OwlCyberSecurity - MANAGER

Edit File: 1708691695.M652443P473498.server237.web-hosting.com,S=10531,W=10753

Envelope-to: dev@ebaarchitects.org
Delivery-date: Fri, 23 Feb 2024 07:34:55 -0500
Auto-Submitted: auto-replied
From: Mail Delivery System <Mailer-Daemon@kar.karmicbliss.net>
To: dev@ebaarchitects.org
References: <2d6473d82cae9c97b11b52f90dda808bbaa3e3fe@ebaarchitects.org>
Content-Type: multipart/report; report-type=delivery-status; boundary=1708691643-eximdsn-876739922
MIME-Version: 1.0
Subject: Mail delivery failed: returning message to sender
Message-Id: <E1rdUkd-003SdM-1F@kar.karmicbliss.net>
Date: Fri, 23 Feb 2024 07:34:03 -0500

--1708691643-eximdsn-876739922
Content-type: text/plain; charset=us-ascii

This message was created automatically by mail delivery software.

A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:

margaretannlembo@gmail.com
    (ultimately generated from orders@thecrystalgarden.com)
    host gmail-smtp-in.l.google.com [142.251.2.26]
    SMTP error from remote mail server after end of data:
    550-5.7.25 [23.229.78.202] The IP address sending this message does not have a
    550-5.7.25 PTR record setup, or the corresponding forward DNS entry does not
    550-5.7.25 point to the sending IP. As a policy, Gmail does not accept messages
    550-5.7.25 from IPs with missing PTR records. For more information, go to
    550-5.7.25  https://support.google.com/mail/answer/81126#ip-practices
    550-5.7.25 To learn more about Gmail's sender policy, go to
    550 5.7.25  https://support.google.com/mail/answer/81126. fd12-20020a056a002e8c00b006e05b7bfcffsi12540439pfb.52 - gsmtp

--1708691643-eximdsn-876739922
Content-type: message/delivery-status

Reporting-MTA: dns; kar.karmicbliss.net

Action: failed
Final-Recipient: rfc822;orders@thecrystalgarden.com
Status: 5.0.0
Remote-MTA: dns; gmail-smtp-in.l.google.com
Diagnostic-Code: smtp; 550-5.7.25 [23.229.78.202] The IP address sending this message does not have a
 550-5.7.25 PTR record setup, or the corresponding forward DNS entry does not
 550-5.7.25 point to the sending IP. As a policy, Gmail does not accept messages
 550-5.7.25 from IPs with missing PTR records. For more information, go to
 550-5.7.25  https://support.google.com/mail/answer/81126#ip-practices
 550-5.7.25 To learn more about Gmail's sender policy, go to
 550 5.7.25  https://support.google.com/mail/answer/81126. fd12-20020a056a002e8c00b006e05b7bfcffsi12540439pfb.52 - gsmtp

--1708691643-eximdsn-876739922
Content-type: message/rfc822

Return-path: <dev@ebaarchitects.org>
Received: from server237-2.web-hosting.com ([199.188.200.108]:37814)
	by kar.karmicbliss.net with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.96.2)
	(envelope-from <dev@ebaarchitects.org>)
	id 1rdUka-003S9O-2K
	for orders@thecrystalgarden.com;
	Fri, 23 Feb 2024 07:34:01 -0500
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
	d=ebaarchitects.org; s=default; h=Content-Type:MIME-Version:Date:Subject:To:
	From:Reply-To:Message-ID:Sender:Cc:Content-Transfer-Encoding:Content-ID:
	Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc
	:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:
	List-Subscribe:List-Post:List-Owner:List-Archive;
	bh=mfdzTbsEu3dDibLUE40tbzYBtX1L5+ULlrhQCe1jGLY=; b=iNswN8kJHC4LOOQRYqb6ZGKLGf
	DVG1fIsfhz+3+W143wfVGxkuKwzAUtmEb+YtXXKpqrn9XvPXWzYhChK8GgztK8o2LwqDVni6n3oNf
	dPW5Ug5HdbHrYXgK69P+UZou76ASTRljsInVl19fHxC/ByI5y5QYucs6lh36NfIvV6pwuiA0Ou689
	CH1wPoM5JylgcYw4dGZrmqz8eY42ni9FC1RzuxiDin6TJWMQSc5A/IC68uGTq6NHm4gKhpeLI6b3u
	evAZ0IyP1icjuvg8vZutSNaF4hG6HPoZGYHpxJKiEYRVxOIPOXyPgofGV02KQp9pi/ySmUODCx+36
	sf2BGdXA==;
Received: from [190.236.200.79] (port=60363 helo=62.204.41.121)
	by server237.web-hosting.com with esmtpsa  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.96.1)
	(envelope-from <dev@ebaarchitects.org>)
	id 1rdUjg-002QAw-0F
	for orders@thecrystalgarden.com;
	Fri, 23 Feb 2024 07:33:19 -0500
Message-ID: <2d6473d82cae9c97b11b52f90dda808bbaa3e3fe@ebaarchitects.org>
Reply-To: Arthur Walter <arthur.w@achansee.com>
From: Arthur Walter <dev@ebaarchitects.org>
To: orders@thecrystalgarden.com
Subject: Concerned about an unclear charge on my account - appreciate your assistance
Date: Fri, 23 Feb 2024 04:27:53 -0800
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="a0c38a21934f656b48e2ab00e7537960108705"
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server237.web-hosting.com
X-AntiAbuse: Original Domain - thecrystalgarden.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - ebaarchitects.org
X-Get-Message-Sender-Via: server237.web-hosting.com: authenticated_id: dev@ebaarchitects.org
X-Authenticated-Sender: server237.web-hosting.com: dev@ebaarchitects.org
X-Source: 
X-Source-Args: 
X-Source-Dir: 
X-From-Rewrite: unmodified, already matched
X-Spam-Status: No, score=3.0
X-Spam-Score: 30
X-Spam-Bar: +++
X-Ham-Report: Spam detection software, running on the system "kar.karmicbliss.net",
 has NOT identified this incoming email as spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Hello, I've noticed an unexpected transaction on my PayPal
    account associated with your store. This was quite surprising to me, as I
    have never accessed your platform. Could you provide details on this charge?
    
 Content analysis details:   (3.0 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.8 BAYES_50               BODY: Bayes spam probability is 40 to 60%
                             [score: 0.5110]
 -0.0 SPF_PASS               SPF: sender matches SPF record
  2.4 RCVD_HELO_IP_MISMATCH  Received: HELO and IP do not match, but
                             should
  0.0 HTML_MESSAGE           BODY: HTML included in message
 -0.1 DKIM_VALID_EF          Message has a valid DKIM or DK signature from
                             envelope-from domain
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily
                             valid
 -0.1 DKIM_VALID             Message has at least one valid DKIM or DK signature
 -0.1 DKIM_VALID_AU          Message has a valid DKIM or DK signature from
                             author's domain
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: ebaarchitects.org]
 -0.0 T_SCC_BODY_TEXT_LINE   No description available.
X-Spam-Flag: NO

--a0c38a21934f656b48e2ab00e7537960108705
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

Hello,

I've noticed an unexpected transaction on my PayPal account associated wi=
th your store.

This was quite surprising to me, as I have never accessed your platform. =
Could you provide details on this charge?

Best wishes,

--a0c38a21934f656b48e2ab00e7537960108705
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

<html>
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dutf-8">
</head>
<body bgColor=3D"#ffffff">
<div align=3Dleft><font size=3D2 face=3DArial>Hello,</font></div>
<div>&nbsp;</div>
<div align=3Dleft><font size=3D2 face=3DArial>I've noticed an unexpected =
transaction on my PayPal account associated with your store.</font></div>
<div>&nbsp;</div>
<div align=3Dleft><font size=3D2 face=3DArial>This was quite surprising t=
o me, as I have never accessed your platform. Could you provide details o=
n this charge?</font></div>
<div>&nbsp;</div>
<div align=3Dleft><font size=3D2 face=3DArial>Best wishes,</font></div></=
body></html>

--a0c38a21934f656b48e2ab00e7537960108705--

--1708691643-eximdsn-876739922--