OwlCyberSecurity - MANAGER

Edit File: 1709077405.M399765P1450797.server237.web-hosting.com,S=17123,W=17474

Envelope-to: dev@ebaarchitects.org
Delivery-date: Tue, 27 Feb 2024 18:43:25 -0500
Date: Wed, 28 Feb 2024 06:12:36 +0630 (+0630)
From: MAILER-DAEMON@thost1.tworksystem.com (Mail Delivery System)
Subject: Undelivered Mail Returned to Sender
To: dev@ebaarchitects.org
Auto-Submitted: auto-replied
MIME-Version: 1.0
Content-Type: multipart/report; report-type=delivery-status;
	boundary="E8B2A10404.1709077356/thost1.tworksystem.com"
Content-Transfer-Encoding: 7bit
Message-Id: <20240227234236.4987D10407@thost1.tworksystem.com>

This is a MIME-encapsulated message.

--E8B2A10404.1709077356/thost1.tworksystem.com
Content-Description: Notification
Content-Type: text/plain; charset=us-ascii

This is the mail system at host thost1.tworksystem.com.

I'm sorry to have to inform you that your message could not
be delivered to one or more recipients. It's attached below.

For further assistance, please send mail to postmaster.

If you do so, please include this problem report. You can
delete your own text from the attached returned message.

The mail system

<12996pep@gmail.com>: host smtp.mailchannels.net[44.240.198.68] said: 550 5.7.1
    [CS] Message blocked. If this is a false positive, please report this to
    your hosting service provider. See
    https://console.mailchannels.net/insights/bounce?auid=tworksystem&sender=srs0%3Dckxb%3Dke%3Debaarchitects.org%3Ddev%40tworksystem.com&txid=0d5b304770484a03
    (in reply to end of DATA command)

--E8B2A10404.1709077356/thost1.tworksystem.com
Content-Description: Delivery report
Content-Type: message/delivery-status

Reporting-MTA: dns; thost1.tworksystem.com
X-Postfix-Queue-ID: E8B2A10404
X-Postfix-Sender: rfc822; SRS0=CKxb=KE=ebaarchitects.org=dev@tworksystem.com
Arrival-Date: Wed, 28 Feb 2024 06:12:32 +0630 (+0630)

Final-Recipient: rfc822; 12996pep@gmail.com
Original-Recipient: rfc822;12996pep@gmail.com
Action: failed
Status: 5.7.1
Remote-MTA: dns; smtp.mailchannels.net
Diagnostic-Code: smtp; 550 5.7.1 [CS] Message blocked. If this is a false
    positive, please report this to your hosting service provider. See
    https://console.mailchannels.net/insights/bounce?auid=tworksystem&sender=srs0%3Dckxb%3Dke%3Debaarchitects.org%3Ddev%40tworksystem.com&txid=0d5b304770484a03

--E8B2A10404.1709077356/thost1.tworksystem.com
Content-Description: Undelivered Message
Content-Type: message/rfc822

Return-Path: <SRS0=CKxb=KE=ebaarchitects.org=dev@tworksystem.com>
Received: from thost1.tworksystem.com (localhost [127.0.0.1])
	by thost1.tworksystem.com (Postfix) with ESMTP id E8B2A10404
	for <12996pep@gmail.com>; Wed, 28 Feb 2024 06:12:32 +0630 (+0630)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=tworksystem.com;
	s=default; t=1709077353;
	bh=1jBlw7ebMOcCGFF26BOVT0g4BlBfHNhk2OaiX4nBuBo=;
	h=Received:Received:Received:Received:Received:Received:Received:
	 Received:Received:Received:Received:From:To:Subject;
	b=IJWzZXZRL6KCUEjbPLV2n57J1T1u2BG5TlLu2Kb8XORVYanl3EeV9CIczwQauYk3n
	 JjA2RTjOQ27N5vaLfi0dut4E9/xnWuy7JENKI2dt31WYyhbLIRy11M//Ex40rrqYjj
	 SEIF+IRX1nAKTnRYZs0RkqVyTHhb8q8HapUkSuyc=
Authentication-Results: thost1.tworksystem.com;
	spf=pass (sender IP is 127.0.0.1) smtp.mailfrom=srs0=ckxb=ke=ebaarchitects.org=dev@tworksystem.com smtp.helo=thost1.tworksystem.com
Received-SPF: pass (thost1.tworksystem.com: localhost is always allowed.) client-ip=127.0.0.1; envelope-from=srs0=ckxb=ke=ebaarchitects.org=dev@tworksystem.com; helo=thost1.tworksystem.com;
X-Spam-Flag: YES
X-Spam-Score: 5.391
X-Spam-Level: *****
X-Spam-Status: Yes, score=5.391 tagged_above=-9999 required=5
	tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1,
	HEADER_FROM_DIFFERENT_DOMAINS=0.25, HTML_MESSAGE=0.001,
	RCVD_HELO_IP_MISMATCH=2.368, RCVD_IN_BL_SPAMCOP_NET=1.347,
	RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_SBL_CSS=3.335,
	SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01]
	autolearn=no autolearn_force=no
Authentication-Results: thost1.tworksystem.com (amavisd-new);
	dkim=pass (1024-bit key) header.d=tworksystem.com header.b=bGeSAdk2;
	dkim=fail (2048-bit key) reason="fail (message has been altered)"
	header.d=ebaarchitects.org header.b=YCqlMtAX
Received: from thost1.tworksystem.com ([127.0.0.1])
	by thost1.tworksystem.com (thost1.tworksystem.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id nROmY24FhiMx for <12996pep@gmail.com>;
	Wed, 28 Feb 2024 06:12:32 +0630 (+0630)
Received: by thost1.tworksystem.com (Postfix, from userid 30)
	id 273E210407; Wed, 28 Feb 2024 06:12:32 +0630 (+0630)
X-Original-To: poeeiphyu@tworksystem.com
Delivered-To: poeeiphyu@tworksystem.com
Received: from thost1.tworksystem.com (localhost [127.0.0.1])
	by thost1.tworksystem.com (Postfix) with ESMTP id 608AE10404
	for <poeeiphyu@tworksystem.com>; Wed, 28 Feb 2024 06:12:30 +0630 (+0630)
Received-SPF: pass (thost1.tworksystem.com: localhost is always allowed.)
 client-ip=127.0.0.1;
 envelope-from=srs0=ckxb=ke=ebaarchitects.org=dev@tworksystem.com;
 helo=thost1.tworksystem.com;
Received: from thost1.tworksystem.com ([127.0.0.1])
	by thost1.tworksystem.com (thost1.tworksystem.com [127.0.0.1]) (amavisd-new,
 port 10024)
	with ESMTP id JiuyRC526L_a for <poeeiphyu@tworksystem.com>;
	Wed, 28 Feb 2024 06:12:29 +0630 (+0630)
Received: by thost1.tworksystem.com (Postfix, from userid 30)
	id 8DA8110408; Wed, 28 Feb 2024 06:12:29 +0630 (+0630)
X-Original-To: office@tworksystem.com
Delivered-To: office@tworksystem.com
Received: from thost1.tworksystem.com (localhost [127.0.0.1])
	by thost1.tworksystem.com (Postfix) with ESMTP id 2440810404
	for <office@tworksystem.com>; Wed, 28 Feb 2024 06:12:27 +0630 (+0630)
Received-SPF: pass (thost1.tworksystem.com: localhost is always allowed.)
 client-ip=127.0.0.1; envelope-from=dev@ebaarchitects.org;
 helo=thost1.tworksystem.com;
Received: from thost1.tworksystem.com ([127.0.0.1])
	by thost1.tworksystem.com (thost1.tworksystem.com [127.0.0.1]) (amavisd-new,
 port 10024)
	with ESMTP id bdfHjt33hjZu for <office@tworksystem.com>;
	Wed, 28 Feb 2024 06:12:26 +0630 (+0630)
Received: from postfix-inbound-v2-0.inbound.mailchannels.net
 (inbound-egress-5.mailchannels.net [199.10.31.237])
	by thost1.tworksystem.com (Postfix) with ESMTPS id 6E13B10405
	for <office@tworksystem.com>; Wed, 28 Feb 2024 06:12:22 +0630 (+0630)
Received-SPF: softfail (thost1.tworksystem.com: transitioning domain of
 ebaarchitects.org does not designate 199.10.31.237 as permitted sender)
 client-ip=199.10.31.237; envelope-from=dev@ebaarchitects.org;
 helo=postfix-inbound-v2-0.inbound.mailchannels.net;
Received: from inbound-trex-1 (unknown [127.0.0.6])
	by postfix-inbound-v2-0.inbound.mailchannels.net (Postfix) with ESMTP id
 6030B80366
	for <office@tworksystem.com>; Tue, 27 Feb 2024 23:42:20 +0000 (UTC)
ARC-Seal: i=1; s=arc-2022; d=mailchannels.net; t=1709077335; a=rsa-sha256;
	cv=none;
	b=3IP8/9125WptDEEuW1gQIIpLtrFoQuUfuqBSJOS3/oTBOq6JnCL56AS3JXLn/MwUeEB9zJ
	WUY/FTnR79NsX/RqXRbshkV5hVscHTtBq2zjJg2I0rIcP3J4viljxyRCV4ISHOsgmgzWsL
	A71GGZujDc3GFvjjR7UBFPxf0c9ePiFYdPFMcI97D9z1KR+szPkgvc68lGkG+H7IrNxlGD
	aldwkSuBzEfbMU9qVW8U41YO1SfNbqy/16ZQDwXb5puOMvkFstpbr9o5MCtAXUf7qlvebT
	j3Hp+gSfFHNpDCJu79m4M5RM9n0NZntZCBLN7RJU7Au4NtTQPEUlcmaaakNZCw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed;
 d=mailchannels.net;
	s=arc-2022; t=1709077335;
	h=from:from:reply-to:reply-to:subject:subject:date:date:
	 message-id:message-id:to:to:cc:mime-version:mime-version:
	 content-type:content-type:dkim-signature;
	bh=cvA3TI3lwKNBPE8wbO0VzvqEe9W0BaZnJjOmenjwxQs=;
	b=8n6aWc5QIbB26jzmmVnJbc887laLso89SJveE/pjEa3Sc/E0HEF9ReNikThEpaITta9Cg/
	h0R9IcM2FLFD6doTNboh6g73jcLawmHd80yMayWcKux3b0U+FlRu/8X69O6yTECXB12z1v
	X/cFmxhby8ABxmqLBGiQO1Fici6WRqT2g8jtl12r8DJ6vEWEdpymEuGroimTgfJym5WluK
	L2mvJAjHdTY+K+P9x05xPW3jJLnHFTUZkNb6mWUWHfsJ0N0kDd9ij+6oohwNigjeJq0tZM
	aVs5ovopnb9tsPXqGQIqscm2Cb49UbfSjpRgiflF9vJ91gg5XvzB2xoGr6fZiQ==
ARC-Authentication-Results: i=1;
	inbound-rspamd-6cbf85d8bf-tgzhg;
	none
X-Message-ID: 49BrvKSebLffs8ibq95xEwar
Received: from server237-2.web-hosting.com (server237-2.web-hosting.com
 [199.188.200.108])
	(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384)
	by 100.116.14.45 (trex/6.9.2);
	Tue, 27 Feb 2024 23:42:20 +0000
Authentication-Results: inbound.mailchannels.net;
 spf=pass smtp.mailfrom=dev@ebaarchitects.org;
 dkim=pass header.d=ebaarchitects.org;
 dmarc=none;
 arc=none
Received-SPF: pass (dmarc-service-7894889d77-5v9qg: domain of
 ebaarchitects.org designates 199.188.200.108 as permitted sender)
 client-ip=199.188.200.108; envelope-from=dev@ebaarchitects.org;
 helo=server237-2.web-hosting.com;
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
	d=ebaarchitects.org; s=default; h=Content-Type:MIME-Version:Date:Subject:To:
	From:Reply-To:Message-ID:Sender:Cc:Content-Transfer-Encoding:Content-ID:
	Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc
	:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:
	List-Subscribe:List-Post:List-Owner:List-Archive;
	bh=1jBlw7ebMOcCGFF26BOVT0g4BlBfHNhk2OaiX4nBuBo=; b=YCqlMtAX9wmXRAihgWseVu5ZxS
	7ZmVW8weNSFlqetrWwlDZZaPB/irhNUhmipyvm2iXXOh8kQIhZF5tyAkk91u2Pxj7J9a/ztYCyaFZ
	ctxlVEFvGKpaAHwXSMFoOsc7Yojkj2+P/9Z/6NQiDLmTBcBTgZLJVqTWYkLFZS9bsl2uuqLCLzD3+
	NP3LIKhNeRRO+ZOcZt+XJA1tckQV/Fp4y6j1e0GhDf2H7kPvdVTWdVtfRHYK/c4pm/Za0H0UUuQVN
	IjBlsWmtkHARwdnzZZXJ35wlCc4NHuFZuTM22QchGj5dpwqXbv3k7iZ/xOHZxH9TSYeImPQipuWAp
	qgwCujyw==;
Received: from [14.161.44.207] (port=48907 helo=62.204.41.113)
	by server237.web-hosting.com with esmtpsa  (TLS1.2) tls
 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.96.1)
	(envelope-from <dev@ebaarchitects.org>)
	id 1rf758-0067Ms-1v
	for office@tworksystem.com;
	Tue, 27 Feb 2024 18:42:13 -0500
Message-ID: <2084cd668dcce6e8eb4108a343d7fdd63825b5@ebaarchitects.org>
Reply-To: Albert <a.kneller@sonibie.com>
From: Albert <dev@ebaarchitects.org>
To: office@tworksystem.com
Subject: ***SPAM*** Need your assistance with a puzzling payment on my debit
	card - appreciate your insight
Date: Tue, 27 Feb 2024 15:38:55 -0800
MIME-Version: 1.0
Content-Type: multipart/alternative;
 boundary="2983ca7e0fcbe4cfec460fb014d0dad3f81e"
X-AntiAbuse: This header was added to track abuse,
 please include it with any abuse report
X-AntiAbuse: Primary Hostname - server237.web-hosting.com
X-AntiAbuse: Original Domain - tworksystem.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - ebaarchitects.org
X-Get-Message-Sender-Via: server237.web-hosting.com: authenticated_id:
 dev@ebaarchitects.org
X-Authenticated-Sender: server237.web-hosting.com: dev@ebaarchitects.org
X-Source: 
X-Source-Args: 
X-Source-Dir: 
X-From-Rewrite: unmodified, already matched
X-PPP-Message-ID: 
 <170907735206.3282475.11324101368489663755@thost1.tworksystem.com>
X-PPP-Vhost: tworksystem.com

--2983ca7e0fcbe4cfec460fb014d0dad3f81e
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

Hi,

I am writing to address a bizarre billing that I've noticed on my credit =
card, which appears to be linked to a transaction on your website.

This occurrence has caused me unease, especially since I do not recall ev=
er shopping on your service. I've already begun the query process with my=
 financial institution. It would be of great help if you could provide an=
y details you have about this billing, including specifics like the trans=
action number.

I have gathered extensive records, such as digital confirmations, to back=
 up my claim.

Looking forward to your prompt response on this matter.

--2983ca7e0fcbe4cfec460fb014d0dad3f81e
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

<html>
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dutf-8">
</head>
<body bgColor=3D"#ffffff">
<div align=3Dleft><font size=3D2 face=3DArial>Hi,</font></div>
<div>&nbsp;</div>
<div align=3Dleft><font size=3D2 face=3DArial>I am writing to address a b=
izarre billing that I've noticed on my credit card, which appears to be l=
inked to a transaction on your website.</font></div>
<div>&nbsp;</div>
<div align=3Dleft><font size=3D2 face=3DArial>This occurrence has caused =
me unease, especially since I do not recall ever shopping on your service=
. I've already begun the query process with my financial institution. It =
would be of great help if you could provide any details you have about th=
is billing, including specifics like the transaction number.</font></div>
<div>&nbsp;</div>
<div align=3Dleft><font size=3D2 face=3DArial>I have gathered extensive r=
ecords, such as digital confirmations, to back up my claim.</font></div>
<div>&nbsp;</div>
<div align=3Dleft><font size=3D2 face=3DArial>Looking forward to your pro=
mpt response on this matter.</font></div></body></html>

--2983ca7e0fcbe4cfec460fb014d0dad3f81e--

--E8B2A10404.1709077356/thost1.tworksystem.com--