OwlCyberSecurity - MANAGER

Edit File: 1709151709.M400513P2304693.server237.web-hosting.com,S=10001,W=10216

Envelope-to: dev@ebaarchitects.org
Delivery-date: Wed, 28 Feb 2024 15:21:49 -0500
Date: Wed, 28 Feb 2024 22:23:47 +0200 (EET)
From: MAILER-DAEMON@fragrances.bg (Mail Delivery System)
Subject: Undelivered Mail Returned to Sender
To: dev@ebaarchitects.org
Auto-Submitted: auto-replied
MIME-Version: 1.0
Content-Type: multipart/report; report-type=delivery-status;
	boundary="5B98D26C6560.1709151827/fragrances.bg"
Message-Id: <20240228202347.EB09E26C9F66@fragrances.bg>

This is a MIME-encapsulated message.

--5B98D26C6560.1709151827/fragrances.bg
Content-Description: Notification
Content-Type: text/plain; charset=us-ascii

This is the mail system at host fragrances.bg.

I'm sorry to have to inform you that your message could not
be delivered to one or more recipients. It's attached below.

For further assistance, please send mail to postmaster.

If you do so, please include this problem report. You can
delete your own text from the attached returned message.

The mail system

<atanasov.img@gmail.com> (expanded from <info@timedix.com>): host
    gmail-smtp-in.l.google.com[64.233.170.26] said: 550-5.7.25 [91.92.232.140]
    The IP address sending this message does not have a 550-5.7.25 PTR record
    setup, or the corresponding forward DNS entry does not 550-5.7.25 point to
    the sending IP. As a policy, Gmail does not accept messages 550-5.7.25 from
    IPs with missing PTR records. For more information, go to 550-5.7.25
    https://support.google.com/mail/answer/81126#ip-practices  550-5.7.25 To
    learn more about Gmail's sender policy, go to 550 5.7.25
    https://support.google.com/mail/answer/81126.
    k2-20020a636f02000000b005dc9bea610esi204708pgc.789 - gsmtp (in reply to end
    of DATA command)

--5B98D26C6560.1709151827/fragrances.bg
Content-Description: Delivery report
Content-Type: message/delivery-status

Reporting-MTA: dns; fragrances.bg
X-Postfix-Queue-ID: 5B98D26C6560
X-Postfix-Sender: rfc822; dev@ebaarchitects.org
Arrival-Date: Wed, 28 Feb 2024 22:23:42 +0200 (EET)

Final-Recipient: rfc822; atanasov.img@gmail.com
Original-Recipient: rfc822;info@timedix.com
Action: failed
Status: 5.7.25
Remote-MTA: dns; gmail-smtp-in.l.google.com
Diagnostic-Code: smtp; 550-5.7.25 [91.92.232.140] The IP address sending this
    message does not have a 550-5.7.25 PTR record setup, or the corresponding
    forward DNS entry does not 550-5.7.25 point to the sending IP. As a policy,
    Gmail does not accept messages 550-5.7.25 from IPs with missing PTR
    records. For more information, go to 550-5.7.25
    https://support.google.com/mail/answer/81126#ip-practices  550-5.7.25 To
    learn more about Gmail's sender policy, go to 550 5.7.25
    https://support.google.com/mail/answer/81126.
    k2-20020a636f02000000b005dc9bea610esi204708pgc.789 - gsmtp

--5B98D26C6560.1709151827/fragrances.bg
Content-Description: Undelivered Message
Content-Type: message/rfc822

Return-Path: <dev@ebaarchitects.org>
Received: by fragrances.bg (Postfix)
	id 5B98D26C6560; Wed, 28 Feb 2024 22:23:42 +0200 (EET)
Delivered-To: lyubomir-timedix.com@fragrances.bg
Received: by fragrances.bg (Postfix)
	id 519C526C9F64; Wed, 28 Feb 2024 22:23:41 +0200 (EET)
Delivered-To: info-timedix.com@fragrances.bg
Received: from server237-2.web-hosting.com (server237-2.web-hosting.com [199.188.200.108])
	by fragrances.bg (Postfix) with ESMTPS id D837726C6560
	for <info@timedix.com>; Wed, 28 Feb 2024 22:23:40 +0200 (EET)
DKIM-Filter: OpenDKIM Filter v2.11.0 fragrances.bg D837726C6560
Authentication-Results: fragrances.bg;
	dkim=pass (2048-bit key) header.d=ebaarchitects.org header.i=@ebaarchitects.org header.b="mAYUjyIi"
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
	d=ebaarchitects.org; s=default; h=Content-Type:MIME-Version:Date:Subject:To:
	From:Reply-To:Message-ID:Sender:Cc:Content-Transfer-Encoding:Content-ID:
	Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc
	:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:
	List-Subscribe:List-Post:List-Owner:List-Archive;
	bh=QD7lSVHZuQGTjk5slXiMl6w8TGOitXce3ZrJOdwmh8U=; b=mAYUjyIiBJ1pyG0DI4uTiw3BvF
	rcLzdKKyEG7UgYsvpPbP/dkUNqq5BONeywDP18vUdKPDxIjb3f+TH0655Azd/MrNxXsWUAqiVjzLM
	lFBiNXzrbV3yi6+2FgLR6SzD+p70zWCXNUrFL5sGgrf9vyBcEM//gtJMyFfY1C21KhG3cjs3CmIXZ
	DwsKsp3jTpKaA3ovInc49pCtHQ0qSc7y3eyP8rWtHdRoEamoJL/osh0SGRltKygKA8RT0NG9bOr/S
	uo28jFkwq72BkRcJZAnPsv77mPgMegacqQvxLYzz+3MOwR1zSYkEVJ/pjXYYyDvQpFvV2CZLU9ztM
	AY6VgZqw==;
Received: from vmi1404992.contaboserver.net ([173.249.40.102]:33092 helo=62.204.41.121)
	by server237.web-hosting.com with esmtpsa  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.96.1)
	(envelope-from <dev@ebaarchitects.org>)
	id 1rfQPl-009ljZ-1u
	for info@timedix.com;
	Wed, 28 Feb 2024 15:20:50 -0500
Message-ID: <aeb1c0db2febf682a10e47ec18dce4dffc4fd2108c@ebaarchitects.org>
Reply-To: Albert <a.kneller@sonibie.com>
From: Albert <dev@ebaarchitects.org>
To: info@timedix.com
Subject: Unknown transaction through your e-commerce platform looking for assistance
Date: Wed, 28 Feb 2024 12:18:12 -0800
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="2389c05cd7133c3714bef74e8a4e7d11b8d4"
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server237.web-hosting.com
X-AntiAbuse: Original Domain - timedix.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - ebaarchitects.org
X-Get-Message-Sender-Via: server237.web-hosting.com: authenticated_id: dev@ebaarchitects.org
X-Authenticated-Sender: server237.web-hosting.com: dev@ebaarchitects.org
X-Source: 
X-Source-Args: 
X-Source-Dir: 
X-From-Rewrite: unmodified, already matched

--2389c05cd7133c3714bef74e8a4e7d11b8d4
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

I'm sorry to have to contact you under these circumstances, but I have di=
scovered an unauthorized transaction on my credit card, and it appears to=
 have been made on your online store.

I am deeply concerned about the security of my personal information, as I=
 have never made any purchase from your site. I have taken the necessary =
steps to report this to my bank and have provided them with all the docum=
entation I have to prove that I did not make this transaction.

Please assist me in this investigation and provide me with any informatio=
n, such as the invoice number, that could help me to identify the source =
of this problem.

I look forward to hearing from you soon.

--2389c05cd7133c3714bef74e8a4e7d11b8d4
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

<html>
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dutf-8">
</head>
<body bgColor=3D"#ffffff">
<div align=3Dleft><font size=3D2 face=3DArial>I'm sorry to have to contac=
t you under these circumstances, but I have discovered an unauthorized tr=
ansaction on my credit card, and it appears to have been made on your onl=
ine store.</font></div>
<div>&nbsp;</div>
<div align=3Dleft><font size=3D2 face=3DArial>I am deeply concerned about=
 the security of my personal information, as I have never made any purcha=
se from your site. I have taken the necessary steps to report this to my =
bank and have provided them with all the documentation I have to prove th=
at I did not make this transaction.</font></div>
<div>&nbsp;</div>
<div align=3Dleft><font size=3D2 face=3DArial>Please assist me in this in=
vestigation and provide me with any information, such as the invoice numb=
er, that could help me to identify the source of this problem.</font></di=
v>
<div>&nbsp;</div>
<div align=3Dleft><font size=3D2 face=3DArial>I look forward to hearing f=
rom you soon.</font></div></body></html>

--2389c05cd7133c3714bef74e8a4e7d11b8d4--

--5B98D26C6560.1709151827/fragrances.bg--