OwlCyberSecurity - MANAGER
Edit File: 1709151453.M633066P2304693.server237.web-hosting.com,S=8071,W=8249
Return-Path: <> Delivered-To: dev@ebaarchitects.org Received: from server237.web-hosting.com by server237.web-hosting.com with LMTP id kDugJd2U32W1KiMA7Ypugw (envelope-from <>) for <dev@ebaarchitects.org>; Wed, 28 Feb 2024 15:17:33 -0500 Return-path: <> Envelope-to: dev@ebaarchitects.org Delivery-date: Wed, 28 Feb 2024 15:17:33 -0500 Received: from [45.94.157.118] (port=35752 helo=hqua0127710.online-vm.com) by server237.web-hosting.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96.1) id 1rfQMk-009jQA-0S for dev@ebaarchitects.org; Wed, 28 Feb 2024 15:17:33 -0500 Received: from exim by hqua0127710.online-vm.com with local (Exim 4.92.3) id 1rfQM4-0000YI-1n for dev@ebaarchitects.org; Wed, 28 Feb 2024 22:16:40 +0200 X-Failed-Recipients: zakaz_okshina@ukr.net Auto-Submitted: auto-replied From: Mail Delivery System <Mailer-Daemon@hqua0127710.online-vm.com> To: dev@ebaarchitects.org Content-Type: multipart/report; report-type=delivery-status; boundary=1709151400-eximdsn-1261153038 MIME-Version: 1.0 Subject: Mail delivery failed: returning message to sender Message-Id: <E1rfQM4-0000YI-1n@hqua0127710.online-vm.com> Date: Wed, 28 Feb 2024 22:16:40 +0200 X-Spam-Status: No, score=2.0 X-Spam-Score: 20 X-Spam-Bar: ++ X-Ham-Report: Spam detection software, running on the system "server237.web-hosting.com", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: This message was created automatically by mail delivery software. A message that you sent could not be delivered to one or more of its recipients. This is a permanent error. The following address(es) failed: Content analysis details: (2.0 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: ukr.net] 0.0 HTML_MESSAGE BODY: HTML included in message -0.0 T_SCC_BODY_TEXT_LINE No description available. 2.0 RDNS_NONE Delivered to internal network by a host with no rDNS 0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict Alignment X-Spam-Flag: NO --1709151400-eximdsn-1261153038 Content-type: text/plain; charset=us-ascii This message was created automatically by mail delivery software. A message that you sent could not be delivered to one or more of its recipients. This is a permanent error. The following address(es) failed: zakaz_okshina@ukr.net (generated from info@okshina.com) host mxs.ukr.net [212.42.75.251] SMTP error from remote mail server after RCPT TO:<zakaz_okshina@ukr.net>: 550 SPF match mandatory for 45.94.157.118 dev@ebaarchitects.org --1709151400-eximdsn-1261153038 Content-type: message/delivery-status Reporting-MTA: dns; hqua0127710.online-vm.com Action: failed Final-Recipient: rfc822;zakaz_okshina@ukr.net Status: 5.0.0 Remote-MTA: dns; mxs.ukr.net Diagnostic-Code: smtp; 550 SPF match mandatory for 45.94.157.118 dev@ebaarchitects.org --1709151400-eximdsn-1261153038 Content-type: message/rfc822 Return-path: <dev@ebaarchitects.org> Received: from server237-2.web-hosting.com ([199.188.200.108]) by hqua0127710.online-vm.com with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256) (Exim 4.92.3) (envelope-from <dev@ebaarchitects.org>) id 1rfQIO-0000Ly-Aj for info@okshina.com; Wed, 28 Feb 2024 22:12:52 +0200 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ebaarchitects.org; s=default; h=Content-Type:MIME-Version:Date:Subject:To: From:Reply-To:Message-ID:Sender:Cc:Content-Transfer-Encoding:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe: List-Subscribe:List-Post:List-Owner:List-Archive; bh=a4vdzgAjuyhVbQHAjInYCXyHao8I98MvEbNrIxZClTU=; b=R9AbUu444FxnpNnMN4TFuybODm cjUZKPZcBtHW7mAFEBucwzZe1Oczjwb8uIn4Jge4hlrgba2danPXHXdMysJzVi+80NjBKPAI8NUJ4 u5AKtHcuL7K58DPOsJLIgZDem3pL0wzAXQ3aPmhZVzS+zF+M7D7/UnGPbSxvmmfHq7Ob481xqwrLO hYSgzDuBng2Ww/lOguuVua9owNeZ9FnhdTTdVf2t7tEvWMR15YJqjaiD0jwXnKqCk7lu7Ke/Sghc+ xGzJxRBomRL4cPaHFFj+/gdQnjspL0kF198F5l/Ujr5Cn7cvJY1SpokaEK1hYlTPyLT549VPyKJU+ nRR7P1Ag==; Received: from vmi1404992.contaboserver.net ([173.249.40.102]:57792 helo=62.204.41.121) by server237.web-hosting.com with esmtpsa (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96.1) (envelope-from <dev@ebaarchitects.org>) id 1rfQIE-009fE6-1f for info@okshina.com; Wed, 28 Feb 2024 15:12:49 -0500 Message-ID: <8e7722ee1adec298bb145df602c6fec5e65517c718@ebaarchitects.org> Reply-To: Albert <a.kneller@sonibie.com> From: Albert <dev@ebaarchitects.org> To: info@okshina.com Subject: Unusual transaction through your e-commerce platform looking for assistance Date: Wed, 28 Feb 2024 12:10:04 -0800 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="2a2f66cd0f9ab0be9d377ed533c7edffc5ff12" X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - server237.web-hosting.com X-AntiAbuse: Original Domain - okshina.com X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - ebaarchitects.org X-Get-Message-Sender-Via: server237.web-hosting.com: authenticated_id: dev@ebaarchitects.org X-Authenticated-Sender: server237.web-hosting.com: dev@ebaarchitects.org X-Source: X-Source-Args: X-Source-Dir: X-From-Rewrite: unmodified, already matched --2a2f66cd0f9ab0be9d377ed533c7edffc5ff12 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable I'm sorry to have to contact you under these circumstances, but I have di= scovered an unauthorized transaction on my credit card, and it appears to= have been made on your website. I am deeply concerned about the security of my personal information, as I= have never made any purchase from your site. I have taken the necessary = steps to report this to my bank and have provided them with all the docum= entation I have to prove that I did not make this transaction. Please assist me in this investigation and provide me with any informatio= n, such as the transaction ID, that could help me to identify the source = of this problem. I look forward to hearing from you soon. --2a2f66cd0f9ab0be9d377ed533c7edffc5ff12 Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: quoted-printable <html> <head> <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dutf-8"> </head> <body bgColor=3D"#ffffff"> <div align=3Dleft><font size=3D2 face=3DArial>I'm sorry to have to contac= t you under these circumstances, but I have discovered an unauthorized tr= ansaction on my credit card, and it appears to have been made on your web= site.</font></div> <div> </div> <div align=3Dleft><font size=3D2 face=3DArial>I am deeply concerned about= the security of my personal information, as I have never made any purcha= se from your site. I have taken the necessary steps to report this to my = bank and have provided them with all the documentation I have to prove th= at I did not make this transaction.</font></div> <div> </div> <div align=3Dleft><font size=3D2 face=3DArial>Please assist me in this in= vestigation and provide me with any information, such as the transaction = ID, that could help me to identify the source of this problem.</font></di= v> <div> </div> <div align=3Dleft><font size=3D2 face=3DArial>I look forward to hearing f= rom you soon.</font></div></body></html> --2a2f66cd0f9ab0be9d377ed533c7edffc5ff12-- --1709151400-eximdsn-1261153038--