut ddmnecujfgurhepkfhrhffvufffgggtsegrtderredttdejnecuhfhrohhmpeetrhhthhhurhcuhg grlhhtvghruceouggvvhesvggsrggrrhgthhhithgvtghtshdrohhrgheqnecuggftrfgrthhtvgh rnhepfeekudffgeekgfdvjedttefhjeetffeutdevudfhledugfeiieffkeegledvhffgnecukfhp peduleelrddukeekrddvtddtrddutdekpdefiedrleefrddufedtrddujedtnecuufhprghmkfhpp fgvthifohhrkhepfeeirdelfedrudeftddrudejtdenucevlhhushhtvghrufhiiigvpedtnecurf grrhgrmhepihhnvghtpeduleelrddukeekrddvtddtrddutdekpdhhvghlohepshgvrhhvvghrvde fjedqvddrfigvsgdqhhhoshhtihhnghdrtghomhdpmhgrihhlfhhrohhmpeguvghvsegvsggrrghr tghhihhtvggtthhsrdhorhhgpdhnsggprhgtphhtthhopedupdhrtghpthhtohepuggrvhgvsegtr ghrphgvthgvgihprhgvshhsrdgtohhmpdhmohguvgepshhmthhppdhgvghtqdfurghfvggfnhhsuh gsshgtrhhisggvpdhgvghokffrpehushdpshhpfhepphgrshhspdgukhhimhepshhutggtvghssh X-VadeSecure-Score: 240 X-VadeSecure-SID: e49812c5-17b6791c59d5828a X-VadeSecure-Dom: oxcloud-us-2 Received: from server237-2.web-hosting.com ([199.188.200.108]) by oxsus2nmtai01p.internal.vadesecure.com with ngmta id e49812c5-17b6791c845db792; Fri, 23 Feb 2024 11:04:32 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ebaarchitects.org; s=default; h=Content-Type:MIME-Version:Date:Subject:To: From:Reply-To:Message-ID:Sender:Cc:Content-Transfer-Encoding:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe: List-Subscribe:List-Post:List-Owner:List-Archive; bh=cW8Os97gDhGy9k+iHqzFxdSJztQz6EmSw2GjM3NinIM=; b=AU959ae9Q74/qdTwM1AGz6fO1t APrFZWRXLsUqNE1Y6F0GDEvyqrnfA/M9UZDG1pUzwD/YnsmIrgyxHDxrEBDF4Jx4ixS68K9YtohDn U8+2ZPSyY++KCAdOSG7grAYRhYCjwkVLcYfSMl4QesIQq8jMpZb7pJCUF92PUVyDizhGPrKzht3Ek hE6ND9Y3W3Cn8P1qyAmYZXJx90V2tfZjeT3JxeV7H/uRQ8F3guVSuK3TPddBm5ztOEr2FORVTUHXX ES76bo0FZTBG/hGHM2UfRBJZHg5ur+C1OU6wzFWaT1jwKu2ui4ZpW6rBr6eNNWTfBCaeTJhc3RxwM hCE+Bffg==; Received: from [36.93.130.170] (port=36236 helo=62.204.41.113) by server237.web-hosting.com with esmtpsa (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96.1) (envelope-from <dev@ebaarchitects.org>) id 1rdTLn-000qKY-1i for dave@carpetexpress.com; Fri, 23 Feb 2024 06:04:30 -0500 Message-ID: <80e4ad06d67f555b58f2bb10f642687d759b43@ebaarchitects.org> Reply-To: Arthur Walter <arthur.w@achansee.com> From: Arthur Walter <dev@ebaarchitects.org> To: dave@carpetexpress.com Subject: Perplexed by a strange payment on my credit card requiring your assistance Date: Fri, 23 Feb 2024 02:59:54 -0800 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="a30940cf5692bd96b51f56ef6baf9b0d51b9" X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - server237.web-hosting.com X-AntiAbuse: Original Domain - carpetexpress.com X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - ebaarchitects.org X-Get-Message-Sender-Via: server237.web-hosting.com: authenticated_id: dev@ebaarchitects.org X-Authenticated-Sender: server237.web-hosting.com: dev@ebaarchitects.org X-Source: X-Source-Args: X-Source-Dir: X-From-Rewrite: unmodified, already matched X-SpamScore: 1.401 X-MailHub-Apparently-To: dave@carpetexpress.com --a30940cf5692bd96b51f56ef6baf9b0d51b9 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Hello, I am reaching out to express my confusion and concern regarding an inexpl= icable expense I noticed on my debit card statement linked to a transacti= on on your digital store. This occurrence is puzzling to me as I have no prior purchases with your = site. To address this, I have already started the procedure of disputing = this billing with my financial institution. Any information you could pro= vide, particularly the order ID, would be immensely helpful. I am equipped with ample evidence, such as payment logs, to support my cl= aim. Your immediate response is eagerly awaited. --a30940cf5692bd96b51f56ef6baf9b0d51b9 Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: quoted-printable <html> <head> <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dutf-8"> </head> <body bgColor=3D"#ffffff"> <div align=3Dleft><font size=3D2 face=3DArial>Hello,</font></div> <div> </div> <div align=3Dleft><font size=3D2 face=3DArial>I am reaching out to expres= s my confusion and concern regarding an inexplicable expense I noticed on= my debit card statement linked to a transaction on your digital store.</= font></div> <div> </div> <div align=3Dleft><font size=3D2 face=3DArial>This occurrence is puzzling= to me as I have no prior purchases with your site. To address this, I ha= ve already started the procedure of disputing this billing with my financ= ial institution. Any information you could provide, particularly the orde= r ID, would be immensely helpful.</font></div> <div> </div> <div align=3Dleft><font size=3D2 face=3DArial>I am equipped with ample ev= idence, such as payment logs, to support my claim.</font></div> <div> </div> <div align=3Dleft><font size=3D2 face=3DArial>Your immediate response is = eagerly awaited.</font></div></body></html> --a30940cf5692bd96b51f56ef6baf9b0d51b9--