OwlCyberSecurity - MANAGER
Edit File: 1709137637.M521008P1341578.server237.web-hosting.com,S=10351,W=10575
Return-Path: <> Delivered-To: dev@ebaarchitects.org Received: from server237.web-hosting.com by server237.web-hosting.com with LMTP id 8FeZHuVe32WKeBQA7Ypugw (envelope-from <>) for <dev@ebaarchitects.org>; Wed, 28 Feb 2024 11:27:17 -0500 Return-path: <> Envelope-to: dev@ebaarchitects.org Delivery-date: Wed, 28 Feb 2024 11:27:17 -0500 Received: from ld324.inmotionhosting.com ([216.194.168.76]:40086) by server237.web-hosting.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96.1) id 1rfMlz-005rou-2Y for dev@ebaarchitects.org; Wed, 28 Feb 2024 11:27:17 -0500 Received: from mailnull by ld324.inmotionhosting.com with local (Exim 4.96.2) id 1rfMlK-007ko3-2o for dev@ebaarchitects.org; Wed, 28 Feb 2024 08:26:30 -0800 X-Failed-Recipients: docnurulhasan@gmail.com Auto-Submitted: auto-replied From: Mail Delivery System <Mailer-Daemon@ld324.inmotionhosting.com> To: dev@ebaarchitects.org References: <a26c258e70dcf6f8db71389373173d2a1f9da1@ebaarchitects.org> Content-Type: multipart/report; report-type=delivery-status; boundary=1709137590-eximdsn-1761501795 MIME-Version: 1.0 Subject: Mail delivery failed: returning message to sender Message-Id: <E1rfMlK-007ko3-2o@ld324.inmotionhosting.com> Date: Wed, 28 Feb 2024 08:26:30 -0800 X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - ld324.inmotionhosting.com X-AntiAbuse: Original Domain - ebaarchitects.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - X-Get-Message-Sender-Via: ld324.inmotionhosting.com: sender_ident via received_protocol == local: mailnull/primary_hostname/system user X-Authenticated-Sender: ld324.inmotionhosting.com: mailnull X-Source: X-Source-Args: X-Source-Dir: X-Spam-Status: No, score=0.0 X-Spam-Score: 0 X-Spam-Bar: / X-Ham-Report: Spam detection software, running on the system "server237.web-hosting.com", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: This message was created automatically by mail delivery software. A message that you sent could not be delivered to one or more of its recipients. This is a permanent error. The following address(es) failed: Content analysis details: (0.0 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: servconfig.com] 0.0 HTML_MESSAGE BODY: HTML included in message -0.0 T_SCC_BODY_TEXT_LINE No description available. 0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict Alignment X-Spam-Flag: NO --1709137590-eximdsn-1761501795 Content-type: text/plain; charset=us-ascii This message was created automatically by mail delivery software. A message that you sent could not be delivered to one or more of its recipients. This is a permanent error. The following address(es) failed: docnurulhasan@gmail.com (ultimately generated from admin_vn@doncomputing.com) host smtp.servconfig.com [23.235.223.127] SMTP error from remote mail server after end of data: 550 High probability of spam --1709137590-eximdsn-1761501795 Content-type: message/delivery-status Reporting-MTA: dns; ld324.inmotionhosting.com Action: failed Final-Recipient: rfc822;admin_vn@doncomputing.com Status: 5.0.0 Remote-MTA: dns; smtp.servconfig.com Diagnostic-Code: smtp; 550 High probability of spam --1709137590-eximdsn-1761501795 Content-type: message/rfc822 Return-path: <dev@ebaarchitects.org> Received: from server237-2.web-hosting.com ([199.188.200.108]:46147) by ld324.inmotionhosting.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96.2) (envelope-from <dev@ebaarchitects.org>) id 1rfMlF-007kgW-02 for admin_vn@doncomputing.com; Wed, 28 Feb 2024 08:26:27 -0800 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ebaarchitects.org; s=default; h=Content-Type:MIME-Version:Date:Subject:To: From:Reply-To:Message-ID:Sender:Cc:Content-Transfer-Encoding:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe: List-Subscribe:List-Post:List-Owner:List-Archive; bh=juwfh4vOAywdleadSQ7m4hSUVhdrOYlzklxyhqOzyvo=; b=PTApkGwsE4vWqpNM0EcKNhEcEU wU+pq91UGhZ0+rnpVwX6StNpQo2duNfzIrfNUY8evr7yyEr60/AnEX+Vz4RUEKLIJAujcFHxWFbo3 gg1TpmNLZXbKzVyMLQFVa9a6vGyci5dGadWYa2qlJIG8lk1S8GC2cZnQtd5xfgYK2V951b5rLlumv hQbmlwo2rWDY3eiU/q12V8Gkr5lBBWJTrsvyLKVHBNWT8mIH7Ee78e+7p0on6uSFf29OavZSSI95Y JopFvqCrGpvtFY+lmZj6MfXYI1+14aLdXTWup0A6VbWvdJyCzAHavLqRlvNBHHeX96Ucm7bk+b7KO UfxVSANQ==; Received: from [190.38.238.223] (port=35300 helo=62.204.41.113) by server237.web-hosting.com with esmtpsa (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96.1) (envelope-from <dev@ebaarchitects.org>) id 1rfMkz-005r0i-1d for admin_vn@doncomputing.com; Wed, 28 Feb 2024 11:26:23 -0500 Message-ID: <a26c258e70dcf6f8db71389373173d2a1f9da1@ebaarchitects.org> Reply-To: Albert <a.kneller@sonibie.com> From: Albert <dev@ebaarchitects.org> To: admin_vn@doncomputing.com Subject: Querying a unrecognized transaction on your platform - could you provide insight Date: Wed, 28 Feb 2024 08:23:26 -0800 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="00f5bc17e9456f6142e8a10aea8ea4b38890cf" X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - server237.web-hosting.com X-AntiAbuse: Original Domain - doncomputing.com X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - ebaarchitects.org X-Get-Message-Sender-Via: server237.web-hosting.com: authenticated_id: dev@ebaarchitects.org X-Authenticated-Sender: server237.web-hosting.com: dev@ebaarchitects.org X-Source: X-Source-Args: X-Source-Dir: X-From-Rewrite: unmodified, already matched X-Spam-Status: No, score=3.7 X-Spam-Score: 37 X-Spam-Bar: +++ X-Ham-Report: Spam detection software, running on the system "ld324.inmotionhosting.com", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Dear, I am writing to express my concern over a peculiar charge from my bank account that seems to have been processed through your online portal. I find myself distressed as I have no recollection of using services on your website. I've already taken steps to contest this withdrawal with my financial institution and would appreciate any detail [...] Content analysis details: (3.7 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 1.5 BAYES_60 BODY: Bayes spam probability is 60 to 80% [score: 0.6599] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: ebaarchitects.org] -0.0 SPF_PASS SPF: sender matches SPF record 2.4 RCVD_HELO_IP_MISMATCH Received: HELO and IP do not match, but should 0.0 HTML_MESSAGE BODY: HTML included in message -0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from envelope-from domain 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's domain -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature -0.0 T_SCC_BODY_TEXT_LINE No description available. X-Spam-Flag: NO --00f5bc17e9456f6142e8a10aea8ea4b38890cf Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Dear, I am writing to express my concern over a peculiar charge from my bank ac= count that seems to have been processed through your online portal. I find myself distressed as I have no recollection of using services on y= our website. I've already taken steps to contest this withdrawal with my = financial institution and would appreciate any detail you could provide, = especially the purchase ID. Your immediate attention to this query would be greatly valued. Many thanks, --00f5bc17e9456f6142e8a10aea8ea4b38890cf Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: quoted-printable <html> <head> <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dutf-8"> </head> <body bgColor=3D"#ffffff"> <div align=3Dleft><font size=3D2 face=3DArial>Dear,</font></div> <div> </div> <div align=3Dleft><font size=3D2 face=3DArial>I am writing to express my = concern over a peculiar charge from my bank account that seems to have be= en processed through your online portal.</font></div> <div> </div> <div align=3Dleft><font size=3D2 face=3DArial>I find myself distressed as= I have no recollection of using services on your website. I've already t= aken steps to contest this withdrawal with my financial institution and w= ould appreciate any detail you could provide, especially the purchase ID.= </font></div> <div> </div> <div align=3Dleft><font size=3D2 face=3DArial>Your immediate attention to= this query would be greatly valued.</font></div> <div> </div> <div align=3Dleft><font size=3D2 face=3DArial>Many thanks,</font></div></= body></html> --00f5bc17e9456f6142e8a10aea8ea4b38890cf-- --1709137590-eximdsn-1761501795--