HelioHost

See the video attached. We don't use PayPal in Nigeria. On Mon, Feb 16, 2026, 10:05?PM Nexim wrote: > yes please, it still took me to PayPal page. > > On Mon, Feb 16, 2026, 10:01?PM HelioHost Support > wrote: > >> You don't need a PayPal account to signup for a VPS. On the payment page >> have you tried clicking the button labeled "Debit or Credit Card"? >> >> You may view the status of your ticket by visiting: >> >> https://helionet.org/index/index.php?showtopic=66938 >> >> Thank you, >> HelioHost support >> https://heliohost.org/ >> https://helionet.org/ >> >>

yes please, it still took me to PayPal page. On Mon, Feb 16, 2026, 10:01?PM HelioHost Support wrote: > You don't need a PayPal account to signup for a VPS. On the payment page > have you tried clicking the button labeled "Debit or Credit Card"? > > You may view the status of your ticket by visiting: > > https://helionet.org/index/index.php?showtopic=66938 > > Thank you, > HelioHost support > https://heliohost.org/ > https://helionet.org/ > >

Username: c, Server: Johnny, Main domain: c.heliohost.us Dear Heliohost Support Team, I am writing to sincerely respond to your email regarding the suspected Terms of Service violation on my account, and to explain the specific situation in the hope of getting my account restored. First of all, I apologize for any trouble this incident has caused to your team's work. I am a student, and I registered my Heliohost account C (c.heliohost.us) through the school's public network environment a while ago. After successfully creating the account, I shared the Heliohost platform with my classmates because I found it very practical for our study and project practice. I guess it is highly possible that some of my classmates registered their own accounts using the same school network after seeing my share, which triggered the system's alert of abnormal registration/login under the same IP address. I want to clarify that I have only created one single account on Heliohost, and I have never maintained an account for others, nor have I violated your rule of one IP address for one registration by any means. I have carefully read your Terms of Service after receiving your email, and I fully understand and respect the rules you have formulated?especially as a non-profit organization relying on donations, the one-IP-one-account rule is crucial for ensuring fair resource allocation to all users, and I deeply appreciate the operation difficulties of your team. I earnestly request your team to review my situation and restore my account. I hereby make a solemn promise that I will strictly abide by all your Terms of Service in the follow-up use: I will not create any additional accounts without your prior permission, and I will also remind my classmates to pay attention to the registration rules when using the school network to avoid similar IP-related alerts from happening again. I know you require a response within 24 hours, and I have sent this email as soon as possible to confirm the situation. I sincerely hope to get your understanding and help, and I am willing to provide any additional information you may need for the review. Thank you very much for your time and consideration. Looking forward to your reply. Best regards, Account: C (c.heliohost.us) ???? ????HelioHost

Username: N/A, Server: N/A, Main Domain: N/A Gooday heliost. I'm trying to purchase a server from heliohost but don't have a PayPal account, please do you have another payment channel where I can use my card to make payment to ? Thank you.

Username: softhauz, Server: Morty, Main domain: softhauz.ca Here are the screenshots from Outlook client, in case it's useful [cid:9dc8229a-19df-41a8-a595-0c8d249deb02] ________________________________ From: Karen Urate Sent: Sunday, February 15, 2026 4:10 PM To: HelioHost Subject: targeted // Re: [HE ABUSE #6236027][65.19.154.94] complaint about message from 65.19.154.94 Hi, I have received it myself and did a bit of my own investigation. My address is being targeted and the real domain being used is your-email@yourdomain.com / your-email@yourowndomain.com. Outlook even shows my own email address on display, even when hovered --- the real address only shows when you hit REPLY. I'm already using Thunderbird and Outlook clients. My sent mails are monitored so the spams are confirmed not to come from my local ones. The last dated mail sent from karen.urate@softhauz.ca email was on January 19th. If it's showing otherwise from your end, it would most likely mean your server is compromised or the packets are continually hijacked ? I'm confident you can resolve this. All forwarding on all softhauz.ca emails have been disabled. I'll be looking into Gmail or other specialized email service to handle the softhauz.ca email in the future. For now, I will continue to use it as per need basis. Thank you, Karen U. ________________________________ From: HelioHost Sent: Sunday, February 15, 2026 9:14 AM To: softhauz@outlook.com ; karen.urate@outlook.com Subject: Fwd: [HE ABUSE #6236027][65.19.154.94] complaint about message from 65.19.154.94 Hello, It looks like you're forwarding emails from softhauz.com to your outlook.com email address. Unfortunately someone sent a phishing email to your softhauz.com email address and our Morty server forwarded it to outlook.com. Since outlook received the email from Morty we got the spam report. When people forward emails like this to gmail, outlook, yahoo, etc it negatively affects the reputation of our shared Morty IP meaning all of the emails sent from other Morty accounts also lose reputation which makes them more likely to get delivered to spam. Your email sending privileges have been revoked until you disable the forwarding. We recommend using a mail client like Thunderbird, or the webmail provided by Plesk at webmail.softhauz.com to connect directly to Morty and read the emails there rather than forwarding the spam elsewhere which ruins Morty's reputation. If the spam and phishing emails get delivered to Morty, but don't get forwarded anywhere then there is no reputation loss. If you don't need to send emails from softhauz.com we can just leave email sending disabled. HelioHost https://heliohost.org https://helionet.org ---------- Forwarded message --------- From: Date: Sat, Feb 14, 2026 at 11:13?PM Subject: [HE ABUSE #6236027][65.19.154.94] complaint about message from 65.19.154.94 To: We have received a complaint about your account. Please investigate and fix within 24 hours. Hurricane Electric Abuse Department support@he.net From staff@hotmail.com Sat Feb 14 21:13:13 2026 Return-Path: X-Original-To: report@abuse.he.net Delivered-To: report@abuse.he.net Received: from mail.he.net (mail.he.net [216.218.186.2]) by abuse.he.net (Postfix) with ESMTPS id 921221EA07F3 for ; Sat, 14 Feb 2026 21:13:11 -0800 (PST) Authentication-Results: abuse.he.net; dkim=pass reason="2048-bit key; insecure key" header.d=hotmail.com header.i=@hotmail.com header.b=IR13MwQc; dkim-adsp=pass; dkim-atps=neutral Authentication-Results: mail.he.net; dkim=pass (no signature error) header.i=@hotmail.com header.s=selector1 header.b=IR13MwQc; spf=pass (mail.he.net: domain of hotmail.com designates 52.103.7.21 as permitted sender) smtp.mailfrom=staff@hotmail.com smtp.helo=CY7PR03CU001.outbound.protection.outlook.com; arc=fail (missing parameter(s) in ARC seal data) smtp.remote-ip=52.103.7.21 X-ARC-Results: fail X-SPF-Results: pass Received-SPF: pass (mail.he.net: domain of hotmail.com designates 52.103.7.21 as permitted sender) client-ip=52.103.7.21; envelope-from=staff@hotmail.com; helo=CY7PR03CU001.outbound.protection.outlook.com; X-DKIM-Results: pass Received: from CY7PR03CU001.outbound.protection.outlook.com (mail-westcentralusazolkn19010021.outbound.protection.outlook.com [52.103.7.21]) by he.net with ESMTPS (TLS_AES_256_GCM_SHA384:TLSv1.3:Kx=any:Au=any:Enc=AESGCM(256):Mac=AEAD) for ; Sat, 14 Feb 2026 21:13:10 -0800 ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=Vt9G4u/7uAuH0jtJfDta7nxLrhRaW7la7FmOnFxGC/D0cFkcodNxH0rs4rGdY1RCBOKyTRC74p46V3ucvXbBC4zQRvjzjouD//6TOPC4seY6M6gnBCQ8hF8gbyC1FepYadmqioKLNsPVsEBEgAlpejtwrpguiAXY3oRdz2wybO2w8n4WF6P9tJPicN3PIIFcx7Wpla0wEIgw7+Q0tJe4QKxJss/xvUxgobi0yuh21tvPbdpDHXZQXVncnx66RfbaR7udLOGW0F4mRLtXSrBor1iCVF/Kp0rg7y0zpqE6C0RqqtECaEW+TuBMsbgOzDZ8uQuqwsw8CvE2C7IJ8Kryiw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=aFd1o0RqqIS807nWastVjv7qOWxuEoGznQq3wdV+YxA=; b=iu90WVZR1gGgDoqe6m/M5V3Jl8sYfqUM/MHTDjq2gh/Xl0Z0VPjpYeoDjuwhWSH0ke9WI9XxhcC7FhhULzacqEpk0Ahfuq4pmpoU0A9rRHBVUm6svXVUWYYpmnO3kv5oCe/FYUprWqPoHydFUojzXBP2KsplOQLOmj/03gHvbD7DqP5Ffm+kcbWHIPXZN8wOIXZtlpPUVXSJqgXK0Q4VcxFOjE23pLTrltVxQ3QT1sBy3oFRkVGSsqK/V4vgGpN6gb16lLGE3ltJJShyc++b6lp2sFu9ddBV0ALgqfzTqEy3UfF79EDhb8O62N5foTyrC8a3hwvf9yLVj8x5Z6Qrfw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none; dkim=none; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=aFd1o0RqqIS807nWastVjv7qOWxuEoGznQq3wdV+YxA=; b=IR13MwQcpUT+bJZ4PDpdAL/tpdjznVG/VK2L0FqJqDkvHnPSccnIoBhsrr7dn6PTVVj//mY3kVtrr3e5V8vvNfdOXvINb+PmYNJUqyHuYySFHfO6hYNgssVcPMF6IUK3pFm2XFOsmfpcbKbcOZ1e1EYD5AnFmiz+uY9LC7NdWmQCxuKz408RTYx2FPmdH7uvuzv8mnGU5RrWMa/czImmxnlVslKDMRAy4Hkm/Cr/lN8o3EJeTvef/zs7cTWOjlTJZd8fLarIu8vxEYOP3MkM46m0n7322x54exuHOfeOX9I+BrhvPn4ylqzQHC5Yg7IW5lTX5T0K48MYHc/O1bisGA== Received: from SN6PR05CA0034.namprd05.prod.outlook.com (2603:10b6:805:de::47) by IA1PR05MB10288.namprd05.prod.outlook.com (2603:10b6:208:44d::22) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9611.15; Sun, 15 Feb 2026 05:13:03 +0000 Received: from SA2PEPF00001507.namprd04.prod.outlook.com (2603:10b6:805:de:cafe::1e) by SN6PR05CA0034.outlook.office365.com (2603:10b6:805:de::47) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.20.9632.11 via Frontend Transport; Sun, 15 Feb 2026 05:13:04 +0000 Received: from DM5SVC01SF056 (40.107.211.126) by SA2PEPF00001507.mail.protection.outlook.com (10.167.242.39) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9632.12 via Frontend Transport; Sun, 15 Feb 2026 05:13:03 +0000 X-IncomingTopHeaderMarker: OriginalChecksum:D11D7AF2C91409D15AEA63C36DA491BC8A8F84C98C23F7863C81DE4B3AE1DA6D;UpperCasedChecksum:3349511D7D21229FC4B14056C3540AA6F458B1BA6739D64D889A18B9A867D0D4;SizeAsReceived:242;Count:6 Date: Sun, 15 Feb 2026 05:13:00 +0000 From: Subject: complaint about message from 65.19.154.94 To: MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="7A1671CA-C394-4D1D-AF56-E1FD206A9E39" X-IncomingHeaderCount: 6 Message-ID: X-EOPAttributedMessage: 0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: SA2PEPF00001507:EE_|IA1PR05MB10288:EE_ X-MS-Office365-Filtering-Correlation-Id: b48b8fec-4f03-48a5-15cd-08de6c50e58e X-Microsoft-Antispam: BCL:0;ARA:14566002|1290799033|8022599003|6092099016|19110799012|461199028|20055399003|3412199025|440099028|26115399003; X-Microsoft-Antispam-Message-Info: =?us-ascii?Q?4aCqi5JpnR/nQ5gfnVkBM8TV4TlbH1zHDzYDs7yPJ70wTaxwaWmhcJBwvkqT?= =?us-ascii?Q?40ZFyYgsPcp/XMIRhlOdNRF6JxjZQmBvCrkHmn/8qf4nWcFE5ha5TLnqwLPl?= =?us-ascii?Q?fZKswXBSan1LJI27G3LGz9Df/pPE/FpqGzTiPkXpTZ2w6/ALTV7WFOtXCB6T?= =?us-ascii?Q?hCDqz/3SkWINIU6G+ou0bYEMCOLQG/knrlNlTN6v9CuclfOZzLx95qcmiq+W?= =?us-ascii?Q?IQf3rCj92Rlb/pMbxkQCm6ehYBmPoEfPGabw1gzcu0N9J9YnJkJsc/5KGoEf?= =?us-ascii?Q?RVktDhq1tCcuzdGCTxdt4fbCJsdaXc37dZjDvujWjfxbmsT1im83Z4CwdjTL?= =?us-ascii?Q?wHnsuvI0p4LPeLXsWEBvlYy0Ol3YKBi/OMs3K+4WyxquJYAAS2i++VNRWEp6?= =?us-ascii?Q?+G4p3Wf1opxSeG1Njm9xIFzenprQHgno75vRAZiM45dwPzszh9hJNG9+WShA?= =?us-ascii?Q?b9bfAifmUAZMvMykyOlYiRCeXJW+1xbS+Tijn/0Q3+DPxHl4n9XSZu336Ztp?= =?us-ascii?Q?mWtphuVCktIeZqntgKF55uhVeUJDV5mm9nFLQZgkyGKP1FNsfW1zFdQtEV/b?= =?us-ascii?Q?cpTaooZtDLB1YnX6++1TTuBRNBi344E37BphZHQrha5w6dMj4sJur0hRsMby?= =?us-ascii?Q?90MjK88uN2+/jXUOvci52HXlC12plaGy7Bi76ECO3yFNwuNVusT7+k0AgtFq?= =?us-ascii?Q?rj445YmNMSsavFMhyJ3QYTRWQdXmelKtwJdpvWQnlm7yfubtOfw3dupUB2Kq?= =?us-ascii?Q?5Y+z90Yi290PDTWp1FbUH8SGZrPFkKGuLCFqjhuHRjXZTxgMjt9iLyZvjDLo?= =?us-ascii?Q?jKPIsASg4d8x8QE25oLnf0VqHv5JqKfd4feDXKKN1Z6IyUkEmmCov7p8wn09?= =?us-ascii?Q?w/1mr4f29aHJd5D0Gnqq0qamFn8wT+3yvURtqMXLW3tDhqYMxWPVkOy4xPSa?= =?us-ascii?Q?mx97Epu/oPqhzp/xJJHQWSFcFw9veNNiH73xMsYbjQ4k9a2qlvUL8oIrUXUL?= =?us-ascii?Q?/Al8Oy7MJy3n27xvO945ybD4BgulIAPULiFbAOLKOaBXnmPt49CgBKBHovF7?= =?us-ascii?Q?5xgVRze12tGu3gaMlCBbAk5YvvIukU9SfUX5sDEE1h7icH48dxEe1D70WdBh?= =?us-ascii?Q?rEvEWt637hklWvJHXtq2Eja/vOTslQ2t3Nq6KryCdPKKZWIXQZTb2jAcnkv5?= =?us-ascii?Q?TVuYWXsNCMJONlt1+i502tt0AhxuQheOg3qLh+3G0ubbJS+rtZUnbaJAi3qq?= =?us-ascii?Q?K1Io3i15SKwNC29Cy/7ykSZyqGtFQZo51rNpp2D9EqrJx8UCgLWK9nKrlhwj?= =?us-ascii?Q?rTGeH975KGs7Qhlff64Ec72AFb3amlHUROpmRSR1Q8ALqkauSMhFRmG5Kekx?= =?us-ascii?Q?Q0EzOcOCx8gHBkbraZ+BuCxk2Ws4hDO7KcxmXrBJOwnvLvNOntcCAaVS41LH?= =?us-ascii?Q?JlzHwHEalJHcnBfaLRSkbjfk1OD/bcGKVLXHhK+zdhOaDzXNdo4o9uis9RdC?= =?us-ascii?Q?hLBGqpU+vf8dQ0g=3D?= X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: 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 X-OriginatorOrg: sct-15-20-9343-9-msonline-outlook-c6799.templateTenant X-MS-Exchange-CrossTenant-OriginalArrivalTime: 15 Feb 2026 05:13:03.6950 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: b48b8fec-4f03-48a5-15cd-08de6c50e58e X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa X-MS-Exchange-CrossTenant-AuthSource: SA2PEPF00001507.namprd04.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: Internet X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000 X-MS-Exchange-Transport-CrossTenantHeadersStamped: IA1PR05MB10288 --7A1671CA-C394-4D1D-AF56-E1FD206A9E39 Content-Type: message/rfc822 Content-Disposition: inline X-HmXmrOriginalRecipient: X-MS-Exchange-EOPDirect: true Received: from DS7PR05MB7447.namprd05.prod.outlook.com (::1) by DM6PR05MB6282.namprd05.prod.outlook.com with HTTPS; Fri, 13 Feb 2026 15:04:44 +0000 Received: from BYAPR08CA0018.namprd08.prod.outlook.com (2603:10b6:a03:100::31) by DS7PR05MB7447.namprd05.prod.outlook.com (2603:10b6:5:2ce::17) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9611.14; Fri, 13 Feb 2026 15:04:42 +0000 Received: from MWH0EPF000989E7.namprd02.prod.outlook.com (2603:10b6:a03:100:cafe::de) by BYAPR08CA0018.outlook.office365.com (2603:10b6:a03:100::31) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.20.9611.12 via Frontend Transport; Fri, 13 Feb 2026 15:04:40 +0000 Authentication-Results: spf=none (sender IP is 65.19.154.94) smtp.mailfrom=softhauz.ca; dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=softhauz.ca;compauth=pass reason=105 Received-SPF: None (protection.outlook.com: softhauz.ca does not designate permitted sender hosts) Received: from morty.heliohost.org (65.19.154.94) by MWH0EPF000989E7.mail.protection.outlook.com (10.167.241.134) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.20.9611.8 via Frontend Transport; Fri, 13 Feb 2026 15:04:42 +0000 X-IncomingTopHeaderMarker: OriginalChecksum:E3A097D271ACD16B418E79A1DE39BF260DADB0A4A56C3F1EC1DED14F0410A668;UpperCasedChecksum:906A70BB6A35FDDB24BD2EF79B6E42142BD9F602FE04517F97AF77E0344E9511;SizeAsReceived:2576;Count:22 Received: by morty.heliohost.org (Postfix, from userid 30) id 0F4226011276; Fri, 13 Feb 2026 15:04:42 +0000 (UTC) From: SRS0=crEn=AR=mejuri.com=contact@softhauz.ca X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on morty.heliohost.org X-Spam-Flag: YES X-Spam-Level: ******** X-Spam-Status: Yes, score=8.6 required=7.0 tests=FROM_ADDR_WS,RCVD_IN_SBL_CSS, RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED, RCVD_IN_XBL,RDNS_NONE,SPF_HELO_NONE,SPF_NONE autolearn=no autolearn_force=no version=3.4.6 X-Spam-Report: * 0.7 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL * [46.185.128.173 listed in zen.spamhaus.org] * 3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS * 0.0 SPF_HELO_NONE SPF: HELO does not publish an SPF Record * 0.0 SPF_NONE SPF: sender does not publish an SPF Record * 0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The * query to Validity was blocked. See * https://knowledge.validity.com/hc/en-us/articles/20961730681243 * for more information. * [46.185.128.173 listed in sa-trusted.bondedsender.org] * 0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The * query to Validity was blocked. See * https://knowledge.validity.com/hc/en-us/articles/20961730681243 * for more information. * [46.185.128.173 listed in bl.score.senderscore.com] * 1.3 RDNS_NONE Delivered to internal network by a host with no rDNS * 3.0 FROM_ADDR_WS Malformed From address X-Original-To: karen.urate@softhauz.ca Delivered-To: karen.urate@softhauz.ca Received: from mejuri.com (unknown [46.185.128.173]) by morty.heliohost.org (Postfix) with ESMTP id 4755E6011269 for ; Fri, 13 Feb 2026 15:04:40 +0000 (UTC) Authentication-Results-Original: morty.heliohost.org; spf=fail (sender IP is 46.185.128.173) smtp.mailfrom=contact@mejuri.com smtp.helo=mejuri.com Received-SPF: fail (morty.heliohost.org: domain of mejuri.com does not designate 46.185.128.173 as permitted sender) client-ip=46.185.128.173; envelope-from=contact@mejuri.com; helo=mejuri.com; To: karen.urate@softhauz.ca Subject: ***SPAM*** Wire Invoice Transfer Date: 13 Feb 2026 18:04:31 +0300 Message-ID: Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable X-Spam-Prev-Subject: Wire Invoice Transfer X-PPP-Message-ID: X-PPP-Vhost: softhauz.ca X-IncomingHeaderCount: 22 Return-Path: SRS0=crEn=AR=mejuri.com=contact@softhauz.ca X-MS-Exchange-Organization-ExpirationStartTime: 13 Feb 2026 15:04:42.3666 (UTC) X-MS-Exchange-Organization-ExpirationStartTimeReason: OriginalSubmit X-MS-Exchange-Organization-ExpirationInterval: 1:00:00:00.0000000 X-MS-Exchange-Organization-ExpirationIntervalReason: OriginalSubmit X-MS-Exchange-Organization-Network-Message-Id: 90210053-ef74-4e99-14ed-08de6b11378b X-EOPAttributedMessage: 0 X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa:0 X-MS-Exchange-Organization-MessageDirectionality: Incoming X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: MWH0EPF000989E7:EE_|DS7PR05MB7447:EE_|DM6PR05MB6282:EE_ X-MS-Exchange-Organization-AuthSource: MWH0EPF000989E7.namprd02.prod.outlook.com X-MS-Exchange-Organization-AuthAs: Anonymous X-MS-UserLastLogonTime: 2/13/2026 3:01:10 PM X-MS-Office365-Filtering-Correlation-Id: 90210053-ef74-4e99-14ed-08de6b11378b X-MS-Exchange-EOPDirect: true X-Sender-IP: 65.19.154.94 X-SID-PRA: SRS0=CREN=AR=MEJURI.COM=CONTACT@SOFTHAUZ.CA X-SID-Result: NONE X-MS-Exchange-AtpMessageProperties: SA|SL X-MS-Exchange-Organization-SCL: 9 X-Microsoft-Antispam: BCL:0;ARA:1444111002|6120799021|20103052907095|20103052905119|84100799003|13020799006|2700799029|34130799006|32080799006|970799060|461199028|20103052903057|20103052901057|21090799003|22090799003|47200799024|58200799021|20103052916048|20103052902057|20103052906057|20103052914048|20103052904057|20103052908033|5070799012|17110799012|440099028|3412199025|6022199012|26104999006|22062799003|74000799027; X-MS-Exchange-CrossTenant-OriginalArrivalTime: 13 Feb 2026 15:04:42.2785 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 90210053-ef74-4e99-14ed-08de6b11378b X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa X-MS-Exchange-CrossTenant-AuthSource: MWH0EPF000989E7.namprd02.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: Internet X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000 X-MS-Exchange-Transport-CrossTenantHeadersStamped: DS7PR05MB7447 X-MS-Exchange-Transport-EndToEndLatency: 00:00:02.6646403 X-MS-Exchange-Processed-By-BccFoldering: 15.20.9611.001 X-Microsoft-Antispam-Mailbox-Delivery: rwl:1;ucf:0;jmr:0;ex:0;psp:0;auth:0;dest:I;OFR:TrustedRecipientList;ENG:(5062000311)(920221119095)(90000117)(920221120095)(90005022)(91005020)(91035115)(9050020)(9100341)(944500132)(2008001181)(2008121020)(4810010)(4910033)(10005027)(9810001)(9610028)(9515023)(10112040)(9404095)(9310011)(9220031)(120001)(1110175); X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0wO0Q9MTtHRD0xO1NDTD0tMQ== X-Microsoft-Antispam-Message-Info: =?us-ascii?Q?9wk6LR9cFQGaDDlIB5yWQwg+Ke1JZZMBdAZICN8x+pvfSD9pwMm3TYoT4DDE?= =?us-ascii?Q?FFfe8o1bL0iDbTAaOZSBNwOvSOL4y7IeyYZBFx+4HXDs2BfqUMdItFAlUSNJ?= =?us-ascii?Q?2l8TRu6DpFkAbT53zAIxrqWrhqKiKiuvXrrXhUcJg5LdQzTUOSsF3CrjlglT?= =?us-ascii?Q?qzMDbXtKGnYRcNfGnFjpGnVLdGJfwaatIP1qpXorLrHdZl0ZnWHHgFozChh/?= =?us-ascii?Q?HVLhMnS9CEI+Ds4RE5vDuc5taIZ8ia/KKWZgWebqk46WHSqupD92kDA0VN+D?= =?us-ascii?Q?FKvTUZbUo+5g3EJbqXpHIwijLPS/L1I48AggfB8RCqEV9YXqtJoaYOjd3ZBc?= =?us-ascii?Q?atY6+iGkijKhoasRsgYStu9mgBwBV82BiSMrPtTu3GbwIXIA7oeR6o6V8lDq?= =?us-ascii?Q?iNvCEPTO1lDJmnBqIUcbkODnlj2m2YFUebXIRssL2DAHaRgn4Q8xi/ZTzwQI?= =?us-ascii?Q?tFPqYcio6zEovoIXgLMdzbSRe3ZRQOsvWjbRMlXWvYVKAnrz4sK2yPZUo1Lq?= =?us-ascii?Q?IUnekTN7SRT706UWnMPTAFbZ9M+mKPAqKAhu005g9J+jBDWLwtoSG4Flw6Q/?= =?us-ascii?Q?v0zUEV27NNHESnITneZaYCJnqG2L/G1A0ozZnW7ObqyX0qy4OW06861qhC+/?= =?us-ascii?Q?4qLHRib9vAc9UM4ILymsC/G8KyCiWcA6GNmJ7hZGAs0Fu8+agvGcsu7vnQG4?= =?us-ascii?Q?TxbIijOWxagnCmKGYF7woTG/l4GV5OWzu/XSOJaaU9DpvpTTS/zmcFCb4YMB?= =?us-ascii?Q?zWrKKFWG69O3ZtbscS7GVjfjY/bPaD+1cCSvadBYuZlRNe7cPN3xEP6pbckR?= =?us-ascii?Q?N35nNr5v0Ne4ApO77X9aNaeik0d/sw1ptGY8NI/0c9eKKW3glesbIjINnaNS?= =?us-ascii?Q?G56XsfRbPJMcI5G+mrgnLdORDsvThflnu3+N1XHgl0hMU+SGO44wN51MEc/8?= =?us-ascii?Q?dCsEmmnfpJzVTIzmQvSrB7282A8pJRBDdOHUFTi5ezmYCZKEbMYAhd1As1Uk?= =?us-ascii?Q?e7G9x5sQwZsRxS8Ou7jjQFWkji4I1GQxhUxuH8Sb5tBG6ErwrCOy4XALyksV?= =?us-ascii?Q?U2jMSUXUpte89uFcGY4IM6BQ2xgKoJEZ8c2Vr8AhcPyUMIxdlh+G9lS1szen?= =?us-ascii?Q?A4CL1PlGrSoKKDtVrl0oYki8hV9sVRE1jglLn138Orh9Ft6Is+2aahftwKNS?= =?us-ascii?Q?bK4bsheHMtEBoUDL8p8i8gagBVOB2i+zSP+P8vZIxGw+LUwG6uGjAa7B55dl?= =?us-ascii?Q?qqleODPe5Iw3x0p7RGc3f5vz2mF+/ntaHo5QCrDMvEahKKWj2b0g/yeQ1Lft?= =?us-ascii?Q?55SDMujULCnWr9PEDjLo4oqISfih+NiasVPdC7gRZMlRHIBzRVruLAUgk9Z4?= =?us-ascii?Q?rfKlWjYh1EW90sHw/ygh0Aa1UvXgJ/03b+klVbSnRS85G7MnPgzGgI4V2Wkc?= =?us-ascii?Q?qeyMhYHHeWufb9VPlJbvDIB5VTBPlJIl2WOY2Zd4/V3DJNAzCXJaE4E/Qh6/?= =?us-ascii?Q?Ngh5BlMa1PsyZOivoZGJ+cdUztGXJrjhdPh/c2So8eeXgz3eBVvDUcEsdxwK?= =?us-ascii?Q?mUWO2lb/SreHp/ajeinqgpYYG0ruzhnHbkWzNuitYGqKNk6ZDD9gdycHkNQr?= =?us-ascii?Q?QocUjmajpiqyYwjv5/GtUSBaDOv4EgUDDvwQjD7anoWMUq1Wl+SIKn6RXAH2?= =?us-ascii?Q?dRNBro3ahnOYZm4hW9fJM5mL59kkGewIOGRGJuEltRJewbnI17rCvFBuRIG2?= =?us-ascii?Q?uiDvcIOTmsfvlj15qTVBiC8knlPRlfNSTtt6UyE+QXs7OiKl7dX+ORGYx4sB?= =?us-ascii?Q?ku/0CstBAP8xFkxU36XPoNb4XFhUExsoDIf6abwvs3AbCGhhKsBgxd+1Nasw?= =?us-ascii?Q?dzCwcht/EyyZPD4pJyG2ROSykislj6SYO169cMgglasDTkcXCYWFYYWUEDZ4?= =?us-ascii?Q?NDwSHrI0xQ/PtS7sD0gVF37OFoEw7Vgu1fYfIuA3kkYoZty+dehWmXm9bfVb?= =?us-ascii?Q?wD9uxjHf2I9xsCgi2JEFlsBewqFaBNIwvst0bfNoEDM8dVYJxas/pSkfYzGp?= =?us-ascii?Q?r0C5vwZyXdnf+ZufSMlVYC3lFeUaWamr2198V73w1V06VHFyzJARc9T+Dh6u?= =?us-ascii?Q?3Z1Hnq5hgk1pXV5Vs+jlh+08Qws01gbtWZoN+a9UjYFz4cPoJj9CUPXZzREN?= =?us-ascii?Q?4Id0A8sUjmi/0UwS48yEjRc6UsIPLdmywEfX8ZW7j6v/zXAZoLG8enTf+5nC?= =?us-ascii?Q?7lHdrO9i/+pL5uZTexyJnK7c6Wgpyld9swzie8ugbT8V4FLT5ARbFAFj2duW?= =?us-ascii?Q?5YsPGGIScyP1+Fe+4QjoQ5kNh+kYHlKmcpw1GjFnR+/z+hQUsBtOvOIAH21p?= =?us-ascii?Q?mrOzfAZgw518DUVfetuWyLHphXEXDJpvL8FwZseT6ihsRA0AzyNQaqlLjxra?= =?us-ascii?Q?2/v7PM422cVCgA67r/JMkSddIo/WBWQGMAn0ivw3ykCMYgW+8fM3QLtJSNvj?= =?us-ascii?Q?y+n4A7ds+tU/7Lh5xMAxl+89/hq1M2u6E3y6RcxGy92a6eLTVgoSo+fZ5kgY?= =?us-ascii?Q?yd7eD7pcx1zakt9vJi2zZo+jLjbKRKUPoQa4HsAEfV5phUrY3gT+Umf/QkMJ?= =?us-ascii?Q?XWlEKzkZ8N7NtPflbe5eEPQEXK7nZD69XecxtPgiaU5MDNb+rRttz66pNpdR?= =?us-ascii?Q?zv/TogIQEblg17z+zDUsiucBvtyVULBb8bdfdAoBWRZON36XEOAEHhXIW/Qq?= =?us-ascii?Q?hkP23VOkPwnzgRjFu3t2FvIf7rarJWqc95+CcVoi+Cjy0FcXxUGAFkmat6xL?= =?us-ascii?Q?V1BkX9i3FROCtL4K3H9H3OpiLO1nmUNci/RjIlNp6HFu1U/7u7v7wwa5HKrF?= =?us-ascii?Q?poFhJlNsk+yI5kgc8eKzTp5gpsH/W9EBK/Ir27YinOt4yUIFdCcHiZ2XgoeC?= =?us-ascii?Q?6T+a51HgqOf7+SWKFj4cS8x6o3kFgQvU60hwanqOpuDyUd5vy05PpPlXqjOs?= =?us-ascii?Q?IpgUeqjKmlvB33G1SB2DD9fIP1xDX9Sz9szVv3fJt25xq6tRuPrdVhHt7AY+?= =?us-ascii?Q?a3PGmppUEDFC+93XToCrDKYcvVEho7stDwaqSi3GbhhOph2YUu4Is21MlBGh?= =?us-ascii?Q?cchkvczgeWugyYpHxlC2rQQ+ljutsD+cPEHRpNbcnJ+x3x8aA/PN94TJcyGC?= =?us-ascii?Q?p7Fy+9dZhsRvRRhgJeKN/vViF2+0cmU21tLIf6Mx34uJk7iKoMskpezl3wH5?= =?us-ascii?Q?0y4YOicTbMJmJRgymN0SciwfLRLrz+3tC97PPMmLoJ3IrX67l1FcvuYtdVln?= =?us-ascii?Q?T9OoFKk8MwK1EnoUiWOiGnlKo4bafKTHO6000Mf8H/pJM57Swr6KwbR57Q1W?= =?us-ascii?Q?6j5zPqNUuwnEcjgiXt9nXdGRogqe1QIWvqC2wfWcgq7uFcxbHQtoB7uKGXL3?= =?us-ascii?Q?HY7eYUSmTtB2wnUUt6cFQ0g2DCGVzZ7nyj0bsJYb8XDFQawpW7uz9JdeDFUr?= =?us-ascii?Q?6mXbTIJDKOL3QDe8yDhXu73p9vTrYKdX2TymaFsMkUKTP/zyiapOG6tWofTk?= =?us-ascii?Q?nhTpDJCOhDG8O3/cvz3SPO/kMvjKOAz41JsALxV2?= MIME-Version: 1.0 Dear , Please click the link below to view wire transfer copy https://na01.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Fwatchpro= tectionfilms.com%2FWire_transfer.msi&data=3D05%7C02%7C%7C90210053ef744e9914= ed08de6b11378b%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C639065918852016= 368%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlA= iOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=3DiDyPB65G= BP4vvNL3aGMXtbQK1akZP6SVt9Hrsz%2BoYNc%3D&reserved=3D0 Your business is greatly appreciated. Ampak Sportswear Inc=20 8253 Backlick Road Ste B Lorton, Va 22079 phone:(703)861-5210 Website: AMPAKSPORTSWEAR.COM=20 --_002_JMR90210053ef744e9914ed08de6b11378bJunk6390672917730362_-- --7A1671CA-C394-4D1D-AF56-E1FD206A9E39--

Username: softhauz, Server: Morty, Main domain: softhauz.ca Hi, I have received it myself and did a bit of my own investigation. My address is being targeted and the real domain being used is your-email@yourdomain.com / your-email@yourowndomain.com. Outlook even shows my own email address on display, even when hovered --- the real address only shows when you hit REPLY. I'm already using Thunderbird and Outlook clients. My sent mails are monitored so the spams are confirmed not to come from my local ones. The last dated mail sent from karen.urate@softhauz.ca email was on January 19th. If it's showing otherwise from your end, it would most likely mean your server is compromised or the packets are continually hijacked ? I'm confident you can resolve this. All forwarding on all softhauz.ca emails have been disabled. I'll be looking into Gmail or other specialized email service to handle the softhauz.ca email in the future. For now, I will continue to use it as per need basis. Thank you, Karen U. ________________________________ From: HelioHost Sent: Sunday, February 15, 2026 9:14 AM To: softhauz@outlook.com ; karen.urate@outlook.com Subject: Fwd: [HE ABUSE #6236027][65.19.154.94] complaint about message from 65.19.154.94 Hello, It looks like you're forwarding emails from softhauz.com to your outlook.com email address. Unfortunately someone sent a phishing email to your softhauz.com email address and our Morty server forwarded it to outlook.com. Since outlook received the email from Morty we got the spam report. When people forward emails like this to gmail, outlook, yahoo, etc it negatively affects the reputation of our shared Morty IP meaning all of the emails sent from other Morty accounts also lose reputation which makes them more likely to get delivered to spam. Your email sending privileges have been revoked until you disable the forwarding. We recommend using a mail client like Thunderbird, or the webmail provided by Plesk at webmail.softhauz.com to connect directly to Morty and read the emails there rather than forwarding the spam elsewhere which ruins Morty's reputation. If the spam and phishing emails get delivered to Morty, but don't get forwarded anywhere then there is no reputation loss. If you don't need to send emails from softhauz.com we can just leave email sending disabled. HelioHost https://heliohost.org https://helionet.org ---------- Forwarded message --------- From: Date: Sat, Feb 14, 2026 at 11:13?PM Subject: [HE ABUSE #6236027][65.19.154.94] complaint about message from 65.19.154.94 To: We have received a complaint about your account. Please investigate and fix within 24 hours. Hurricane Electric Abuse Department support@he.net From staff@hotmail.com Sat Feb 14 21:13:13 2026 Return-Path: X-Original-To: report@abuse.he.net Delivered-To: report@abuse.he.net Received: from mail.he.net (mail.he.net [216.218.186.2]) by abuse.he.net (Postfix) with ESMTPS id 921221EA07F3 for ; Sat, 14 Feb 2026 21:13:11 -0800 (PST) Authentication-Results: abuse.he.net; dkim=pass reason="2048-bit key; insecure key" header.d=hotmail.com header.i=@hotmail.com header.b=IR13MwQc; dkim-adsp=pass; dkim-atps=neutral Authentication-Results: mail.he.net; dkim=pass (no signature error) header.i=@hotmail.com header.s=selector1 header.b=IR13MwQc; spf=pass (mail.he.net: domain of hotmail.com designates 52.103.7.21 as permitted sender) smtp.mailfrom=staff@hotmail.com smtp.helo=CY7PR03CU001.outbound.protection.outlook.com; arc=fail (missing parameter(s) in ARC seal data) smtp.remote-ip=52.103.7.21 X-ARC-Results: fail X-SPF-Results: pass Received-SPF: pass (mail.he.net: domain of hotmail.com designates 52.103.7.21 as permitted sender) client-ip=52.103.7.21; envelope-from=staff@hotmail.com; helo=CY7PR03CU001.outbound.protection.outlook.com; X-DKIM-Results: pass Received: from CY7PR03CU001.outbound.protection.outlook.com (mail-westcentralusazolkn19010021.outbound.protection.outlook.com [52.103.7.21]) by he.net with ESMTPS (TLS_AES_256_GCM_SHA384:TLSv1.3:Kx=any:Au=any:Enc=AESGCM(256):Mac=AEAD) for ; Sat, 14 Feb 2026 21:13:10 -0800 ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=Vt9G4u/7uAuH0jtJfDta7nxLrhRaW7la7FmOnFxGC/D0cFkcodNxH0rs4rGdY1RCBOKyTRC74p46V3ucvXbBC4zQRvjzjouD//6TOPC4seY6M6gnBCQ8hF8gbyC1FepYadmqioKLNsPVsEBEgAlpejtwrpguiAXY3oRdz2wybO2w8n4WF6P9tJPicN3PIIFcx7Wpla0wEIgw7+Q0tJe4QKxJss/xvUxgobi0yuh21tvPbdpDHXZQXVncnx66RfbaR7udLOGW0F4mRLtXSrBor1iCVF/Kp0rg7y0zpqE6C0RqqtECaEW+TuBMsbgOzDZ8uQuqwsw8CvE2C7IJ8Kryiw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=aFd1o0RqqIS807nWastVjv7qOWxuEoGznQq3wdV+YxA=; b=iu90WVZR1gGgDoqe6m/M5V3Jl8sYfqUM/MHTDjq2gh/Xl0Z0VPjpYeoDjuwhWSH0ke9WI9XxhcC7FhhULzacqEpk0Ahfuq4pmpoU0A9rRHBVUm6svXVUWYYpmnO3kv5oCe/FYUprWqPoHydFUojzXBP2KsplOQLOmj/03gHvbD7DqP5Ffm+kcbWHIPXZN8wOIXZtlpPUVXSJqgXK0Q4VcxFOjE23pLTrltVxQ3QT1sBy3oFRkVGSsqK/V4vgGpN6gb16lLGE3ltJJShyc++b6lp2sFu9ddBV0ALgqfzTqEy3UfF79EDhb8O62N5foTyrC8a3hwvf9yLVj8x5Z6Qrfw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none; dkim=none; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=aFd1o0RqqIS807nWastVjv7qOWxuEoGznQq3wdV+YxA=; b=IR13MwQcpUT+bJZ4PDpdAL/tpdjznVG/VK2L0FqJqDkvHnPSccnIoBhsrr7dn6PTVVj//mY3kVtrr3e5V8vvNfdOXvINb+PmYNJUqyHuYySFHfO6hYNgssVcPMF6IUK3pFm2XFOsmfpcbKbcOZ1e1EYD5AnFmiz+uY9LC7NdWmQCxuKz408RTYx2FPmdH7uvuzv8mnGU5RrWMa/czImmxnlVslKDMRAy4Hkm/Cr/lN8o3EJeTvef/zs7cTWOjlTJZd8fLarIu8vxEYOP3MkM46m0n7322x54exuHOfeOX9I+BrhvPn4ylqzQHC5Yg7IW5lTX5T0K48MYHc/O1bisGA== Received: from SN6PR05CA0034.namprd05.prod.outlook.com (2603:10b6:805:de::47) by IA1PR05MB10288.namprd05.prod.outlook.com (2603:10b6:208:44d::22) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9611.15; Sun, 15 Feb 2026 05:13:03 +0000 Received: from SA2PEPF00001507.namprd04.prod.outlook.com (2603:10b6:805:de:cafe::1e) by SN6PR05CA0034.outlook.office365.com (2603:10b6:805:de::47) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.20.9632.11 via Frontend Transport; Sun, 15 Feb 2026 05:13:04 +0000 Received: from DM5SVC01SF056 (40.107.211.126) by SA2PEPF00001507.mail.protection.outlook.com (10.167.242.39) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9632.12 via Frontend Transport; Sun, 15 Feb 2026 05:13:03 +0000 X-IncomingTopHeaderMarker: OriginalChecksum:D11D7AF2C91409D15AEA63C36DA491BC8A8F84C98C23F7863C81DE4B3AE1DA6D;UpperCasedChecksum:3349511D7D21229FC4B14056C3540AA6F458B1BA6739D64D889A18B9A867D0D4;SizeAsReceived:242;Count:6 Date: Sun, 15 Feb 2026 05:13:00 +0000 From: Subject: complaint about message from 65.19.154.94 To: MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="7A1671CA-C394-4D1D-AF56-E1FD206A9E39" X-IncomingHeaderCount: 6 Message-ID: X-EOPAttributedMessage: 0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: SA2PEPF00001507:EE_|IA1PR05MB10288:EE_ X-MS-Office365-Filtering-Correlation-Id: b48b8fec-4f03-48a5-15cd-08de6c50e58e X-Microsoft-Antispam: BCL:0;ARA:14566002|1290799033|8022599003|6092099016|19110799012|461199028|20055399003|3412199025|440099028|26115399003; X-Microsoft-Antispam-Message-Info: =?us-ascii?Q?4aCqi5JpnR/nQ5gfnVkBM8TV4TlbH1zHDzYDs7yPJ70wTaxwaWmhcJBwvkqT?= =?us-ascii?Q?40ZFyYgsPcp/XMIRhlOdNRF6JxjZQmBvCrkHmn/8qf4nWcFE5ha5TLnqwLPl?= =?us-ascii?Q?fZKswXBSan1LJI27G3LGz9Df/pPE/FpqGzTiPkXpTZ2w6/ALTV7WFOtXCB6T?= =?us-ascii?Q?hCDqz/3SkWINIU6G+ou0bYEMCOLQG/knrlNlTN6v9CuclfOZzLx95qcmiq+W?= =?us-ascii?Q?IQf3rCj92Rlb/pMbxkQCm6ehYBmPoEfPGabw1gzcu0N9J9YnJkJsc/5KGoEf?= =?us-ascii?Q?RVktDhq1tCcuzdGCTxdt4fbCJsdaXc37dZjDvujWjfxbmsT1im83Z4CwdjTL?= =?us-ascii?Q?wHnsuvI0p4LPeLXsWEBvlYy0Ol3YKBi/OMs3K+4WyxquJYAAS2i++VNRWEp6?= =?us-ascii?Q?+G4p3Wf1opxSeG1Njm9xIFzenprQHgno75vRAZiM45dwPzszh9hJNG9+WShA?= =?us-ascii?Q?b9bfAifmUAZMvMykyOlYiRCeXJW+1xbS+Tijn/0Q3+DPxHl4n9XSZu336Ztp?= =?us-ascii?Q?mWtphuVCktIeZqntgKF55uhVeUJDV5mm9nFLQZgkyGKP1FNsfW1zFdQtEV/b?= =?us-ascii?Q?cpTaooZtDLB1YnX6++1TTuBRNBi344E37BphZHQrha5w6dMj4sJur0hRsMby?= =?us-ascii?Q?90MjK88uN2+/jXUOvci52HXlC12plaGy7Bi76ECO3yFNwuNVusT7+k0AgtFq?= =?us-ascii?Q?rj445YmNMSsavFMhyJ3QYTRWQdXmelKtwJdpvWQnlm7yfubtOfw3dupUB2Kq?= =?us-ascii?Q?5Y+z90Yi290PDTWp1FbUH8SGZrPFkKGuLCFqjhuHRjXZTxgMjt9iLyZvjDLo?= =?us-ascii?Q?jKPIsASg4d8x8QE25oLnf0VqHv5JqKfd4feDXKKN1Z6IyUkEmmCov7p8wn09?= =?us-ascii?Q?w/1mr4f29aHJd5D0Gnqq0qamFn8wT+3yvURtqMXLW3tDhqYMxWPVkOy4xPSa?= =?us-ascii?Q?mx97Epu/oPqhzp/xJJHQWSFcFw9veNNiH73xMsYbjQ4k9a2qlvUL8oIrUXUL?= =?us-ascii?Q?/Al8Oy7MJy3n27xvO945ybD4BgulIAPULiFbAOLKOaBXnmPt49CgBKBHovF7?= =?us-ascii?Q?5xgVRze12tGu3gaMlCBbAk5YvvIukU9SfUX5sDEE1h7icH48dxEe1D70WdBh?= =?us-ascii?Q?rEvEWt637hklWvJHXtq2Eja/vOTslQ2t3Nq6KryCdPKKZWIXQZTb2jAcnkv5?= =?us-ascii?Q?TVuYWXsNCMJONlt1+i502tt0AhxuQheOg3qLh+3G0ubbJS+rtZUnbaJAi3qq?= =?us-ascii?Q?K1Io3i15SKwNC29Cy/7ykSZyqGtFQZo51rNpp2D9EqrJx8UCgLWK9nKrlhwj?= =?us-ascii?Q?rTGeH975KGs7Qhlff64Ec72AFb3amlHUROpmRSR1Q8ALqkauSMhFRmG5Kekx?= =?us-ascii?Q?Q0EzOcOCx8gHBkbraZ+BuCxk2Ws4hDO7KcxmXrBJOwnvLvNOntcCAaVS41LH?= =?us-ascii?Q?JlzHwHEalJHcnBfaLRSkbjfk1OD/bcGKVLXHhK+zdhOaDzXNdo4o9uis9RdC?= =?us-ascii?Q?hLBGqpU+vf8dQ0g=3D?= X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: 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 X-OriginatorOrg: sct-15-20-9343-9-msonline-outlook-c6799.templateTenant X-MS-Exchange-CrossTenant-OriginalArrivalTime: 15 Feb 2026 05:13:03.6950 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: b48b8fec-4f03-48a5-15cd-08de6c50e58e X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa X-MS-Exchange-CrossTenant-AuthSource: SA2PEPF00001507.namprd04.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: Internet X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000 X-MS-Exchange-Transport-CrossTenantHeadersStamped: IA1PR05MB10288 --7A1671CA-C394-4D1D-AF56-E1FD206A9E39 Content-Type: message/rfc822 Content-Disposition: inline X-HmXmrOriginalRecipient: X-MS-Exchange-EOPDirect: true Received: from DS7PR05MB7447.namprd05.prod.outlook.com (::1) by DM6PR05MB6282.namprd05.prod.outlook.com with HTTPS; Fri, 13 Feb 2026 15:04:44 +0000 Received: from BYAPR08CA0018.namprd08.prod.outlook.com (2603:10b6:a03:100::31) by DS7PR05MB7447.namprd05.prod.outlook.com (2603:10b6:5:2ce::17) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9611.14; Fri, 13 Feb 2026 15:04:42 +0000 Received: from MWH0EPF000989E7.namprd02.prod.outlook.com (2603:10b6:a03:100:cafe::de) by BYAPR08CA0018.outlook.office365.com (2603:10b6:a03:100::31) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.20.9611.12 via Frontend Transport; Fri, 13 Feb 2026 15:04:40 +0000 Authentication-Results: spf=none (sender IP is 65.19.154.94) smtp.mailfrom=softhauz.ca; dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=softhauz.ca;compauth=pass reason=105 Received-SPF: None (protection.outlook.com: softhauz.ca does not designate permitted sender hosts) Received: from morty.heliohost.org (65.19.154.94) by MWH0EPF000989E7.mail.protection.outlook.com (10.167.241.134) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.20.9611.8 via Frontend Transport; Fri, 13 Feb 2026 15:04:42 +0000 X-IncomingTopHeaderMarker: OriginalChecksum:E3A097D271ACD16B418E79A1DE39BF260DADB0A4A56C3F1EC1DED14F0410A668;UpperCasedChecksum:906A70BB6A35FDDB24BD2EF79B6E42142BD9F602FE04517F97AF77E0344E9511;SizeAsReceived:2576;Count:22 Received: by morty.heliohost.org (Postfix, from userid 30) id 0F4226011276; Fri, 13 Feb 2026 15:04:42 +0000 (UTC) From: SRS0=crEn=AR=mejuri.com=contact@softhauz.ca X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on morty.heliohost.org X-Spam-Flag: YES X-Spam-Level: ******** X-Spam-Status: Yes, score=8.6 required=7.0 tests=FROM_ADDR_WS,RCVD_IN_SBL_CSS, RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED, RCVD_IN_XBL,RDNS_NONE,SPF_HELO_NONE,SPF_NONE autolearn=no autolearn_force=no version=3.4.6 X-Spam-Report: * 0.7 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL * [46.185.128.173 listed in zen.spamhaus.org] * 3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS * 0.0 SPF_HELO_NONE SPF: HELO does not publish an SPF Record * 0.0 SPF_NONE SPF: sender does not publish an SPF Record * 0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The * query to Validity was blocked. See * https://knowledge.validity.com/hc/en-us/articles/20961730681243 * for more information. * [46.185.128.173 listed in sa-trusted.bondedsender.org] * 0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The * query to Validity was blocked. See * https://knowledge.validity.com/hc/en-us/articles/20961730681243 * for more information. * [46.185.128.173 listed in bl.score.senderscore.com] * 1.3 RDNS_NONE Delivered to internal network by a host with no rDNS * 3.0 FROM_ADDR_WS Malformed From address X-Original-To: karen.urate@softhauz.ca Delivered-To: karen.urate@softhauz.ca Received: from mejuri.com (unknown [46.185.128.173]) by morty.heliohost.org (Postfix) with ESMTP id 4755E6011269 for ; Fri, 13 Feb 2026 15:04:40 +0000 (UTC) Authentication-Results-Original: morty.heliohost.org; spf=fail (sender IP is 46.185.128.173) smtp.mailfrom=contact@mejuri.com smtp.helo=mejuri.com Received-SPF: fail (morty.heliohost.org: domain of mejuri.com does not designate 46.185.128.173 as permitted sender) client-ip=46.185.128.173; envelope-from=contact@mejuri.com; helo=mejuri.com; To: karen.urate@softhauz.ca Subject: ***SPAM*** Wire Invoice Transfer Date: 13 Feb 2026 18:04:31 +0300 Message-ID: Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable X-Spam-Prev-Subject: Wire Invoice Transfer X-PPP-Message-ID: X-PPP-Vhost: softhauz.ca X-IncomingHeaderCount: 22 Return-Path: SRS0=crEn=AR=mejuri.com=contact@softhauz.ca X-MS-Exchange-Organization-ExpirationStartTime: 13 Feb 2026 15:04:42.3666 (UTC) X-MS-Exchange-Organization-ExpirationStartTimeReason: OriginalSubmit X-MS-Exchange-Organization-ExpirationInterval: 1:00:00:00.0000000 X-MS-Exchange-Organization-ExpirationIntervalReason: OriginalSubmit X-MS-Exchange-Organization-Network-Message-Id: 90210053-ef74-4e99-14ed-08de6b11378b X-EOPAttributedMessage: 0 X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa:0 X-MS-Exchange-Organization-MessageDirectionality: Incoming X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: MWH0EPF000989E7:EE_|DS7PR05MB7447:EE_|DM6PR05MB6282:EE_ X-MS-Exchange-Organization-AuthSource: MWH0EPF000989E7.namprd02.prod.outlook.com X-MS-Exchange-Organization-AuthAs: Anonymous X-MS-UserLastLogonTime: 2/13/2026 3:01:10 PM X-MS-Office365-Filtering-Correlation-Id: 90210053-ef74-4e99-14ed-08de6b11378b X-MS-Exchange-EOPDirect: true X-Sender-IP: 65.19.154.94 X-SID-PRA: SRS0=CREN=AR=MEJURI.COM=CONTACT@SOFTHAUZ.CA X-SID-Result: NONE X-MS-Exchange-AtpMessageProperties: SA|SL X-MS-Exchange-Organization-SCL: 9 X-Microsoft-Antispam: BCL:0;ARA:1444111002|6120799021|20103052907095|20103052905119|84100799003|13020799006|2700799029|34130799006|32080799006|970799060|461199028|20103052903057|20103052901057|21090799003|22090799003|47200799024|58200799021|20103052916048|20103052902057|20103052906057|20103052914048|20103052904057|20103052908033|5070799012|17110799012|440099028|3412199025|6022199012|26104999006|22062799003|74000799027; X-MS-Exchange-CrossTenant-OriginalArrivalTime: 13 Feb 2026 15:04:42.2785 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 90210053-ef74-4e99-14ed-08de6b11378b X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa X-MS-Exchange-CrossTenant-AuthSource: MWH0EPF000989E7.namprd02.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: Internet X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000 X-MS-Exchange-Transport-CrossTenantHeadersStamped: DS7PR05MB7447 X-MS-Exchange-Transport-EndToEndLatency: 00:00:02.6646403 X-MS-Exchange-Processed-By-BccFoldering: 15.20.9611.001 X-Microsoft-Antispam-Mailbox-Delivery: rwl:1;ucf:0;jmr:0;ex:0;psp:0;auth:0;dest:I;OFR:TrustedRecipientList;ENG:(5062000311)(920221119095)(90000117)(920221120095)(90005022)(91005020)(91035115)(9050020)(9100341)(944500132)(2008001181)(2008121020)(4810010)(4910033)(10005027)(9810001)(9610028)(9515023)(10112040)(9404095)(9310011)(9220031)(120001)(1110175); X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0wO0Q9MTtHRD0xO1NDTD0tMQ== X-Microsoft-Antispam-Message-Info: =?us-ascii?Q?9wk6LR9cFQGaDDlIB5yWQwg+Ke1JZZMBdAZICN8x+pvfSD9pwMm3TYoT4DDE?= =?us-ascii?Q?FFfe8o1bL0iDbTAaOZSBNwOvSOL4y7IeyYZBFx+4HXDs2BfqUMdItFAlUSNJ?= =?us-ascii?Q?2l8TRu6DpFkAbT53zAIxrqWrhqKiKiuvXrrXhUcJg5LdQzTUOSsF3CrjlglT?= =?us-ascii?Q?qzMDbXtKGnYRcNfGnFjpGnVLdGJfwaatIP1qpXorLrHdZl0ZnWHHgFozChh/?= =?us-ascii?Q?HVLhMnS9CEI+Ds4RE5vDuc5taIZ8ia/KKWZgWebqk46WHSqupD92kDA0VN+D?= =?us-ascii?Q?FKvTUZbUo+5g3EJbqXpHIwijLPS/L1I48AggfB8RCqEV9YXqtJoaYOjd3ZBc?= =?us-ascii?Q?atY6+iGkijKhoasRsgYStu9mgBwBV82BiSMrPtTu3GbwIXIA7oeR6o6V8lDq?= =?us-ascii?Q?iNvCEPTO1lDJmnBqIUcbkODnlj2m2YFUebXIRssL2DAHaRgn4Q8xi/ZTzwQI?= =?us-ascii?Q?tFPqYcio6zEovoIXgLMdzbSRe3ZRQOsvWjbRMlXWvYVKAnrz4sK2yPZUo1Lq?= =?us-ascii?Q?IUnekTN7SRT706UWnMPTAFbZ9M+mKPAqKAhu005g9J+jBDWLwtoSG4Flw6Q/?= =?us-ascii?Q?v0zUEV27NNHESnITneZaYCJnqG2L/G1A0ozZnW7ObqyX0qy4OW06861qhC+/?= =?us-ascii?Q?4qLHRib9vAc9UM4ILymsC/G8KyCiWcA6GNmJ7hZGAs0Fu8+agvGcsu7vnQG4?= =?us-ascii?Q?TxbIijOWxagnCmKGYF7woTG/l4GV5OWzu/XSOJaaU9DpvpTTS/zmcFCb4YMB?= =?us-ascii?Q?zWrKKFWG69O3ZtbscS7GVjfjY/bPaD+1cCSvadBYuZlRNe7cPN3xEP6pbckR?= =?us-ascii?Q?N35nNr5v0Ne4ApO77X9aNaeik0d/sw1ptGY8NI/0c9eKKW3glesbIjINnaNS?= =?us-ascii?Q?G56XsfRbPJMcI5G+mrgnLdORDsvThflnu3+N1XHgl0hMU+SGO44wN51MEc/8?= =?us-ascii?Q?dCsEmmnfpJzVTIzmQvSrB7282A8pJRBDdOHUFTi5ezmYCZKEbMYAhd1As1Uk?= =?us-ascii?Q?e7G9x5sQwZsRxS8Ou7jjQFWkji4I1GQxhUxuH8Sb5tBG6ErwrCOy4XALyksV?= =?us-ascii?Q?U2jMSUXUpte89uFcGY4IM6BQ2xgKoJEZ8c2Vr8AhcPyUMIxdlh+G9lS1szen?= =?us-ascii?Q?A4CL1PlGrSoKKDtVrl0oYki8hV9sVRE1jglLn138Orh9Ft6Is+2aahftwKNS?= =?us-ascii?Q?bK4bsheHMtEBoUDL8p8i8gagBVOB2i+zSP+P8vZIxGw+LUwG6uGjAa7B55dl?= =?us-ascii?Q?qqleODPe5Iw3x0p7RGc3f5vz2mF+/ntaHo5QCrDMvEahKKWj2b0g/yeQ1Lft?= =?us-ascii?Q?55SDMujULCnWr9PEDjLo4oqISfih+NiasVPdC7gRZMlRHIBzRVruLAUgk9Z4?= =?us-ascii?Q?rfKlWjYh1EW90sHw/ygh0Aa1UvXgJ/03b+klVbSnRS85G7MnPgzGgI4V2Wkc?= =?us-ascii?Q?qeyMhYHHeWufb9VPlJbvDIB5VTBPlJIl2WOY2Zd4/V3DJNAzCXJaE4E/Qh6/?= =?us-ascii?Q?Ngh5BlMa1PsyZOivoZGJ+cdUztGXJrjhdPh/c2So8eeXgz3eBVvDUcEsdxwK?= =?us-ascii?Q?mUWO2lb/SreHp/ajeinqgpYYG0ruzhnHbkWzNuitYGqKNk6ZDD9gdycHkNQr?= =?us-ascii?Q?QocUjmajpiqyYwjv5/GtUSBaDOv4EgUDDvwQjD7anoWMUq1Wl+SIKn6RXAH2?= =?us-ascii?Q?dRNBro3ahnOYZm4hW9fJM5mL59kkGewIOGRGJuEltRJewbnI17rCvFBuRIG2?= =?us-ascii?Q?uiDvcIOTmsfvlj15qTVBiC8knlPRlfNSTtt6UyE+QXs7OiKl7dX+ORGYx4sB?= =?us-ascii?Q?ku/0CstBAP8xFkxU36XPoNb4XFhUExsoDIf6abwvs3AbCGhhKsBgxd+1Nasw?= =?us-ascii?Q?dzCwcht/EyyZPD4pJyG2ROSykislj6SYO169cMgglasDTkcXCYWFYYWUEDZ4?= =?us-ascii?Q?NDwSHrI0xQ/PtS7sD0gVF37OFoEw7Vgu1fYfIuA3kkYoZty+dehWmXm9bfVb?= =?us-ascii?Q?wD9uxjHf2I9xsCgi2JEFlsBewqFaBNIwvst0bfNoEDM8dVYJxas/pSkfYzGp?= =?us-ascii?Q?r0C5vwZyXdnf+ZufSMlVYC3lFeUaWamr2198V73w1V06VHFyzJARc9T+Dh6u?= =?us-ascii?Q?3Z1Hnq5hgk1pXV5Vs+jlh+08Qws01gbtWZoN+a9UjYFz4cPoJj9CUPXZzREN?= =?us-ascii?Q?4Id0A8sUjmi/0UwS48yEjRc6UsIPLdmywEfX8ZW7j6v/zXAZoLG8enTf+5nC?= =?us-ascii?Q?7lHdrO9i/+pL5uZTexyJnK7c6Wgpyld9swzie8ugbT8V4FLT5ARbFAFj2duW?= =?us-ascii?Q?5YsPGGIScyP1+Fe+4QjoQ5kNh+kYHlKmcpw1GjFnR+/z+hQUsBtOvOIAH21p?= =?us-ascii?Q?mrOzfAZgw518DUVfetuWyLHphXEXDJpvL8FwZseT6ihsRA0AzyNQaqlLjxra?= =?us-ascii?Q?2/v7PM422cVCgA67r/JMkSddIo/WBWQGMAn0ivw3ykCMYgW+8fM3QLtJSNvj?= =?us-ascii?Q?y+n4A7ds+tU/7Lh5xMAxl+89/hq1M2u6E3y6RcxGy92a6eLTVgoSo+fZ5kgY?= =?us-ascii?Q?yd7eD7pcx1zakt9vJi2zZo+jLjbKRKUPoQa4HsAEfV5phUrY3gT+Umf/QkMJ?= =?us-ascii?Q?XWlEKzkZ8N7NtPflbe5eEPQEXK7nZD69XecxtPgiaU5MDNb+rRttz66pNpdR?= =?us-ascii?Q?zv/TogIQEblg17z+zDUsiucBvtyVULBb8bdfdAoBWRZON36XEOAEHhXIW/Qq?= =?us-ascii?Q?hkP23VOkPwnzgRjFu3t2FvIf7rarJWqc95+CcVoi+Cjy0FcXxUGAFkmat6xL?= =?us-ascii?Q?V1BkX9i3FROCtL4K3H9H3OpiLO1nmUNci/RjIlNp6HFu1U/7u7v7wwa5HKrF?= =?us-ascii?Q?poFhJlNsk+yI5kgc8eKzTp5gpsH/W9EBK/Ir27YinOt4yUIFdCcHiZ2XgoeC?= =?us-ascii?Q?6T+a51HgqOf7+SWKFj4cS8x6o3kFgQvU60hwanqOpuDyUd5vy05PpPlXqjOs?= =?us-ascii?Q?IpgUeqjKmlvB33G1SB2DD9fIP1xDX9Sz9szVv3fJt25xq6tRuPrdVhHt7AY+?= =?us-ascii?Q?a3PGmppUEDFC+93XToCrDKYcvVEho7stDwaqSi3GbhhOph2YUu4Is21MlBGh?= =?us-ascii?Q?cchkvczgeWugyYpHxlC2rQQ+ljutsD+cPEHRpNbcnJ+x3x8aA/PN94TJcyGC?= =?us-ascii?Q?p7Fy+9dZhsRvRRhgJeKN/vViF2+0cmU21tLIf6Mx34uJk7iKoMskpezl3wH5?= =?us-ascii?Q?0y4YOicTbMJmJRgymN0SciwfLRLrz+3tC97PPMmLoJ3IrX67l1FcvuYtdVln?= =?us-ascii?Q?T9OoFKk8MwK1EnoUiWOiGnlKo4bafKTHO6000Mf8H/pJM57Swr6KwbR57Q1W?= =?us-ascii?Q?6j5zPqNUuwnEcjgiXt9nXdGRogqe1QIWvqC2wfWcgq7uFcxbHQtoB7uKGXL3?= =?us-ascii?Q?HY7eYUSmTtB2wnUUt6cFQ0g2DCGVzZ7nyj0bsJYb8XDFQawpW7uz9JdeDFUr?= =?us-ascii?Q?6mXbTIJDKOL3QDe8yDhXu73p9vTrYKdX2TymaFsMkUKTP/zyiapOG6tWofTk?= =?us-ascii?Q?nhTpDJCOhDG8O3/cvz3SPO/kMvjKOAz41JsALxV2?= MIME-Version: 1.0 Dear , Please click the link below to view wire transfer copy https://na01.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Fwatchpro= tectionfilms.com%2FWire_transfer.msi&data=3D05%7C02%7C%7C90210053ef744e9914= ed08de6b11378b%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C639065918852016= 368%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlA= iOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=3DiDyPB65G= BP4vvNL3aGMXtbQK1akZP6SVt9Hrsz%2BoYNc%3D&reserved=3D0 Your business is greatly appreciated. Ampak Sportswear Inc=20 8253 Backlick Road Ste B Lorton, Va 22079 phone:(703)861-5210 Website: AMPAKSPORTSWEAR.COM=20 --_002_JMR90210053ef744e9914ed08de6b11378bJunk6390672917730362_-- --7A1671CA-C394-4D1D-AF56-E1FD206A9E39--

Hello, I am sorry for the delayed payment. I am still out of the city. The data connection does not work most of the time and PayPal app is not loading properly. I'll settle the bill as soon as I get home. Please do not give my vps to others. Thank you for your understanding. Regards, Zane On Tue, Feb 10, 2026, 12:17 HelioHost Support wrote: > Your VPS has been expired for nearly a month now. Have you managed to find > an internet connection yet? > > You may view the status of your ticket by visiting: > > https://helionet.org/index/index.php?showtopic=66703 > > Thank you, > HelioHost support > https://heliohost.org/ > https://helionet.org/ > >

Username: smi93ctb1, Server: Tommy, Main domain: z2.helioho.st Hello, I am sorry for the delayed payment. I am still out of the city. The data connection does not work most of the time and PayPal app is not loading properly. I'll settle the bill as soon as I get home. Please do not give my vps to others. Thank you for your understanding. Regards, Zane On Thu, Feb 12, 2026, 01:18 HelioHost wrote: > [image: HelioHost | Community powered free hosting for everyone.] > > Hey Smi93ctb, > > Your VPS payment of $5.00 USD is 30 days overdue. Please try to make a new > payment within the next 24 hours. You can do so with the link below. > > Let us know if you face any issues or have any questions regarding this. > Renew VPS > [image: Twitter] [image: Facebook] > [image: Phone Number] > [image: Support Forum] [image: > Email] > ? 2005-2026 Helio Networks. All rights reserved. | Unsubscribe > >

????QQ?????????? ????????????????? -- Karry Yau

Username: qq945269529, Server: Tommy, Main domain: karryyau.helioho.st ????QQ?????????? ????????????????? -- Karry Yau

Username: yilanpekerr, Server: Johnny, Main domain: yilanpekerr.helioho.st Hello, I am writing because I am extremely frustrated with the ongoing 502 Bad Gateway (nginx) issue on my website. This problem keeps happening again and again. Each time I contact support, it gets fixed temporarily, but after a short time the same error comes back. I am honestly tired of repeating the same process. Because of this issue, my customers are constantly contacting me, asking why the site is down. This is damaging my business and my reputation, and it is not acceptable anymore. Please investigate this issue properly and permanently, not just a temporary fix. I need to know: Why this error keeps happening What the root cause is What will be done to prevent it from happening again I expect a clear explanation and a permanent solution as soon as possible. Thank you. Username yilanpekerr

Username: yilanpekerr, Server: Johnny, Main domain: yilanpekerr.helioho.st Hello, I am writing because I am extremely frustrated with the ongoing 502 Bad Gateway (nginx) issue on my website. This problem keeps happening again and again. Each time I contact support, it gets fixed temporarily, but after a short time the same error comes back. I am honestly tired of repeating the same process. Because of this issue, my customers are constantly contacting me, asking why the site is down. This is damaging my business and my reputation, and it is not acceptable anymore. Please investigate this issue properly and permanently, not just a temporary fix. I need to know: Why this error keeps happening What the root cause is What will be done to prevent it from happening again I expect a clear explanation and a permanent solution as soon as possible. Thank you. Username yilanpekerr

Username: gev0516, Server: Johnny, Main domain: gev0516.helioho.st Hello, I was working on my project on the Johnny server when it suddenly returned the error shown in the attached screenshot. I tried to open REAIP Kit, but it does not accept my credentials. How can I resolve this issue? Thank you. Kind regards, Gianmario Izzo [cid:558f1be5-3164-4ab5-9f7f-85e45051082a]

Username: yilanpekerr, Server: Johnny, Main domain: yilanpekerr.helioho.st Hello HelioHost Support Team, I am writing regarding my account, which currently shows a status requesting additional information. I would like to clarify that I have not violated your Terms of Service. The website on my account is only used for a key panel / control panel purpose. There is no illegal content, no malicious activity, no phishing, and no abuse involved. If there is any specific concern or detail you need from me to verify this, please let me know and I will gladly provide it. I have reviewed your Terms of Service again and I believe my usage fully complies with them. I kindly request that you review my account and reactivate it if possible. Thank you for your time and support. Best regards,Huhu Username yilanpekerr Password

Username: yilanpekerr, Server: Johnny, Main domain: yilanpekerr.helioho.st Hello HelioHost Support Team, I am writing regarding my account, which currently shows a status requesting additional information. I would like to clarify that I have not violated your Terms of Service. The website on my account is only used for a key panel / control panel purpose. There is no illegal content, no malicious activity, no phishing, and no abuse involved. If there is any specific concern or detail you need from me to verify this, please let me know and I will gladly provide it. I have reviewed your Terms of Service again and I believe my usage fully complies with them. I kindly request that you review my account and reactivate it if possible. Thank you for your time and support. Best regards, Huhu Username yilanpekerr Password

[HH#460994] Hello I use ETH cryptocurrency 0.00448 ETH (Near o 10$) Withdrawal Address: 0xF3923C9A4d8390e57858bd063F25E3c2b722427b Transaction ID: 0x498f64fec919e85885d435c7a170ebe6e2fdb3b2dd24fa3c3ed436e0f6429621 Please Appy this Amount to my Morty Account jrcanelon75@gmail.com ETH Withdrawal Successful You have successfully withdrawn 0.00448 ETH from your account. Withdrawal Address: 0xF3923C9A4d8390e57858bd063F25E3c2b722427b Transaction ID: 0x498f64fec919e85885d435c7a170ebe6e2fdb3b2dd24fa3c3ed436e0f6429621 Best Regards JOSE CANELON De: HelioHost Support [mailto:support@heliohost.org] Enviado el: s?bado, 7 de febrero de 2026 22:37 Para: jrcanelon75@gmail.com Asunto: Re: [HH#985288] HOW TO PAY? Which cryptocurrency did you use, and what is the amount? You may view the status of your ticket by visiting: https://helionet.org/index/index.php?showtopic=66852 Thank you, HelioHost support https://heliohost.org/ https://helionet.org/ -- Este correo electr?nico ha sido analizado en busca de virus por el software antivirus de Avast. www.avast.com

Username: jrcanelon75, Server: Morty, Main domain: tanklevel.helioho.st Hello Dear People I made The donatation from Binance Please Apply this amount to my Balance of my plan MORTY Email Acount: jrcanelon75@gmail.com Best Regards JOSE CANELON De: HelioHost Support [mailto:support@heliohost.org] Enviado el: viernes, 6 de febrero de 2026 12:56 Para: jrcanelon75@gmail.com Asunto: Re: [HH#985288] HOW TO PAY? If you want to add another year it would be $10. You may view the status of your ticket by visiting: https://helionet.org/index/index.php?showtopic=66852 Thank you, HelioHost support https://heliohost.org/ https://helionet.org/ Libre de virus. www.avast.com -- Este correo electr?nico ha sido analizado en busca de virus por el software antivirus de Avast. www.avast.com

Hello Dear People I made The donatation from Binance Please Apply this amount to my Balance of my plan MORTY Email Acount: jrcanelon75@gmai.com Best Regards JOSE CANELON De: HelioHost Support [mailto:support@heliohost.org] Enviado el: viernes, 6 de febrero de 2026 12:56 Para: jrcanelon75@gmail.com Asunto: Re: [HH#985288] HOW TO PAY? If you want to add another year it would be $10. You may view the status of your ticket by visiting: https://helionet.org/index/index.php?showtopic=66852 Thank you, HelioHost support https://heliohost.org/ https://helionet.org/ -- Este correo electr?nico ha sido analizado en busca de virus por el software antivirus de Avast. www.avast.com

Username: N/A, Server: N/A, Main Domain: N/A Hello, I am experiencing an issue with my website hosted on your servers. The website was working normally and there were no changes made on my side, but suddenly it started showing a ?502 Bad Gateway ? nginx? error. At the moment, the site is completely inaccessible. I have checked the website files and configuration from my side and did not find any obvious problems. This makes me think the issue may be related to the server, web service, or backend configuration. Could you please check the server logs and let me know: The exact cause of the 502 Bad Gateway error Whether there is any service (PHP-FPM, web server, proxy, etc.) that is currently down What steps are needed to resolve this issue as soon as possible The hosting account is registered with this email address: yilanpekerbaba@gmail.com Thank you for your support. I look forward to your response. Best regards,

Username: N/A, Server: N/A, Main Domain: N/A Hello, I am experiencing an issue with my website hosted on your servers. The website was working normally and there were no changes made on my side, but suddenly it started showing a ?502 Bad Gateway ? nginx? error. At the moment, the site is completely inaccessible. I have checked the website files and configuration from my side and did not find any obvious problems. This makes me think the issue may be related to the server, web service, or backend configuration. Could you please check the server logs and let me know: The exact cause of the 502 Bad Gateway error Whether there is any service (PHP-FPM, web server, proxy, etc.) that is currently down What steps are needed to resolve this issue as soon as possible The hosting account is registered with this email address: yilanpekerbaba@gmail.com Thank you for your support. I look forward to your response. Best regards,

No worries, no rush :) have a great day On Sat, 7 Feb 2026, 03:33 HelioHost Support, wrote: > It usually takes us several days to verify that we have received the > Monero. Once we have verified that the money has been received we'll let > you know, and add the money to your balance. > > You may view the status of your ticket by visiting: > > https://helionet.org/index/index.php?showtopic=66858 > > Thank you, > HelioHost support > https://heliohost.org/ > https://helionet.org/ > >

Username: robwomp, Server: Morty, Main domain: robwomp.helioho.st Hi there, $5 xmr sent - txn is is: 33f74832f415764046e5d0675d8966e8b69cb951c8eb88f5a1f76393a0ed7600 Thanks. On Sat, 7 Feb 2026, 02:04 HelioHost Support, wrote: > Hey Robwomp, > > We just wanted to advise you that your Morty account balance has been used > up. > > Your account is currently at $-0.0207. You will need to add additional > funds to your account if you wish to remain on Morty. To do that, please > send us a minimum of $5 via any of our donation methods ( > https://heliohost.org/donate/ ) and let us know the transaction number so > we can credit the account. > > You can review your account's billing history here: > https://heliohost.org/dashboard/billing/ > > If we don't receive a response within 24 hours, your account will move to > Tommy, which will make it subject to load and inactivity suspensions. > > If you have any questions or have made a donation that needs to be > credited, please reply to this email to contact support. > > HelioHost Support > https://heliohost.org > https://helionet.org >

Username: yilanpekerr, Server: Johnny, Main domain: yilanpekerr.helioho.st Hello, I recently created a website using HelioHost, but I am unable to log in to my account. My HelioHost username is: yilanpekerr I am not sure whether this issue is related to account activation, login credentials, or a technical problem. I have not made any changes, but I still cannot access my account. Could you please check the status of my account and let me know how I can regain access? Thank you for your assistance. Best regards,

Username: N/A, Server: N/A, Main Domain: N/A Hello, I recently created a website using HelioHost, but I am unable to log in to my account. My HelioHost username is: yilanpekerr I am not sure whether this issue is related to account activation, login credentials, or a technical problem. I have not made any changes, but I still cannot access my account. Could you please check the status of my account and let me know how I can regain access? Thank you for your assistance. Best regards,

Dear Heliohost, I have the Morty plan and my balance is running low. I want to renew it for another year, but I can't find where to make the payment on your website. Please send me instructions on how to make the payment. Best Regards, JRC De: HelioHost Support [mailto:support@heliohost.org] Enviado el: viernes, 6 de febrero de 2026 11:45 Para: jrcanelon75@gmail.com Asunto: [HH#985288] Acknowledgement from HelioHost Support Your message (HOW TO PAY?) has been assigned the tracking ID [HH#985288]. One of our volunteer community members will reply to your email as soon as possible. Please include the string [HH#985288] in the subject of any future email regarding this case. You may do that by simply replying to this message. Please be aware that our system rejects binary attachments. If you are submitting a screenshot or attachment please post a link to the file instead of attaching it to the email. You may view the status of your ticket by visiting: https://helionet.org/index/index.php?showtopic=66852 Thank you, HelioHost Support https://heliohost.org/ https://helionet.org/ -- Este correo electr?nico ha sido analizado en busca de virus por el software antivirus de Avast. www.avast.com